MITRE ATT&CK / Techniques / T1683.002

Generate Content: Audio-Visual Content

ID
T1683.002
Tactics
TA0042 Resource Development
Sub-technique of
T1683 Generate Content
Platforms
PRE
Source
attack.mitre.org
MITRE last modified
12 May 2026

Adversaries may create or manipulate audio, image, and video content to support targeting and malicious operations. Adversaries may also use synthetic voice recordings, real-time altered audio or video during live interactions, fabricated profile photos and identity documents, or video content depicting fabricated or impersonated individuals.[1]

Content may be produced manually through editing tools, generated using AI-assisted tools, or produced using third-party synthetic services.[2][3] AI-assisted tools have enabled adversaries to produce synthetic media at scale and generate content that is more difficult to identify as inauthentic.

Audio-visual content produced through these methods may be used in support of other techniques, such as Phishing, Spearphishing via Service, Phishing for Information, Internal Spearphishing, Social Engineering, Financial Theft, or Establish Accounts.

Detection

Mitigations (1)

M1056 Pre-compromise

This technique cannot be easily mitigated with preventive controls since it is based on behaviors performed outside of the scope of enterprise defenses and controls. Efforts should focus on designing defenses that are not reliant on atomic indicators.

Groups (5)

References

  1. Nov AI Threat Tracker
  2. FBI 2025 AI Generate Content
  3. Europol Deepfakes