T0128.001 "Use Pseudonyms"

Tactic stage: TA11

Summary: An operation may use pseudonyms, or fake names, to mask the identity of operation accounts, publish anonymous content, or otherwise use falsified personas to conceal identity of the operation. An operation may coordinate pseudonyms across multiple platforms, for example, by writing an article under a pseudonym and then posting a link to the article on social media on an account with the same falsified name.

Relationships

Has counters:

Detection methods include:

Datasets

Examples include:

Seen in incidents: