Breaking Silos and Speaking The Same Language
summary
Meta presents a concrete framework called the Online Operations Kill Chain that breaks operations into 10 phases (asset acquisition through persistence) and is already used to compare espionage, influence, scams and brigading. Examples include GAN-synthesized profile photos (GAN faces), a Russian “secondary infection” campaign that expanded from 16 to ~2,500 accounts across 326 platforms, doppelganger German news sites geofenced by location, and blended campaigns combining account takeovers with influence; the framework is operational and drives detection and disruption priorities.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 2:04Intrusion kill chain to operations
- 4:30Unified kill chain framework
- 6:57Designing operations kill chain
- 8:42Kill chain for analysis
- 11:07Acquiring assets
- 12:51Disguising assets
- 14:37Gathering information
- 16:01Coordination and planning
- 17:28Testing defenses
- 18:30Beating detection
- 20:14Indiscriminate engagement
- 21:36Targeted engagement
- 23:02Compromising assets
- 24:07Enabling persistence
- 25:33Framework caveats
- 26:58Use cases
- 29:43Conclusion
related talks
51mHacking Ten Million Useful Idiots: Online Propaganda as a Socio-Technical Security Project
30mThe Hidden Layer of Cyberattacks
38mInfluence Operations
29mThe Invisible War to Hijack Minds, Distort the Truth, and Impact Elections
36mDetecting Influence Campaigns Across Social Media Platforms
46mDeception Is on the Rise, But Is It Time to Unleash Engagement Operations?
35mDisinformation or Debate? Finding Signal Amid Political Noise
32mTricking the Trolls: A Look at the Digital Future