AMITT/techniques/T0054.md

Technique T0054: Twitter bots amplify

• Summary: Use bots to amplify narratives above algorithm thresholds. Bots are automated/programmed profiles designed to amplify content (ie: automatically retweet or like) and give appearance it's more "popular" than it is. They can operate as a network, to function in a coordinated/orchestrated manner. In some cases (more so now) they are an inexpensive/disposable assets used for minimal deployment as bot detection tools improve and platforms are more responsive.(example 2019) #TrudeauMustGo

• Belongs to tactic stage: TA09

Incident	Descriptions given for this incident
I00005 Brexit vote	Twitter bots amplify & manipulate
I00007 Incirlik terrorists	Twitter bots amplify & manipulate
I00010 ParklandTeens	Twitter bots amplify & manipulate
I00017 US presidential elections	Twitter bots amplify & manipulate
I00022 #Macronleaks	Twitter bots amplify & manipulate
I00029 MH17 investigation	Twitter bots amplify & manipulate
I00032 Kavanaugh	Twitter bots amplify & manipulate
I00042 Saudi/Qatar bot dispute	Twitter bots amplify & manipulate
I00044 JadeHelm exercise	Twitter bots amplify & manipulate
I00047 Sea of Azov	Twitter bots amplify & manipulate
I00049 White Helmets: Chemical Weapons	Twitter bots amplify & manipulate
I00050 #HandsOffVenezuela	Twitter bots amplify & manipulate
I00051 Integrity Initiative	Twitter bots amplify & manipulate
I00056 Iran Influence Operations	Twitter bots amplify & manipulate
I00063 Olympic Doping Scandal	Twitter bots amplify & manipulate

Counters	Response types
C00006 Charge for social media	D2 Deny
C00006 Censorship	D2 Deny
C00012 Platform regulation	D2 Deny
C00044 Keep people from posting to social media immediately	D3 Disrupt
C00074 Identify and delete or rate limit identical content	D2 Deny
C00081 Highlight flooding and noise, and explain motivations	D3 Disrupt
C00082 Ground truthing as automated response to pollution	D3 Disrupt
C00085 Mute content	D3 Disrupt
C00086 Distract from noise with addictive content	D4 Degrade
C00087 Make more noise than the disinformation	D4 Degrade
C00091 Honeypot social community	D5 Deceive
C00092 Establish a truth teller reputation score for influencers	D7 Deter
C00097 Require use of verified identities to contribute to poll or comment	D2 Deny
C00101 Create friction by rate-limiting engagement	D4 Degrade
C00120 Open dialogue about design of platforms to produce different outcomes	D7 Deter
C00122 Content moderation	D2 Deny
C00123 Remove or rate limit botnets	D3 Disrupt
C00125 Prebunking	D3 Disrupt
C00126 Social media amber alert	D3 Disrupt
C00128 Create friction by marking content with ridicule or other "decelerants"	D3 Disrupt
C00131 Seize and analyse botnet servers	D2 Deny
C00153 Take pre-emptive action against actors' infrastructure	D3 Disrupt
C00176 Improve Coordination amongst stakeholders: public and private	D7 Deter
C00182 Redirection / malware detection/ remediation	D2 Deny

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW