Russia and Iran are ramping up attacks on U.S. government networks and computer systems while also amplifying their disinformation campaigns, hoping to rattle the confidence of American voters with less than two weeks until the Nov. 3 presidential election.
The warning Thursday from U.S. intelligence and election security officials came less than 24 hours after the director of national intelligence blamed Iran for launching the first sensational attack on the upcoming election, accusing Tehran of being behind thousands of spoofed emails designed to intimidate voters.
Thursday’s advisories from the Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency suggested that the emails, as well as the ability of Russia and Iran to access voter registration information, were just the start of a larger campaign to undermine the U.S. elections.
According to the FBI and CISA, the attacks from Russia began in September, targeting dozens of state and local government networks involved in activities ranging from aviation to education.
The Russian cyber actor known as Beserk Bear "successfully compromised network infrastructure, and as of October 1, 2020, exfiltrated data from at least two victim servers," the advisories said.
The attackers also managed to obtain credentials that could allow them to move around in the networks, seeking out critical information that they could exploit at a later date, potentially to disrupt the upcoming presidential election.
"There may be some risk to elections information housed on SLTT [state, local, tribal and territorial] government networks,” the statement added. "However, the FBI and CISA have no evidence to date that integrity of elections data has been compromised."
Officials refused to share additional details about the Russian exploits, or say which government servers had been compromised, but the independent cyber security firm Mandiant said the Russian behavior appeared to be geared toward the Nov. 3 vote.
"Access to these systems could enable disruption or could be an end in itself, allowing the actor to seize on perceptions of election insecurity and undermine the democratic process,” Mandiant Senior Director of Analysis John Hultquist said in a statement.
Hultquist added that while there had been at least one attack on an election-related target, “we have no information which suggests these actors are capable or even willing to alter votes."
But while the Russian cyber actors appear content, for the moment, to threaten U.S. election-related networks, the FBI and CISA warned Thursday that Iranian-linked actors appear to be in position to exploit current network vulnerabilities.
“These actors have conducted a significant number of intrusions against U.S.-based networks since August 2019,” according to the new advisory, pointing to possible distributed denial of service (DDos) attacks, spear-phishing campaigns and website defacements.
“These activities could render these systems temporarily inaccessible to the public or election officials, which could slow, but would not prevent, voting or the reporting of results,” the advisories said.
It further warned that Iranian cyber actors have also been expanding their election-related disinformation efforts, “creating fictitious media sites and spoofing legitimate media sites to spread obtained U.S. voter-registration data, anti-American propaganda, and misinformation about voter suppression, voter fraud, and ballot fraud.”
The warnings from U.S. security and intelligence officials represent a shift from the cautious, but seemingly more optimistic tone they sounded as recently as last month.
"Russia continues to try to influence our elections, primarily through what we would call malign foreign influence … as opposed to what we saw in 2016 where there was also an effort to target election infrastructure," FBI Director Christopher Wray told lawmakers on the House Homeland Security Committee Sept. 17.
Topic: US issues Russia, Iran warning as Election draws nearer (Read 14132 times)
Similar topics (5)
April 14, 2015, 12:33:31 PM