What is Meant by Doxing?

Doxing is internet-based collection and subsequent publication of personal data, typically with malicious intent against the data subjects. To some extent, this also goes hand in hand with the identification of anonymous persons. The reasons for doxing can vary in nature, including vigilante justice, public shaming, and harassment. People affected by doxing are often exposed to follow-up attacks, based on the published data.

Personal data may be collected in a variety of ways. One approach to gathering information is to search publicly available databases. This includes, for example, online media as well as telephone, address and member directories. A lot of information can also be found on social media. This takes advantage of the fact that many Internet users are very permissive with personal data, such as postings, pictures, contacts and group affiliations.

Another possibility is social engineering. This refers to interpersonal influences with the aim of inducing certain behavior in people, for example to persuade them to disclose confidential information. This often includes the attacker faking identities or pretending to be a representative of the authorities.

Hacking (another method of obtaining information) is the process of gaining access to the system through unauthorized intrusion into foreign systems by exploiting security gaps, which can be used to tap into corresponding data.

Doxing is a standard tool of the Anonymous hacker groups. An example is the publication of the home addresses and telephone numbers of signatories of the call We are the authors, a protest against attacks on copyright and against the theft of intellectual property.

In 2016, the facial recognition service was used to reveal the identities of suspected Russian prostitutes and porn actresses. Social media protagonists complained that they had been fighting Doxer for years without success, but that politicians were only willing to deal with the issue since politicians were also affected.