Escalation of Malicious Online Activities Targeting Global Elections

As the world gears up for a crucial year of elections in 2024, a disturbing trend of malicious cyber-activity aimed at influencing sovereign elections has been identified by Resecurity. With an unprecedented number of voters expected to participate, the stakes are high, amplifying concerns over the integrity of democratic processes. Time Magazine highlights that 64 countries, along with the European Union, are slated to hold national elections this year.

Cumulatively, these races encompass approximately two billion eligible voters, accounting for roughly 49% of the global population. The outcomes of these elections are anticipated to have far-reaching consequences, shaping the geopolitical landscape for years to come, as emphasized by Time Magazine. Undoubtedly, the most significant contest of 2024 is the U.S. presidential election, with the potential to reshape global geopolitical relations and military conflicts.

Against this backdrop, FBI Director Christopher Wray has acknowledged the unprecedented threat of election interference, stating that “more nation-states want to get in the business of trying to interfere or at least influence elections.” Resecurity’s analysis reveals a concerning rise in cyberattacks targeting global elections, increasing from 10% in 2015 to 26% in 2022.

Echoing these findings, the Canadian Centre for Cyber Security (CCCS) released a report at the start of 2024, affirming the growing prevalence of cyberattacks targeting elections. During the reporting period, approximately 25% and 35% of the targeted countries belonged to NATO and OECD, respectively.

Resecurity’s observations between 2023 and early 2024 indicate a 100% increase in activity compared to the previous analysis period. These incidents were reported to relevant authorities in various jurisdictions globally, including Africa, the European Union, the United Kingdom, Ecuador, Bangladesh, Indonesia, Israel, Iraq, Lebanon, Turkey, and Mexico.

A report from the National Counterintelligence and Security Center (NCSC) on foreign threats to elections outlines five primary types of malicious activities targeting election integrity:

  1. Cyber operations targeting election infrastructure
  2. Cyber operations targeting political parties, campaigns, and public officials
  3. Covert influence operations to assist or harm political organizations, campaigns, or public officials
  4. Covert influence operations to sway public opinion and sow division
  5. Covert efforts to influence policymakers and the public

These malicious typologies often serve as precursors to more significant disruptive activities, further amplified by foreign interference campaigns. Beyond cyberespionage, threat actors aim to create uncertainty about the integrity of elections through operations that disrupt and manipulate global public opinion. Regrettably, investigating these incidents remains complex, and they often go unnoticed by the general public.

Reference: Resecurity

Image source: Trellix