Attack Pattern Library

Negative PR Campaign Scenarios — Identify the Pattern You're Facing

Every coordinated negative PR campaign follows a recognizable template. This library breaks down the most common attack patterns — SEO poisoning, bot-driven review attacks, AI answer-engine poisoning, deepfake smears, lawfare and more — so you can identify the one targeting you and apply the matching defense playbook.

See the full simulation: OPERATION ECLIPSE
How to use this library

Filter by attack category, scan the tell-tale signs on each card, and open the pattern that matches what you are seeing for the full defense playbook.

All attack patterns

8 templates
Search & AI poisoning Weeks

SEO Poisoning & Search-Result Hijacking

Damaging pages are engineered to rank on page one for your name or brand, pushing your own content out of sight.

Tell-tale signs
  • Negative URLs you don't control appear on page one for your name or brand
  • Multiple new negative pages appear in a compressed 2–4 week window
  • The same dossier or source material recurs across the rising pages
View the defense playbook
Synthetic & deepfake media Hours

Deepfake & Synthetic Media Smears

Fabricated audio, video, or images of you doing or saying something you never did are laundered through platforms until treated as real.

Tell-tale signs
  • A compromising recording or image appears with no verifiable provenance
  • The media surfaces first on an anonymous or newly created account
  • Audio/video quality anomalies inconsistent with the alleged source
View the defense playbook
Search & AI poisoning Weeks to months

AI Answer-Engine Poisoning

ChatGPT, Gemini, Perplexity and Claude start summarizing the damaging narrative as the dominant answer about you.

Tell-tale signs
  • ChatGPT, Gemini, Perplexity or Claude returns predominantly negative summaries about you
  • Google AI Overviews begins surfacing the damaging narrative for your name or brand
  • The same narrow claim recurs across multiple engines
View the defense playbook
Review & marketplace attacks Hours to days

Bot-Driven Review Bombing & Marketplace Trust Attacks

A sudden flood of negative reviews or trust flags from accounts with no real purchase history, engineered to collapse your rating.

Tell-tale signs
  • A spike of negative reviews in 24–72 hours from accounts with no verified purchase
  • Recurring phrasing or complaint themes across unrelated reviewers
  • Reviews clustered on one or two specific complaints rather than varied experience
View the defense playbook
Social & bot amplification Hours to days

Coordinated Social Amplification & Astroturfing

Thousands of accounts make a single damaging narrative look like spontaneous, cross-demographic public outrage.

Tell-tale signs
  • A sharp spike in negative mentions across multiple unrelated accounts in 24–72 hours
  • Coordinated posting times, shared hashtags, and recycled headlines
  • Many new accounts created shortly before the spike
View the defense playbook
Financial & short-seller attacks Hours

Short-Seller Dossier Attack

A research 'dossier' drops alongside a short position, engineered to move your share price before you can respond.

Tell-tale signs
  • A negative research report drops alongside disclosed short interest
  • Coordinated amplification across media and social within 24–48 hours
  • The spike aligns with a financing, earnings, or lockup window
View the defense playbook
Legal & lawfare Days to weeks

Lawfare & Strategic Litigation

Lawsuits, bar complaints, and regulatory tips filed not to win in court but to generate headlines and suppress your activity.

Tell-tale signs
  • Multiple filings or complaints from related parties in a compressed window
  • Filings briefed to media before they are served on the target
  • Complaints unusually timed to a financing, election, or product window
View the defense playbook
Media & planted stories Days

Planted Stories & Leaked Dossiers

A 'whistleblower' leak or exclusive drops and is echoed across outlets, engineered to look organic and feed every other vector.

Tell-tale signs
  • An exclusive or leak appears and is echoed by multiple outlets within 24–48 hours
  • Downstream coverage cites the original rather than independent sources
  • The 'leak' is selectively missing exculpatory context
View the defense playbook

Not sure which pattern is targeting you?

Our team can map the attack in the first 72 hours and match it to the right defense playbook. Confidential, no obligation.

Message us