Romania cancels election after systems targeted in cyberattacks over 85,000 times

Date:
Fri, 06 Dec 2024 14:05:53 +0000

Description:
Declassified Romanian intelligence documented 85,000 attacks targeting
election infrastructure.

FULL STORY

A recently declassified report [ PDF ] from Romanias Intelligence Service
(SRI) has revealed that the elections infrastructure was targeted by over 85,000 cyberattacks over the run up to election day.

The primary concern from these attacks is the state-sponsored online
influence campaign promoting the election of front-runner and Pro-Moscow candidate Clin Georgescu. Access credentials for election websites were
stolen by threat actors and leaked on a Russian hacker forum, which is a worrying development given the volatility of the regions political landscape.

The SRI confirmed that an attack on the IT infrastructure of the Romanian Permanent Electoral Authority (AEP) compromised a server which mapped data connected to the AEPs network, which occurred on November 19th. In light of these developments, the election has since been cancelled by Romanian courts
to allow for a re-run of the presidential election first round.

Significant breaches

Between the initial breach and November 25th, which was the end of the first round of Presidential elections, BleepingComputer reports that the 85,000 attacks were targeting the information systems which support the electoral process. Analysts have confirmed that the scale of the campaign would point
to a state actor.

"Romaniaalong with other states on NATO's eastern flankhas become a priority for Russia's hostile actions; there is a growing interest in the Kremlin to influence (at least) the mood and agenda in Romanian society in the electoral context through propaganda and disinformation." the report confirms.

Romanian Prime Minister Marcel Ciolacu said that anulling the election was
"the only correct decision," with the judges of the Constitutional Court
citing the same report as a factor in its decision making.

Its important to note that the SRI has not directly attributed these attacks
to a specific threat actor, but geopolitical tensions do seem to suggest that theyre looking in a specific direction.

Russian cyber influence campaigns have been reported during the US election cycle, so there is precedent for similar incidents. Russia has denied any interference with Romanian elections.

Romanias infrastructure is still being affected by vulnerabilities, the
agency warned, and these could be exploited heading into the second round of the election.

======================================================================
Link to news story: https://www.techradar.com/pro/romania-cancels-election-after-systems-targeted- in-cyberattacks-over-85-000-times

$$
--- SBBSecho 3.20-Linux
* Origin: capitolcityonline.net * Telnet/SSH:2022/HTTP (1:2320/105)