AMITT/techniques/T0011.md

Hijack legitimate account

• Type: Technique

• Name: Hijack legitimate account

• Id: T0011

• Summary: Hack or take over legimate accounts to distribute misinformation or damaging content. Examples include Syrian Electronic Army (2013) series of false tweets from a hijacked Associated Press Twitter account claiming that President Barack Obama had been injured in a series of explosions near the White House. The false report caused a temporary plunge of 143 points on the Dow Jones Industrial Average.

• Tactic: TA04

Incident	Descriptions given for this incident
I00042 Saudi/Qatar bot dispute	“hack” of Qatar’s official news agency

Counters
C00043 Detect hijacked accounts and reallocate them
C00045 S4d detection and re-allocation approaches
C00053 Delete old accounts / Remove unused social media accounts
C00133 Deplatform Account*
C00135 Deplatform message groups and/or message boards

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW