NEW YORK (AP) — Google said Wednesday that an Iranian group linked to the country’s Revolutionary Guard has tried to infiltrate the personal email accounts of roughly a dozen people linked to President Joe Biden and former President Donald Trump since May.
The tech company's threat intelligence arm said the group is still actively targeting people associated with Biden, Trump and Vice President Kamala Harris, who replaced Biden as the Democratic candidate last month when he dropped out. It said those targeted have included current and former government officials, as well as presidential campaign affiliates.
The new report from Google's Threat Analysis Group affirms and expands on a Microsoft report released Friday that revealed suspected Iranian cyber intrusion in this year's U.S. presidential election. It sheds light on how foreign adversaries are ramping up their efforts to disrupt the election that is now less than three months away.
Google's report said its threat researchers detected and disrupted a “small but steady cadence” of the Iranian attackers using email credential phishing, a type of cyberattack where the attacker poses as a trusted sender to try to get an email recipient to share their login details. John Hultquist, chief analyst for the company's threat intelligence arm, said the company sends suspected targets of these attacks a Gmail popup that warns them that a government-backed attacker might be trying to steal their password.
The report said Google observed the group gaining access to one high-profile political consultant’s personal Gmail account. Google reported the incident to the FBI in July. Microsoft’s Friday report had shared similar information, noting that the email account of a former senior adviser to a presidential campaign had been compromised and weaponized to send a phishing email to a high-ranking campaign official.
The group is familiar to Google's threat intelligence arm and other researchers, and this isn't the first time it has tried to interfere in U.S. elections, Hultquist said. The report noted that the same Iranian group targeted both the Biden and Trump campaigns with phishing attacks during the 2020 cycle, as early as June of that year.
The group also has been prolific in other cyber espionage activity, particularly in the Middle East, the report said. In recent months, as the Israel-Hamas War has aggravated tensions in the region, that activity has included email phishing campaigns targeted at Israeli diplomats, academics, non-governmental organizations and military affiliates.
Trump’s campaign said Saturday that it had been hacked and that sensitive internal documents were stolen and distributed. It declared that Iranian actors were to blame.
The same day, Politico revealed it had received leaked internal Trump campaign documents by email, though it wasn't clear whether the leaked documents were related to the suspected Iranian cyber activity. The Washington Post and The New York Times also received the documents.
While the Trump campaign hasn’t provided specific evidence linking Iran to the hack, both Trump and his longtime friend and former adviser Roger Stone have said they were contacted by Microsoft related to suspected cyber intrusions. Stone’s email was compromised by hackers targeting Trump’s campaign, a person familiar with the matter said.
Google and Microsoft wouldn't identify the people targeted in the Iranian intrusion attempts or confirm that Stone was among them. Google did confirm that the Iranian group in its report, which it calls APT42, is the same as the one in Microsoft's research. Microsoft refers to the group as Mint Sandstorm.
Harris’ campaign has declined to say whether it has identified any state-based intrusion attempts, but has said it vigilantly monitors cyber threats and isn’t aware of any security breaches of its systems.
The FBI on Monday confirmed that it’s investigating the intrusion of the Trump campaign. Two people familiar with the matter said the FBI also is investigating attempts to gain access to the Biden-Harris campaign.
The reports of Iranian hacking come as U.S. intelligence officials have warned of persistent and mounting efforts from both Russia and Iran to influence the U.S. election through their online activity. Beyond these hacking incidents, groups linked to the countries have used fake news websites and social media accounts to churn out content that appears intended to sway voters' opinions.
While neither Microsoft nor Google specified Iran's intentions in the U.S. presidential race, U.S. officials have previously hinted that Iran particularly opposes Trump. U.S. officials also have expressed alarm about Tehran's efforts to seek retaliation for a 2020 strike on an Iranian general that was ordered by Trump.
Iran’s mission to the United Nations, when asked about the claim of the Trump campaign, denied being involved.
