Election officials are vulnerable to phishing attacks, report warns

Less than 20% of election administrators have implemented advanced anti-phishing cyber security controls

Several county and local election officials are using email systems that could leave them vulnerable to phishing attacks, according to an Area 1 Security report.

Area 1 Security, in partnership with Americans for Cybersecurity, analyzed state and local election administrators’ susceptibility to phishing attacks. According to the report, 53.24% of election administrators use only simple or nonstandard technologies to protect themselves from phishing attacks, while only 18.61% have implemented advanced anti-phishing cybersecurity controls.

A troubling 5.42% of election administrators use personal email addresses or personal email technology for election-related matters too. 

According to Area 1 Security, several election administrators independently manage their custom email infrastructure as well.

In an interview with The Wall Street Journal, Area 1 Security CEO Oren Falkowitz explained: “When you run your own service and you don’t partner with someone to professionally manage it, it means you have to be perfect every single day. That’s really hard."

Area 1 Security says it found officials in six small jurisdictions in Michigan, Missouri, Maine and New Hampshire using Exim too. In May, the National Security Agency warned that threat actors linked to the Russian military intelligence agency - the same actors who interfered with previous elections - have targeted the version of Exim these officials are using.

Government agencies nationwide have faced ransomware attacks, many of which began with malicious email messages, security experts told The Wall Street Journal

At an online conference held by the National Association of Secretaries of State, a top Department of Homeland Security election security official stated malicious software targeting computer systems used by election officials remains an issue.

“We’ll see that ransomware will come and take down the county network, which has an impact on the election network, even though it wasn’t being targeted,” explained Matt Masterson, senior adviser on election security for the Department of Homeland Security. “It may have an impact on, particularly, a local office’s ability to run elections.”

For hackers looking to undermine the upcoming election, underprepared election administrators are an easy target. Election administrators claim security testing and monitoring of election networks is better now than it was in 2016, though. More counties are using paper-ballot voting machines as a backup. 

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Recommended

What is hacktivism?
hacking

What is hacktivism?

13 Oct 2020
Microsoft: Iranian hackers are exploiting ZeroLogon flaw
Security

Microsoft: Iranian hackers are exploiting ZeroLogon flaw

6 Oct 2020
The Ritz suffers data breach after hackers pose as staff
data breaches

The Ritz suffers data breach after hackers pose as staff

17 Aug 2020
Russia hacked Liam Fox's personal email to steal trade documents
phishing

Russia hacked Liam Fox's personal email to steal trade documents

4 Aug 2020

Most Popular

The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

5 Oct 2020
iPhone 12 lineup official with A14 Bionic chip and 5G support
Mobile Phones

iPhone 12 lineup official with A14 Bionic chip and 5G support

13 Oct 2020
Google blocked record-breaking 2.5Tbps DDoS attack in 2017
Security

Google blocked record-breaking 2.5Tbps DDoS attack in 2017

19 Oct 2020