As the 2024 U.S. presidential election approaches, concerns about foreign interference are resurfacing. On Wednesday, Microsoft researchers published a blog revealing that a known Iranian hacking group is actively surveilling U.S. election-related websites and media outlets.
The group, dubbed Cotton Sandstorm, is believed to be linked to Iran’s Islamic Revolutionary Guard Corps (IRGC) and is reportedly preparing for more aggressive influence operations in the months leading up to the election.
According to the report, Cotton Sandstorm has already been conducting reconnaissance and probing several “election-related websites” across various swing states. While the states involved remain unnamed, the activity suggests that these hackers are laying the groundwork for potential disruptions or disinformation campaigns as Election Day nears.
The Iranian-linked group also targeted a U.S. news outlet in May, scanning the site to identify vulnerabilities, according to Microsoft’s analysis. Researchers believe this type of activity hints at broader preparations for cyber-enabled influence operations.
“Given the group’s history and operational tempo, it is expected that Cotton Sandstorm will escalate its activities as the election draws closer,” Microsoft researchers wrote. The potential threat posed by this group has drawn heightened attention, particularly due to their previous involvement in election interference efforts during the 2020 election cycle.
READ ALSO: Leeds United Secure Surprise Signing of Former Atletico Madrid and France Midfielder
This isn’t the first time Cotton Sandstorm has meddled in U.S. elections. During the 2020 presidential election, the group launched a significant influence operation, targeting voters directly in an attempt to sow discord. Posing as members of the far-right group “Proud Boys,” the hackers sent threatening emails to Florida residents, urging them to “vote for Trump or else.”
In addition to sending intimidating messages, the group produced a video showing them allegedly hacking into U.S. election systems. Though the claims of system breaches were never substantiated, and there was no evidence that they compromised individual voting machines, the damage was done. The campaign created widespread confusion and raised questions about the integrity of the electoral process.
Later that year, following the 2020 election, Cotton Sandstorm continued its operations, this time focusing on inciting violence. They launched a campaign aimed at encouraging hostility against U.S. election officials who had denied claims of widespread voter fraud. The ultimate goal of these operations, U.S. officials said, was to amplify chaos, mistrust, and uncertainty around the election outcome, regardless of the true impact on the voting process.
In response to Microsoft’s recent findings, Iran has categorically denied any involvement in U.S. election interference. A spokesperson for Iran’s mission to the United Nations dismissed the allegations as baseless, stating that “such accusations are fundamentally unfounded and wholly inadmissible.”
The spokesperson added, “Iran neither has any motive nor intent to interfere in the U.S. election.” However, the past activities of Cotton Sandstorm, combined with the current reconnaissance efforts, raise serious concerns about the potential for similar interference in 2024.
Microsoft’s revelations come at a time when the U.S. government is ramping up efforts to safeguard the election process from foreign influence. The Office of the Director of National Intelligence (ODNI) is leading a federal task force responsible for defending against foreign interference, coordinating efforts with agencies such as the Department of Homeland Security and the FBI.
While ODNI did not immediately respond to Microsoft’s latest report, the federal government is expected to intensify its monitoring and cybersecurity defenses in response to these emerging threats. The stakes are high as election security becomes increasingly vulnerable in a rapidly evolving digital landscape.
What makes Cotton Sandstorm‘s activities particularly alarming is not only their technical expertise but also their ability to craft and execute sophisticated disinformation campaigns. Their past efforts have focused more on spreading doubt and confusion than on directly compromising voting machines or data. The group’s success lies in undermining public confidence in democratic processes through the amplification of false narratives and divisive rhetoric.
As Election Day draws near, voters and officials alike must remain vigilant. In an age of growing cyber threats, the battle for election security is not just about safeguarding voting machines—it’s about protecting the trust and confidence of the electorate.
READ ALSO: Nvidia CEO Warns EU Falling Behind US and China in AI Investment
As 2024 approaches, the U.S. faces a critical challenge in protecting its electoral infrastructure from foreign interference. With groups like Cotton Sandstorm scouting vulnerabilities and preparing for influence operations, the threat landscape is complex and constantly evolving.
Microsoft’s report serves as an early warning, highlighting the urgent need for enhanced security measures, public awareness, and strong government action to defend the integrity of the U.S. electoral system.
The real battle is not just over votes but over the hearts and minds of the electorate, and groups like Cotton Sandstorm are poised to exploit any opportunity to cast doubt on the democratic process. Only time will tell how prepared the U.S. is to face this growing cyber threat head-on.