AMITT/techniques/T0025.md
Sara-Jayne Terp 4d02f1980e Updated the TA06 Develop Content counters
These are the changes to TA06:
- Merge C00015 into C00092
- Add C00223: strengthen trust in social media platforms
- Merge C00088 onto C00084
- Merge C00079 onto C00078
2021-03-05 17:00:09 +00:00

1.5 KiB

Technique T0025: Leak altered documents

  • Summary: Obtain documents (eg by theft or leak), then alter and release, possibly among factual documents/sources.

Example (2019) DFRLab report "Secondary Infektion” highlights incident with key asset being a forged “letter” created by the operation to provide ammunition for far-right forces in Europe ahead of the election.

  • Belongs to tactic stage: TA06
Incident Descriptions given for this incident
I00015 ConcordDiscovery Forge ('release' altered hacked documents), hack/leak/manipulate/distort
I00017 US presidential elections hack/leak/manipulate/distort
I00022 #Macronleaks hack/leak/manipulate/distort
I00051 Integrity Initiative hack/leak/manipulate/distort
Counters Response types
C00012 Platform regulation D2 Deny
C00036 Infiltrate the in-group to discredit leaders (divide) D2 Deny
C00074 Identify identical content and mass deplatform D2 Deny
C00092 Reputation scores for social media influencers D7 Deter
C00202 Set data 'honeytraps' D2 Deny
C00210 Use encrypted apps for confidential communication D2 Deny

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW