Iranian Group Linked to Revolutionary Guard Targets Biden and Trump Associates’ Emails

Google has reported that an Iranian group linked to the country’s Revolutionary Guard has attempted to infiltrate the personal email accounts of individuals associated with President Joe Biden and former President Donald Trump since May.

Targets Include Biden, Trump, and Harris Associates

Google’s Threat Analysis Group identified approximately a dozen individuals linked to Biden, Trump, and Vice President Kamala Harris as targets of these phishing attacks. The attacks have targeted current and former government officials, as well as presidential campaign affiliates.

Government-Backed Attackers Using Phishing Emails

The group utilizes email credential phishing to obtain access to the victims’ accounts. This method involves posing as a trusted sender to deceive recipients into sharing their login credentials.

Google’s threat intelligence arm actively monitors and disrupts these attacks. The company alerts suspected targets with a Gmail popup warning of potential password theft attempts by government-backed attackers.

One High-Profile Political Consultant’s Gmail Account Compromised

Google confirmed that the Iranian group gained access to one high-profile political consultant’s personal Gmail account. The incident was reported to the FBI in July.

Microsoft’s report, released earlier, shared similar information, indicating that a former senior adviser to a presidential campaign had their email account compromised and used to send phishing emails to high-ranking campaign officials.

History of Iranian Cyber Interference in US Elections

Google’s researchers acknowledged that the Iranian group has a known history of attempting to interfere in US elections.

During the 2020 election cycle, the same group targeted both the Biden and Trump campaigns with phishing attacks as early as June.

The group has also engaged in other cyber espionage activities, particularly in the Middle East. Recent tensions between Israel and Hamas have prompted phishing campaigns targeting Israeli diplomats, academics, NGOs, and military affiliates.

Trump Campaign Hack and Leaked Documents

Trump’s campaign announced a hack on Saturday, claiming that sensitive internal documents were stolen and distributed. Iranian actors were blamed for the incident.

Politico reported receiving leaked internal Trump campaign documents by email, although it remains unclear if they are related to the suspected Iranian cyber activity.

The Trump campaign has not provided specific evidence linking Iran to the hack. However, both Trump and former adviser Roger Stone claimed to have been contacted by Microsoft regarding suspected cyber intrusions. Stone’s email was reportedly compromised during the campaign targeting.

Biden-Harris Campaign and FBI Investigation

Harris’ campaign has declined to comment on any state-based intrusion attempts. However, they have stated that they diligently monitor cyber threats and are unaware of any security breaches of their systems.

The FBI confirmed an investigation into the Trump campaign intrusion. Sources indicate that the FBI is also investigating attempts to access the Biden-Harris campaign.

Foreign Influence in the US Election

The Iranian hacking reports align with warnings from US intelligence officials regarding persistent efforts by Russia and Iran to influence the US election through online activities.

Beyond hacking incidents, groups linked to these countries have employed fake news websites and social media accounts to spread content intended to sway voter opinions.

While neither Microsoft nor Google specified Iran’s motives in the US presidential race, US officials have previously expressed concerns that Iran particularly opposes Trump.

Iran has denied involvement in the Trump campaign hack. The Iranian mission to the United Nations stated that they do not have any intent or motive to interfere in the US election.