Microsoft Threat Analysis Center:

Russia and Iran have both undertaken cyber influence operations headed into the 2024 presidential election. In our last report, published on August 8, we detailed how Iranian cyber-enabled influence operations sought to undermine the Republican campaign through targeted hack-and-leak operations, covert social media personas, and imposter US news sites. In the past two months, Microsoft has observed a notable shift in Russian influence operations tactics reflecting the changing U.S. political environment. Specifically, we have observed Russia pivot towards targeting the Harris-Walz campaign, with actors disseminating fabricated videos designed to sow discord and spread disinformation about the new Democratic nominee Vice President Harris.

We discuss this activity in a new report by the Microsoft Threat Analysis Center (MTAC) released today. This update follows other reports we have released around activity by actors advancing the geopolitical goals of Iran and China.

The shift to focusing on the Harris-Walz campaign reflects a strategic move by Russian actors aimed at exploiting any perceived vulnerabilities in the new candidates. Initially, Russian influence operations struggled to evolve their efforts following President Biden’s departure from the 2024 US presidential race. However, in late August and September, we observed two Russian actors MTAC tracks closely — previously reported as Storm-1516 and Storm-1679 — using videos designed to discredit Harris and stoke controversy around her campaign. [Continue reading…]