News

Russian, Chinese and Iranian Hackers Target Trump and Biden Campaign Associates

Giulio Saggin
Giulio Saggin
Tuesday 28 November 2023

Hackers from China and Iran are targeting people working on the 2020 election campaigns of both President Donald Trump and Joe Biden, while the same Russian military hackers who interfered with the 2016 Democratic campaign are also involved.

"(It is) clear that foreign activity groups have stepped up their efforts targeting the 2020 election as had been anticipated, and is consistent with what the US government and others have reported," warned Microsoft in a blog.

The Iranian hacker group, known as Phosphorus, attacked the email accounts of some of those associated with Trump's campaign, while the group from China, Zirconium, attacked the Biden campaign via the personal email accounts of people working with the campaign.

"(Zirconium) has also targeted at least one prominent individual formerly associated with the Trump Administration," said Microsoft.

The attacks on both campaigns were unsuccessful.

The Russian group, Strontium, has attacked more than 200 election-related organizations in the US and Europe, including consultants serving the Republicans and Democrats, the German Marshall Fund of the United States, the European People's Party, and political parties in the UK.

With Strontium's history going back to the 2016 election, Microsoft has been watching them closely.

"Similar to what we observed in 2016," said Microsoft, "Strontium is launching campaigns to harvest people’s log-in credentials or compromise their accounts, presumably to aid in intelligence gathering or disruption operations."

The Chinese hackers have also attacked non-campaign 'targets', including those in the international affairs community and academics in international affairs from more than 15 universities.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203