T0094.002 "Utilize Butterfly Attacks"

Tactic stage: TA15

Summary: Butterfly attacks occur when operators pretend to be members of a certain social group, usually a group that struggles for representation. An influence operation may mimic a group to insert controversial statements into the discourse, encourage the spread of operation content, or promote harassment among group members. Unlike astroturfing, butterfly attacks aim to infiltrate and discredit existing grassroots movements, organizations, and media campaigns.


Has counters:

Detection methods include:


Examples include:

Seen in incidents: