Microsoft reveals Iranian hacking activities targeting US elections.
Microsoft announced in a blog post on Wednesday that an Iranian hacking group is tracking websites and American media outlets related to the upcoming presidential elections as the voting date approaches. Researchers confirmed that this activity indicates preparations for further direct influence operations.
Microsoft explained that the hackers, known as “Cotton Sandstorm” and linked to the Iranian Revolutionary Guard, conducted limited reconnaissance and scanning of multiple websites “associated with the elections” in several swing states that were not named. In May of this year, they also scanned an unidentified American news site to identify vulnerabilities.
Researchers believe that the Cotton Sandstorm group will increase its activity as the elections draw closer, given the group’s speed of operations and history of election interference. This development raises concerns due to the group’s previous efforts.
In response, a spokesperson for the Iranian mission to the United Nations denied these allegations, stating that they are unfounded and unacceptable. It was clarified that Iran has no motives or intentions to interfere in American elections.
In a related context, the Cotton Sandstorm group executed an electronic influence operation before the previous presidential elections in 2020. The group also posted a video on social media showing them exploring an electoral system, indicating their intentions to spread chaos and confusion.
Microsoft pointed out that the Cotton Sandstorm group also carried out a separate operation after the 2020 elections, encouraging violence against American election officials who denied widespread fraud claims.
In September of last year, the US Department of Justice announced criminal charges against three members of the Iranian Revolutionary Guard related to attempts to hack into the campaign of former President Donald Trump, as well as efforts to disrupt the scheduled presidential elections on November 5th. Attorney General Merrick Garland stated that the defendants conspired with others to carry out a wide-ranging hacking operation in favor of the Revolutionary Guard, aimed at undermining Trump’s campaign in the upcoming elections.
According to court documents from Washington, the electronic hackers prepared and participated in a hacking campaign using phishing techniques and social engineering to compromise accounts of government officials and individuals associated with political campaigns.