65efb532a1
DISARM is the new name for AMITT; DISARM is managed by the DISARM Foundation, who've been updating the frameworks elsewhere, including merging AM!TT and SP!CE.
956 B
956 B
Counter C00197: remove suspicious accounts
-
Summary: Standard reporting for false profiles (identity issues). Includes detecting hijacked accounts and reallocating them - if possible, back to original owners.
-
Playbooks:
-
Metatechnique: M005 - removal
-
Resources needed: R003 - money
-
Belongs to tactic stage: TA03
| Actor types | Sectors |
|---|---|
| A004 activist | S002 |
| A031 social media platform adminstrator | S007 |
| Counters these Tactics |
|---|
| Counters these Techniques |
|---|
| T0009 Create fake experts |
| T0007 Create fake Social Media Profiles / Pages / Groups |
| T0011 Hijack legitimate account |
| Seen in incidents |
|---|
DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW