Romania cancels election after systems targeted in cyberattacks over 85,000
times

Date:
Fri, 06 Dec 2024 14:05:53 +0000

Description:
Declassified Romanian intelligence documented 85,000 attacks targeting
election infrastructure.

FULL STORY

A recently declassified report [ PDF ] from Romanias Intelligence Service
(SRI) has revealed that the elections infrastructure was targeted by over
85,000 cyberattacks over the run up to election day. 

The primary concern from these attacks is the state-sponsored online 
influence campaign promoting the election of front-runner and Pro-Moscow
candidate Clin Georgescu. Access credentials for election websites were 
stolen by threat actors and leaked on a Russian hacker forum, which is a
worrying development given the volatility of the regions political landscape. 

The SRI confirmed that an attack on the IT infrastructure of the Romanian
Permanent Electoral Authority (AEP) compromised a server which mapped data
connected to the AEPs network, which occurred on November 19th. In light of
these developments, the election has since been cancelled by Romanian courts
to allow for a re-run of the presidential election first round.

Significant breaches

Between the initial breach and November 25th, which was the end of the first
round of Presidential elections, BleepingComputer reports that the 85,000
attacks were targeting the information systems which support the electoral
process. Analysts have confirmed that the scale of the campaign would point 
to a state actor. 

"Romaniaalong with other states on NATO's eastern flankhas become a priority
for Russia's hostile actions; there is a growing interest in the Kremlin to
influence (at least) the mood and agenda in Romanian society in the electoral
context through propaganda and disinformation." the report confirms. 

Romanian Prime Minister Marcel Ciolacu said that anulling the election was
"the only correct decision," with the judges of the Constitutional Court
citing the same report as a factor in its decision making. 

Its important to note that the SRI has not directly attributed these attacks
to a specific threat actor, but geopolitical tensions do seem to suggest that
theyre looking in a specific direction. 

 Russian cyber influence campaigns have been reported during the US election
cycle, so there is precedent for similar incidents. Russia has denied any
interference with Romanian elections. 

Romanias infrastructure is still being affected by vulnerabilities, the 
agency warned, and these could be exploited heading into the second round of
the election.

======================================================================
Link to news story:
https://www.techradar.com/pro/romania-cancels-election-after-systems-targeted-
in-cyberattacks-over-85-000-times

$$
--- SBBSecho 3.20-Linux