DISARMframeworks/generated_pages/tactics/TA15.md

Tactic TA15: Establish Assets

• Summary: Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organisations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. Establishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination.

This Tactic was previously called Establish Social Assets.

• Belongs to phase: P02

Tasks
TK0010 Present Persona
TK0011 Recruit contractors
TK0012 Recruit partisans
TK0013 find influencers
TK0014 Network building
TK0015 Network infiltration
TK0016 identify targets - susceptible audience members in networks
TK0033 OPSEC for TA15
TK0034 OPSEC for TA15

Techniques
T0010 Cultivate Ignorant Agents
T0014 Prepare Fundraising Campaigns
T0014.001 Raise Funds from Malign Actors
T0014.002 Raise Funds from Ignorant Agents
T0065 Prepare Physical Broadcast Capabilities
T0091 Recruit Malign Actors
T0091.001 Recruit Contractors
T0091.002 Recruit Partisans
T0091.003 Enlist Troll Accounts
T0092 Build Network
T0092.001 Create Organisations
T0092.002 Use Follow Trains
T0092.003 Create Community or Sub-Group
T0093 Acquire/Recruit Network
T0093.001 Fund Proxies
T0093.002 Acquire Botnets
T0094 Infiltrate Existing Networks
T0094.001 Identify Susceptible Targets in Networks
T0094.002 Utilise Butterfly Attacks
T0095 Develop Owned Media Assets
T0096 Leverage Content Farms
T0096.001 Create Content Farms
T0096.002 Outsource Content Creation to External Organisations
T0113 Employ Commercial Analytic Firms
T0145 Establish Account Imagery
T0145.001 Copy Account Imagery
T0145.002 AI-Generated Account Imagery
T0145.003 Animal Account Imagery
T0145.004 Scenery Account Imagery
T0145.005 Illustrated Character Account Imagery
T0145.006 Attractive Person Account Imagery
T0145.007 Stock Image Account Imagery
T0146 Account Asset
T0146.001 Free Account Asset
T0146.002 Paid Account Asset
T0146.003 Verified Account Asset
T0146.004 Administrator Account Asset
T0146.005 Lookalike Account ID
T0146.006 Open Access Platform
T0146.007 Automated Account Asset
T0147 Software Asset
T0147.001 Game Asset
T0147.002 Game Mod Asset
T0147.003 Malware Asset
T0147.004 Mobile App Asset
T0148 Financial Instrument
T0148.001 Online Banking Platform
T0148.002 Bank Account Asset
T0148.003 Payment Processing Platform
T0148.004 Payment Processing Capability
T0148.005 Subscription Processing Capability
T0148.006 Crowdfunding Platform
T0148.007 eCommerce Platform
T0148.008 Cryptocurrency Exchange Platform
T0148.009 Cryptocurrency Wallet
T0149 Online Infrastructure
T0149.001 Domain Asset
T0149.002 Email Domain Asset
T0149.003 Lookalike Domain
T0149.004 Redirecting Domain Asset
T0149.005 Server Asset
T0149.006 IP Address Asset
T0149.007 VPN Asset
T0149.008 Proxy IP Address Asset
T0149.009 Internet Connected Physical Asset
T0150 Asset Origin
T0150.001 Newly Created Asset
T0150.002 Dormant Asset
T0150.003 Pre-Existing Asset
T0150.004 Repurposed Asset
T0150.005 Compromised Asset
T0150.006 Purchased Asset
T0150.007 Rented Asset
T0150.008 Bulk Created Asset

Counters	Response types
C00036 Infiltrate the in-group to discredit leaders (divide)	D02
C00040 third party verification for people	D02
C00051 Counter social engineering training	D02
C00056 Encourage people to leave social media	D02
C00058 Report crowdfunder as violator	D02
C00059 Verification of project before posting fund requests	D02
C00155 Ban incident actors from funding sites	D02
C00160 find and train influencers	D02
C00172 social media source removal	D02
C00197 remove suspicious accounts	D02
C00044 Keep people from posting to social media immediately	D03
C00067 Denigrate the recipient/ project (of online funding)	D03
C00077 Active defence: run TA15 "develop people” - not recommended	D03
C00133 Deplatform Account*	D03
C00135 Deplatform message groups and/or message boards	D03
C00162 Unravel/target the Potemkin villages	D03
C00203 Stop offering press credentials to propaganda outlets	D03
C00034 Create more friction at account creation	D04
C00042 Address truth contained in narratives	D04
C00046 Marginalise and discredit extremist groups	D04
C00052 Infiltrate platforms	D04
C00053 Delete old accounts / Remove unused social media accounts	D04
C00062 Free open library sources worldwide	D04
C00047 Honeypot with coordinated inauthentics	D05
C00189 Ensure that platforms are taking down flagged accounts	D06
C00048 Name and Shame Influencers	D07
C00093 Influencer code of conduct	D07

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW