Iranian Hackers Target Trump and Biden-Harris Campaigns in Ongoing Email Phishing Operation

In a recent report by Google, the tech giant disclosed a series of attempts by Iranian hackers to infiltrate the email accounts of both the Donald Trump and Joe Biden presidential campaigns. The report, released on Wednesday, revealed that these phishing activities took place in May and June, with the operation continuing to this day. The revelation adds support to the Trump campaign's claim of having been targeted by an Iranian hacking campaign aimed at interfering with the U.S. election.

Targeting Political Figures

According to Google's Threat Analysis Group, which specializes in tracking cyberattacks backed by governments, the reported phishing operation was linked to a hacking unit associated with the Islamic Revolutionary Guard Corps. The campaign sought to compromise the personal email accounts of approximately a dozen individuals affiliated with both presidential candidates, including current and former government officials and campaign personnel. Google reported thwarting numerous attempts to gain access to these personal email addresses.

The scale of the hacking efforts is significant, with targets including high-profile political consultants and government officials. In July, the Gmail account of at least one prominent political consultant was compromised, prompting Google to secure the account and escalate the matter to law enforcement. The identity of the consultant and their association with either campaign were not disclosed.

Ongoing Threat and Target Profiles

Google emphasized the unwavering persistence of the Revolutionary Guard hackers, stating that they continue to see unsuccessful attempts to breach accounts affiliated with Biden, Vice President Kamala Harris, and Trump. The scope of this larger campaign extends beyond the U.S. presidential campaigns, as these hackers have also aimed to infiltrate U.S. and Israeli targets. Notably, they have utilized Google's platforms such as Sites, Drive, and Gmail in their hacking endeavors.

These reports of hacking threats to U.S. presidential campaigns surfaced last week when Microsoft revealed that hackers connected to the Revolutionary Guard had gained access to the email account of a former senior adviser to a presidential campaign. The details of the targeted individual were not disclosed by Microsoft. In response to inquiries, a spokesperson for Iran's Mission to the United Nations did not provide comments. Iranian state media had previously reported a denial of Iranian involvement in hacking Trump's campaign.

Investigation and Denials

Following the weekend, several U.S. news outlets, including Politico, The Washington Post, and The New York Times, reported receiving emails containing what appeared to be Trump campaign files. These incidents suggested the possibility of a "hack-and-leak" operation intended to embarrass Trump. In response, the FBI announced its investigation into the hacking efforts targeting both the Trump and Biden-Harris campaigns, although no further details were disclosed.

So far, only the Trump campaign has explicitly claimed to have fallen victim to a hacking attempt. The initial phishing emails were sent before Biden withdrew from the race and Harris became the Democratic nominee. A Harris official stated that the campaign was unaware of any security breach. No prominent cybersecurity firm or government agency has definitively attributed successful hacking of the Trump campaign to Iran, with Microsoft refraining from disclosing additional details about the reported breach.

Potential Influence and Interference

The series of events unfolds against the backdrop of warnings from U.S. intelligence officials at the Foreign Malign Influence Center, an entity dedicated to countering foreign propaganda campaigns. These officials cautioned that Iran was likely to persist in efforts to malign Trump, indicating a broader pattern of potential interference.

Interference concerns

The phishing activities allegedly orchestrated by Iranian hackers against both the Trump and Biden campaigns underscore the ongoing threat posed by state-sponsored cyberattacks. As the 2024 elections approach, concerns over foreign interference in the democratic process continue to loom large. The international community and cybersecurity experts remain vigilant, seeking to thwart such attempts to undermine the integrity of electoral systems.