Iranian Hacking Group Targeting US Election Websites and Media Outlets Ahead of Election Day, Microsoft Reveals

An Iranian hacking group has been actively targeting US election-related websites and American media outlets ahead of the upcoming election, according to a blog post by Microsoft.

The group, identified as Cotton Sandstorm and linked to Iran’s Islamic Revolutionary Guard Corps (IRGC), has been conducting surveillance and limited probing, raising concerns about potential influence operations.

Microsoft researchers noted that Cotton Sandstorm has focused on “election-related websites” in several unnamed swing states.

The group also scanned a US news outlet in May to identify any vulnerabilities. This activity is considered part of preparations for potential influence operations as Election Day approaches.

The blog post warns that Cotton Sandstorm is expected to escalate its activity in the coming weeks due to the group’s operational tempo and its history of interference in previous US elections.

“Cotton Sandstorm will increase its activity as the election nears given the group’s operational tempo and history of election interference,” the researchers wrote.

A spokesperson for Iran’s mission to the United Nations dismissed the allegations, calling them “fundamentally unfounded and wholly inadmissible.” The spokesperson added, “Iran neither has any motive nor intent to interfere in the US election.”

Cotton Sandstorm gained notoriety in 2020 when it launched a cyber-enabled influence campaign just before the US presidential election.

The group impersonated the right-wing “Proud Boys” and sent thousands of threatening emails to Florida residents, urging them to “vote for Trump or else!” The group also released a video on social media, allegedly from hacktivists, which showed attempts to breach an election system. While the operation did not compromise voting systems, US officials said its goal was to create chaos and confusion.

Following the 2020 election, Cotton Sandstorm continued its activities by promoting violence against US election officials who denied claims of widespread voter fraud, according to Microsoft.

The Office of the Director of National Intelligence, which coordinates federal efforts to protect the election from foreign interference, has not yet responded to requests for comment.