AMITT/techniques/T0025.md

Technique T0025: Leak altered documents

• Summary: Obtain documents (eg by theft or leak), then alter and release, possibly among factual documents/sources.

Example (2019) DFRLab report "Secondary Infektion” highlights incident with key asset being a forged “letter” created by the operation to provide ammunition for far-right forces in Europe ahead of the election.

• Belongs to tactic stage: TA06

Incident	Descriptions given for this incident
I00015 ConcordDiscovery	Forge ('release' altered hacked documents), hack/leak/manipulate/distort
I00017 US presidential elections	hack/leak/manipulate/distort
I00022 #Macronleaks	hack/leak/manipulate/distort
I00051 Integrity Initiative	hack/leak/manipulate/distort

Counters	Response types
C00008 Create shared fact-checking database	D4 Degrade
C00011 Media literacy. Games to identify fake news	D2 Deny
C00012 Platform regulation	D2 Deny
C00014 Real-time updates to fact-checking database	D4 Degrade
C00016 Censorship	D2 Deny
C00073 Inoculate populations through media literacy training	D2 Deny
C00074 Identify and delete or rate limit identical content	D2 Deny
C00082 Ground truthing as automated response to pollution	D3 Disrupt
C00085 Mute content	D3 Disrupt
C00096 Strengthen institutions that are always truth tellers	D7 Deter
C00107 Content moderation	D2 Deny
C00117 Downgrade / de-amplify so message is seen by fewer people	D4 Degrade
C00119 Engage payload and debunk.	D7 Deter
C00122 Content moderation	D2 Deny
C00165 Ensure integrity of official documents	D2 Deny
C00176 Improve Coordination amongst stakeholders: public and private	D7 Deter
C00190 open engagement with civil society	D3 Disrupt
C00195 Redirect searches away from disinformation or extremist content	D2 Deny
C00200 Respected figure (influencer) disavows misinfo	D3 Disrupt
C00202 Set data 'honeytraps'	D2 Deny
C00205 strong dialogue between the federal government and private sector to encourage better reporting	D3 Disrupt
C00211 Use humorous counter-narratives	D3 Disrupt
C00219 Add metadata to content that’s out of the control of disinformation creators	D4 Degrade

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW