Bellingcat

Bellingcat is an investigative journalism collective that specializes in open‑source intelligence (OSINT) to verify and report on events of public interest. The group analyses publicly available data such as social media posts, satellite imagery, video footage, and public records to reconstruct incidents and identify responsible actors. Its work covers conflict zones, alleged war crimes, corruption, and disinformation campaigns, aiming to provide factual accounts for journalists, researchers, and policymakers. Founded in 2014 by Eliot Higgins, Bellingcat operates primarily through its website and collaborative network of contributors.

Bellingcat’s distinguishing attribute is its reliance on open‑source methods rather than classified or privileged information, allowing anyone with internet access to scrutinize its findings. The organization emphasizes transparency by publishing detailed methodologies alongside its reports, enabling readers to replicate the analysis. This approach has positioned Bellingcat as a notable actor in the fact‑checking and accountability sector, often cited by mainstream media and international bodies. Its contributors include volunteers and professional researchers who collaborate remotely across different time zones.

In September 2016, Bellingcat became the target of a sustained cyber operation linked to Russian state‑sponsored actors, which included spearphishing, credential harvesting, SMS spoofing, and website defacement. The attack was reportedly motivated by the group’s contributions to the investigation of the Malaysia Airlines Flight MH17 crash, which had negatively affected Russia’s image. ThreatConnect identified the perpetrators as associated with groups such as FANCY BEAR and CyberBerkut, highlighting the broader pattern of state‑sponsored cyber actions against entities perceived as damaging to Russian interests. The incident underscored the security challenges faced by open‑source investigative organizations operating in high‑risk geopolitical environments.