ceios/database/IRA 2016 FaceMusic Malware/FaceMusic Malware.json
2024-09-16 15:58:15 +09:30

1524 строки
54 KiB
JSON

{
"type": "bundle",
"id": "bundle--5364dad0-9d94-4f48-a900-989504a1f632",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.497Z",
"modified": "2024-07-09T03:57:54.497Z",
"objects": [
{
"type": "extension-definition",
"id": "extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4",
"spec_version": "2.1",
"created": "2022-08-02T19:34:35.143Z",
"modified": "2022-08-02T19:34:35.143Z",
"name": "Attack Flow",
"description": "Extends STIX 2.1 with features to create Attack Flows.",
"created_by_ref": "identity--fb9c968a-745b-4ade-9b25-c324172197f4",
"schema": "https://center-for-threat-informed-defense.github.io/attack-flow/stix/attack-flow-schema-2.0.0.json",
"version": "2.0.0",
"extension_types": [
"new-sdo"
],
"external_references": [
{
"source_name": "Documentation",
"description": "Documentation for Attack Flow",
"url": "https://center-for-threat-informed-defense.github.io/attack-flow"
},
{
"source_name": "GitHub",
"description": "Source code repository for Attack Flow",
"url": "https://github.com/center-for-threat-informed-defense/attack-flow"
}
]
},
{
"type": "identity",
"id": "identity--fb9c968a-745b-4ade-9b25-c324172197f4",
"spec_version": "2.1",
"created": "2022-08-02T19:34:35.143Z",
"modified": "2022-08-02T19:34:35.143Z",
"created_by_ref": "identity--fb9c968a-745b-4ade-9b25-c324172197f4",
"name": "MITRE Engenuity Center for Threat-Informed Defense",
"identity_class": "organization"
},
{
"type": "attack-flow",
"id": "attack-flow--aa13f359-e745-41a0-b200-bf30de63253d",
"spec_version": "2.1",
"created": "2024-06-24T15:08:11.074Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"created_by_ref": "identity--42c0e250-e2f2-452f-ac42-afb07c385134",
"start_refs": [
"attack-action--bf852db6-da70-48c6-a641-f0579cf3da07",
"attack-action--c7eeeec4-d878-4909-8dae-e1ff6079c37e",
"attack-action--4a928ea6-8165-4a99-8f9f-72c7ea3247b8",
"attack-action--a6df90ee-7c8a-4720-8f88-0e5ddaeeee92",
"attack-action--45837119-ac91-4811-936d-ab3cf8608a46",
"attack-action--d56e2d8e-287a-4b2e-9858-2754f9821c04",
"attack-action--97c6550f-8b32-4e20-b854-09a515267cd1",
"attack-action--88ace0b4-cf13-4588-abba-121d43115451",
"attack-action--9eb4c7e4-9606-4c6f-8c40-374d828dfa2a",
"attack-action--863d942a-86f8-4159-8496-dc4a2b8cd8d7",
"attack-action--1025a1a0-b803-4e63-a68c-d35df57bdc2c",
"attack-action--f85b9a71-b813-4590-8d1f-921d657b7741",
"attack-action--74a81798-f985-4f77-aeb7-07287a0bb306",
"attack-action--b547e639-08ab-4d69-a1b1-8bbd4f955173",
"attack-action--fd6ab4be-2208-4b3c-bbd6-8f262b4adde3",
"attack-action--90ee7a03-e550-4126-95c1-70c2856aece0",
"attack-action--b3660bc5-2ece-4823-9d4d-36d421a165e3",
"attack-action--9be12131-f231-45c0-80e5-8531c9f359b3",
"attack-action--0cc3905a-a950-43fc-94df-760717e542aa",
"attack-action--9af0ebc0-f3db-47d8-8a29-a252501cecf5",
"attack-action--abb59dba-0d4d-4da1-bea8-8456e03daf6f",
"attack-action--46a31514-5431-41cb-8931-b37dcb4fe12b",
"attack-action--62ca4f3e-e6a2-4b3d-821d-cfe705a7d39c"
],
"name": "FaceMusic Malware",
"scope": "incident"
},
{
"type": "identity",
"id": "identity--42c0e250-e2f2-452f-ac42-afb07c385134",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.497Z",
"modified": "2024-07-09T03:57:54.497Z",
"name": "Jim Morris"
},
{
"type": "attack-action",
"id": "attack-action--bf852db6-da70-48c6-a641-f0579cf3da07",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Search Open Websites/Domains: Social Media",
"tactic_id": "TA0043",
"tactic_ref": "x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592",
"technique_id": "T1593.001",
"technique_ref": "attack-pattern--bbe5b322-e2af-4a5e-9625-a4e62bf84ed3",
"effect_refs": [
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc",
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
"attack-action--49ba01af-094a-4d3d-955b-fe8e243fb416",
"attack-action--670d7f28-16f1-408f-b2a6-084d6a45df59"
]
},
{
"type": "attack-action",
"id": "attack-action--5a44def7-ece0-4976-b867-4edc84ef3339",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Acquire Infrastructure: Domains",
"tactic_id": "TA0042",
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
"technique_id": "T1583.001",
"technique_ref": "attack-pattern--40f5caa0-4cb7-4117-89fc-d421bb493df3",
"effect_refs": [
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c",
"attack-action--58f5ca11-87ac-4a47-b87c-03a8986065ad"
]
},
{
"type": "attack-action",
"id": "attack-action--3d2e0a02-6ae3-4c37-8a4b-08c8a8214cf3",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Acquire Infrastructure: Server",
"tactic_id": "TA0042",
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
"technique_id": "T1583.004",
"technique_ref": "attack-pattern--60c4b628-4807-4b0b-bbf5-fdac8643c337",
"effect_refs": [
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c",
"attack-action--58f5ca11-87ac-4a47-b87c-03a8986065ad"
]
},
{
"type": "attack-action",
"id": "attack-action--9fbadfc8-0b53-4014-a7a6-75d24821a24c",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Acquire Infrastructure: Virtual Private Server",
"tactic_id": "TA0042",
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
"technique_id": "T1583.003",
"technique_ref": "attack-pattern--79da0971-3147-4af6-a4f5-e8cd447cd795",
"effect_refs": [
"attack-action--de2ecbcc-beab-4794-80d2-7384d7d78f7c",
"attack-action--ddda90e1-ba8a-4147-88dd-6c6a72ebd2da",
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c"
]
},
{
"type": "attack-action",
"id": "attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Establish Accounts: Social Media Accounts",
"tactic_id": "TA0042",
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
"technique_id": "T1585.001",
"technique_ref": "attack-pattern--b1ccd744-3f78-4a0e-9bb2-2002057f7928",
"effect_refs": [
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc"
]
},
{
"type": "attack-action",
"id": "attack-action--c7eeeec4-d878-4909-8dae-e1ff6079c37e",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Develop Capabilities: Malware",
"tactic_id": "TA0042",
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
"technique_id": "T1587.001",
"technique_ref": "attack-pattern--212306d8-efa4-44c9-8c2d-ed3d2e224aa0",
"effect_refs": [
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c"
]
},
{
"type": "attack-action",
"id": "attack-action--b21d03be-19e7-456c-b4a4-18f503bdf91b",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Compromise Accounts: Social Media Accounts",
"tactic_id": "TA0042",
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
"technique_id": "T1586.001",
"technique_ref": "attack-pattern--274770e0-2612-4ccf-a678-ef8e7bad365d",
"effect_refs": [
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc"
]
},
{
"type": "attack-action",
"id": "attack-action--724af0b4-e1e4-4eb8-b27c-9a82e2f00373",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Compromise Infrastructure: Botnet",
"tactic_id": "TA0042",
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
"technique_id": "T1584.005",
"technique_ref": "attack-pattern--810d8072-afb6-4a56-9ee7-86379ac4a6f3",
"effect_refs": [
"attack-action--b21d03be-19e7-456c-b4a4-18f503bdf91b",
"attack-action--36909774-ba84-4574-b51e-97ec000f57b3",
"attack-action--6a64e24c-9664-4e29-ae9e-2c8ef9d11ddd",
"attack-action--d908bc6c-d245-47ed-bcef-9b437b7588b8"
]
},
{
"type": "attack-action",
"id": "attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Stage Capabilities: Upload Malware",
"tactic_id": "TA0042",
"tactic_ref": "x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400",
"technique_id": "T1608.001",
"technique_ref": "attack-pattern--3ee16395-03f0-4690-a32e-69ce9ada0f9e",
"effect_refs": [
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc"
