DISARMframeworks/generated_pages/techniques/T0099.md

23 lines
963 B
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Technique T0099: Impersonate Existing Entity
* **Summary**: An influence operation may prepare assets impersonating existing entities (both organisations and people) to further conceal its network identity and add a layer of legitimacy to its operation content. Existing entities may include authentic news outlets, public figures, organisations, or state entities. 
Users will more likely believe and less likely fact-check news from recognisable sources rather than unknown sites. 
An influence operation may use a wide variety of cyber techniques to impersonate a legitimate entitys website or social media account. 
This Technique was previously called Prepare Assets Impersonating Legitimate Entities.
* **Belongs to tactic stage**: TA16
| Incident | Descriptions given for this incident |
| -------- | -------------------- |
| Counters | Response types |
| -------- | -------------- |
DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW