Engage Goals: EGO0003 Elicit
Engage Approach: EAP0001 Collect
Engage Actions: EAC0011 Pocket Litter, EAC0015 Information Manipulation
Name of Element: Deceptive Metadata in Multimedia Files
Description of Element:
Goal: Gather information about attacker activity by embedding deceptive metadata in multimedia files.
Approach: Hiding misleading or enticing information within metadata fields.
Embed deceptive metadata within multimedia files, such as images, videos, or audio recordings. This metadata can contain false information, misleading clues, or even links to honeypots or decoy websites.
Technical Context:
This element exploits the metadata fields associated with multimedia files to store deceptive information. This information can be accessed by attackers through common tools or scripts, leading them astray. This aligns with the MITRE ATT&CK technique T1566.003 (Phishing: Spearphishing via Service).
Other:
This element can be particularly effective against attackers who rely on metadata analysis for reconnaissance or intelligence gathering.