Chat on WhatsApp
HomeAbout SOC ProjectsPortfolio ServicesAcademy CertificationsBlog Contact →
← Back to Projects HIGH SEVERITY
OSINT Investigation · March 2026

Fake Internship Phishing Investigation

OSINT-driven investigation exposing two fraudulent cybersecurity internship operations — Redynox and Arch Technologies — targeting Nigerian tech professionals.

Investigation Overview

In March 2026, I investigated two companies — Redynox and Arch Technologies — after they offered suspicious cybersecurity internship positions targeting Nigerian tech professionals. Both operations displayed classic scam internship TTPs and were independently confirmed as fraudulent through OSINT analysis.

Key TTPs Identified

💰 Hidden Fees

Upfront payment demands disguised as software purchases, registration fees, or equipment deposits after false onboarding.

🔗 Malicious Download Links

Onboarding materials contained links to suspicious downloads and fake "company software" installations.

📧 Gmail-Based Company Emails

Official communications from @gmail.com addresses — no legitimate company domain email infrastructure.

🌐 Domain Inconsistencies

Website domains recently registered, no SSL certificates, WHOIS privacy-protected, zero verifiable business presence.

📱 WhatsApp Onboarding

All formal onboarding conducted exclusively via WhatsApp — no official HR portal, no verifiable corporate infrastructure.

🔴 No Verifiable Registration

Neither company could be verified in CAC (Nigeria) or any official business registry. Social media presence fabricated.

Tools Used

OSINT FrameworkWhois / RDAPVirusTotalScamAdviserGoogle DorkingLinkedIn AnalysisCAC Registry

Outcome & Impact

Published full investigation reports exposing both operations. Created LinkedIn awareness content warning Nigerian tech professionals. This investigation directly preceded and informed the methodology used in the more comprehensive MutaCryptor TI Report (April 2026).