AMITT/techniques/T0025.md

Technique T0025: Leak altered documents

• Summary: Obtain documents (eg by theft or leak), then alter and release, possibly among factual documents/sources.

Example (2019) DFRLab report "Secondary Infektion” highlights incident with key asset being a forged “letter” created by the operation to provide ammunition for far-right forces in Europe ahead of the election.

• Belongs to tactic stage: TA06

Incident	Descriptions given for this incident
I00015 ConcordDiscovery	Forge ('release' altered hacked documents), hack/leak/manipulate/distort
I00017 US presidential elections	hack/leak/manipulate/distort
I00022 #Macronleaks	hack/leak/manipulate/distort
I00051 Integrity Initiative	hack/leak/manipulate/distort

Counters	Response types
C00006 Charge for social media	D2 Deny
C00006 Censorship	D2 Deny
C00012 Platform regulation	D2 Deny
C00036 Infiltrate the in-group to discredit leaders (divide)	D2 Deny
C00072 Remove non-relevant content from special interest groups – not recommended	D2 Deny
C00073 Inoculate populations through media literacy training	D2 Deny
C00074 Identify and delete or rate limit identical content	D2 Deny
C00082 Ground truthing as automated response to pollution	D3 Disrupt
C00085 Mute content	D3 Disrupt
C00096 Strengthen institutions that are always truth tellers	D7 Deter
C00107 Content moderation	D2 Deny
C00117 Downgrade / de-amplify so message is seen by fewer people	D4 Degrade
C00119 Engage payload and debunk.	D7 Deter
C00122 Content moderation	D2 Deny
C00165 Ensure integrity of official documents	D2 Deny
C00176 Improve Coordination amongst stakeholders: public and private	D7 Deter
C00190 open engagement with civil society	D3 Disrupt
C00195 Redirect searches away from disinformation or extremist content	D2 Deny
C00200 Respected figure (influencer) disavows misinfo	D3 Disrupt
C00202 Set data 'honeytraps'	D2 Deny
C00205 strong dialogue between the federal government and private sector to encourage better reporting	D3 Disrupt
C00211 Use humorous counter-narratives	D3 Disrupt
C00219 Add metadata to content that’s out of the control of disinformation creators	D4 Degrade

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW