NEW YORK (AP) 鈥� Google said Wednesday that an linked to the country鈥檚 Revolutionary Guard has tried to infiltrate the personal email accounts of roughly a dozen people linked to and since May.
The tech company's threat intelligence arm said the group is still actively targeting people associated with Biden, Trump and , who replaced Biden as the Democratic candidate last month when he dropped out. It said those targeted have included current and former government officials, as well as presidential campaign affiliates.
The new from Google's Threat Analysis Group affirms and expands on a Microsoft released Friday that revealed suspected Iranian cyber intrusion in this year's U.S. presidential election. It sheds light on how foreign adversaries are that is now less than three months away.
Google's report said its threat researchers detected and disrupted a 鈥渟mall but steady cadence鈥� of the Iranian attackers using email credential phishing, a type of cyberattack where the attacker poses as a trusted sender to try to get an email recipient to share their login details. John Hultquist, chief analyst for the company's threat intelligence arm, said the company sends suspected targets of these attacks a Gmail popup that warns them that a government-backed attacker might be trying to steal their password.
The report said Google observed the group gaining access to one high-profile political consultant鈥檚 personal Gmail account. Google reported the incident to the FBI in July. Microsoft鈥檚 Friday report had shared similar information, noting that the email account of a former senior adviser to a presidential campaign had been compromised and weaponized to send a phishing email to a high-ranking campaign official.
The group is familiar to Google's threat intelligence arm and other researchers, and this isn't the first time it has tried to interfere in U.S. elections, Hultquist said. The report noted that the same Iranian group targeted both the Biden and Trump campaigns with phishing attacks during the 2020 cycle, as early as June of that year.
The group also has been prolific in other cyber espionage activity, particularly in the Middle East, the report said. In recent months, as the Israel-Hamas War has aggravated tensions in the region, that activity has included email phishing campaigns targeted at Israeli diplomats, academics, non-governmental organizations and military affiliates.
Trump鈥檚 campaign said Saturday that it and that sensitive internal documents were stolen and distributed. It declared that Iranian actors were to blame.
The same day, Politico revealed it had received by email, though it wasn't clear whether the leaked documents were related to the suspected Iranian cyber activity. The Washington Post and The New York Times also received the documents.
While the Trump campaign hasn鈥檛 provided specific evidence linking Iran to the hack, both Trump and his longtime friend and former adviser Roger Stone have said they were contacted by Microsoft related to suspected cyber intrusions. Stone鈥檚 email was compromised by hackers targeting Trump鈥檚 campaign, a person familiar with the matter said.
Google and Microsoft wouldn't identify the people targeted in the Iranian intrusion attempts or confirm that Stone was among them. Google did confirm that the Iranian group in its report, which it calls APT42, is the same as the one in Microsoft's research. Microsoft refers to the group as Mint Sandstorm.
Harris鈥� campaign has declined to say whether it has identified any state-based intrusion attempts, but has said it vigilantly monitors cyber threats and isn鈥檛 aware of any security breaches of its systems.
The FBI on Monday confirmed that it鈥檚 investigating the intrusion of the Trump campaign. Two people familiar with the matter said the FBI also is investigating attempts to gain access to the Biden-Harris campaign.
The reports of Iranian hacking come as U.S. intelligence officials of persistent and mounting efforts from both Russia and Iran to influence the U.S. election through their online activity. Beyond these hacking incidents, groups linked to the countries have used fake news websites and social media accounts to churn out content that appears intended to sway voters' opinions.
While neither Microsoft nor Google specified Iran's intentions in the U.S. presidential race, U.S. officials have previously hinted that Iran particularly opposes Trump. U.S. officials also have expressed alarm about Tehran's efforts to seek retaliation for a that was ordered by Trump.
Iran鈥檚 mission to the United Nations, when asked about the claim of the Trump campaign, denied 小蓝视频 involved.
鈥淲e do not accord any credence to such reports,鈥� the mission told The Associated Press. 鈥淭he Iranian government neither possesses nor harbors any intent or motive to interfere in the United States presidential election.鈥�
The mission did not immediately respond to a request for comment Wednesday about Google鈥檚 report.
___
Associated Press writer Michael Weissenstein contributed to this report.
___
The Associated Press鈥痳eceives support from several private foundations to enhance its explanatory coverage of elections and democracy. See more about AP鈥檚 democracy initiative . The AP is solely responsible for all content.
Ali Swenson, The Associated Press
