Iran-Linked Hackers Probing US Election Websites: Microsoft's Alarming Findings

https://icaro.icaromediagroup.com/system/images/photos/16379498/original/open-uri20241023-56-sj8p08?1729716249
ICARO Media Group
Politics
23/10/2024 20h40

### Microsoft Uncovers Iranian Probing of US Election Websites

Microsoft has revealed that hackers linked to the Iranian government have been investigating election-related websites in several key US swing states, potentially searching for weaknesses that could be exploited to influence the upcoming presidential election. This activity, uncovered by Microsoft analysts, occurred in April but came to light only recently. US officials from multiple agencies are now closely examining these actions.

The report from Microsoft, released on Wednesday, also highlighted that these hackers expanded their reconnaissance efforts to include major US media outlets in May. According to intelligence assessments, Iran has previously sought to create discord in the US, particularly during election seasons, by targeting former President Donald Trump's campaign and by promoting protests against US policies toward Israel.

Given this hacking group's known history of electoral interference, Microsoft analysts predict a likely increase in their activity as the 2024 election approaches. This recent discovery adds to the growing evidence of attempts by Iranian, Russian, and Chinese groups to either sway or keep tabs on the US electoral process.

Despite the probing and reconnaissance activities, sources familiar with the investigation assured CNN that there is no evidence of these actions escalating into actual hacking attempts. The integrity of the voting process remains secure due to robust safeguards and checks. However, officials and analysts are concerned that such foreign-backed activities could still heighten American voters' apprehensions about election security. Releasing publicly available voter information could falsely suggest broader access to sensitive systems, contributing to misinformation and fear.

This development follows a recent assessment by US intelligence agencies accusing Russian operatives of spreading misleading audio content targeting Democratic vice-presidential candidate Tim Walz. The assessment also flagged concerns that both Russia and Iran might use disinformation to incite violence amid the election period and post-election vote certification.

Highlighting the persistent threats, one Russian group shifted their focus from Telegram to X in September, where their manipulated videos attacking Vice President Kamala Harris gained significant traction. Microsoft's report noted one such AI-generated video falsely depicting Harris making insensitive remarks about an assassination attempt on Trump, which garnered tens of thousands of views on X.

The Iranian hacking group identified in Microsoft's report, termed Cotton Sandstorm, is believed to operate under the direction of Iran's Islamic Revolutionary Guard Corps (IRGC). Although this group has not launched any new influence operations for the 2024 election, their past actions raise significant concerns. In the 2020 election, the same group masqueraded as the far-right Proud Boys to intimidate voters and accessed voter registration data in multiple states.

Another IRGC-backed faction recently leaked documents from Trump's presidential campaign to media outlets. Though China has not mounted a significant effort to influence the upcoming presidential election, it has nonetheless targeted at least ten congressional, state, or local election races through covert social media campaigns, as per US intelligence reports.

Former head of the federal Cybersecurity and Infrastructure Security Agency, Chris Krebs, underscored that while these information operations by Iran, Russia, and China are more of a nuisance than a decisive threat, they are cost-effective, scalable, and carry minimal repercussions. Krebs urged American voters to brace for a chaotic information environment in the upcoming months and to avoid being swayed by the noise.

The views expressed in this article do not reflect the opinion of ICARO, or any of its affiliates.

Related