Microsoft warns Iran ramping up cyber activity that seems aimed at swaying US election

NEW YORK — Iran is accelerating online activity that appears intended to influence the US election, in one case targeting a presidential campaign with an email phishing attack, Microsoft says.

Iranian actors also have spent recent months creating fake news sites and impersonating activists, laying the groundwork to stoke division and potentially sway American voters this fall, especially in swing states, the technology giant finds.

The findings in Microsoft’s newest threat intelligence report show how Iran, which has been active in recent US elections, is evolving its tactics for another election that’s likely to have global implications. The report goes a step beyond anything US intelligence officials have disclosed, giving specific examples of Iranian groups and the actions they have taken so far. Iran’s United Nations mission denies it had plans to interfere or launch cyberattacks in the US presidential election.

The report doesn’t specify Iran’s intentions besides sowing chaos in the United States, though US officials have previously hinted that Iran particularly opposes former president Donald Trump. US officials also have expressed alarm about Tehran’s efforts to seek retaliation for a 2020 strike on an Iranian general that was ordered by Trump. This week, the Justice Department unsealed criminal charges against a Pakistani man with ties to Iran who’s alleged to have hatched assassination plots targeting multiple officials, potentially including Trump.