A threat technique is a repeatable method an actor uses to carry out hostile activity. It describes the how of an attack: for example, creating fake personas, sending phishing messages, staging malicious login pages, or coordinating account activity to spread deceptive content. Techniques are more specific than broad goals such as espionage, fraud, or disruption.
In cyber security, naming techniques helps defenders compare incidents, build detections, and share intelligence in a consistent way. Frameworks such as MITRE ATT&CK use technique-level descriptions so analysts can map observed behavior to known adversary tradecraft. In real attacks, techniques appear in both technical intrusions and influence operations, where an actor may use repeated posting patterns, synthetic identities, or lookalike websites to gain trust. Defenders look for the technique itself, not just the final message or malware, because stopping the method can disrupt many related campaigns.