зеркало из
https://github.com/ceios/ceios.git
synced 2025-10-29 12:06:04 +02:00
1743 строки
67 KiB
JSON
1743 строки
67 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--44367a5e-a9fd-4e50-9c6f-04f21e56a159",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.428Z",
|
|
"modified": "2025-04-30T03:24:06.428Z",
|
|
"objects": [
|
|
{
|
|
"type": "extension-definition",
|
|
"id": "extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4",
|
|
"spec_version": "2.1",
|
|
"created": "2022-08-02T19:34:35.143Z",
|
|
"modified": "2022-08-02T19:34:35.143Z",
|
|
"name": "Attack Flow",
|
|
"description": "Extends STIX 2.1 with features to create Attack Flows.",
|
|
"created_by_ref": "identity--fb9c968a-745b-4ade-9b25-c324172197f4",
|
|
"schema": "https://center-for-threat-informed-defense.github.io/attack-flow/stix/attack-flow-schema-2.0.0.json",
|
|
"version": "2.0.0",
|
|
"extension_types": [
|
|
"new-sdo"
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "Documentation",
|
|
"description": "Documentation for Attack Flow",
|
|
"url": "https://center-for-threat-informed-defense.github.io/attack-flow"
|
|
},
|
|
{
|
|
"source_name": "GitHub",
|
|
"description": "Source code repository for Attack Flow",
|
|
"url": "https://github.com/center-for-threat-informed-defense/attack-flow"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"type": "identity",
|
|
"id": "identity--fb9c968a-745b-4ade-9b25-c324172197f4",
|
|
"spec_version": "2.1",
|
|
"created": "2022-08-02T19:34:35.143Z",
|
|
"modified": "2022-08-02T19:34:35.143Z",
|
|
"created_by_ref": "identity--fb9c968a-745b-4ade-9b25-c324172197f4",
|
|
"name": "MITRE Engenuity Center for Threat-Informed Defense",
|
|
"identity_class": "organization"
|
|
},
|
|
{
|
|
"type": "attack-flow",
|
|
"id": "attack-flow--aa13f359-e745-41a0-b200-bf30de63253d",
|
|
"spec_version": "2.1",
|
|
"created": "2024-06-24T15:08:11.074Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"created_by_ref": "identity--8d80dd4f-6414-43b9-9674-70819c527337",
|
|
"start_refs": [
|
|
"attack-action--bf852db6-da70-48c6-a641-f0579cf3da07",
|
|
"attack-action--c7eeeec4-d878-4909-8dae-e1ff6079c37e",
|
|
"attack-action--45837119-ac91-4811-936d-ab3cf8608a46",
|
|
"attack-action--d56e2d8e-287a-4b2e-9858-2754f9821c04",
|
|
"attack-action--97c6550f-8b32-4e20-b854-09a515267cd1",
|
|
"attack-action--88ace0b4-cf13-4588-abba-121d43115451",
|
|
"attack-action--9eb4c7e4-9606-4c6f-8c40-374d828dfa2a",
|
|
"attack-action--f85b9a71-b813-4590-8d1f-921d657b7741",
|
|
"attack-action--74a81798-f985-4f77-aeb7-07287a0bb306"
|
|
],
|
|
"name": "FaceMusic Malware",
|
|
"description": "FaceMusic was a click-fraud malware developed by the IRA in 2016 that aimed to enhance the visibility of troll farm content used by the IRA to disseminate particular narratives. The malware was advertised as an embedded music player allowing users to listen to free music while browsing Facebook. Users installed the malware as a Chrome plug-in. Hidden functionality pulled browsers into a botnet and was active even when victims were not using Facebook. The Facebook ads successfully targeted U.S. teenage female users between 14 and 17 years old. \n",
|
|
"scope": "incident"
|
|
},
|
|
{
|
|
"type": "identity",
|
|
"id": "identity--8d80dd4f-6414-43b9-9674-70819c527337",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.428Z",
|
|
"modified": "2025-04-30T03:24:06.428Z",
|
|
"name": "Jim Morris"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--bf852db6-da70-48c6-a641-f0579cf3da07",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Search Open Websites/Domains: Social Media",
|
|
"tactic_id": "TA0043",
|
|
"tactic_ref": "x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592",
|
|
"technique_id": "T1593.001",
|
|
"technique_ref": "attack-pattern--bbe5b322-e2af-4a5e-9625-a4e62bf84ed3",
|
|
"effect_refs": [
|
|
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc",
|
|
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
|
|
"attack-action--49ba01af-094a-4d3d-955b-fe8e243fb416",
|
|
"attack-action--670d7f28-16f1-408f-b2a6-084d6a45df59"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--5a44def7-ece0-4976-b867-4edc84ef3339",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Acquire Infrastructure: Domains",
|
|
"tactic_id": "TA0042",
|
|
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
|
|
"technique_id": "T1583.001",
|
|
"technique_ref": "attack-pattern--40f5caa0-4cb7-4117-89fc-d421bb493df3",
|
|
"effect_refs": [
|
|
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c",
|
|
"attack-action--58f5ca11-87ac-4a47-b87c-03a8986065ad"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--3d2e0a02-6ae3-4c37-8a4b-08c8a8214cf3",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Acquire Infrastructure: Server",
|
|
"tactic_id": "TA0042",
|
|
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
|
|
"technique_id": "T1583.004",
|
|
"technique_ref": "attack-pattern--60c4b628-4807-4b0b-bbf5-fdac8643c337",
|
|
"effect_refs": [
|
|
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c",
|
|
"attack-action--58f5ca11-87ac-4a47-b87c-03a8986065ad"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--9fbadfc8-0b53-4014-a7a6-75d24821a24c",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Acquire Infrastructure: Virtual Private Server",
|
|
"tactic_id": "TA0042",
|
|
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
|
|
"technique_id": "T1583.003",
|
|
"technique_ref": "attack-pattern--79da0971-3147-4af6-a4f5-e8cd447cd795",
|
|
"effect_refs": [
|
|
"attack-action--de2ecbcc-beab-4794-80d2-7384d7d78f7c",
|
|
"attack-action--ddda90e1-ba8a-4147-88dd-6c6a72ebd2da",
|
|
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Establish Accounts: Social Media Accounts",
|
|
"tactic_id": "TA0042",
|
|
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
|
|
"technique_id": "T1585.001",
|
|
"technique_ref": "attack-pattern--b1ccd744-3f78-4a0e-9bb2-2002057f7928",
|
|
"effect_refs": [
|
|
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc",
|
|
"attack-action--863d942a-86f8-4159-8496-dc4a2b8cd8d7",
|
|
"attack-action--b547e639-08ab-4d69-a1b1-8bbd4f955173"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--c7eeeec4-d878-4909-8dae-e1ff6079c37e",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Develop Capabilities: Malware",
|
|
"tactic_id": "TA0042",
|
|
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
|
|
"technique_id": "T1587.001",
|
|
"technique_ref": "attack-pattern--212306d8-efa4-44c9-8c2d-ed3d2e224aa0",
|
|
"effect_refs": [
|
|
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--b21d03be-19e7-456c-b4a4-18f503bdf91b",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Compromise Accounts: Social Media Accounts",
|
|
"tactic_id": "TA0042",
|
|
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
|
|
"technique_id": "T1586.001",
|
|
"technique_ref": "attack-pattern--274770e0-2612-4ccf-a678-ef8e7bad365d",
|
|
"effect_refs": [
|
|
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc",
|
|
"attack-action--863d942a-86f8-4159-8496-dc4a2b8cd8d7"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--724af0b4-e1e4-4eb8-b27c-9a82e2f00373",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Compromise Infrastructure: Botnet",
|
|
"tactic_id": "TA0042",
|
|
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
|
|
"technique_id": "T1584.005",
|
|
"technique_ref": "attack-pattern--810d8072-afb6-4a56-9ee7-86379ac4a6f3",
|
|
"effect_refs": [
|
|
"attack-action--b21d03be-19e7-456c-b4a4-18f503bdf91b",
|
|
"attack-action--36909774-ba84-4574-b51e-97ec000f57b3",
|
|
"attack-action--6a64e24c-9664-4e29-ae9e-2c8ef9d11ddd",
|
|
"attack-action--d908bc6c-d245-47ed-bcef-9b437b7588b8"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Stage Capabilities: Upload Malware",
|
|
"tactic_id": "TA0042",
|
|
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
|
|
"technique_id": "T1608.001",
|
|
"technique_ref": "attack-pattern--3ee16395-03f0-4690-a32e-69ce9ada0f9e",
|
|
"effect_refs": [
|
|
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--36909774-ba84-4574-b51e-97ec000f57b3",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Scheduled Task/Job",
|
|
"tactic_id": "TA0002",
|
|
"tactic_ref": "x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5",
|
|
"technique_id": "T1053",
|
|
"technique_ref": "attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9",
|
|
"effect_refs": [
|
|
"attack-action--a128830e-4f25-486c-a974-851f20148f1f",
|
|
"attack-action--34740e5a-711e-41c0-9bf9-9eebd109c2f5",
|
|
"attack-action--78c9d43e-b4c1-4b59-b48e-a2c2dbbec649",
|
|
"attack-action--e94f2fa4-a946-4842-be9d-2ac8a55cd0ae",
|
|
"attack-action--def956b8-789c-4fe6-9d88-304413474bac"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Drive-by Compromise",
|
|
"tactic_id": "TA0001",
|
|
"tactic_ref": "x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca",
|
|
"technique_id": "T1189",
|
|
"technique_ref": "attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6",
|
|
"effect_refs": [
|
|
"attack-action--724af0b4-e1e4-4eb8-b27c-9a82e2f00373",
|
|
"attack-action--34740e5a-711e-41c0-9bf9-9eebd109c2f5"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--34740e5a-711e-41c0-9bf9-9eebd109c2f5",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Browser Extensions",
|
|
"tactic_id": "TA0003",
|
|
"tactic_ref": "x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92",
|
|
"technique_id": "T1176",
|
|
"technique_ref": "attack-pattern--389735f1-f21c-4208-b8f0-f8031e7169b8",
|
|
"effect_refs": [
|
|
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--a128830e-4f25-486c-a974-851f20148f1f",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Scheduled Task/Job",
|
|
"tactic_id": "TA0003",
|
|
"tactic_ref": "x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92",
|
|
"technique_id": "T1053",
|
|
"technique_ref": "attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9",
|
|
"effect_refs": [
|
|
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--49ba01af-094a-4d3d-955b-fe8e243fb416",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Determine Target Audiences",
|
|
"tactic_id": "TA01",
|
|
"tactic_ref": "x-mitre-tactic--b03163eb-7e81-4fed-9819-641bf7c99507",
|
|
"technique_id": "T0073",
|
|
"technique_ref": "attack-pattern--6faf71ca-1e32-4134-8a7c-79b25f7f3615",
|
|
"effect_refs": [
|
|
"attack-action--b87ca9f7-484e-4b1e-95db-c0ddfd74d197",
|
|
"attack-action--65017fb0-cba7-4ba9-81f9-aa1d50dd8b0c",
|
|
"attack-action--feca4f6b-361d-4ee8-9453-c286d15f68f5",
|
|
"attack-action--4a928ea6-8165-4a99-8f9f-72c7ea3247b8",
|
|
"attack-action--9cdc6539-f4f9-40fd-944c-2a0fec470859",
|
|
"attack-action--8578d49e-3b36-4ae8-b370-8999d1f27ee8",
|
|
"attack-action--4eb0fa83-73af-4236-af00-cf95bea4b0ef"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--b80fa8a2-9588-4fcc-8100-36b377bb9e00",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Divide",
|
|
"tactic_id": "TA02",
|
|
"tactic_ref": "x-mitre-tactic--431af018-56ae-406c-9648-4857f074fffc",
|
|
"technique_id": "T0079",
|
|
"technique_ref": "attack-pattern--1d48fe65-5062-4262-b9e2-890aca1da132"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--b87ca9f7-484e-4b1e-95db-c0ddfd74d197",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Map Target Audience Information Environment: Monitor Social Media Analytics",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0080.001",
|
|
"technique_ref": "attack-pattern--9ec25bd4-7dcd-4bbf-9e2f-6170af84e166",
|
|
"effect_refs": [
|
|
"attack-operator--4898cc35-1f35-4462-b37d-903ab8b3fb5e"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--d832343b-37a7-4132-a3f4-cddc543ffad4",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Segment Audiences: Geographic Segmentation",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0072.001",
|
|
"technique_ref": "attack-pattern--77574742-25a0-4375-a2c8-d5b54e1360aa"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--4a928ea6-8165-4a99-8f9f-72c7ea3247b8",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Determine Strategic Ends",
|
|
"tactic_id": "TA01",
|
|
"tactic_ref": "x-mitre-tactic--b03163eb-7e81-4fed-9819-641bf7c99507",
|
|
"technique_id": "T0074",
|
|
"technique_ref": "attack-pattern--bef6392b-f5a2-4a40-8b53-9a9377bea159",
|
|
"effect_refs": [
|
|
"attack-action--49ba01af-094a-4d3d-955b-fe8e243fb416",
|
|
"attack-action--637f59c5-7b0a-48ad-9487-103c3120e287",
|
|
"attack-action--b80fa8a2-9588-4fcc-8100-36b377bb9e00",
|
|
"attack-action--9ca8275f-d019-448a-8289-045a233e62a4",
|
|
"attack-action--dd155896-be40-4941-9a35-aca3d93495f0",
|
|
"attack-action--18b59441-bdf3-447b-a006-d45e15276c9b",
|
|
"attack-action--b67f2028-8d34-41a8-b331-2d7bc8be2de8",
|
|
"attack-action--be77482f-6597-465e-9a51-0b594b16371a",
|
|
"attack-action--d832343b-37a7-4132-a3f4-cddc543ffad4"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--74b1a738-dfb3-4c79-8c47-3af53d7b3456",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Find Echo Chambers",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0081.001",
|
|
"technique_ref": "attack-pattern--45d10a80-a2f7-4626-ae2c-dae8cf144157"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--637f59c5-7b0a-48ad-9487-103c3120e287",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Dismiss: Discredit Credible Sources",
|
|
"tactic_id": "TA02",
|
|
"tactic_ref": "x-mitre-tactic--431af018-56ae-406c-9648-4857f074fffc",
|
|
"technique_id": "T0075.001",
|
|
"technique_ref": "attack-pattern--9b66eaf5-5b03-46b8-b076-cf1da3593745"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--9ca8275f-d019-448a-8289-045a233e62a4",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Distract",
|
|
"tactic_id": "TA02",
|
|
"tactic_ref": "x-mitre-tactic--431af018-56ae-406c-9648-4857f074fffc",
|
|
"technique_id": "T0077",
|
|
"technique_ref": "attack-pattern--9e80abf9-0991-47c3-982c-b33e66640d10"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--78c9d43e-b4c1-4b59-b48e-a2c2dbbec649",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Use Search Engine Optimization",
|
|
"tactic_id": "TA08",
|
|
"tactic_ref": "x-mitre-tactic--8a96b3ce-332e-4685-8ec6-5140eef192a4",
|
|
"technique_id": "T0046",
|
|
"technique_ref": "attack-pattern--50f92bc8-f6ad-4267-bd00-f4c572370a72",
|
|
"effect_refs": [
|
|
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--4eb0fa83-73af-4236-af00-cf95bea4b0ef",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Leverage Existing Narratives",
|
|
"tactic_id": "TA14",
|
|
"tactic_ref": "x-mitre-tactic--fd1e7dd3-63d0-4040-808e-3e61b9ddca86",
|
|
"technique_id": "T0003",
|
|
"technique_ref": "attack-pattern--9cf02828-bd4c-4b04-a9f0-bb67ec3b0493",
|
|
"effect_refs": [
|
|
"attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963",
|
|
"attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
|
|
"attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
|
|
"attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
|
|
"attack-action--a109f79c-3d7d-4d55-87e0-275b2ea73fe3",
|
|
"attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
|
|
"attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
|
|
"attack-action--6faf9825-64af-49a1-9cd8-2c0173dd5129",
|
|
"attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
|
|
"attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
|
|
"attack-operator--830ccd5d-a141-447e-a4d3-3167fd1ad6da"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--670d7f28-16f1-408f-b2a6-084d6a45df59",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Infiltrate Existing Networks: Identify Susceptible Targets in Networks",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0094.001",
|
|
"technique_ref": "attack-pattern--4cb308a9-073c-49d3-81ed-894cf9b95acc",
|
|
"effect_refs": [
|
|
"attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Leverage Content Farms: Create Content Farms",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0096.001",
|
|
"technique_ref": "attack-pattern--3875e864-64d8-4ceb-8aa2-ef6e79224a85"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Reuse Existing Content: Use Copypasta",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0084.001",
|
|
"technique_ref": "attack-pattern--4cd719a9-e817-4acc-9581-6b6a60e42f35"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Create Inauthentic Social Media Pages and Groups",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0007",
|
|
"technique_ref": "attack-pattern--d1ad0738-1f52-4fab-b0d1-640b551d7f6a",
|
|
"effect_refs": [
|
|
"attack-action--53f73924-4101-414b-a791-25ea8b76a05a",
|
|
"attack-action--7a30ae19-4160-4c07-976a-1a25b5df68e4",
|
|
"attack-action--863d942a-86f8-4159-8496-dc4a2b8cd8d7"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Generate Information Pollution",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0019",
|
|
"technique_ref": "attack-pattern--09d17df9-9bb5-4d64-ba5c-8ae47814bd4c"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--a6df90ee-7c8a-4720-8f88-0e5ddaeeee92",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Recruit Malign Actors: Enlist Troll Accounts",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0091.003",
|
|
"technique_ref": "attack-pattern--ef3dcdcd-bd97-48e0-9d15-3e482a72c979",
|
|
"effect_refs": [
|
|
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
|
|
"attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Develop Video-based Content",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0087",
|
|
"technique_ref": "attack-pattern--ce4a9eee-7437-43ce-ac86-c1921f5c01a7"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--be77482f-6597-465e-9a51-0b594b16371a",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Segment Audiences: Demographic Segmentation",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0072.002",
|
|
"technique_ref": "attack-pattern--694bafc2-bd74-40c9-89f2-2ad033f079f4"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--b67f2028-8d34-41a8-b331-2d7bc8be2de8",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Segment Audiences: Economic Segmentation",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0072.003",
|
|
"technique_ref": "attack-pattern--1d917530-027d-4f82-b380-404c320dc783"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--18b59441-bdf3-447b-a006-d45e15276c9b",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Segment Audiences: Psychographic Segmentation",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0072.004",
|
|
"technique_ref": "attack-pattern--3fd63a63-f597-40e5-9f6e-0aab00d4dc14"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--dd155896-be40-4941-9a35-aca3d93495f0",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Segment Audiences: Political Segmentation",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0072.005",
|
|
"technique_ref": "attack-pattern--a468ff54-27eb-4e6d-b709-a9830017df86"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--65017fb0-cba7-4ba9-81f9-aa1d50dd8b0c",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Map Target Audience Information Environment: Identify Trending Topics/Hashtags",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0080.003",
|
|
"technique_ref": "attack-pattern--5a279d23-6ba2-425c-bf72-20c6411ca5a7",
|
|
"effect_refs": [
|
|
"attack-operator--4898cc35-1f35-4462-b37d-903ab8b3fb5e"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--feca4f6b-361d-4ee8-9453-c286d15f68f5",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Map Target Audience Information Environment: Conduct Web Traffic Analysis",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0080.004",
|
|
"technique_ref": "attack-pattern--45ab5d9e-88ee-494c-971b-6e4babf1dc34",
|
|
"effect_refs": [
|
|
"attack-operator--4898cc35-1f35-4462-b37d-903ab8b3fb5e"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--424e66ae-2255-464d-aed7-baeb428a92ab",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Identify Existing Prejudices",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0081.003",
|
|
"technique_ref": "attack-pattern--8ecbc28c-36e9-4d9a-8578-b9e20552d732",
|
|
"effect_refs": [
|
|
"attack-operator--f36b330d-fe85-4dd2-8146-7e8f20f4cab3"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--992e1318-4e93-4e8f-85e4-a54076e2f6f9",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Identify Existing Fissures",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0081.004",
|
|
"technique_ref": "attack-pattern--d13ff5af-16fd-4b32-8e14-f2e0980c15fb",
|
|
"effect_refs": [
|
|
"attack-operator--f36b330d-fe85-4dd2-8146-7e8f20f4cab3"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--e872977a-4f65-4035-b283-78e23e46ffcb",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Identify Existing Conspiracy Narratives/Suspicions",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0081.005",
|
|
"technique_ref": "attack-pattern--625fe1a6-ee9d-45c8-9912-9e9f6e87dc85",
|
|
"effect_refs": [
|
|
"attack-operator--f36b330d-fe85-4dd2-8146-7e8f20f4cab3"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--2b0d60d5-24ab-477e-a886-a060485e01cc",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Identify Wedge Issues",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0081.006",
