Be Wary Of Social Media | Phishing | Impersonation – Technologist
Iran is intensifying its online efforts to influence the U.S. election, with one incident involving a phishing attack targeting a presidential campaign, according to Microsoft on Friday. It is the latest in a long line of stories and articles which encourages business owners to encourage their employees to be wary of social media links and phishing emails.
How are the phishing attacks happening?
Recent months have seen Iranian actors creating fake news sites and impersonating activists, laying the groundwork to sow division and potentially sway American voters, especially in crucial swing states, as found in Microsoft’s latest threat intelligence report.
These findings illustrate how Iran, active in past U.S. elections, is evolving its tactics in preparation for another globally significant election. The report goes further than any U.S. intelligence disclosures by providing specific examples of Iranian groups and their actions. Iran’s UN mission denied any plans to interfere or launch cyberattacks in the U.S. election.
Be wary of what is on Social Media
The reason we all need to be careful of what we are reading on social media is not necessarily linked to the presidential campaign, but this article highlights how easily people can be persuaded by what they read. The Crowdstrike disaster in July 2024 is an indication of
Leaders and business leaders being targeted by phishing emails
Microsoft identified four examples of recent Iranian activities, which it expects to increase as November’s election nears.
- In June, a group linked to Iran’s Revolutionary Guard targeted a high-ranking U.S. presidential campaign official with a phishing email. The group disguised the email’s origin by using the hacked account of a former senior adviser. Microsoft did not specify which campaign was targeted.
- A few days later, the same Iranian group unsuccessfully attempted to log into an account belonging to a former presidential candidate. Microsoft notified the targets of these attacks.
- An Iranian group has also been creating websites that mimic U.S.-based news sites, targeting voters on both ends of the political spectrum. One fake news site, aimed at a left-leaning audience, insults Trump and suggests he uses drugs. Another site, appealing to Republican readers, focuses on LGBTQ issues and gender-affirming surgery.
- Another Iranian group compromised the account of a government employee in a swing state in May. It is unclear if this cyberattack was related to election interference efforts.
In response to these findings, Iran’s UN mission sent an email to the Associated Press, stating: “Iran has been the victim of numerous offensive cyber operations targeting its infrastructure, public service centres, and industries. Iran’s cyber capabilities are defensive and proportionate to the threats it faces. Iran has neither the intention nor plans to launch cyber attacks. The U.S. presidential election is an internal matter in which Iran does not interfere.”
What is Microsoft saying?
Microsoft’s report also notes that as Iran escalates its cyber influence, Russia-linked actors have shifted their focus to the U.S. election. In contrast, actors tied to the Chinese Communist Party have exploited U.S. political tensions around pro-Palestinian university protests and other current events.
Microsoft continues monitoring how foreign adversaries use generative AI technology, which can create lifelike fake images, photos, and videos in seconds. Experts are concerned that these tools could be weaponised to mislead voters this election cycle.
Is AI involved in social media and phishing campaigns?
Although many countries have experimented with AI in their influence operations, these efforts have had limited impact. Consequently, some actors have reverted to traditional techniques, such as simple digital manipulations, mischaracterisation of content, and using trusted labels or logos atop false information.
Microsoft’s report aligns with recent warnings from U.S. intelligence officials, who have noted that America’s adversaries seem determined to flood the internet with false and incendiary claims ahead of November’s vote.