Microsoft Uncovers Iranian Hackers Targeting U.S. Officials Ahead of Presidential Election

Iranian Hackers Target U.S. Presidential Campaign and Local Officials, Microsoft Reports

Microsoft researchers have revealed that hackers linked to the Iranian government attempted to breach the account of a “high-ranking official” in a U.S. presidential campaign this past June. This attack followed a similar breach in May, where Iranian hackers compromised the account of a county-level official in the United States.

Increasing Threats Ahead of the November Election

According to Microsoft’s report, these cyberattacks are part of a broader effort by Iranian groups to influence the upcoming U.S. presidential election. The researchers noted a surge in Iranian attempts to gain intelligence on U.S. political campaigns, particularly focusing on swing states. This aligns with recent warnings from U.S. Intelligence officials, who have observed an uptick in Iran’s use of covert social media accounts aimed at sowing political discord in the United States.

Iran Denies Allegations

In response to the allegations, Iran’s mission to the United Nations in New York issued a statement asserting that its cyber capabilities are purely defensive and proportionate to the threats it faces. The statement further emphasized that Iran does not interfere in U.S. internal matters, including the presidential election.

Specifics of the Cyberattacks

The report highlighted two specific incidents. In the first, a group linked to the Islamic Revolutionary Guard Corps (IRGC) intelligence unit sent a spear-phishing email to a high-ranking official within a U.S. presidential campaign. In the second incident, another IRGC-affiliated group compromised the account of a county-level government employee during a widespread “password spray operation.” Despite these breaches, Microsoft confirmed that the hackers were unable to access other accounts and that the affected individuals were promptly notified.

Covert Iranian Influence Operations

Microsoft’s researchers also uncovered evidence of Iranian groups launching covert news sites targeting U.S. voters across the political spectrum. These sites, named Nio Thinker and Savannah Time, utilize artificial intelligence to replicate content from legitimate news sources, aiming to influence both left-leaning and conservative audiences.

• Nio Thinker: Describes itself as a “progressive news and analysis” platform challenging the status quo.
• Savannah Time: A conservative outlet claiming to reflect local values and insights.

Both websites were found to have similar formats and lacked contact details, raising further concerns about their authenticity and purpose.

Conclusion

As the U.S. presidential election approaches, the threat of foreign interference, particularly from state-sponsored actors like Iran, remains a significant concern. Microsoft’s findings underscore the need for heightened cybersecurity measures and vigilance to protect the integrity of the election process.