Google issues warning about Iran-backed hackers targeting US presidential elections

Hackers and threat actors often get busy ahead of big political events across the world. Google has now confirmed that Iran-backed hacking group has been targeting accounts associated with the US presidential election. Google’s Threat Analysis Group posted a detailed blog on how hackers have been going after Israel as well. The hacker group goes by the name of APT 42.

“Associated with Iran’s Islamic Revolutionary Guard Corps (IRGC), APT42 consistently targets high-profile users in Israel and the US, including current and former government officials, political campaigns, diplomats, individuals who work at think tanks, as well as NGOs and academic institutions that contribute to foreign policy conversations,” said Google in a blog post.

Google explained that APT42 uses a variety of different tactics as part of their email phishing campaigns — including hosting malware, phishing pages, and malicious redirects. “They generally try to abuse services like Google (i.e. Sites, Drive, Gmail, and others), Dropbox, OneDrive and others for these purposes,” said Google.

According to Google, there have been unsuccessful attempts from APT42 to compromise the personal accounts of individuals affiliated with President Joe Biden, Vice President Kamala Harris and former President Donald Trump, including current and former government officials and individuals associated with the campaigns.