Social media OSINT harvests information for reconnaissance — LinkedIn reveals org structure, job titles, tech stack; Instagram/Facebook reveals personal details for spear phishing pretexts.
Attackers research targets before engaging. Job postings reveal technologies used ("We use AWS, Kubernetes, and Splunk"). LinkedIn provides names for pretexting and email format guessing. Security training should address social media oversharing.