Why This Election Cycle Is Different

Traditionally, election cybersecurity focuses on protecting voting systems and preventing foreign interference. But this year, the threats have expanded to include:

• AI-driven misinformation: Bad actors are using AI to generate fake news articles, deepfake videos, and personalized phishing emails at scale.
• Phishing attacks on campaigns: Over 9,600 leaked credentials from Democratic fundraising platform ActBlue and 6,500 from WinRed (Republican counterpart) have already been exposed, risking donor fraud and unauthorized access.
• Foreign adversary tactics: Russia, China, and Iran are employing distinct strategies—from narrative amplification to reconnaissance—to exploit U.S. Political divisions.
• Suspicious domain registrations: Over 5,000 new domains containing “election” or “vote” have been registered since January, raising red flags for potential phishing or impersonation schemes.

Unlike past elections, where threats were often predictable, this cycle is marked by speed and adaptability. “We’re seeing AI tools that can generate content indistinguishable from human-created material,” says Aaron Rose, Check Point’s cybersecurity expert. “This isn’t just about scam emails anymore—it’s about deepfakes, AI-generated social media posts, and hyper-targeted disinformation that can sway local races just as easily as national ones.”

The Threat Breakdown: What You Need to Know

1. AI: The Wildcard in Election Disinformation

AI tools like ChatGPT, MidJourney, and Synthesia have lowered the barrier for creating convincing fake content. Researchers at RAND Corporation found that AI-generated deepfake videos of political figures can spread 10 times faster than traditional misinformation. For the 2024 midterms, experts predict:

• AI-cloned voices impersonating candidates in robocalls.
• Fake local news websites using AI to mimic reputable outlets.
• Personalized disinformation tailored to swing-state voters.

“The biggest challenge isn’t detecting AI content—it’s detecting what’s missing,” says CISA Director Jen Easterly. “If a video of a candidate making a controversial statement goes viral, and it’s AI-generated, how do we know before millions see it?”

2. Foreign Interference: Russia, China, and Iran’s Playbook

While foreign election interference is not new, the 2024 threat landscape is more fragmented—and more aggressive. Here’s how each adversary is approaching the midterms:

Unlike the 2020 election, where foreign interference was concentrated on national races, this year’s threats are localized. “They’re not just going after the presidency—they’re targeting school board races, state legislatures, and even local prosecutors,” warns Dr. David Grossman, cybersecurity expert at Stanford University. “Their goal isn’t to flip the election—it’s to make voters question whether their voice matters at all.”

What’s Being Done—and What’s Missing

The U.S. Government has long-standing protocols for election cybersecurity, but this year’s threats have exposed gaps:

• State-level disparities: While some states (like Oregon) have robust cyber training, others rely on National Guard volunteers to fill gaps left by federal pullbacks.
• AI detection lag: Tools like Microsoft’s AI Defender can flag deepfakes, but they’re not foolproof—and many campaigns lack access.
• Funding shortfalls: CISA’s grants for election security have been slashed by 30% since 2023, forcing states to prioritize critical infrastructure over cybersecurity.

Boockvar criticizes the shift under the current administration: “We’ve gone from a model of federal-state collaboration to one where states are left to fend for themselves. That’s a recipe for disaster.”

How Voters and Campaigns Can Stay Safe

While the threats are daunting, experts offer actionable steps to mitigate risks:

For Voters:

• Verify before you click: Hover over links in emails or social media—if the URL looks suspicious (e.g., “Vote[dot]Official[dot]gov”), don’t engage.
• Use multi-factor authentication (MFA): Enable MFA on all accounts, especially email and social media.
• Check domain legitimacy: If a website claims to be official, visit the official U.S. Government site or your state’s election office to confirm.
• Report suspicious content: Use CISA’s reporting tool or platforms like Facebook’s misinformation reporting.

For Campaigns and Parties:

• Mandate cybersecurity training: Simulate phishing attacks quarterly (tools like KnowBe4 can help).
• Secure fundraising platforms: Use Stripe Radar or PayPal’s fraud tools to monitor transactions.
• Monitor domain registrations: Tools like SecurityTrails can track suspicious new domains.
• Prepare for AI disinformation: Use AI detection tools to verify media before sharing.