WASHINGTON — Three Iranian operatives have been charged with hacking Donald Trump’s presidential campaign as part of what the Justice Department says was a sweeping effort to undermine the former president and erode confidence in the U.S. electoral system.
Friday’s action, coupled with sanctions and rewards for information leading to the accused hackers’ capture, is the latest U.S. government effort to call out what’s seen as Iran’s attempts to interfere in the election by damaging Trump and sowing general chaos. It comes as Iran has also been accused of threatening the lives of Trump and former officials and as US-Iran relations remain especially tense, with Israel fighting Hamas in Gaza and Hezbollah in Lebanon.
“The defendants’ own words made clear that they were attempting to undermine former President Trump’s campaign in advance of the 2024 U.S. presidential election. We know that Iran is continuing with its brazen efforts to stoke discord, erode confidence in the U.S. electoral process and advance its malign activities,” Attorney General Merrick Garland said at a news conference announcing the charges.
The three accused hackers were employed by Iran’s paramilitary Revolutionary Guard, which cybersecurity analysts had previously linked to the intrusions. Since 2020, their operation sought to compromise the email accounts of a broad swath of targets, including a former ambassador to Israel, a former CIA deputy director, officials at the State and Defense departments, a former U.S. homeland security adviser and journalists, according to the indictment.
In May, prosecutors say, the defendants began trying to penetrate the Trump campaign, successfully breaking into the email accounts of campaign officials and other Trump allies. They then sought to “weaponize” the stolen campaign material by spreading it to media organizations and people associated with President Joe Biden’s campaign in what’s familiarly known as a “hack-and-leak” operation.
U.S. intelligence officials have said Iran opposes Trump’s reelection, seeing him as more likely to increase tension between Washington and Tehran. Trump’s administration ended a nuclear deal with Iran, reimposed sanctions and ordered the killing of Iranian Gen. Qassem Soleimani, an act that prompted Iran’s leaders to vow revenge.
Trump’s campaign said earlier this week that it had been briefed by U.S. officials on “real and specific” Iranian assassination threats, though one official told The Associated Press that the briefing had been requested by the campaign and did not include any suggestion of a new threat against Trump.
RECOMMENDED VIDEO
Iran’s mission to the United Nations last month denied the allegations as “unsubstantiated and devoid of any standing,” saying that Iran had neither the motive nor intention to interfere with the election. It challenged the U.S. to provide evidence and said if the U.S. does so, “we will respond accordingly.”
The U.S. government has sought this year across multiple agencies to aggressively condemn election interference and foreign influence operations — a stark turnabout from the government’s response in 2016, when Obama administration officials were criticized for not being forthcoming about the Russian interference they were seeing on Trump’s behalf as he ran against Democrat Hillary Clinton.
The Treasury Department issued sanctions Friday related to the hacking and the State Department offered rewards of up to $10 million for information leading to the arrests of the defendants, who are not in custody. FBI Director Christopher Wray said in a video statement that the FBI has been working to call out Iran’s “aggressive behavior,” including a plot to murder a journalist in New York City and a ransomware attack targeting a children’s hospital.
Even with the recent focus on Iran, U.S. officials have said Russia remains the primary threat to the elections. The Justice Department earlier this month charged two employees of RT, the Russian-state media organization, with covertly funding a Tennessee-based content creation company with nearly $10 million to publish English-language videos on social media platforms favorable to the Russia government’s interests and agenda.
The Iranian hacking came to light after the Trump campaign disclosed on Aug. 10 that it had been breached and said Iranian actors had stolen and distributed sensitive internal documents.
Multiple major news organizations that said they were leaked confidential information from inside the Trump campaign, including Politico, The New York Times and The Washington Post, declined to publish it.
U.S. intelligence officials subsequently linked Iran to a hack of the Trump campaign and to an attempted breach of the Joe Biden-Kamala Harris campaign. They said the hack-and-dump operation was meant to sow discord, exploit divisions within American society and potentially influence the outcome of elections that Iran perceives to be “particularly consequential in terms of the impact they could have on its national security interests.”
The indictment makes clear that the accused hackers impersonated U.S. officials and set up fake email personas to try to dupe their victims.
Politico has reported that it began receiving emails on July 22 from an anonymous account. The source — an AOL email account identified only as “Robert” — passed along what appeared to be a research dossier that the campaign had apparently done on the Republican vice presidential nominee, Ohio Sen. JD Vance. The document was dated Feb. 23, almost five months before Trump selected Vance as his running mate.
Last week, officials also revealed that the Iranians in late June and early July sent unsolicited emails containing excerpts of the hacked information to people associated with the Biden campaign. None of the recipients replied. The Harris campaign said the emails resembled spam or a phishing attempt and condemned the outreach by the Iranians as “unwelcome and unacceptable malicious activity.”
One of the emails was sent June 27, the date of the Biden-Trump debate, when a halting performance by the president laid the groundwork for his announcement weeks later that he would not seek reelection. An email offering the stolen information, according to the indictment, stated that the debate was likely to be Biden’s “last chance” in the race.
The author stated negative feelings for Trump and wrote, “So I’m going to pass some materials along to you that would be useful to defeat him.”