“We do not accord any credence to such reports,” the mission told The Associated Press. “The Iranian government neither possesses nor harbors any intent or motive to interfere in the United States presidential election.”
The mission did not immediately respond to a request for comment Wednesday about Google’s report.
Associated Press writer Michael Weissenstein contributed to this report.
The Associated Press receives support from several private foundations to enhance its explanatory coverage of elections and democracy. See more about AP’s democracy initiative here. The AP is solely responsible for all content.
Republican presidential nominee former President Donald Trump speaks at a campaign rally Wednesday, Aug. 14, 2024, in Asheville, N.C. (AP Photo/Matt Kelley)
President Joe Biden speaks at the White House Creator Economy Conference in the Indian Treaty Room at the Eisenhower Executive Office Building on the White House complex, Wednesday, Aug. 14, 2024, in Washington. (AP Photo/Mark Schiefelbein)
FILE - A Google sign hangs over an entrance to the company's new building, Sept. 6, 2023, in New York. (AP Photo/Peter Morgan, File)
Hezbollah pounded northern Israel with 140 rockets Friday, a day after the militant group’s leader vowed to retaliate against Israel for a mass bombing attack, the Israeli military and the militant group said.
Israel’s military said the rockets came in three waves Friday afternoon targeting sites along the ravaged border with Lebanon.
Israel's military said it carried out a “targeted strike” on Beirut on Friday afternoon. It offered no further immediate details, but explosions could be heard from the city’s southern suburbs.
In Gaza, Palestinian authorities said 15 people were killed overnight in multiple Israeli attacks.
An airstrike early Friday morning in Gaza City hit a family home, killing six people including an unknown number of children, Gaza’s Civil Defense said. Another person was killed in Gaza City when a strike hit a group of people on a street.
Israel maintains it only targets militants and accuses Hamas and other armed groups of endangering civilians by operating in residential areas. The military, which rarely comments on individual strikes, had no immediate comment.
Gaza’s Health Ministry says more than 41,000 Palestinians have been killed in the territory since Hamas’ Oct. 7 attack. The ministry does not differentiate between fighters and civilians in its count but says a little over half of those killed were women and children.
Israel says it has killed over 17,000 militants, without providing evidence.
Hezbollah began striking Israel almost immediately after Hamas’ Oct. 7 attack that sparked the Israel-Hamas war. They have come close to a full-blown war on several occasions.
Here's the latest:
Israel carried out what its military called a “targeted strike” on Beirut on Friday afternoon.
It offered no further immediate details, but explosions could be heard from the city’s southern suburbs.
Beirut-based Al-Mayadeen TV reported that a drone fired several missiles on the heavily-populated area known as Dahiyeh.
Hezbollah told The Associated Press that an airstrike struck the area without giving further details.
The strike came after Hezbollah pounded Israel with 140 rockets earlier Friday and tensions threaten to spill into all-out war.
Palestinian authorities say 15 people were killed overnight in the Gaza Strip in multiple Israeli attacks.
An airstrike early Friday morning in Gaza City hit a family home, killing six people including an unknown number of children, Gaza’s Civil Defense said. Another person was killed in Gaza City when a strike hit a group of people on a street.
In Beit Hanoun, north of Gaza City, another person was killed and several others injured when a vehicle was hit by an Israeli strike, the Civil Defense said.
Late Thursday, six more people were killed in a strike that hit a home in the center of Gaza City, while another was killed in Beit Lahya, north of Gaza City.
Israel maintains it only targets militants and accuses Hamas and other armed groups of endangering civilians by operating in residential areas. The military, which rarely comments on individual strikes, had no immediate comment.
The war has caused vast destruction and displaced about 90% of Gaza’s population of 2.3 million.
Israel's foreign ministry said Friday it submitted two legal briefs in response to the International Criminal Court prosecutor’s request for arrest warrants against the country's leaders.
The court’s prosecutor is seeking arrest warrants for Israeli Prime Minister Benjamin Netanyahu and Defense Minister Yoav Gallant, as well as top Hamas leader Yahya Sinwar and other Hamas leaders. One of them was since assassinated in what was believed to be an Israeli strike.
