AMITT/techniques/T0025.md
Sara-Jayne Terp ea1e5c37ae DESIGN UPDATE: AMITT Red Framework
Added 3 new techniques to TA12: T0062 Behaviour changes, T0063 Message reach, T0064 social media engagement
2021-03-11 13:20:47 +00:00

1.4 KiB

Technique T0025: Leak altered documents

  • Summary: Obtain documents (eg by theft or leak), then alter and release, possibly among factual documents/sources.

Example (2019) DFRLab report "Secondary Infektion” highlights incident with key asset being a forged “letter” created by the operation to provide ammunition for far-right forces in Europe ahead of the election.

  • Belongs to tactic stage: TA06
Incident Descriptions given for this incident
I00015 ConcordDiscovery Forge ('release' altered hacked documents), hack/leak/manipulate/distort
I00017 US presidential elections hack/leak/manipulate/distort
I00022 #Macronleaks hack/leak/manipulate/distort
I00051 Integrity Initiative hack/leak/manipulate/distort
Counters Response types
C00012 Platform regulation D2 Deny
C00036 Infiltrate the in-group to discredit leaders (divide) D2 Deny
C00074 Identify identical content and mass deplatform D2 Deny
C00092 Reputation scores for social media influencers D7 Deter
C00202 Set data 'honeytraps' D2 Deny

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW