Experience the ultimate flexibility with the Isolation API, allowing you to securely Quisque pellentesque id ultrices lacus ornare elit vitae ullamcorper. Learn More

How can you identify social media accounts through the “suggested friends” function? A practical guide from Authentic8 for OSINT researchers shows the steps.


Using Genymotion’s Android Virtual Machine and Email Addresses for Social Media Account Discovery, flash report provides a hands-on introduction to  The accounts discovered this way on social networks can then be used for further Open Source Intelligence (OSINT) collection and ultimately incorporated into targeting and pattern of life analysis.

Genymotion describes itself as an “Android as a Service” provider. It enables users to run Android as a virtual machine in the cloud, to create virtual mobile devices and fully interact with their screen in a web browser (no plugin needed).

This way, OSINT professionals enjoy Android device access on the fly, without the complexity of managing the infrastructure by themselves. Many of them already leverage web isolation and managed attribution with the Silo for Research (Toolbox) browsing environment to protect their mission while working with a wide variety of OSINT tools and web apps.

Our short manual guides researchers and investigators quickly through five main steps:

  • Prepare a previously discovered email list for further research.
  • Set up a “burner” email account and dummy contact associated with that account.
  • Export the contact and use the resulting CSV file as a template for importing the email list into the same account.
  • Import the list into the burner email account.
  • Create a Genymotion account and fire up an Android VM. Then install the email and contacts app on the VM instance, using the burner account, and install the social media apps to sync with the initial email list.
Gmail Google Contacts
Gmail Google contacts
Virtual Android device access on the fly: OSINT with Genymotion

For the illustrated flash report, our OSINT specialists used an Instagram account as the example, created in a VM instance with a burner Gmail address.

Because Google Contacts was synced with the device, Instagram was able to cross-reference the uploaded emails from Google Contacts with active Instagram accounts. This same process works with other major social media platforms, such as Facebook or Twitter.

Get your detailed guide to social media account discovery with Genymotion here.

About the Author

A8 Team
A8 Team
Contribution Team U.S.A.

Authentic8 Team is a group of cybersecurity enthusiasts, investigation sleuths, top-notch engineers, news junkies, policy wonks and all-around fervent writers hell-bent on bringing you the best darn blog in the industry. 

Related Resources

Flash Report
Flash Report

Using Genymotion’s virtual machine and email addresses for social media account discovery

Leverage Genymotion’s Android virtual machine service and Google Contacts to identify social media accounts through the “suggested friends” function

Flash Report
Flash Report

What is exif data?

When a digital image is captured, metadata is stored as exif data, which can be useful for analysis — to find image location, camera model and more


21 OSINT research tools for threat intelligence

Authentic8 engineers curated a list of the 21 most widely used OSINT research tools for cybersecurity researchers, analysts and other security professionals