Initial Recon

Social media

• Make a dummy account and use bots to farm follows/connections before making any contact with targets

Active scanning

• Use proxies. Hop between public ones occasionally if possible to prevent alerting defenders to a targeted attack