In 2022, someone created a fake account on X/Twitter, impersonating Eli Lilly and posted a single message: “We are excited to announce insulin is free now.” The post was fake. 

Eli Lilly never said it. But on November 11, 2022, the company’s stock dropped 4.37%, erasing over $15 billion in market cap. One account, one sentence, caused real financial damage before a correction could land.

Don’t mistake that for a communications crisis. That is an attack. And that attack followed a pattern.

In my previous articles (Article 1 and Article 2) in this series established that misinformation is a brand and institutional threat, not just a political problem, and introduced a framework for building a real response strategy. This piece goes one level deeper. Here is how a misinformation attack actually unfolds, stage by stage, so communications professionals can recognize one while it is still moving.

Misinformation attacks are not random.

They are not spontaneous bursts of online chaos that happen to catch a brand in the crossfire. They follow a sequence. A false narrative attaches to something real, gets compressed into a form people can repeat, floods the zone through coordinated accounts, creates the illusion of consensus, and then mutates when challenged. Every stage has a logic. Every stage has a signal. And the organizations that get hurt the worst are the ones that don’t recognize which stage they’re in until it’s too late.

Here is what each stage looks like in practice.

Stage 1: The Hook

Every misinformation attack needs an anchor because it almost never starts from nothing. It attaches to a real event, a genuine grievance, a breaking news moment, or an existing controversy, because real events carry attention and emotion that a fabricated claim alone cannot manufacture.

The false narrative doesn’t try to replace the real event. It reframes it by taking something that actually happened and bending the meaning.

The signal to watch for: the claim arrived fast and fits the moment too neatly. It is emotionally loaded, perfectly timed, and requires no context to feel credible. That fit is not an accident.

Stage 2: The Frame

Once the narrative has an anchor, it gets compressed. A screenshot. A short clip. A one-line accusation. A slogan. Something that travels without the context that would complicate it.

This is not an accident either. The compression is the point. A nuanced claim requires effort to process and share. A simple, emotionally charged one-liner does not. The goal at this stage is not to convince people of a complicated argument. It is to give them something they can repeat without thinking too hard about it.

The signal: the message is suspiciously clean. No sourcing. No qualifications. High outrage. Maximum shareability.

Stage 3: The Flood

Now the narrative seeds across accounts and communities simultaneously. Coordinated accounts, bots, influencer laundering, and ordinary users who have been nudged into sharing it. The goal is volume, not persuasion.

This is where the attack starts to feel real, because it suddenly appears to be everywhere. The same phrasing. The same image. The same claim, in comment threads and repost pages and quote posts, across accounts that have no obvious connection to each other.

The signal: identical or near-identical language appearing across unrelated accounts in a tight time window. Virality looks like one thing catching fire. Coordination looks like several fires starting at once.

Stage 4: The Illusion

This is the stage where most brands lose.

By the time the claim has flooded enough accounts, people stop asking whether it is true and start assuming it must be. Repetition creates the feeling of consensus. A claim people have seen ten times feels more established than a claim they are hearing for the first time, regardless of whether either one is sourced.

This is not gullibility. It is how the human brain works. Research on the illusory truth effect shows that repeated exposure to a statement increases its perceived credibility, even when people have been told it is false. (Udry and Barber, “The Illusory Truth Effect: A Review of How Repetition Increases Belief in Misinformation,” Current Opinion in Psychology, Vol. 56, 2024.) The attack is not trying to convince people. It is trying to make the claim feel familiar enough that people stop questioning it.

The signal: the claim feels established before any credible source has confirmed it. It has the texture of common knowledge.

Stage 5: The Mutation

When a fact-check arrives, or the brand issues a correction, a well-constructed misinformation campaign does not collapse. It shifts.

It establishes new wording. New screenshots. A slightly different version of the same allegation. Sometimes the story moves to a different platform where the correction hasn’t reached. Sometimes the claim gets laundered through a new account that wasn’t part of the original wave. The correction is always chasing a version of the story that no longer quite exists.

Barilla experienced this. After a false claim spread in Italy that the company’s pasta was contaminated with insects and that Barilla had pulled its products from shelves, the company issued a direct denial. The claim kept circulating. Barilla’s own press release confirmed no insect-flour products were ever produced or planned. There is no documented evidence that the campaign caused a measurable business decline, but the reputational disruption was real and required a direct public response. The denial didn’t kill the narrative. It just forced the narrative to find a new shape.

The signal: every time the brand addresses the claim, a slightly different version reappears. The correction never quite lands because it is always answering yesterday’s version of the attack.

Why It Works

These attacks succeed because they are engineered to exploit the way human beings actually process information, not because of a failure of intelligence or critical thinking.

Repetition increases perceived truth. 

Social proof overrides skepticism. Emotional threat activates a faster, less analytical response. When a claim feels familiar, urgent, and widely shared, the brain’s default is to treat it as credible. That is not a character flaw. It is a design vulnerability, and misinformation campaigns are built around it.

The implication for communications professionals is direct: the goal of the attack is rarely to make everyone believe one specific fake thing. The goal is to create enough confusion, enough noise, and enough doubt that people stop trusting the institution’s version of reality entirely. That is harder to correct than a single false claim. And it is what makes these attacks genuinely dangerous.

The Blind Spot Most Brands Have

Most communications monitoring is built to track sentiment and volume. By the time a false narrative registers as a sentiment problem on mainstream platforms, it has already moved through the seeding stage. The coordination happened somewhere else first, on fringe forums, in private groups, across smaller accounts, before it ever hit the feeds that brand monitoring tools are watching.

The practical failure is not response speed. It is watching the wrong signals. Eli Lilly could not have responded faster than the post spread. But a team watching for coordinated behavior rather than volume might have flagged the impersonation account before it moved markets.

This is what narrative intelligence, the second component of the framework from my article, You Don't Have a Misinformation Strategy. You Have a Crisis Plan, is actually for. Not tracking what people are saying about your brand. Tracking how they are saying it, where it started, and whether the behavior looks coordinated or organic.

The Takeaway

Knowing this pattern does not stop every misinformation attack. But it stops the most dangerous part: surprise.

Once you can name the stage you are in, you can make a decision. Ignore it. Document it. Correct it. Escalate it. What you cannot do, once you know the pattern, is mistake a coordinated attack for organic criticism and respond to it the wrong way.

That distinction, between what is real and what is manufactured, is the foundation of everything this series has been building toward.

If an attack on your brand started tonight, which stage would you catch it at?