Russia, China, and Iran Ramp Up Cyber Influence Campaigns Ahead of US Election

Putin's pro-Trump trolls accuse Harris of poaching rhinos

Plus: Iran's IRGC probes election-related websites in swing states Russian, Iranian, and Chinese trolls are all ramping up their US election disinformation efforts ahead of November 5, but - aside from undermining faith in the democratic process and confidence in the election result - with very different objectives, according to Microsoft. In a Wednesday report [PDF], Redmond's Threat Analysis Center suggested all three nations' cyber influence operations gangs are gearing up for even more fake news and social media trolling in the final two weeks before election day. And all of this activity will likely reach a fever pitch - with an AI assist - in the final 48 hours before the US heads to the polls. In particular, Microsoft's threat intel team expects to see Iran's Cotton Sandstorm - a hacking and cyberspy crew linked to the Islamic Revolutionary Guard Corps (IRGC) - launch influence operations as the election nears. This seems especially likely given the group's history [PDF]. And while Cotton Sandstorm hasn't yet started spewing any fake news ahead of the vote, Microsoft claims it recently discovered that the crew had "performed reconnaissance and limited probing of election-related websites in some US swing states in April 2024," along with similar hacking attempts against "major US media outlets" a month later. Another Iranian government-backed group, Storm-2035, has been posting "divisive and at times conspiratorial" articles while pretending to be various local US news outlets - around eight per week, targeting both Democrats and Republicans, we're told. Late last month, the Department of Justice charged three Iranians, all allegedly IRGC members, for their involvement in a hack-and-leak campaign targeting the Trump campaign. We expect Russia, Iran, and China to continue their efforts, including using AI In addition to allegedly stealing massive amounts of materials from Donald Trump's 2024 presidential campaign, and then leaking this info to media organizations, the three are also accused of using "spear phishing and social engineering techniques to target and compromise the accounts of current and former US government officials, members of the media, non-governmental organizations, and individuals associated with US political campaigns," according to court documents. Microsoft, in one of its earlier 2024 election reports, accused Iranian cybercriminals of sending phishing emails to "a high-ranking official of a presidential campaign" using a "compromised email account of a former senior advisor." While Iran's election operations to date seem to put it in the pro-Harris camp, Russia has increased its attacks against the Harris-Walz campaign, we're told. This includes Russian-language accounts posted on both X and Telegram showing an AI-enhanced video of vice president Kamala Harris. The deepfake depicts Harris making inappropriate jokes about assassination attempts against Trump, and received tens of thousands of views on X after an RT correspondent posted it on September 23. In an even more out-there video, another Russian crew that Microsoft tracks as Storm-1516 posted a video of a staged interview with an actor purporting to be a park ranger, claiming Harris killed an endangered rhinoceros in Zambia. Numerous Storm-1516-affiliated websites and channels amplified the fake news story after it went live on September 25. Shortly after Harris became the Democratic nominee, this same crew staged a video accusing Harris of a hit-and-run incident. This received millions of impressions across social media, we're told. More recently, on October 16, a phony video on X accused governor Tim Walz, Harris's running mate, of sexual assault while he was a high school student. Microsoft has determined "with moderate confidence" that Storm-1516 is also behind this effort. Yet another Russian troll farm, Storm-1679, has taken to posting anti-Harris videos on social media accounts spoofing Fox News, the FBI, and Wired. While Russia and Iran square off over Harris and Trump, China's disinformation efforts have taken a down-ballot approach - targeting Republican candidates seeking seats in the US Senate and House of Representatives who have publicly denounced the People's Republic of China (PRC). Perhaps the most prolific of these influence campaigns comes from the Chinese Ministry of Public Security-linked group Spamouflage (Microsoft calls them "Taizi Flood"). These campaigns, starting in July and ramping up in September, have targeted Representative Barry Moore (R-Alabama), Senator Marco Rubio (R-Florida), Senator Marsha Blackburn (R-Tennessee), and Representative Michael McCaul (R-Texas). In a blog post on Wednesday, Clint Watts, general manager of the Microsoft Threat Analysis Center, warned: "We expect Russia, Iran, and China to continue their efforts, including using AI, and may employ tactics that seek to cast doubt about the integrity of the election's outcome." ®

Russia, China, and Iran are escalating online influence efforts ahead of US election, says Microsoft

A hot potato: Microsoft is warning that Russia, China, and Iran are carrying out online cyber and influence efforts ahead of the US election, and there are signs that these campaigns will escalate as November 5 draws closer. While Russia is smearing VP Kamala Harris, China is targeting Republicans critical of the country. Microsoft Threat Analysis Center (MTAC) writes that malicious foreign influence operations aimed at the US election are evolving. Clint Watts, MTAC General Manager, notes that history has shown how foreign actors' ability to rapidly distribute deceptive content can significantly impact public perception and electoral outcomes. Therefore, voters, government institutions, candidates, and parties must remain vigilant against suspicious online activity in the two days before and after election day. MTAC says it is virtually certain that these actors will ramp up their operations during this time. Iran, despite escalating tensions with Israel, is running multiple influence operations against varying targets in the US, especially the Trump campaign. It has called on Americans to boycott the elections due to the candidates' support for Israel, and has tried to incite anti-Israeli protests at universities. Russia, no stranger to accusations of trying to influence US elections, is targeting the Harris-Walz campaign. Its agents continue to create deepfaked videos about the Vice President, one of which shows her making derogatory comments about Trump. Another accuses her of illegal poaching in Zambia, and another video spreads disinformation about Tim Walz. The Walz video gained more than 5 million views on X in the first 24 hours of it being posted. China's operations have focused on down-ballot Republican candidates and members of Congress that advocate for anti-Chinese policies, such as Rep. Barry Moore, Sen. Marsha Blackburn, and Marco Rubio (who is not currently up for reelection). Chinese agents have used antisemitic messages, pushed accusations of corruption, and promoted opposition candidates. The increasing use of generative AI in these disinformation campaigns is especially worrying, given how advanced the technology is becoming. MTAC warned in September 2023 that China was using AI to influence US voters with content that focused on politically divisive topics, including gun violence, and denigrated US political figures and symbols (below). Six months later, MTAC issued a second warning about China's use of generative AI to sow disruption in the United States as the actors continued to refine AI-generated or AI-enhanced content, creating videos, memes, and audio.

Microsoft warns of growing US election cyber interference

Russia, China and Iran are stepping up interference efforts as US election nears As the final sprint in the US presidential election nears, online interference attempts by Russia, Iran and China are holding steady, new research claims. The latest in a series of Microsoft reports notes how the respective nation states are each maintaining its own areas of focus, with Russia attempting to undermine the Harris-Walz campaign, while China has coordinated its attempts at members of Congress and down-ballot Republican candidates. Iran has also demonstrated its ability to run concurrent cyber influence campaigns, maintaining its effort to influence the US elections while continuing to launch new activity as the situation in the Middle East escalates. Russia's trend towards using AI and deepfake videos continues, with Russian threat actors releasing three new fake videos of the Harris-Walz campaign. The first being an altered video of Harris supposedly making derogatory comments about her rival, former President Donald Trump. The second, generated by Storm-1516, alleges that Harris carried out illegal poaching in Zambia. A final deepfaked and AI enhanced video has been spotted doing the rounds on X (formerly Twitter) spreading disinformation about Democratic vice president nominee Tim Walz. As for China, the focus has been on amplifying messages of antisemitism and corruption against down-ballot Republican candidates and members of congress who push for anti-China policies, such as Rep. Barry Moore, Sen. Marsha Blackburn, and Sen. Marco Rubio. Iran has used escalating tensions in the Middle East to fuel its election interference, including attempting to organize election boycotts and rallies against US support for Israel. The main focus of these efforts being an attempt to further ostracize certain groups, and sow distrust and violence between communities. Microsoft highlights that manipulated media can spread rapidly in times of heightened emotion, conflict, and competition. Disinformation spread by nation states is often shared widely between audiences on social media and taken as truth before being verified or debunked. "History has shown foreign actors' ability to rapidly distribute deceptive content can significantly impact public perception and electoral outcomes," noted Clint Watts - General Manager, Microsoft Threat Analysis Center. "With a particular focus on the 48 hours before and after Election Day, voters, government institutions, candidates, and parties must remain vigilant against deceptive and suspicious activity online. Early detection and fact-checking remain essential to countering these efforts and maintaining election integrity."

