T0011 "Compromise legitimate accounts"
Tactic stage: TA16
Summary: Hack or take over legimate accounts to distribute misinformation or damaging content.
Detection methods include:
- E000012 White House explosions: Syrian Electronic Army (2013) series of false tweets from a hijacked Associated Press Twitter account claiming that President Barack Obama had been injured in a series of explosions near the White House. The false report caused a temporary plunge of 143 points on the Dow Jones Industrial Average.
Seen in incidents:
- I00042 as “hack” of Qatar’s official news agency: