Russia 'hacked voting systems before US election'

Voter registration official also targeted by nation state - report

NSA data

Russian military intelligence perpetrated a broad campaign to hack the network of a voter registration services company and target voting officials days before the US presidential election, according to allegedly leaked NSA documents.

The report was handed to investigative website The Intercept by an anonymous source. While it does not show any "raw" intelligence on which the analysis is based, the report does give a glimpse into the shadowy world of cyber-espionage and the NSA's understanding of events.

The report, which both the publication and CBS said they have independently verified, claimed the campaign by Russia's military began in August 2016 when hackers attempted to gain access to systems belonging to Florida-based VR Systems. VR Systems was not directly identified in the report, but the report contains references to products made by the company.

The documents state that Russian military intelligence, specifically the Russian General Staff Main Intelligence Directorate, or GRU, carried out attacks.

Hackers then used stolen credentials to send spear-phishing emails to 122 local voting officials around the US. This attack was carried out "on either October 31 or November 1", the report says.

Attachments in these emails, if opened, infected computers with malware that would allow hackers to access officials' PCs.

Such infiltration would have enabled an attacker to alter or delete voter registration information to create delays at polling stations. However, the report does not offer any evidence that any such attacks were successful. 

The report concluded "with high confidence" that Russian ordered an extensive, multi-pronged propaganda effort "to undermine public faith in the US democratic process, denigrate Secretary [Hillary] Clinton, and harm her electability and potential presidency." 

Since the publication of the report, the Justice Department announced that a criminal complaint was filed in the Southern District of Georgia charging Reality Leigh Winner, 25, a federal contractor, with removing classified material from a government facility and sending it to a news outlet.

Featured Resources

Consumer choice and the payment experience

A software provider's guide to getting, growing, and keeping customers

Download now

Prevent fraud and phishing attacks with DMARC

How to use domain-based message authentication, reporting, and conformance for email security

Download now

Business in the new economy landscape

How we coped with 2020 and looking ahead to a brighter 2021

Download now

How to increase cyber resilience within your organisation

Cyber resilience for dummies

Download now

Recommended

Nigerian cyber criminals target Texas unemployment system
cyber security

Nigerian cyber criminals target Texas unemployment system

27 May 2021
Hackers use open source Microsoft dev platform to deliver trojans
Security

Hackers use open source Microsoft dev platform to deliver trojans

14 May 2021
Putin open to handing cyber criminals over to US
hacking

Putin open to handing cyber criminals over to US

14 Jun 2021
Crypto-mining hackers hit Kubernetes clusters
cryptocurrencies

Crypto-mining hackers hit Kubernetes clusters

10 Jun 2021

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

16 Jun 2021
Q&A: Enabling transformation
Sponsored

Q&A: Enabling transformation

10 Jun 2021
What is HTTP error 400 and how do you fix it?
Network & Internet

What is HTTP error 400 and how do you fix it?

16 Jun 2021