Russia, Iran, China Step Up Efforts To Influence 2024 Election, Microsoft Says: Voters, Candidates 'Must Remain Vigilant' - Microsoft (NASDAQ:MSFT)

The technology giant is actively monitoring threats and reminds voters to be vigilant and fact check social media posts. A new threat assessment from Microsoft Corp MSFT reports several countries are stepping up their attempts to influence the outcome of the 2024 presidential election. What Happened: For many months, the U.S. has been on high alert for attempts from Russia, Iran and China to interfere with the 2024 election. A new report from Microsoft says the attempts could be amplified with two weeks until election day. The Microsoft Threat Analysis Center has observed "sustained influence" by the three countries, according to the latest report. Russia is using generative AI in content, Iranian groups are ramping up preparations of cyber-influence operations and China is shifting to focus on members of Congress on the 2024 election ballot, the new report alleges. "Russian actors have notably attempted to target the Harris-Walz campaign by attacking the candidates' characters," the report says. The report says Russia used AI to make deepfake videos about Vice President Kamala Harris, including one video that falsely claims Harris made "derogatory comments" about Donald Trump. Other videos claim Harris did illegal poaching in Zambia and spread disinformation about vice-presidential nominee Tim Walz. "While most of these videos received minimal engagement, they underscore Russia's ongoing use of both traditional and AI-generated content to influence U.S. audiences and stoke political discord." Microsoft said some Russian actors are also shifting their attention from Telegram to social media platform X in a renewed effort to reach American audiences. Iran is targeting U.S. voters with campaigns calling on Americans to boycott the 2024 election over support for Israel. Microsoft also reports an Iranian cyber group known as Cotton Sandstorm has been scouting election-related websites and media outlets, which could lead to cybersecurity threats around election day. "The actor's history of election interference and their pattern of cyber-influence operations underscores the persistent threat they pose." The report said China is targeting members of Congress who are pushing anti-Chinese policies in its latest attacks: Rep. Barry Moore (R-Ala.), Sen. Marsha Blackburn (R-Tenn.) and Sen. Marco Rubio (R-Fla.) are named. "Actors have parroted antisemitic messages, amplified accusations of corruption, and promoted opposition candidates." Read Also: Harris-Walz Campaign Targeted By Russian Hackers, Microsoft Threat Analysis Center Notices Shift In Tactics By Attackers Why It's Important: The latest report said that the attempts to influence the 2024 election by Russia, Chian and Iran could be particularly focused on the 48 hours before and after Election Day. "Voters, government institutions, candidates and parties must remain vigilant against deceptive and suspicious activity online. Early detection and fact-checking remain essential to countering these efforts and maintaining election integrity," Microsoft says. Microsoft warns Russia, Iran and China are likely to continue their efforts and could also use tactics to cast doubt on the outcome of the 2024 election and the integrity of the election. The tech company has been raising concerns about foreign influence over the 2024 election for several months. Microsoft President Brad Smith warned of potential foreign interference when testifying before the Senate Intelligence Committee in September. "We know that there is a presidential race between Donald Trump and Kamala Harris, but this has also become an election of Iran vs. Trump and Russia vs. Harris," Smith said. Technology giant Microsoft does not endorse any candidates or political parties in the election, the report says. Read Next: Microsoft Q4 Earnings Highlights: Revenue Beat, EPS Beat, Cloud Revenue Up 21% YoY, 'Ensuring We Lead The AI Era' Photo: China, Russia and Iran flags, Vitalii Vodolazski via Shutterstock Market News and Data brought to you by Benzinga APIs