Here’s What Hackers Were Doing on Election Night

TL;DR

Election night saw minimal cyber attacks, indicating potential coordinated pause.

Transcript

hi and welcome to uh digital defense uh my name is Jordan Robertson I'm a cyber security reporter here with Bloomberg in Washington DC and this is our weekly cyber security show so we want to talk this week about what everybody's talking about the election and you know we uh we in the news media spent countless hours dissecting the hacking attacks ... Read More

Key Insights

• The US government accused Russian hackers of interfering in the election, emphasizing the ongoing nature of information warfare.
• On election night, there was an unexpected reduction in denial of service attacks, suggesting a deliberate pause by potential attackers.
• The absence of significant cyber attacks on election systems was unusual, indicating possible coordination to avoid disruptions.
• Potential hacking of voting systems would be subtle, targeting small vote changes in key swing states, rather than large-scale attacks.
• The digital attack map used during the election is a public tool to visualize internet attacks, though primarily informative rather than preventative.
• Old voting technology poses risks of malfunction or hacking, emphasizing the need for modernization to ensure election integrity.
• Post-election, Russian-affiliated hackers resumed activities, targeting US political organizations with sophisticated spear-phishing campaigns.
• Efforts to modernize voting systems include open-source projects, aiming to improve transparency and security in future elections.

Questions & Answers

Q: Did the government take specific measures to stop hackers on election night?

The government employed the Multi-State Information Sharing and Analysis Center (MS-ISAC) to monitor for cyber attacks. Surprisingly, very few reports of coordinated attacks were received, indicating an unusual lack of activity. This absence of attacks suggests a possible coordinated decision by potential attackers to refrain from disrupting the election process.

Q: Were there any denial of service attacks or internet blackouts on election day?

There were no significant denial of service attacks or internet blackouts reported on election day. While mechanical malfunctions occurred with some voting machines, these were attributed to old technology rather than cyber attacks. The lack of major cyber incidents suggests a deliberate pause in activities by potential attackers during the election.

Q: Can voting machines be hacked despite not being connected to the internet?

Voting machines, though not directly connected to the internet, can still be vulnerable to hacking. They are often outdated and susceptible to tampering through physical access or during the tabulation process. Cybersecurity experts emphasize that the most likely points of attack are the tabulators and the systems used for reporting election results.

Q: Are there plans to improve outdated voting machines?

Efforts are underway to modernize voting technology, with initiatives like Los Angeles County's open-source project aiming to build a new system from scratch. However, widespread improvements are unlikely without federal funding. The outdated state of current voting machines poses risks, highlighting the need for investment in secure and modern election infrastructure.

Q: What happened six hours after Trump was named president-elect?

Six hours after Trump was named president-elect, Russian-affiliated hackers resumed activities, launching a spear-phishing campaign targeting US political organizations. This campaign involved sending emails with provocative subjects related to election rigging, using similar attack infrastructure as previous hacks on the Democratic Party, indicating a continuation of cyber activities post-election.

Q: How can the digital attack map be used to stop hackers?

The digital attack map is primarily an informative tool for the public to visualize internet attack patterns. While it provides visibility into ongoing attacks, it is not directly used to stop hackers. Network providers can use such data to enhance their defenses, but the map itself is more educational, helping the public understand internet activity.

Q: Why did the internet go silent from a security perspective on election night?

The internet's silence on election night, from a security perspective, was unusual and suggested a deliberate pause in cyber activities. This lack of attack traffic indicated a possible coordinated decision by potential attackers, such as state-sponsored groups, to refrain from disrupting the election process, allowing information to flow freely on such a critical night.

Q: What is the significance of potential hacking on voting systems?

Potential hacking of voting systems poses a significant threat to election integrity. While large-scale attacks were absent, subtle manipulations in key swing states could alter election outcomes. Ensuring the security of voting systems and the accurate reconciliation of paper ballots with digital tabulations is crucial to maintaining public trust in the electoral process.

Summary & Key Takeaways

• On election night, cybersecurity experts observed an unusual reduction in cyber attacks, suggesting a coordinated effort to pause activities. Despite concerns, there were no significant disruptions to the voting process, indicating potential strategic restraint by attackers. This highlights the ongoing challenges in securing election systems against sophisticated cyber threats.

• The digital attack map used by experts showed minimal denial of service attacks, contrasting with typical high-traffic days. This anomaly suggests a deliberate decision by potential attackers to refrain from disrupting the election. The map serves as a public tool to visualize internet activity but is not a direct means to prevent cyber incidents.

• Post-election, Russian-affiliated hackers resumed targeting US political organizations with spear-phishing campaigns. This resurgence underscores the persistent threat of cyber attacks on political entities and the need for vigilance. Modernizing voting technology through open-source initiatives could enhance security and transparency in future elections.