T0090.004 "Create Sockpuppet Accounts"

Tactic stage: TA15

Summary: Sockpuppet accounts refer to falsified accounts that either promote the influence operation’s own material or attack critics of the material online. Individuals who control sockpuppet accounts also man at least one other user account.67 Sockpuppet accounts help legitimize operation narratives by providing an appearance of external support for the material and discrediting opponents of the operation.

Relationships

Has counters:

Detection methods include:

Datasets

Examples include:

Seen in incidents: