Accept-Language Manipulation

ID: TEQ-097
Phase(s): Defence Bypass
Tactic(s): Geolocation Spoofing

The adversary modifies the accept-language headers on requests to imply that the requests are being sent from a specific geolocation. This is often used in conjunction with other geolocation spoofing techniques to prevent inconsistencies in the spoofed location.