US officials say Russia, Iran have obtained voter info

File Photo

Russia and Iran have obtained U.S. voting registration information, the government’s national intelligence director said at a rare news conference Wednesday night.

Posted: Oct 21, 2020 8:18 PM
Updated: Oct 22, 2020 9:49 AM

BOSTON (AP) — Russia and Iran have obtained U.S. voting registration information, the government’s national intelligence director said at a rare news conference Wednesday night.

John Ratcliffe, the intelligence director, and FBI Director Chris Wray say the U.S. will impose costs on any foreign countries interfering in the 2020 U.S. election.

This is a breaking news update. The story will be updated. Below is previous coverage.

Democratic voters in at least four battleground states including Florida and Pennsylvania received threatening emails, falsely purporting to be from the far-right group Proud Boys, that warned “we will come after you” if the recipients didn’t vote for President Donald Trump.

The voter-intimidation operation apparently used email addresses obtained from state voter registration lists, which include party affiliation and home addresses and can include email addresses and phone numbers. Those addresses were then used in an apparently widespread targeted spamming operation. The senders claimed they would know which candidate the recipient was voting for in the Nov. 3 election, for which early voting is ongoing.

Federal officials have long warned about the possibility of this type of operation, as such registration lists are not difficult to obtain.

“These emails are meant to intimidate and undermine American voters’ confidence in our elections,” Christopher Krebs, the top election security official at the Department of Homeland Security, tweeted Tuesday night after reports of the emails first surfaced.

He urged voters not to fall for “sensational and unverified claims,” reminding them that ballot secrecy is guaranteed by law in all states. “The last line of defense in election security is you – the American voter.”

A spokesperson at FBI headquarters did not immediately return a phone call seeking comment.

Asked about the emails during an online forum on Wednesday, Pennsylvania Secretary of State Kathy Boockvar said she lacked specific information. “I am aware that they were sent to voters in multiple swing states and we are working closely with the attorney general on these types of things and others,” she said.

Bennett Ragan, the campaign manager of Florida statehouse candidate Kayser Enneking, said he got two of the emails and knew about 10 other people in Gainesville who also got them. Bennett said the home address included in the personalized email he received was not current so he figures the data on him was acquired from the 2018 primary election voter roll.

The emails were sent by a group — its identity unknown — that put considerable time and effort into identifying vulnerable internet servers in several countries including Estonia, Saudi Arabia and the United Arab Emirates which they hijacked to send the emails, said security researcher John Scott-Railton, who examined dozens. Voters in Arizona and Alaska also received them, he said.

The Associated Press obtained the personalized email from two Florida voters in different parts of the state.

Scott-Railton, of the Citizen Lab online civil-rights project at the University of Toronto, said the Proud Boys email address that the spammers placed in the email’s sender field was “a flag of convenience.” The true addresses of origin — not readily visible but listed in email headers — were the hijacked servers. The emails reviewed by the AP both appeared to originate from a business in Estonia.

And while the operation was not terribly sophisticated, it may still have been backed by a nation-state. There are documented cases in which Russian agents have sent threatening mail, including to U.S. military spouses. Ukraine has also been hit by email hoaxes suspected to be the work of the Kremlin. Intelligence services like to use such techniques because they don’t bear the stamp of government, thus providing deniability.

“We’ve definitely seen state actors impersonate political figures and factions in the past. It wouldn’t be unheard of for them to do that in this case,” said John Hultquist, director of threat intelligence analysis at the cybersecurity firm FireEye. None of the Russian military hackers indicted by U.S. prosecutors for interfering in the 2016 presidential election on Trump’s behalf have been brought to justice.

“To me this is a canary case. And what it shows is that somebody with obvious malicious intent can get messages that leverage voter registration data in front of the eyeballs of a large number of Americans,” said Scott-Railton. The emails clearly penetrated the spam filters of email providers, he said, though some were likely blocked.

Microsoft and Google, major email providers with top-notch security researchers and tools, did not immediately comment on how many of the spoofed mails may have been sent and what intelligence they may have about the sender’s identity.

“The real question is just how well did this operation cover its tracks,” said Scott-Railton, who worries that the operation might have been a dry run. “Is someone testing a capability that they intend to use on a much larger scale in the future?”

He urged the U.S. government and its allies to be as transparent as possible about what they know about the operation as soon as possible to assure the public that it does not endanger election security.

In a post on the messaging service Telegram, an account that claims to represent the Seattle Proud Boys said the group had no involvement with the emails, calling them a “false flag operation.” President Trump has been criticized for refusing to condemn the far-right group.

Daniel Tokaji, dean of the University of Wisconsin Law School and an expert on voting rights, said he’s afraid we could see more of the type of voter suppression that the intimidation emails attempt — trying to scare people into not voting at all.

Jessica Levinson, a Loyola Law School professor, said the use of voter roll information could make the emails especially frightening. “It puts so much unfair stress and responsibility on the voters and nobody should have to fear for their safety when deciding who to vote for — but that’s exactly the point of voter suppression.”

Associated Press writers Eric Tucker in Washington, D.C., David Klepper in Providence, R.I, and Christina Cassidy in Atlanta contributed to this report.

Terre Haute
Clear
47° wxIcon
Hi: 49° Lo: 28°
Feels Like: 47°
Robinson
Clear
47° wxIcon
Hi: 48° Lo: 26°
Feels Like: 47°
Indianapolis
Clear
46° wxIcon
Hi: 48° Lo: 30°
Feels Like: 46°
Rockville
Clear
45° wxIcon
Hi: 48° Lo: 29°
Feels Like: 45°
Casey
Clear
46° wxIcon
Hi: 48° Lo: 29°
Feels Like: 46°
Brazil
Clear
47° wxIcon
Hi: 48° Lo: 28°
Feels Like: 47°
Marshall
Clear
47° wxIcon
Hi: 49° Lo: 28°
Feels Like: 47°
Sunny and Calm Saturday
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Cases: 705063

Reported Deaths: 12685
CountyCasesDeaths
Cook2988706476
DuPage44035777
Will37864560
Lake36375629
Kane31136461
Winnebago18509262
Madison14013242
McHenry13979156
St. Clair12956257
Champaign1061957
Sangamon993799
Peoria8880129
Rock Island8444134
Kankakee8438103
McLean819054
Tazewell6625102
Macon6370131
Kendall613347
LaSalle5975133
DeKalb488147
Adams465148
Boone383633
Vermilion380150
Whiteside3668109
Williamson351080
Coles326458
Clinton324761
Ogle279135
Knox275462
Effingham269621
Grundy269418
Jackson261136
Henry260615
Marion241751
Stephenson241534
Livingston221226
Randolph218826
Morgan215636
Macoupin211517
Bureau207842
Monroe202045
Franklin199525
Lee196334
Christian185443
Jefferson183159
Woodford170627
Logan165813
Fayette165029
Iroquois163426
McDonough156240
Fulton141611
Shelby135026
Douglas132716
Jersey120924
Union116428
Montgomery112619
Crawford109813
Saline109025
Jo Daviess106217
Warren106220
Perry105423
Carroll104724
Bond102110
Lawrence101710
Pike99427
Cass94823
Hancock94012
Wayne87633
Moultrie87510
Clay81820
Greene80929
Clark78620
Edgar77815
Piatt7645
Richland73819
Ford73222
Mercer73010
Mason70219
Johnson7016
Washington6712
Jasper63411
Cumberland60916
De Witt60017
White5878
Massac5833
Wabash5348
Menard4571
Unassigned4270
Pulaski4072
Marshall3926
Hamilton3783
Brown3203
Henderson2790
Schuyler2661
Alexander2522
Stark2523
Putnam2420
Calhoun2310
Scott2310
Edwards2233
Gallatin1883
Hardin1461
Pope971
Out of IL110

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Cases: 324537

Reported Deaths: 5594
CountyCasesDeaths
Marion44186858
Lake28094462
Allen18660301
Elkhart17663230
St. Joseph17256234
Hamilton13612170
Vanderburgh10028121
Tippecanoe896729
Porter855386
Johnson6718169
Hendricks6412158
Vigo625889
Monroe550450
Clark531078
Madison5239122
Delaware5075103
LaPorte481196
Kosciusko475941
Howard364177
Bartholomew335365
Warrick335372
Floyd329478
Wayne325678
Marshall311846
Cass303931
Grant287150
Hancock272957
Noble264946
Henry256437
Boone255054
Dubois245631
Dearborn228231
Jackson226334
Morgan221243
Gibson194926
Knox193021
Shelby192656
Clinton185421
DeKalb183932
Lawrence183849
Wabash172821
Adams172422
Miami170815
Daviess163145
Fayette153734
Steuben153414
Jasper151713
Montgomery149327
Harrison147624
LaGrange146131
Ripley145815
Whitley142314
Huntington133510
Decatur132543
Putnam131128
White131022
Wells130130
Clay130023
Randolph128121
Posey125816
Jefferson124116
Scott114520
Greene106053
Sullivan102716
Jay101913
Starke95022
Jennings90414
Spencer8908
Fulton87519
Perry85121
Fountain8228
Washington8127
Franklin73427
Carroll71913
Orange70028
Vermillion6607
Owen6468
Tipton60327
Parke6026
Newton57812
Rush5708
Blackford56612
Pike52719
Pulaski41815
Martin3705
Benton3643
Brown3574
Crawford3081
Union2782
Switzerland2655
Warren2562
Ohio2387
Unassigned0266