AMITT/techniques/T0025.md
2021-02-19 08:00:20 +00:00

1.5 KiB

Leak altered documents

  • Type: Technique

  • Name: Leak altered documents

  • Id: T0025

  • Summary: Obtain documents (eg by theft or leak), then alter and release, possibly among factual documents/sources.

Example (2019) DFRLab report "Secondary Infektion” highlights incident with key asset being a forged “letter” created by the operation to provide ammunition for far-right forces in Europe ahead of the election.

  • Tactic: TA06
Incident Descriptions given for this incident
I00015 ConcordDiscovery Forge ('release' altered hacked documents), hack/leak/manipulate/distort
I00017 US presidential elections hack/leak/manipulate/distort
I00022 #Macronleaks hack/leak/manipulate/distort
I00051 Integrity Initiative hack/leak/manipulate/distort
Counters
C00012 Platform regulation
C00036 Infiltrate the in-group to discredit leaders (divide)
C00074 Identify identical content and mass deplatform
C00092 Establish a truth teller reputation score for individuals with many followers
C00202 Set data 'honeytraps'
C00210 Use encrypted apps for confidential communication

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW