MITRE ATT&CK Technique
Impact T1565
Description

Adversaries may insert, delete, or manipulate data in order to influence external outcomes or hide activity, thus threatening the integrity of the data.(Citation: Sygnia Elephant Beetle Jan 2022) By manipulating data, adversaries may attempt to affect a business process, organizational understanding, or decision making. The type of modification and the impact it will have depends on the target application and process as well as the goals and objectives of the adversary. For complex systems, an adversary would likely need special expertise and possibly access to specialized software related to the system that would typically be gained through a prolonged information gathering campaign in order to have the desired impact.

Supported Platforms
Linux macOS Windows
Created

April 29, 2026

Last Updated

April 29, 2026

STIX Data
{'created': '2020-03-02T14:19:22.609Z',
 'created_by_ref': 'identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5',
 'description': 'Adversaries may insert, delete, or manipulate data in order '
                'to influence external outcomes or hide activity, thus '
                'threatening the integrity of the data.(Citation: Sygnia '
                'Elephant Beetle Jan 2022) By manipulating data, adversaries '
                'may attempt to affect a business process, organizational '
                'understanding, or decision making.\n'
                '\n'
                'The type of modification and the impact it will have depends '
                'on the target application and process as well as the goals '
                'and objectives of the adversary. For complex systems, an '
                'adversary would likely need special expertise and possibly '
                'access to specialized software related to the system that '
                'would typically be gained through a prolonged information '
                'gathering campaign in order to have the desired impact.',
 'external_references': [{'external_id': 'T1565',
                          'source_name': 'mitre-attack',
                          'url': 'https://attack.mitre.org/techniques/T1565'},
                         {'description': 'Sygnia Incident Response Team. '
                                         '(2022, January 5). TG2003: ELEPHANT '
                                         'BEETLE UNCOVERING AN ORGANIZED '
                                         'FINANCIAL-THEFT OPERATION. Retrieved '
                                         'February 9, 2023.',
                          'source_name': 'Sygnia Elephant Beetle Jan 2022',
                          'url': 'https://f.hubspotusercontent30.net/hubfs/8776530/Sygnia-%20Elephant%20Beetle_Jan2022.pdf?__hstc=147695848.3e8f1a482c8f8d4531507747318e660b.1680005306711.1680005306711.1680005306711.1&__hssc=147695848.1.1680005306711&__hsfp=3000179024&hsCtaTracking=189ec409-ae2d-4909-8bf1-62dcdd694372%7Cca91d317-8f10-4a38-9f80-367f551ad64d'}],
 'id': 'attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931',
 'kill_chain_phases': [{'kill_chain_name': 'mitre-attack',
                        'phase_name': 'impact'}],
 'modified': '2025-10-24T17:49:13.111Z',
 'name': 'Data Manipulation',
 'object_marking_refs': ['marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168'],
 'revoked': False,
 'spec_version': '2.1',
 'type': 'attack-pattern',
 'x_mitre_attack_spec_version': '3.2.0',
 'x_mitre_deprecated': False,
 'x_mitre_detection': '',
 'x_mitre_domains': ['enterprise-attack'],
 'x_mitre_impact_type': ['Integrity'],
 'x_mitre_is_subtechnique': False,
 'x_mitre_modified_by_ref': 'identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5',
 'x_mitre_platforms': ['Linux', 'macOS', 'Windows'],
 'x_mitre_version': '1.1'}
Quick Actions
Related Threat Actors (1)
FIN13
High