Cyber Threats To British Elections

British voters can expect to face an significant increase in state-backed cyber attacks, hacking  and disinformation campaigns as the country  moves towards local and national elections later in 2024. 

The first vote will be in May in local elections and a general election is expected in the second half of this year, although British Prime Minister Rishi Sunak has not yet to announced the date. 

The votes come as the country faces a range of problems including an economic issues, immigration and disagreements over events in the Middle East.  

These types of hacking attacks aren’t new. In 2016, the UK Brexit vote was found to have been disrupted by disinformation shared on social media platforms, allegedly by Russian state-affiliated groups, although Moscow denies these claims. Indeed, nation-state hackers have made numerous attacks around the world with the aim of influencing  the outcome of elections.

  • Recently the UK said that Chinese hacking group APT 31 had tried to penetrate Parliamentary email accounts, although these  were unsuccessful. Britain has since imposed sanctions on several Chinese individuals and a technology firm located in Wuhan, believed to be acting as a front for APT 31.
  • GCHQ’s National Cyber Security Centre assesses China state-affiliated actor APT31 was almost certainly responsible for targeting UK parliamentarians’ emails in 2021. Also, the US, Australia and New Zealand have applied sanctions on Chinese entities, although the Chinese government denies the allegations of state-sponsored hacking, calling them “groundless.”

Cyber security experts expect malicious actors to interfere in the forthcoming elections in several ways, not least through disinformation, which is expected to be even worse this year due to the widespread use of Artificial Intelligence (AI).

Synthetic images, videos and audio generated using computer graphics, simulation methods and AI, commonly referred to as “deepfakes”, will be a common occurrence as it becomes easier for people to create them.  The cyber security community has called for heightened awareness of this type of AI-generated misinformation, as well as international cooperation to mitigate the risk of such malicious activity.

In comment, Lewis Shields, Director, Dark Ops at ZeroFox said "For the UK specifically, local council elections are fast approaching, with a general election also on the horizon before 28th January 2025. As the world gears up for this pivotal year, a new battleground is emerging ...  With hostile state-sponsored attacks against the UK identified, and mis- and dis-information spreading more quickly and at a larger scale, the digital landscape has made preserving the integrity of election processes evermore complex... This year, threat actors will undoubtedly deploy mass-disinformation campaigns, leading to the spread of political narratives that are expected to profoundly influence the public's perception of electoral candidates".

As part of this, threat actors are expected to leverage GenAI to create more effective and persuasive content, including highly realistic synthetically-generated images and deepfakes of politicians to discredit and undermine opposition candidates.

In the past six months, more than a dozen Westminster insiders have been targeted, including politicians and government advisers. While social engineering campaigns aren’t new, the use of pressure tactics during this critical electoral year has the potential to prompt an ill-considered response. “While the cybersecurity challenges facing the 2024 elections are daunting, they’re not insurmountable. Awareness is the first step - government employees, cybersecurity experts, and the public must understand these new threats, remain vigilant, and treat everything with a high dose of scepticism. Most importantly, public sector organisations should harness a multifaceted cybersecurity approach that looks beyond the typical cybersecurity perimeter to detect and disrupt these new-age election threats that can arise across the entire internet." Shields said.

To secure its elections from cyber threats like those from APT31, the UK government is improving the overall resilience of its elections cyber infrastructure. It is working closely with the NCSC to identify threats and emerging trends. These efforts are likely to include regular security audits, penetration testing and the adoption of secure software development practices to ensure that systems are robust.

The British deputy prime minister, Oliver Dowden, has told MPs that China's attempts to interfere with UK democracy and politics have been unsuccessful, and that the government had bolstered its cyber defence since the attacks. 

“We will not hesitate to take swift and robust actions wherever the Chinese government threatens the United Kingdom’s interests... The UK judges that these actions demonstrate a clear and persistent pattern of behaviour that signals hostile intent from China.” Dowden said.

CNBC     |     National Cyber Security Centre     |     University of Portsmouth    |      University of Birmingham     |    

The Guardian     |     Euro News

Image: Ideogram

You Might Also Read: 

Deepfakes Complicate Election Security:

DIRECTORY OF SUPPLIERS - Deepfake & Disinformation Detection:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

 


 

« Controlling The Use Of Cyber Weapons
Iranian Hackers Targeted Israel’s Radar Systems »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Athena Forensics

Athena Forensics

Athena Forensics is one of the UK's leading providers of Computer Forensics, Mobile Phone Forensics, Cell Site Analysis and Expert Witness Services.

PortSwigger

PortSwigger

PortSwigger's Burp Suite is an integrated platform for performing security testing of web applications.

Redicom

Redicom

Redicom is an independent consulting agency focusing on identity management, strong authentication and single-sign-on.

Identify Security Software

Identify Security Software

Our mission is to bring in a new age of autonomous human authentication in the security and identity space.

InnoSec

InnoSec

InnoSec is a software manufacturer of cyber risk management technology.

Jiran Security

Jiran Security

Jiran Security provides data and application security solution over email, mobile device and endpoints.

Securely

Securely

Securely Ltd. is an IT consulting and services firm specializing in PKI solutions and products.

Flexential

Flexential

Flexential helps organizations optimize their journey of IT transformation while simultaneously balancing cost, scalability, compliance and security.

Sovereign Intelligence

Sovereign Intelligence

Sovereign Intelligence provides automated insight into the relative intensity of hidden Cyber, Brand, and Financial Risks to your company.

IT Band Systems

IT Band Systems

IT Band Systems is an international provider of IT products and services including web server monitoring and web security consulting.

Bigbee Technology

Bigbee Technology

Bigbee Technology are an IT solutions company based in Dar es Salaam founded by a group of professionals from around the globe.

Palmchip

Palmchip

Palmchip is a Cyber Security, SOC and Software consulting company. We design and develop high performance and secure applications.

KingsGuard Solutions

KingsGuard Solutions

KingsGuard Solutions is a San Diego Cybersecurity company that specializes in complex and innovative security solutions for companies throughout Southern California.

Knowit

Knowit

Knowit support customers in the digital transformation, simplify people’s everyday lives and create secure and innovative solutions enabling a sustainable future.

Nothreat

Nothreat

Nothreat has revolutionized how businesses like yours protect themselves from damaging cyber attacks. Our tech learns and adapts in real time, protecting clients from even zero-day attacks.

Cynclair

Cynclair

Cybersecurity is a complex beast. And we're the beast-tamers. Our team thrives on deciphering the latest threats, building cutting-edge defenses, and making your digital world much safer.