Analysis of the impact of DISARM framework’s tactics and techniques on communication hijacking
| Communication hijacking level (Hautala et al., 2025) | Representative DISARM tactic or technique (DISARM Foundation, 2024) | Potential indicators |
|---|---|---|
| Persona | Impersonate Existing Entity (T0090) Create Inauthentic Accounts (T0099) Develop Image-Based Content (T0086) Defame (T0140.001) Suppress Opposition (T0124) | Create accounts that mimic legitimate users Create fake content designed to mislead readers or defame the Persona Flag content as “inappropriate,” leading to it being taken down without cause |
| Hashtag | Flood Existing Hashtag (T0049.002) Create Inauthentic Accounts (T0090) Post Violative Content to Provoke Takedown and Backlash (T0115.002) | Repost unrelated content with a trending hashtag Hashtag hijacking may attempt to defame a legitimate user or hashtag |
| Media | Purchase Targeted Advertisements (T0018) Deliver Content (TA09) Attract Traditional Media (T0117) Establish Assets (TA15) | Influence the media through large purchases of advertisements Purchasing/acquiring control of the organization |
| Narrative | Develop Inauthentic News Articles (T0085.003) Use Copypasta (T0084.002) Post Across Platform (T0119.002) Flooding the Information Space (T0049) | Manipulate the volume of available information Cross-post the same information simultaneously across many platforms |
| Brand | Develop Image-Based Content (T0086) Facilitate State Propaganda (T0002) “Boycott” or “Cancel” Opponents (T0048.001) Post Across Platform (T0119.002) | Manipulate a legitimate brand and image Capitalize on the success of a brand Defame a brand’s reputation using other hijacking layers or purposefully boycotting the brand |
| Newsjacking | Create Personals (T0097) Aggregate Information into Evidence Collages (T0085.004) Share Memes (T0115.001) Use Hashtags (T0104.005) | Capitalize on current trending news Draw attention away from serious events with memes Accelerate the spread of alternate versions of news event |
| Campaign | Create Inauthentic Accounts (T0090) Develop Document/Develop False or Altered Documents (T0085.002) Use Copypasta (T0084.001) | Link various hijacking layers in a deliberate campaign of deception and false information |
| Communication hijacking level ( | Representative DISARM tactic or technique ( | Potential indicators |
|---|---|---|
| Persona | Impersonate Existing Entity (T0090) | Create accounts that mimic legitimate users |
| Hashtag | Flood Existing Hashtag (T0049.002) | Repost unrelated content with a trending hashtag |
| Media | Purchase Targeted Advertisements (T0018) | Influence the media through large purchases of advertisements |
| Narrative | Develop Inauthentic News Articles (T0085.003) | Manipulate the volume of available information |
| Brand | Develop Image-Based Content (T0086) | Manipulate a legitimate brand and image |
| Newsjacking | Create Personals (T0097) | Capitalize on current trending news |
| Campaign | Create Inauthentic Accounts (T0090) | Link various hijacking layers in a deliberate campaign of deception and false information |
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.