In 2022, malicious emails targeting Pennsylvania county election employees surged around its primary elections on May 17, rising greater than 546% in six months. Paired with the potential for nefarious large language models (LLMs) on top of those traditional phishing attacks, there’s a high likelihood that the on a regular basis American will likely be the goal of an excellent more realistic scam this election season.

Governments are beginning to take notice, especially as AI becomes integrated into our every day lives. As an example, the U.S. Cybersecurity and Infrastructure Security Agency launched a program to spice up election security – demonstrating a growing demand from each the federal government and the general public to guard themselves, and their data, from potential bad actors this election season.

And much more recently, on the 2024 Munich Security Conference, 20 technology and AI corporations signed a “Tech Accord to Combat Deceptive Use of AI in 2024 Elections,” which highlights guiding principles to guard elections and the electoral process including prevention, provenance, detection, responsive protection, evaluation and public awareness. Made up of major tech players including Microsoft, Amazon, and Google, this signifies a very important shift within the industry that even beyond political affiliations, data security is a subject that can concern residents and cyber experts alike throughout the remaining of this election yr. Furthermore, generative AI will greatly impact how bad actors can perform their attacks, making it easier to make highly realistic scams.

Varieties of Election Scams

While election season just isn’t the one time we see a rise in scams, when it comes time to vote, either within the primaries or general election, we are inclined to see a rise in several methods and techniques. Each of those are used with the standard goal of getting access to a person’s account or monetary gain and the implications of falling for them can have major consequences. In reality, deepfake fraud alone has cost the U.S. greater than $3.4 billion in losses.

Some examples of scams we see around election season include:

• Phishing: Phishing involves the usage of phony links, emails, and web sites to realize access to sensitive consumer information – normally by installing malware on the goal system. This data is then used to steal other identities, gain access to precious assets and overload inboxes with email spam. In an election season, phishing emails will be camouflaged as donation emails getting a citizen to click the link, pondering they’re donating to a candidate, but actually playing into a nasty actor’s scheme.
• Robocalls, Impersonations, and AI-generated voice or chatbots: As seen in Latest Hampshire when a robocall impersonated President Biden urging residents to not vote, election season will bring an increase in impersonations of pollsters or political candidates to falsely earn trust and get sensitive information.
• Deepfakes: With the rise of AI, deepfakes have turn into incredibly realistic today and will be used to impersonate a boss and even your favorite celebrity. Deepfakes are videos or images that utilize AI to interchange faces or manipulate facial expressions or speech. Most of the deepfakes we encounter every day will likely be in the shape of a video, with a doctored clip depicting the person saying or doing something they might have never done. This is anticipated to be especially prevalent this election season with the danger of deepfakes being created to impersonate candidates. Even outside of the U.S., resembling within the UK, there are fears deepfakes may very well be used to ​​rig elections.

AI’s Impact on Elections

On top of those scams, AI algorithms are getting used to generate more convincing and interesting fake messages, emails, and social media posts to trick users into giving up sensitive information.

Microsoft and OpenAI published a threat briefing, “Navigating Cyberthreats And Strengthening Defenses In The Era Of AI,” that noted five threat actors from Russia, North Korea, Iran and China have all already been using GenAI for brand new and progressive ways to boost their operations against soft targets.

Scams like chatbots, voice cloning, and more are taken one step further with AI as a tool to spread misinformation, develop malware, and impersonate individuals. Voice cloning tools can create near-perfect replicas of an election figure’s voice or face, for instance. AI is also used to flood call centers with fake voter calls, overwhelming them with misinformation.

On the best alert will likely be social media, because it is a fundamental vehicle for campaigns this election season. Voters will share in the event that they’ve voted and perhaps even show support for his or her favorite candidate on their pages. Nonetheless, this yr poses a brand new threat as we see a brand new increase in AI phishing (to incorporate smishing and vishing) scams.

Consider if someone posted to their social media account support for a selected candidate. A couple of minutes later, they get an email appearing to be from a campaign manager, thanking them for his or her support. That potential victim could engage with that email by clicking a link, opening them as much as credential harvesting, financial loss, or malware installation. Due to AI’s ability to observe, create and deliver targeted phishing campaigns in near real-time, seemingly innocent social media posts now open users as much as a brand new level of realistic phishing schemes.

Remaining Vigilant this Election Season

Attacks like phishing will proceed to be a typical way for bad actors to create realistic scams that may slip by even essentially the most knowledgeable, and within the age of generative AI the potential impact of those has only been accelerated to permit bad actors quicker access to sensitive information.

While businesses deploy technology to guard their data and employees, consumers have to also concentrate on techniques to identify and avoid scams. A few of these include:

• Looking for random or misspelled hyperlinks or email subject lines
• Not clicking on a link from an unknown sender
• Employing two-factor authentication or biometric authentication wherever possible
• Making social media accounts private
• Reporting malicious activity
• Educating other colleagues or relations
• Search for a .gov website domain to confirm the authenticity of an election candidate
• If you will have IT at your workplace, you may as well ask about:
  • Zero Trust networks
  • Phishing-resistant two-factor authentication
  • Email security tools (DMARC, DKIM, SPF)
  • Methods to digitally sign content (or one other solution to cryptographically solution to confirm your communications)

Although election seasons are a time to be on high alert, attacks can occur at any time, so it’s necessary to make sure your cybersecurity foundations are strong and reliable year-round.