|
|
"technique_ref": "attack-pattern--594993b4-86a3-455b-af59-61f167d7fd93",
|
|
"effect_refs": [
|
|
"attack-operator--f36b330d-fe85-4dd2-8146-7e8f20f4cab3"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--bb649ef7-7fb6-410f-b2c8-219a68f6fcd6",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Identify Target Audience Adversaries",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0081.007",
|
|
"technique_ref": "attack-pattern--7d69d231-78a6-4a98-a715-c0edd9adafce",
|
|
"effect_refs": [
|
|
"attack-operator--f36b330d-fe85-4dd2-8146-7e8f20f4cab3"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--2554d139-71c2-40fd-9e03-f7c789e4c82c",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Identify Media System Vulnerabilities",
|
|
"tactic_id": "TA13",
|
|
"tactic_ref": "x-mitre-tactic--1e005da9-56cc-4802-af90-b267d17a1ad1",
|
|
"technique_id": "T0081.008",
|
|
"technique_ref": "attack-pattern--bb8da71f-108a-4c46-a1ef-d24ef1c8a661",
|
|
"effect_refs": [
|
|
"attack-action--62ca4f3e-e6a2-4b3d-821d-cfe705a7d39c",
|
|
"attack-operator--f36b330d-fe85-4dd2-8146-7e8f20f4cab3"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--8578d49e-3b36-4ae8-b370-8999d1f27ee8",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Respond to Breaking News Event or Active Crisis",
|
|
"tactic_id": "TA14",
|
|
"tactic_ref": "x-mitre-tactic--fd1e7dd3-63d0-4040-808e-3e61b9ddca86",
|
|
"technique_id": "T0068",
|
|
"technique_ref": "attack-pattern--b2a7561a-28ad-426c-a249-f415b5f11cee",
|
|
"effect_refs": [
|
|
"attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
|
|
"attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963",
|
|
"attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
|
|
"attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
|
|
"attack-action--a109f79c-3d7d-4d55-87e0-275b2ea73fe3",
|
|
"attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
|
|
"attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
|
|
"attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
|
|
"attack-action--6faf9825-64af-49a1-9cd8-2c0173dd5129",
|
|
"attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
|
|
"attack-operator--830ccd5d-a141-447e-a4d3-3167fd1ad6da"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--9cdc6539-f4f9-40fd-944c-2a0fec470859",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Integrate Target Audience Vulnerabilities into Narrative",
|
|
"tactic_id": "TA14",
|
|
"tactic_ref": "x-mitre-tactic--fd1e7dd3-63d0-4040-808e-3e61b9ddca86",
|
|
"technique_id": "T0083",
|
|
"technique_ref": "attack-pattern--c254c765-c83d-4ae3-880e-7a253ef02d37",
|
|
"effect_refs": [
|
|
"attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963",
|
|
"attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
|
|
"attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
|
|
"attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
|
|
"attack-action--a109f79c-3d7d-4d55-87e0-275b2ea73fe3",
|
|
"attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
|
|
"attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
|
|
"attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
|
|
"attack-action--6faf9825-64af-49a1-9cd8-2c0173dd5129",
|
|
"attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
|
|
"attack-operator--830ccd5d-a141-447e-a4d3-3167fd1ad6da"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Distort Facts: Reframe Context",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0023.001",
|
|
"technique_ref": "attack-pattern--032f24c1-bc1d-457a-8f43-6c5fc416f733"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Reuse Existing Content: Plagiarize Content",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0084.002",
|
|
"technique_ref": "attack-pattern--a3fe7752-dbfa-4918-912f-c492c8593c68"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--a109f79c-3d7d-4d55-87e0-275b2ea73fe3",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Develop Text-based Content: Develop False or Altered Documents",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0085.002",
|
|
"technique_ref": "attack-pattern--6956e73b-cb55-4c0a-8cb0-a26e8d5bb9db",
|
|
"description": "From the 2016 Clinton Email hacking, false or altered documents are likely included in the information pollution."
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Develop Text-based Content: Develop Inauthentic News Articles",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0085.003",
|
|
"technique_ref": "attack-pattern--330de45e-8e37-4b57-95e4-fa75580b36a8"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Develop Image-based Content: Develop Memes",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0086.001"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--6faf9825-64af-49a1-9cd8-2c0173dd5129",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Obtain Private Documents: Obtain Authentic Documents",
|
|
"tactic_id": "TA06",
|
|
"tactic_ref": "x-mitre-tactic--82039146-59a3-4353-b328-a422da34db6b",
|
|
"technique_id": "T0089.001",
|
|
"technique_ref": "attack-pattern--ec8424e6-c7de-4543-b943-f0c4cc9ac63d",
|
|
"description": "From the 2016 Clinton Email hacking, private documents are included in the information pollution."
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--6a64e24c-9664-4e29-ae9e-2c8ef9d11ddd",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Cultivate Ignorant Agents",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0010",
|
|
"technique_ref": "attack-pattern--bacbdfd3-f8c2-4126-a9f3-1b75576fa5e7"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--58f5ca11-87ac-4a47-b87c-03a8986065ad",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Create Inauthentic Websites",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0013",
|
|
"technique_ref": "attack-pattern--95e3e261-2f42-4ff0-a1f9-4eb2c5998284",
|
|
"effect_refs": [
|
|
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--45837119-ac91-4811-936d-ab3cf8608a46",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Create Inauthentic Accounts: Create Bot Accounts",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0090.003",
|
|
"technique_ref": "attack-pattern--b2695cde-5f12-4e6a-b55a-e31220cb4bd7",
|
|
"effect_refs": [
|
|
"attack-operator--efbf76cf-736d-478d-9cdf-3bbd84fba273"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--d56e2d8e-287a-4b2e-9858-2754f9821c04",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Create Inauthentic Accounts: Create Sockpuppet Accounts",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0090.004",
|
|
"technique_ref": "attack-pattern--81abb4fa-705e-430f-ba54-34bf7bd467f7",
|
|
"effect_refs": [
|
|
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
|
|
"attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--97c6550f-8b32-4e20-b854-09a515267cd1",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Build Network: Create Community of Sub-group",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0092.003",
|
|
"technique_ref": "attack-pattern--abb6518d-50fe-4428-9bca-a6e3c6ed4de4",
|
|
"effect_refs": [
|
|
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
|
|
"attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--88ace0b4-cf13-4588-abba-121d43115451",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Acquire/Recruit Network: Fund Proxies",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0093.001",
|
|
"technique_ref": "attack-pattern--d522f417-ba0e-4e2d-ae96-df2c1fd607e6",
|
|
"effect_refs": [
|
|
"attack-action--6a64e24c-9664-4e29-ae9e-2c8ef9d11ddd",
|
|
"attack-action--a6df90ee-7c8a-4720-8f88-0e5ddaeeee92"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--d908bc6c-d245-47ed-bcef-9b437b7588b8",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Acquire/Recruit Network: Acquire Botnets",
|
|
"tactic_id": "TA15",
|
|
"tactic_ref": "x-mitre-tactic--c4eaa2a6-7e86-4eb3-beaa-981a96d4724a",
|
|
"technique_id": "T0093.002",
|
|
"technique_ref": "attack-pattern--c7017017-4965-4dad-a970-e748b7080a19",
|
|
"effect_refs": [
|
|
"attack-action--36909774-ba84-4574-b51e-97ec000f57b3",
|
|
"attack-operator--efbf76cf-736d-478d-9cdf-3bbd84fba273"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--9eb4c7e4-9606-4c6f-8c40-374d828dfa2a",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Deliver Ads: Social Media",
|
|
"tactic_id": "TA09",
|
|
"tactic_ref": "x-mitre-tactic--4a9c3d11-801b-4ee9-a5bc-b5bc042a92f9",
|
|
"technique_id": "T0114.001",
|
|
"technique_ref": "attack-pattern--35444e68-bb94-44ad-aecf-fff893f3d0ca",
|
|
"effect_refs": [
|
|
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--863d942a-86f8-4159-8496-dc4a2b8cd8d7",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Post Content",
|
|
"tactic_id": "TA09",
|
|
"technique_id": "T0115",
|
|
"technique_ref": "attack-pattern--1997947a-7e08-4ea9-802c-85391d561266",
|
|
"effect_refs": [
|
|
"attack-action--fd6ab4be-2208-4b3c-bbd6-8f262b4adde3",
|
|
"attack-action--90ee7a03-e550-4126-95c1-70c2856aece0",
|
|
"attack-action--b3660bc5-2ece-4823-9d4d-36d421a165e3",
|
|
"attack-action--9be12131-f231-45c0-80e5-8531c9f359b3",
|
|
"attack-action--0cc3905a-a950-43fc-94df-760717e542aa",
|
|
"attack-action--9af0ebc0-f3db-47d8-8a29-a252501cecf5",
|
|
"attack-action--46a31514-5431-41cb-8931-b37dcb4fe12b",
|
|
"attack-action--abb59dba-0d4d-4da1-bea8-8456e03daf6f",
|
|
"attack-action--b547e639-08ab-4d69-a1b1-8bbd4f955173"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--1025a1a0-b803-4e63-a68c-d35df57bdc2c",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Flooding the Information Space: Trolls Amplify and Manipulate",
|
|
"tactic_id": "TA17",
|
|
"tactic_ref": "x-mitre-tactic--c198a2b6-0c46-4b69-866a-1764782c2e07",
|
|
"technique_id": "T0049.001",
|
|
"technique_ref": "attack-pattern--1c13465b-8b75-4b7d-a763-fe5b1d091635",
|
|
"effect_refs": [
|
|
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--e94f2fa4-a946-4842-be9d-2ac8a55cd0ae",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Flooding the Information Space: Bots Amplify via Automated Forwarding and Reposting",
|
|
"tactic_id": "TA17",
|
|
