Weaponized information is a message or content piece that is designed to affect the recipient's perception about something or someone in a way that is not warranted. The term implies a target and the intention to cause harm.
The goal of weaponized information is bringing about a change in beliefs and attitudes and, as a result, promote behavior that serves the attacker's purpose. Attacks involving weaponized information are sometimes referred to as cognitive hacking.
Weaponized information often consists of intentional falsehoods, known as disinformation. It can also be true but taken out of context, like a comment carefully selected from a longer statement so that it does not reflect what the speaker said. It may be a mixture of truth and lies, so that the known facts lend credence to the untruths. In other cases, the information may be true but its significance overblown or the timing of release calculated to cause the most harm possible.
Propaganda is an example of weaponized information: misleading or biased information of a political nature that is usually spread by governments. In contrast, weaponized information is also used in the marketplace to gain a competitive advantage. It might be used to tarnish a competitor's reputation, for example, or spread fear, uncertainty and doubt (FUD) about a product or technology.
Weaponized information is one form of social engineering. The presentation of the information may be skillfully crafted to exploit common cognitive biases and errors. People can protect themselves from being affected by weaponized information by strengthening their capacity for critical thinking.
In the enterprise, weaponized data may enter through automated channels and can impact security without being seen by a human. To protect organizations from malicious information, security experts are exploring the potential of cognitive security technologies to automatically detect and deal with weaponized information.