Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
US election officials warned of sophisticated phishing and smishing attacks targeting 2026 midterms.
Run CISA?
Get an email when a reviewed story names CISA, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
CISA and the FBI have issued a warning about cyber threats targeting election and campaign officials for the 2026 U.S. midterm elections. Threat actors are employing advanced phishing and smishing tactics, including convincing emails, texts, audio, and video, to steal credentials and install malware. These actors are drawn to election personnel due to their access to sensitive voter data and campaign information.
The lesson from this incident
Full lessonCyber threat actors are leveraging sophisticated phishing, smishing, and AI-generated audio/video content to steal credentials from election and campaign officials who hold access to sensitive voter data. The root cause is a combination of insufficient security awareness training and inadequate access controls that make high-value targets easy to compromise through social engineering alone. Election personnel are particularly attractive targets because a single compromised account can expose large volumes of personally identifiable voter information. As AI-generated deepfake content becomes more convincing, traditional defenses like spotting 'suspicious-looking' emails are no longer sufficient without layered technical and procedural controls.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.