"tactic_ref": "x-mitre-tactic--c198a2b6-0c46-4b69-866a-1764782c2e07",
|
|
"technique_id": "T0049.003",
|
|
"technique_ref": "attack-pattern--e6ab2793-a059-4354-bb60-045afb019833",
|
|
"effect_refs": [
|
|
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--f85b9a71-b813-4590-8d1f-921d657b7741",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Flooding the Information Space: Utilize Spamoflauge",
|
|
"tactic_id": "TA17",
|
|
"tactic_ref": "x-mitre-tactic--c198a2b6-0c46-4b69-866a-1764782c2e07",
|
|
"technique_id": "T0049.004",
|
|
"technique_ref": "attack-pattern--4282febe-c8a6-46da-863c-f19081615d80",
|
|
"effect_refs": [
|
|
"attack-action--d908bc6c-d245-47ed-bcef-9b437b7588b8"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--def956b8-789c-4fe6-9d88-304413474bac",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Manipulate Platform Algorithm",
|
|
"tactic_id": "TA17",
|
|
"tactic_ref": "x-mitre-tactic--c198a2b6-0c46-4b69-866a-1764782c2e07",
|
|
"technique_id": "T0121",
|
|
"technique_ref": "attack-pattern--7e3a06ee-c109-4901-8720-69c46fe04a76",
|
|
"effect_refs": [
|
|
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--7a30ae19-4160-4c07-976a-1a25b5df68e4",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Organize Events",
|
|
"tactic_id": "TA10",
|
|
"technique_id": "T0057",
|
|
"effect_refs": [
|
|
"attack-operator--95c8cc1c-3000-417c-ae9f-6e0416a3deb7"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--53f73924-4101-414b-a791-25ea8b76a05a",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Encourage Attendance at Events",
|
|
"tactic_id": "TA10",
|
|
"tactic_ref": "x-mitre-tactic--3fa1ad18-ca09-40ed-be45-f210b9c07e0b",
|
|
"technique_id": "T0126",
|
|
"technique_ref": "attack-pattern--0a77a75a-09e7-44bf-927c-5e66a138862b",
|
|
"effect_refs": [
|
|
"attack-operator--95c8cc1c-3000-417c-ae9f-6e0416a3deb7"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Continue to Amplify",
|
|
"tactic_id": "TA11",
|
|
"tactic_ref": "x-mitre-tactic--dffcf337-d4d9-449b-aa9c-6a97a891c5a9",
|
|
"technique_id": "T0060",
|
|
"technique_ref": "attack-pattern--ad410829-2fb3-490b-b470-f5f859d45942",
|
|
"effect_refs": [
|
|
"attack-action--36909774-ba84-4574-b51e-97ec000f57b3",
|
|
"attack-action--62ca4f3e-e6a2-4b3d-821d-cfe705a7d39c"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--de2ecbcc-beab-4794-80d2-7384d7d78f7c",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Conceal People: Conceal Network Identity",
|
|
"tactic_id": "TA11",
|
|
"tactic_ref": "x-mitre-tactic--dffcf337-d4d9-449b-aa9c-6a97a891c5a9",
|
|
"technique_id": "T0128.002",
|
|
"technique_ref": "attack-pattern--20569b52-59da-4b87-9b04-a306f3c148ae"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--ddda90e1-ba8a-4147-88dd-6c6a72ebd2da",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Conceal Operational Activity",
|
|
"tactic_id": "TA11",
|
|
"tactic_ref": "x-mitre-tactic--dffcf337-d4d9-449b-aa9c-6a97a891c5a9",
|
|
"technique_id": "T0129",
|
|
"technique_ref": "attack-pattern--08db3527-8fc9-4bf6-bb49-e5a5249cc051"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--74a81798-f985-4f77-aeb7-07287a0bb306",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Conceal Infrastructure: Use Cryptocurrency",
|
|
"tactic_id": "TA11",
|
|
"tactic_ref": "x-mitre-tactic--dffcf337-d4d9-449b-aa9c-6a97a891c5a9",
|
|
"technique_id": "T0130.004",
|
|
"technique_ref": "attack-pattern--c80ef7af-3f51-4be5-b42a-19d29ab40a53",
|
|
"effect_refs": [
|
|
"attack-action--9fbadfc8-0b53-4014-a7a6-75d24821a24c",
|
|
"attack-action--3d2e0a02-6ae3-4c37-8a4b-08c8a8214cf3",
|
|
"attack-action--5a44def7-ece0-4976-b867-4edc84ef3339"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--b547e639-08ab-4d69-a1b1-8bbd4f955173",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Performance: People Focused",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0132.001",
|
|
"technique_ref": "attack-pattern--83b4e2db-265f-4f88-9b35-26df05c561e9"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--fd6ab4be-2208-4b3c-bbd6-8f262b4adde3",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Performance: Content Focused",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0132.002",
|
|
"technique_ref": "attack-pattern--5dc224b1-c69e-496d-91f7-e8ce4fd3f166"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--90ee7a03-e550-4126-95c1-70c2856aece0",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Performance: View Focused",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0132.003",
|
|
"technique_ref": "attack-pattern--c25ad637-cfa5-40c0-a23c-f741d8f4319e"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--b3660bc5-2ece-4823-9d4d-36d421a165e3",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Effectiveness: Behaviour Changes",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0133.001",
|
|
