Technique T0011: Hijack legitimate account

Summary: Hack or take over legimate accounts to distribute misinformation or damaging content. Examples include Syrian Electronic Army (2013) series of false tweets from a hijacked Associated Press Twitter account claiming that President Barack Obama had been injured in a series of explosions near the White House. The false report caused a temporary plunge of 143 points on the Dow Jones Industrial Average.
Belongs to tactic stage: TA04

Incident	Descriptions given for this incident
I00042 Saudi/Qatar bot dispute	“hack” of Qatar’s official news agency

Counters	Response types
C00043 Detect hijacked accounts and reallocate them	D3 Disrupt
C00045 S4d detection and re-allocation approaches	D3 Disrupt
C00053 Delete old accounts / Remove unused social media accounts	D4 Degrade
C00133 Deplatform Account*	D3 Disrupt
C00135 Deplatform message groups and/or message boards	D3 Disrupt

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW