{
"type": "bundle",
"id": "bundle--28bb813b-1700-4cc4-aa00-c9a04fcf7751",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--49883dc9-9ea0-41aa-a454-922245e4b1e3",
"created_by_ref": "identity--f1a0f560-2d9e-4c5d-bf47-7e96e805de82",
"created": "2024-11-22T16:43:58.136246Z",
"modified": "2024-11-22T16:43:58.136246Z",
"name": "Romantic Suitor Persona",
"description": "A person with a romantic suitor persona presents themselves as seeking a romantic or physical connection with another person.
While presenting as seeking a romantic or physical connection is not an indication of inauthentic behaviour, threat actors can use dating apps, social media channels or dating websites to fabricate romantic suitors to lure targets they can blackmail, extract information from, deceive or trick into giving them money (T0143.002: Fabricated Persona, T0097.109: Romantic Suitor Persona).
Honeypotting in espionage and Big Butchering in scamming are commonly associated with romantic suitor personas.
Associated Techniques and Sub-techniques
T0151.017: Dating Platform: Analysts can use this sub-technique for tagging cases where an account has been identified as using a dating platform.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "establish-legitimacy"
}
],
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://github.com/DISARMFoundation/DISARMframeworks/blob/main/generated_pages/techniques/T0097.109.md",
"external_id": "T0097.109"
}
],
"object_marking_refs": [
"marking-definition--f79f25d2-8b96-4580-b169-eb7b613a7c31"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "2.1"
}
]
}