Romania’s election systems were hit by over 85,000 cyberattacks, compromising critical infrastructure and exposing access credentials. An organized influence campaign on social media further complicates the electoral integrity. The potential for foreign interference, notably from state actors, increases the urgency for improved cybersecurity measures.
Romania’s election infrastructure was subjected to over 85,000 cyberattacks, as reported by the country’s Intelligence Service (SRI). These attacks included the compromise of a key server, resulting in the exposure of access credentials for critical election websites shortly before the presidential election. The attacks, identified to originate from over 33 countries, targeted not only the securing of election information but aimed to compromise the infrastructure itself.
On November 19, a significant cyberattack breached the IT systems of Romania’s Permanent Electoral Authority (AEP), affecting a server housing mapping data linked to both public access and internal networks. The leaked credentials for platforms such as bec.ro and registrations at registrulelectoral.ro were obtained by exploiting vulnerabilities and targeting legitimate user accounts. SRI observed ongoing attacks until November 25, highlighting a strategy to manipulate or deny access to election-related systems through methods like SQL injection and cross-site scripting.
Simultaneously, an influence campaign unfolded around the election, involving over 100 influencers on TikTok who collectively had more than 8 million followers. The Ministry of Internal Affairs reported an organized effort with influencers being compensated for promoting presidential candidate Calin Georgescu, with views on their content skyrocketing as the election approached. Notably, the messaging utilized by these influencers mirrored propaganda associated with pro-Russian sentiments, raising concerns regarding foreign interference.
While SRI has not definitively identified a specific threat actor behind the cyberattacks, there are indications suggesting that state-sponsored resources or motives could be at play. The Romanian Foreign Intelligence Service (SIE) highlights the potential influence of Russia, given its perceived adversarial stance toward Romania and its efforts to project influence across Eastern Europe. This context provides insight into the ongoing challenges faced by Romania regarding election security and foreign interference in its democratic processes.
The threat to Romania’s election systems underscores the broader vulnerability of democratic processes to cyber threats and influence campaigns. In recent years, countries across the globe have experienced similar challenges, with strategic efforts aimed at undermining electoral integrity and swaying public opinion through digital platforms. Romania, situated at the eastern edge of NATO, faces heightened scrutiny due to its geopolitical significance and the potential interest of foreign states in its electoral outcomes. Cybersecurity has thus become a pressing concern for both national security and the integrity of democratic institutions, prompting governmental agencies to respond proactively against such threats.
In summary, Romania’s election infrastructure faced substantial risks from cyberattacks and organized influence efforts leading up to the presidential elections. The fact that over 85,000 attacks originated from various countries indicates a widespread effort to disrupt the electoral process. Moreover, the manipulation of social media through influencers further complicates the landscape of information integrity. These incidents not only highlight vulnerabilities within Romania’s electoral systems but also signal the urgent need for enhanced cybersecurity measures and stringent oversight of digital content during electoral periods.
Original Source: www.bleepingcomputer.com