]
},
{
"type": "attack-action",
"id": "attack-action--36909774-ba84-4574-b51e-97ec000f57b3",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Scheduled Task/Job",
"tactic_id": "TA0002",
"tactic_ref": "x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5",
"technique_id": "T1053",
"technique_ref": "attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9",
"effect_refs": [
"attack-action--a128830e-4f25-486c-a974-851f20148f1f",
"attack-action--34740e5a-711e-41c0-9bf9-9eebd109c2f5",
"attack-action--78c9d43e-b4c1-4b59-b48e-a2c2dbbec649",
"attack-action--e94f2fa4-a946-4842-be9d-2ac8a55cd0ae",
"attack-action--def956b8-789c-4fe6-9d88-304413474bac"
]
},
{
"type": "attack-action",
"id": "attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Drive-by Compromise",
"tactic_id": "TA0001",
"tactic_ref": "x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca",
"technique_id": "T1189",
"technique_ref": "attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6",
"effect_refs": [
"attack-action--724af0b4-e1e4-4eb8-b27c-9a82e2f00373",
"attack-action--34740e5a-711e-41c0-9bf9-9eebd109c2f5"
]
},
{
"type": "attack-action",
"id": "attack-action--34740e5a-711e-41c0-9bf9-9eebd109c2f5",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Browser Extensions",
"tactic_id": "TA0003",
"tactic_ref": "x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92",
"technique_id": "T1176",
"technique_ref": "attack-pattern--389735f1-f21c-4208-b8f0-f8031e7169b8",
"effect_refs": [
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
]
},
{
"type": "attack-action",
"id": "attack-action--a128830e-4f25-486c-a974-851f20148f1f",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Scheduled Task/Job",
"tactic_id": "TA0003",
"tactic_ref": "x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92",
"technique_id": "T1053",
"technique_ref": "attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9",
"effect_refs": [
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
]
},
{
"type": "attack-action",
"id": "attack-action--49ba01af-094a-4d3d-955b-fe8e243fb416",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Determine Target Audiences",
"tactic_id": "TA01",
"technique_id": "T0073",
"effect_refs": [
"attack-action--be77482f-6597-465e-9a51-0b594b16371a",
"attack-action--b67f2028-8d34-41a8-b331-2d7bc8be2de8",
"attack-action--18b59441-bdf3-447b-a006-d45e15276c9b",
"attack-action--d832343b-37a7-4132-a3f4-cddc543ffad4",
"attack-action--dd155896-be40-4941-9a35-aca3d93495f0",
"attack-action--b87ca9f7-484e-4b1e-95db-c0ddfd74d197",
"attack-action--def625c4-8006-42de-ad4d-e2b9408e6e9f",
"attack-action--65017fb0-cba7-4ba9-81f9-aa1d50dd8b0c",
"attack-action--feca4f6b-361d-4ee8-9453-c286d15f68f5",
"attack-action--424e66ae-2255-464d-aed7-baeb428a92ab",
"attack-action--992e1318-4e93-4e8f-85e4-a54076e2f6f9",
"attack-action--e872977a-4f65-4035-b283-78e23e46ffcb",
"attack-action--2b0d60d5-24ab-477e-a886-a060485e01cc",
"attack-action--bb649ef7-7fb6-410f-b2c8-219a68f6fcd6",
"attack-action--2554d139-71c2-40fd-9e03-f7c789e4c82c",
"attack-action--74b1a738-dfb3-4c79-8c47-3af53d7b3456",
"attack-action--e91f859f-bffe-4a76-a7d6-ed8bc34d2545"
]
},
{
"type": "attack-action",
"id": "attack-action--b80fa8a2-9588-4fcc-8100-36b377bb9e00",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Divide",
"tactic_id": "TA02",
"technique_id": "T0079"
},
{
"type": "attack-action",
"id": "attack-action--b87ca9f7-484e-4b1e-95db-c0ddfd74d197",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Map Target Audience Information Environment: Monitor Social Media Analytics",
"tactic_id": "TA13",
"technique_id": "T0080.001"
},
{
"type": "attack-action",
"id": "attack-action--d832343b-37a7-4132-a3f4-cddc543ffad4",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Segment Audiences: Geographic Segmentation",
"tactic_id": "TA13",
"technique_id": "T0072.001"
},
{
"type": "attack-action",
"id": "attack-action--4a928ea6-8165-4a99-8f9f-72c7ea3247b8",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Determine Strategic Ends",
"tactic_id": "TA01",
"technique_id": "T0074",
"effect_refs": [
"attack-action--49ba01af-094a-4d3d-955b-fe8e243fb416",
"attack-action--637f59c5-7b0a-48ad-9487-103c3120e287",
"attack-action--b80fa8a2-9588-4fcc-8100-36b377bb9e00",
"attack-action--9ca8275f-d019-448a-8289-045a233e62a4"
]
},
{
"type": "attack-action",
"id": "attack-action--74b1a738-dfb3-4c79-8c47-3af53d7b3456",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Identify Social and Technical Vulnerabilities: Find Echo Chambers",
"tactic_id": "TA13",
"technique_id": "T0081.001"
},
{
"type": "attack-action",
"id": "attack-action--637f59c5-7b0a-48ad-9487-103c3120e287",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Dismiss: Discredit Credible Sources",
"tactic_id": "TA02",
"technique_id": "T007.001"
},
{
"type": "attack-action",
"id": "attack-action--9ca8275f-d019-448a-8289-045a233e62a4",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Distract",
"tactic_id": "TA02",
"technique_id": "T0077"
},
{
"type": "attack-action",
"id": "attack-action--78c9d43e-b4c1-4b59-b48e-a2c2dbbec649",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Use Search Engine Optimization",
"tactic_id": "TA08",
"technique_id": "T0046",
"effect_refs": [
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
]
},
{
"type": "attack-action",
"id": "attack-action--4eb0fa83-73af-4236-af00-cf95bea4b0ef",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Leverage Existing Narratives",
"tactic_id": "TA14",
"technique_id": "T0003",
"effect_refs": [
"attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963",
"attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
"attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
"attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
"attack-action--a109f79c-3d7d-4d55-87e0-275b2ea73fe3",
"attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
"attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
"attack-action--6faf9825-64af-49a1-9cd8-2c0173dd5129",
"attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
"attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
"attack-operator--830ccd5d-a141-447e-a4d3-3167fd1ad6da"
]
},
{
"type": "attack-action",
"id": "attack-action--670d7f28-16f1-408f-b2a6-084d6a45df59",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Infiltrate Existing Networks: Identify Susceptible Targets in Networks",
"tactic_id": "TA15",
"technique_id": "T0094.001",
"effect_refs": [
"attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0"
]
},
{
"type": "attack-action",
"id": "attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Leverage Content Farms: Create Content Farms",
"tactic_id": "TA15",
"technique_id": "T0096.001"
},
{
"type": "attack-action",
"id": "attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Reuse Existing Content: Use Copypasta",
"tactic_id": "TA06",
"technique_id": "T0084.001"
},
{
"type": "attack-action",
"id": "attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Create Inauthentic Social Media Pages and Groups",
"tactic_id": "TA15",
"technique_id": "T0007",
"effect_refs": [
"attack-action--53f73924-4101-414b-a791-25ea8b76a05a",
"attack-action--7a30ae19-4160-4c07-976a-1a25b5df68e4"
]
},
{
"type": "attack-action",
"id": "attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Generate Information Pollution",
"tactic_id": "TA06",
"technique_id": "T0019"
},
{
"type": "attack-action",
"id": "attack-action--a6df90ee-7c8a-4720-8f88-0e5ddaeeee92",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Recruit Malign Actors: Enlist Troll Accounts",
"tactic_id": "TA15",
"technique_id": "T0091.003",
"effect_refs": [
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
"attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0"
]
},
{
"type": "attack-action",
"id": "attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Develop Video-based Content",
"tactic_id": "TA06",
"technique_id": "T0087"
},
{
"type": "attack-action",
"id": "attack-action--be77482f-6597-465e-9a51-0b594b16371a",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Segment Audiences: Demographic Segmentation",
"tactic_id": "TA13",
"technique_id": "T0072.002"
},
{
"type": "attack-action",
"id": "attack-action--b67f2028-8d34-41a8-b331-2d7bc8be2de8",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Segment Audiences: Economic Segmentation",
"tactic_id": "TA13",
"technique_id": "T0072.003"
},
{
"type": "attack-action",
"id": "attack-action--18b59441-bdf3-447b-a006-d45e15276c9b",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Segment Audiences: Psychographic Segmentation",
"tactic_id": "TA13",
"technique_id": "T0072.004"
},
{
"type": "attack-action",
"id": "attack-action--dd155896-be40-4941-9a35-aca3d93495f0",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Segment Audiences: Political Segmentation",
"tactic_id": "TA13",
"technique_id": "T0072.005"
},
{
"type": "attack-action",
"id": "attack-action--def625c4-8006-42de-ad4d-e2b9408e6e9f",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Map Target Audience Information Environment: Evaluate Media Surveys",
"tactic_id": "TA13",
"technique_id": "T0080.002"
},
{
"type": "attack-action",
"id": "attack-action--65017fb0-cba7-4ba9-81f9-aa1d50dd8b0c",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Map Target Audience Information Environment: Identify Trending Topics/Hashtags",
"tactic_id": "TA13",
"technique_id": "T0080.003"
},
{
"type": "attack-action",
"id": "attack-action--feca4f6b-361d-4ee8-9453-c286d15f68f5",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Map Target Audience Information Environment: Conduct Web Traffic Analysis",
"tactic_id": "TA13",
"technique_id": "T0080.004"
},
{
"type": "attack-action",
"id": "attack-action--424e66ae-2255-464d-aed7-baeb428a92ab",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Identify Social and Technical Vulnerabilities: Identify Existing Prejudices",
"tactic_id": "TA13",
"technique_id": "T0081.003"
},
{
"type": "attack-action",
"id": "attack-action--992e1318-4e93-4e8f-85e4-a54076e2f6f9",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Identify Social and Technical Vulnerabilities: Identify Existing Fissures",
"tactic_id": "TA13",
"technique_id": "T0081.004"
},
{
"type": "attack-action",
"id": "attack-action--e872977a-4f65-4035-b283-78e23e46ffcb",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Identify Social and Technical Vulnerabilities: Identify Existing Conspiracy Narratives/Suspicions",
"tactic_id": "TA13",
"technique_id": "T0081.005"
},
{
"type": "attack-action",
"id": "attack-action--2b0d60d5-24ab-477e-a886-a060485e01cc",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Identify Social and Technical Vulnerabilities: Identify Wedge Issues",
"tactic_id": "TA13",
"technique_id": "T0081.006"
},
{
"type": "attack-action",
"id": "attack-action--bb649ef7-7fb6-410f-b2c8-219a68f6fcd6",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Identify Social and Technical Vulnerabilities: Identify Target Audience Adversaries",
"tactic_id": "TA13",
"technique_id": "T0081.007"
},
{
"type": "attack-action",
"id": "attack-action--2554d139-71c2-40fd-9e03-f7c789e4c82c",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Identify Social and Technical Vulnerabilities: Identify Media System Vulnerabilities",
"tactic_id": "TA13",
"technique_id": "T0081.008"
},
{
"type": "attack-action",
"id": "attack-action--8578d49e-3b36-4ae8-b370-8999d1f27ee8",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Respond to Breaking News Event or Active Crisis",
"tactic_id": "TA14",
"technique_id": "T0068",
"effect_refs": [
"attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
"attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963",
"attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
"attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
"attack-action--a109f79c-3d7d-4d55-87e0-275b2ea73fe3",
"attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
"attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
"attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
"attack-action--6faf9825-64af-49a1-9cd8-2c0173dd5129",
"attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
"attack-operator--830ccd5d-a141-447e-a4d3-3167fd1ad6da"
]
},
{
"type": "attack-action",
"id": "attack-action--9cdc6539-f4f9-40fd-944c-2a0fec470859",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Integrate Target Audience Vulnerabilities into Narrative",
"tactic_id": "TA14",
"technique_id": "T0083",
"effect_refs": [
"attack-action--a691b9b9-0fbd-4987-ab37-850ef7c58963",
"attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
"attack-action--e24cd5e0-993b-40cf-9fad-e371571c651f",
"attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
"attack-action--a109f79c-3d7d-4d55-87e0-275b2ea73fe3",
"attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
"attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
"attack-action--c2fd9e6f-4f1b-445a-a235-f7ee84441890",
"attack-action--6faf9825-64af-49a1-9cd8-2c0173dd5129",
"attack-action--4dabab96-0eae-4218-889d-1c7a95f85840",
"attack-operator--830ccd5d-a141-447e-a4d3-3167fd1ad6da"
]
},
{
"type": "attack-action",
"id": "attack-action--ce160789-0592-43f9-9e9c-716f555a137f",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Distort Facts: Reframe Context",
"tactic_id": "TA06",
"technique_id": "T0023.001"
},
{
"type": "attack-action",
"id": "attack-action--c35c5c7a-f7d8-4a05-b232-59dbf09da3bb",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Reuse Existing Content: Plagiarize Content",
"tactic_id": "TA06",
"technique_id": "T0084.002"
},
{
"type": "attack-action",
"id": "attack-action--a109f79c-3d7d-4d55-87e0-275b2ea73fe3",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Develop Text-based Content: Develop False or Altered Documents",
"tactic_id": "TA06",
"technique_id": "T0085.002"
},
{
"type": "attack-action",
"id": "attack-action--e9c776c5-6913-4258-99c2-cad3787457c5",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Develop Text-based Content: Develop Inauthentic News Articles",
"tactic_id": "TA06",
"technique_id": "T0085.003"
},
{
"type": "attack-action",
"id": "attack-action--e3a69dde-fc53-4a47-bf6f-e1c20e87f858",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Develop Image-based Content: Develop Memes",
"tactic_id": "TA06",
"technique_id": "T0086.001"
},
{
"type": "attack-action",
"id": "attack-action--6faf9825-64af-49a1-9cd8-2c0173dd5129",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Obtain Private Documents: Obtain Authentic Documents",
"tactic_id": "TA06",
"technique_id": "T0089.001"
},
{
"type": "attack-action",
"id": "attack-action--6a64e24c-9664-4e29-ae9e-2c8ef9d11ddd",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Cultivate Ignorant Agents",
"tactic_id": "TA15",
"technique_id": "T0010"
},
{
"type": "attack-action",
"id": "attack-action--58f5ca11-87ac-4a47-b87c-03a8986065ad",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Create Inauthentic Websites",
"tactic_id": "TA15",
"technique_id": "T0013",
"effect_refs": [
"attack-action--6fc41abf-e6bf-4327-9a34-3cc2c8e4a76c"
]
},
{
"type": "attack-action",
"id": "attack-action--45837119-ac91-4811-936d-ab3cf8608a46",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Create Inauthentic Accounts: Create Bot Accounts",
"tactic_id": "TA15",
"technique_id": "T0090.003"
},
{
"type": "attack-action",
"id": "attack-action--d56e2d8e-287a-4b2e-9858-2754f9821c04",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Create Inauthentic Accounts: Create Sockpuppet Accounts",
"tactic_id": "TA15",
"technique_id": "T0090.004",
"effect_refs": [
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
"attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0"
]
},
{
"type": "attack-action",
"id": "attack-action--97c6550f-8b32-4e20-b854-09a515267cd1",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Build Network: Create Community of Sub-group",
"tactic_id": "TA15",
"technique_id": "T0092.003",
"effect_refs": [
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2",
"attack-action--38e6b9f6-c3b9-4c5d-9c70-e811148960a0"
]
},
{
"type": "attack-action",
"id": "attack-action--88ace0b4-cf13-4588-abba-121d43115451",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Acquire/Recruit Network: Fund Proxies",
"tactic_id": "TA15",
"technique_id": "T0093.001"
},
{
"type": "attack-action",
"id": "attack-action--d908bc6c-d245-47ed-bcef-9b437b7588b8",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Acquire/Recruit Network: Acquire Botnets",
"tactic_id": "TA15",
"technique_id": "T0093.002",
"effect_refs": [
"attack-action--36909774-ba84-4574-b51e-97ec000f57b3",
"attack-action--78c9d43e-b4c1-4b59-b48e-a2c2dbbec649",
"attack-action--e94f2fa4-a946-4842-be9d-2ac8a55cd0ae",
"attack-action--def956b8-789c-4fe6-9d88-304413474bac"
]
},
{
"type": "attack-action",
"id": "attack-action--9eb4c7e4-9606-4c6f-8c40-374d828dfa2a",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Deliver Ads: Social Media",
"tactic_id": "TA09",
"technique_id": "T0114.001",
"effect_refs": [
"attack-action--035271b6-c2d3-4d0a-8afa-84b89c3ca6bc"
]
},
{
"type": "attack-action",
"id": "attack-action--863d942a-86f8-4159-8496-dc4a2b8cd8d7",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Post Content: Share Memes",
"tactic_id": "TA09",
"technique_id": "T0115.001"
},
{
"type": "attack-action",
"id": "attack-action--1025a1a0-b803-4e63-a68c-d35df57bdc2c",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Flooding the Information Space: Trolls Amplify and Manipulate",
"tactic_id": "TA17",
"technique_id": "T0049.001"
},
{
"type": "attack-action",
"id": "attack-action--e94f2fa4-a946-4842-be9d-2ac8a55cd0ae",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Flooding the Information Space: Bots Amplify via Automated Forwarding and Reposting",
"tactic_id": "TA17",
"technique_id": "T0049.003",
"effect_refs": [
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
]
},
{
"type": "attack-action",
"id": "attack-action--f85b9a71-b813-4590-8d1f-921d657b7741",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Flooding the Information Space: Utilize Spamoflauge",
"tactic_id": "TA17",
"technique_id": "T0049.004"
},
{
"type": "attack-action",
"id": "attack-action--def956b8-789c-4fe6-9d88-304413474bac",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Manipulate Platform Algorithm",
"tactic_id": "TA17",
"technique_id": "T0121",
"effect_refs": [
"attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a"
]
},
{
"type": "attack-action",
"id": "attack-action--7a30ae19-4160-4c07-976a-1a25b5df68e4",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Organize Events",
"tactic_id": "TA10",
"technique_id": "T0057"
},
{
"type": "attack-action",
"id": "attack-action--53f73924-4101-414b-a791-25ea8b76a05a",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Encourage Attendance at Events",
"tactic_id": "TA10",
"technique_id": "T0126"
},
{
"type": "attack-action",
"id": "attack-action--e8b88f99-61ea-4c2e-96bb-1589e145e46a",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Continue to Amplify",
"tactic_id": "TA11",
"technique_id": "T0060",
"effect_refs": [
"attack-action--36909774-ba84-4574-b51e-97ec000f57b3"
]
},
{
"type": "attack-action",
"id": "attack-action--de2ecbcc-beab-4794-80d2-7384d7d78f7c",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Conceal People: Conceal Network Identity",
"tactic_id": "TA11",
"technique_id": "T0128.002"
},
{
"type": "attack-action",
"id": "attack-action--ddda90e1-ba8a-4147-88dd-6c6a72ebd2da",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Conceal Operational Activity",
"tactic_id": "TA11",
"technique_id": "T0129"
},
{
"type": "attack-action",
"id": "attack-action--74a81798-f985-4f77-aeb7-07287a0bb306",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Conceal Infrastructure: Use Cryptocurrency",
"tactic_id": "TA11",
"technique_id": "T0130.004",
"effect_refs": [
"attack-action--9fbadfc8-0b53-4014-a7a6-75d24821a24c",
"attack-action--3d2e0a02-6ae3-4c37-8a4b-08c8a8214cf3",
"attack-action--5a44def7-ece0-4976-b867-4edc84ef3339"
]
},
{
"type": "attack-action",
"id": "attack-action--b547e639-08ab-4d69-a1b1-8bbd4f955173",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Performance: People Focused",
"tactic_id": "TA12",
"technique_id": "T0132.001"
},
{
"type": "attack-action",
"id": "attack-action--fd6ab4be-2208-4b3c-bbd6-8f262b4adde3",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Performance: Content Focused",
"tactic_id": "TA12",
"technique_id": "T0132.002"
},
{
"type": "attack-action",
"id": "attack-action--90ee7a03-e550-4126-95c1-70c2856aece0",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Performance: View Focused",
"tactic_id": "TA12",
"technique_id": "T0132.003"
},
{
"type": "attack-action",
"id": "attack-action--b3660bc5-2ece-4823-9d4d-36d421a165e3",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Effectiveness: Behaviour Changes",
"tactic_id": "TA12",
"technique_id": "T0133.001"
},
{
"type": "attack-action",
"id": "attack-action--9be12131-f231-45c0-80e5-8531c9f359b3",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Effectiveness: Awareness",
"tactic_id": "TA12",
"technique_id": "T0133.003"
},
{
"type": "attack-action",
"id": "attack-action--0cc3905a-a950-43fc-94df-760717e542aa",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Effectiveness: Knowledge",
"tactic_id": "TA12",
"technique_id": "T0133.004"
},
{
"type": "attack-action",
"id": "attack-action--9af0ebc0-f3db-47d8-8a29-a252501cecf5",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Effectiveness: Action/attitude",
"tactic_id": "TA12",
"technique_id": "T0133.005"
},
{
"type": "attack-action",
"id": "attack-action--abb59dba-0d4d-4da1-bea8-8456e03daf6f",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Effectiveness Indicators (or KPIs): Message Reach",
"tactic_id": "TA12",
"technique_id": "T0134.001"
},
{
"type": "attack-action",
"id": "attack-action--46a31514-5431-41cb-8931-b37dcb4fe12b",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Measure Effectiveness Indicators (or KPIs): Social Media Engagement",
"tactic_id": "TA12",
"technique_id": "T0134.002"
},
{
"type": "attack-action",
"id": "attack-action--62ca4f3e-e6a2-4b3d-821d-cfe705a7d39c",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Attract Traditional Media",
"tactic_id": "TA09",
"technique_id": "T0117"
},
{
"type": "attack-action",
"id": "attack-action--e91f859f-bffe-4a76-a7d6-ed8bc34d2545",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"name": "Determine Target Audiences",
"tactic_id": "TA01",
"technique_id": "T0073",
"effect_refs": [
"attack-action--9cdc6539-f4f9-40fd-944c-2a0fec470859",
"attack-action--8578d49e-3b36-4ae8-b370-8999d1f27ee8",
"attack-action--4eb0fa83-73af-4236-af00-cf95bea4b0ef"
]
},
{
"type": "attack-operator",
"id": "attack-operator--830ccd5d-a141-447e-a4d3-3167fd1ad6da",
"spec_version": "2.1",
"created": "2024-07-09T03:57:54.498Z",
"modified": "2024-07-09T03:57:54.498Z",
"extensions": {
"extension-definition--fb9c968a-745b-4ade-9b25-c324172197f4": {
"extension_type": "new-sdo"
}
},
"operator": "AND",
"effect_refs": [
"attack-action--78c9d43e-b4c1-4b59-b48e-a2c2dbbec649",
"attack-action--e94f2fa4-a946-4842-be9d-2ac8a55cd0ae",
"attack-action--aa3541b8-5e25-4743-a9f7-52fbbfc465e2"
]
}
]
}