The foreign ministry said it has submitted two legal briefs challenging the court’s jurisdiction to arrest Israeli leaders and claiming the court did not provide Israel the opportunity to investigate itself before requesting the warrants.
“No other democracy with an independent and respected legal system like that which exists in Israel has been treated in this prejudicial manner by the Prosecutor,” wrote Foreign Ministry spokesperson Oren Marmorstein on the social media platform X. He said Israel remained “steadfast in its commitment to the rule of law and justice” and would continue to protect its citizens against militancy.
Israel is not a party to the court. Rights groups say the country has struggled to investigate itself in the past. Netanyahu has brushed off calls for a state investigation into the failings that led to the Oct. 7 attack.
BAGHDAD — A leader of an Iranian-backed Iraqi militia was killed Friday in a strike in Syria, a war monitor and a militia official said.
Iraq’s Kataeb Hezbollah group — which is different from the Lebanese militant group Hezbollah — said in a statement that Abu Haidar al-Khafaji was killed “while performing his duties as a security advisor in Damascus.”
The UK-based Syrian Observatory for Human Rights had earlier reported that a leader in Iraq’s Kataeb Hezbollah group was killed and another person injured in a drone strike on the car they were traveling in on the road to the Damascus airport.
An official with an Iraqi militia confirmed that a car carrying a group of militia members was struck in Damascus, killing one person and injuring three others. The official spoke on condition of anonymity because he was not authorized to speak to the media.
There was no comment from Israeli officials on the strike. Israel frequently strikes Iranian and Iran-linked groups in Syria but rarely acknowledges the strikes.
Tensions have heightened in the region following a wave of apparently remotely detonated explosions in Lebanon targeting pagers and walkie talkies belonging to the Lebanese Hezbollah. The attacks, widely blamed on Israel, which has not commented on them, killed at least 37 people - including two children - and wounded about 3,000.
— By Qassim Abdul-Zahra in Baghdad
BEIRUT — Israel’s military killed two Hezbollah members who were planting explosives along the border over the weekend, Israel’s military and an official with a Lebanese group said.
The official with a Lebanese group said the two members of the militant group were killed Sunday and their bodies were taken by Israeli troops because they were too close to the fence along the tense frontier. The official spoke Friday on condition of anonymity because he was not authorized to speak to the media.
On Thursday, Israel’s military released a video it said was taken by one of the fighters showing the militants coming under fire. The military said that the two fighters were killed by Israeli troops as they tried to plant an improvised explosive device near a military post.
In the days following the tense border interaction, thousands of devices exploded in different parts of Lebanon and Syria, killing 37 people and wounding around 3,000 others. The attack was blamed on Israel, and many of those killed or injured were members of Hezbollah.
Associated Press writer Bassem Mroue contributed to this report.
Hezbollah members carry the coffin of their comrade who was killed when a handheld device exploded, during a funeral procession in the southern suburbs of Beirut, Thursday, Sept. 19, 2024. (AP Photo/Hussein Malla)
Right-wing Israelis with relatives held hostage by Hamas in the Gaza Strip, and their supporters, rally against a hostage deal, in Jerusalem, Thursday, Sept. 19, 2024. The placard in Hebrew reads: " To bathe in his blood." (AP Photo/Maya Alleruzzo)
Houses are engulfed in fire as the Israeli army raided the northern West Bank town of Qabatiya on Thursday, Sept. 19, 2024. (AP Photo/Majdi Mohammed)
Palestinians duck for cover as the Israeli army raided the northern West Bank town of Qabatiya on Thursday, Sept.19, 2024. (AP Photo/Majdi Mohammed)
FILE - Hezbollah fighters carry one of the coffins of four fallen comrades who were killed Tuesday after their handheld pagers exploded, in the southern suburb of Beirut, Wednesday, Sept. 18, 2024. (AP Photo/Bilal Hussein, File)
