Iranian hackers charged with hacking Trump campaign to 'stoke discord'

Iranian flags wave in the wind during a military parade.

Image Credits: Morteza Nikoubazl/NurPhoto / Getty Images

The U.S. Department of Justice announced criminal charges against three hackers working for Iran’s Islamic Revolutionary Guard Corps (IRGC), accusing the trio of a four-year-long hacking campaign that included this year’s hack of Donald Trump’s presidential campaign. 

On Friday, U.S. prosecutors published an indictment accusing Masoud Jalili, Seyyed Ali Aghamiri, and Yasar (Yaser) Balaghi of targeting the Trump campaign, former White House and senior government officials, and members of Congress, as part of a hack-and-leak operation.

According to the indictment, the operation was launched in part in retaliation for the killing of Iranian General Qasem Soleimani by the Trump administration in 2020, for which the Iranian government vowed revenge. U.S. officials have since charged at least one individual with the attempted assassination of John Bolton, a former National Security Advisor, as part of the wider Iranian effort to target former members of the Trump administration.

U.S. Attorney General Merrick Garland said at a press conference Friday that the Iranian hacking campaign was in part aimed at influencing the upcoming 2024 presidential election. 

“The defendant’s own words make clear that they were attempting to undermine former President Trump’s campaign in advance of the 2024 U.S. presidential election,” said Garland. “We know that Iran is continuing its brazen efforts to stoke discord, erode confidence in the U.S. electoral process, and advance its malign activities to the IRGC, a designated foreign terrorist organization.”

“These authoritarian regimes which violate the human rights of their own citizens do not get a say in our country’s democratic process,” said Garland. “The American people and the American people alone will decide the outcome of our country’s elections.”

Masoud Jalili, Seyyed Ali Aghamiri, and Yasar (Yaser) Balaghi, the three Iranian hackers indicted for a hacking campaign that included the intrusion against the Donald Trump presidential campaign. (Image: U.S. Department of Justice).
Masoud Jalili, Seyyed Ali Aghamiri, and Yasar (Yaser) Balaghi, the three Iranian hackers indicted for a hacking campaign that included the intrusion against the Donald Trump presidential campaign.
Image Credits: U.S. Department of Justice

The indictment said the Iranian operation targeted former senior government officials with phishing lures that were used to compromise their online accounts and steal campaign material with the goal of leaking the files to the media.

In August, Politico, The New York Times, The Washington Post and others received documents allegedly stolen from the Donald Trump campaign. Politico reported that an individual going by the name “Robert” had reached out and shared documents that appeared to have been stolen from the Republican candidate’s camp. 

Since the beginning, the story had the hallmarks of a hack-and-leak operation, akin to what the Russian government orchestrated in 2016, after hacking the Democratic National Committee and people connected to the Hillary Clinton campaign. Unlike 2016, however, the news organizations decided to not report on the content of the documents, let alone release them. Instead, the reporters focused on the fact that the files had been stolen and leaked. 

Kevin Collier, a journalist at NBC News, who said he has seen some of the documents, said the files did not contain much worth writing about.

“At least half a dozen outlets and independent reporters have received hacked Trump files from ‘Robert,’ a front for Iranian intelligence. To date, no reporter who’s seen them has found news in them,” Collier wrote on X on Thursday. 

Ten days after Politico’s report, the FBI, the Office of the Director of National Intelligence and U.S. cybersecurity agency CISA released a joint statement accusing the government of Iran of being behind the hack-and-leak operation. 

“The [Intelligence Community] is confident that the Iranians have through social engineering and other efforts sought access to individuals with direct access to the presidential campaigns of both political parties. Such activity, including thefts and disclosures, are intended to influence the U.S. election process,” read the statement. “It is important to note that this approach is not new. Iran and Russia have employed these tactics not only in the United States during this and prior federal election cycles but also in other countries around the world.”

Microsoft and Google also accused Iranian government-backed hackers of being behind the targeting of people affiliated with both the Trump and Biden campaigns. 

On Thursday, more than a month after the first report saying journalists had the documents, independent journalist Ken Klippenstein published a 271-page dossier on Republican vice presidential nominee J.D. Vance. Klippenstein wrote that since June, “the news media has been sitting on it (and other documents), declining to publish in fear of finding itself at odds with the government’s campaign against ‘foreign malign influence.’”

“I disagree. The dossier has been offered to me and I’ve decided to publish it because it’s of keen public interest in an election season,” wrote Klippenstein.

The Tor Project merges with Tails, a Linux-based portable OS focused on privacy

Image of laptop and Tor onion network vector illustration

Image Credits: Macrovector via Getty Images

The Tor Project is merging operations with Tails, a portable Linux-based operating system focused on preserving user privacy and anonymity.

The merger comes against a backdrop of ongoing digital surveillance and regulatory maneuvers to break end-to-end encryption, while censorship of online services also remains firmly on the global agenda.

Tails will be incorporated “into the Tor Project’s structure,” which will allow for “easier collaboration, better sustainability, reduced overhead, and expanded training and outreach programs to counter a larger number of digital threats,” according to a blog post published today by the Tor Project’s PR & communications director, Pavel Zoneff.

Two become one

Founded in 2006, the Tor Project is a nonprofit best known for its work on Tor (“The Onion Router”), a privacy-focused network that anonymizes internet traffic by routing it through multiple disparate servers, encrypting data along the way. The Tor Project develops browsers for all the main operating systems, and some of the world’s biggest tech companies have embraced Tor to support various privacy-centric initiatives.

Tails, for its part, sports a pre-installed desktop environment and is built on a Debian-based Linux distribution. It’s lightweight, and can be booted from portable storage devices, such as a USB drive, leaving little in the way of a digital footprint.

The Tor and Tails open source projects aren’t strangers to each other. Released initially in 2009, Tails, or “The Amnesic Incognito Live System,” connects to the internet by default through Tor. Moreover, Tails has received backing from numerous third-party organizations and foundations over the years — including the Tor Project itself, which has funded developer resources for the project.

Merging the Tor Project and Tails makes a great deal of sense, given their respective focus on online privacy and anonymity, not to mention their shared history. It could also prove a boon for those most at-risk in a world that’s moving closer to 24/7 digital surveillance, with activists, journalists, and anyone vulnerable to online tracking being a potential benefactor here.

Indeed, none other than Edward Snowden has sung the praises of both platforms, and has previously said that he used Tails as part of his whistleblowing endeavors against the U.S. National Security Agency (NSA) more than 10 years ago.

The merger came about following an approach that Tails made to the Tor Project at the tail-end of 2023, according to the blog post. Tails noted that it had “outgrown its existing structure.”

“Running Tails as an independent project for 15 years has been a huge effort, but not for the reasons you might expect,” Intrigeri, a team lead for Tails OS, said in a statement. “The toughest part wasn’t the tech — it was handling critical tasks like fundraising, finances and HR. After trying to manage those in different ways, I’m really relieved that Tails is now under the Tor Project’s wing.”

By pooling their respective resources, including technology and personnel, the Tor Project says it will be better equipped to address the “threat of global mass surveillance and censorship to a free Internet.” This will include broadening the scope of the Tor Project to “address a wider range of privacy needs and security scenarios,” which will include closer technological alignment, in addition to boosting education, training and outreach programs.

“By bringing these two organizations together, we’re not just making things easier for our teams, but ensuring the sustainable development and advancement of these vital tools,” Isabela Fernandes, executive director for the Tor Project, said in a statement. “Working together allows for faster, more efficient collaboration, enabling the quick integration of new features from one tool to the other.”