"technique_ref": "attack-pattern--a925711a-dbfb-41b1-bd81-70d41dbaa69c"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--9be12131-f231-45c0-80e5-8531c9f359b3",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Effectiveness: Awareness",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0133.003",
|
|
"technique_ref": "attack-pattern--55ecf54e-0e46-4ea1-86de-ab473c94705f"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--0cc3905a-a950-43fc-94df-760717e542aa",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Effectiveness: Knowledge",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0133.004",
|
|
"technique_ref": "attack-pattern--7fdc6b19-0d37-43a9-8144-f0c180a13ed0"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--9af0ebc0-f3db-47d8-8a29-a252501cecf5",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Effectiveness: Action/attitude",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0133.005",
|
|
"technique_ref": "attack-pattern--1ae9162c-ea88-4123-9c3f-b651eff4a77c"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--abb59dba-0d4d-4da1-bea8-8456e03daf6f",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Effectiveness Indicators (or KPIs): Message Reach",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0134.001",
|
|
"technique_ref": "attack-pattern--4c5e704a-acca-4bbd-8980-c915c0424ff8"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--46a31514-5431-41cb-8931-b37dcb4fe12b",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Measure Effectiveness Indicators (or KPIs): Social Media Engagement",
|
|
"tactic_id": "TA12",
|
|
"tactic_ref": "x-mitre-tactic--19886784-0e07-474f-803c-30c443e65347",
|
|
"technique_id": "T0134.002",
|
|
"technique_ref": "attack-pattern--4c5e704a-acca-4bbd-8980-c915c0424ff8"
|
|
},
|
|
{
|
|
"type": "attack-action",
|
|
"id": "attack-action--62ca4f3e-e6a2-4b3d-821d-cfe705a7d39c",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"name": "Attract Traditional Media",
|
|
"tactic_id": "TA09",
|
|
"tactic_ref": "x-mitre-tactic--4a9c3d11-801b-4ee9-a5bc-b5bc042a92f9",
|
|
"technique_id": "T0117",
|
|
"technique_ref": "attack-pattern--72df7e55-dc60-4a7e-9928-ed41ac0e1581"
|
|
},
|
|
{
|
|
"type": "attack-operator",
|
|
"id": "attack-operator--830ccd5d-a141-447e-a4d3-3167fd1ad6da",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"operator": "AND",
|
|
"effect_refs": [
|
|
"attack-action--78c9d43e-b4c1-4b59-b48e-a2c2dbbec649",
|
|
"attack-action--e94f2fa4-a946-4842-be9d-2ac8a55cd0ae",
|
|
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
|
|
"attack-action--863d942a-86f8-4159-8496-dc4a2b8cd8d7"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-operator",
|
|
"id": "attack-operator--4898cc35-1f35-4462-b37d-903ab8b3fb5e",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"operator": "AND",
|
|
"effect_refs": [
|
|
"attack-action--74b1a738-dfb3-4c79-8c47-3af53d7b3456",
|
|
"attack-action--424e66ae-2255-464d-aed7-baeb428a92ab",
|
|
"attack-action--992e1318-4e93-4e8f-85e4-a54076e2f6f9",
|
|
"attack-action--e872977a-4f65-4035-b283-78e23e46ffcb",
|
|
"attack-action--2b0d60d5-24ab-477e-a886-a060485e01cc",
|
|
"attack-action--bb649ef7-7fb6-410f-b2c8-219a68f6fcd6",
|
|
"attack-action--2554d139-71c2-40fd-9e03-f7c789e4c82c"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-operator",
|
|
"id": "attack-operator--efbf76cf-736d-478d-9cdf-3bbd84fba273",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"operator": "AND",
|
|
"effect_refs": [
|
|
"attack-action--78c9d43e-b4c1-4b59-b48e-a2c2dbbec649",
|
|
"attack-action--e94f2fa4-a946-4842-be9d-2ac8a55cd0ae",
|
|
"attack-action--def956b8-789c-4fe6-9d88-304413474bac",
|
|
"attack-action--1025a1a0-b803-4e63-a68c-d35df57bdc2c"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-operator",
|
|
"id": "attack-operator--95c8cc1c-3000-417c-ae9f-6e0416a3deb7",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"operator": "AND",
|
|
"effect_refs": [
|
|
"attack-action--b3660bc5-2ece-4823-9d4d-36d421a165e3"
|
|
]
|
|
},
|
|
{
|
|
"type": "attack-operator",
|
|
"id": "attack-operator--f36b330d-fe85-4dd2-8146-7e8f20f4cab3",
|
|
"spec_version": "2.1",
|
|
"created": "2025-04-30T03:24:06.429Z",
|
|
"modified": "2025-04-30T03:24:06.429Z",
|
|
"extensions": {
|
|
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
|
|
"extension_type": "new-sdo"
|
|
}
|
|
},
|
|
"operator": "AND",
|
|
"effect_refs": [
|
|
"attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
|
|
"attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
|
|
"attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
|
|
"attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
|
|
"attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
|
|
"attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
|
|
"attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
|
|
"attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963"
|
|
]
|
|
}
|
|
]
|
|
} |