Leak altered documents
From ADTAC Disinformation Inventory
T0025
Obtain documents (eg by theft or leak), then alter and release, possibly among factual documents/sources.
Examples:
- (2019) DFRLab report "Secondary Infektion” highlights incident with key asset being a forged “letter” created by the operation to provide ammunition for far-right forces in Europe ahead of the election.[1]