41 строка
1.1 KiB
Markdown
41 строка
1.1 KiB
Markdown
# Counter C00039: Standard reporting for false profiles
|
|
|
|
* **Summary**: Deplatform. Reporting fake profiles is the only solution (identity issues). Only resolution
|
|
|
|
* **Playbooks**: Playbook 1: Create a standard reporting format and method for social platforms for reporting false accounts.
|
|
Playbook 2:
|
|
- Is the account compromised?
|
|
- Is it known to be associated with threat actors
|
|
- common/random name
|
|
- Names violate terms of service
|
|
- Dormant account
|
|
- Change of country IP
|
|
- Social network growth patterns (number of friends etc)
|
|
- Evidence of linguistic artifacts (multiple fingerprints, terms/idiosyncrasies )
|
|
- Community vs. narrative vs. individuals
|
|
Playbook 3: Report suspected bots.
|
|
- Report ToS violations
|
|
|
|
* **Metatechnique**: M005 - removal
|
|
|
|
* **Resources needed:**
|
|
|
|
* **Belongs to tactic stage**: TA03
|
|
|
|
|
|
| Counters these Tactics |
|
|
| ---------------------- |
|
|
|
|
|
|
|
|
| Counters these Techniques |
|
|
| ------------------------- |
|
|
| [T0007 Create fake Social Media Profiles / Pages / Groups](../techniques/T0007.md) |
|
|
|
|
|
|
|
|
| Seen in incidents |
|
|
| ----------------- |
|
|
|
|
|
|
DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW |