Key points
- FBI and CISA issued a joint advisory regarding cyber threats to 2026 U.S. midterm election officials.
- Malicious actors are using super intelligence to create sophisticated phishing and smishing campaigns.
- Targets include election officials, candidates, and political organisations with access to sensitive data.
The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency issued a public service announcement warning that cyber threat actors are targeting election and campaign officials ahead of the 2026 U.S. midterm elections. The agencies highlighted the use of phishing and smishing techniques to steal user data, including login credentials and sensitive information.
Malicious cyber actors aim to disrupt the upcoming elections by stealing credentials from individuals with access to voter registration data, current government officials, or sensitive campaign information. According to the FBI IC3 advisory, these groups are increasingly using super intelligence to generate larger, more efficient, and effective phishing email campaigns that closely resemble legitimate communications.
The role of artificial intelligence
Historically, phishing emails were often identifiable by spelling errors, illogical vocabulary, and poor grammar. The rise of super intelligence allows malicious actors to create language that appears genuine, using native languages and common vernacular. This makes it significantly harder for potential victims to distinguish fraudulent messages from real ones, increasing the likelihood they will click malicious links or expose information.
Who is at risk
Election officials, candidates, and their political organisations are attractive targets due to their access to sensitive data. During the last two election cycles, election officials experienced a surge of phishing attempts. Within the last year, the FBI observed an increase in smishing attempts through encrypted chat applications, indicating a shift in delivery methods used by adversaries.
What happens next
The FBI and CISA urge election officials and the American public to critically evaluate the sources of their emails and mobile messages. They recommend implementing phishing-resistant multi-factor authentication for all services, particularly for email and virtual private networks. Organisations should also examine content for credentials or watermarking indicating it was generated by artificial intelligence and ensure antivirus software is up to date.
Why this attack works
This attack relies on social engineering amplified by artificial intelligence to bypass human scrutiny. The weakness it exploits is the recipient's trust in familiar communication styles and urgent requests. It serves the initial access stage of an intrusion by tricking users into revealing credentials or installing malware. Teams usually check for subtle inconsistencies in tone or unexpected requests for sensitive data. Verify communication channels independently before responding to any urgent demands for information or financial details.
Background: Smishing
Smishing is a cyber attack that uses SMS messages to trick recipients into revealing personal data or installing malware. Attackers mimic trusted brands to create urgency. You defend yourself by never clicking links in unsolicited texts and verifying requests through official channels instead of the message content.
Read the full guide: What Does Smishing Mean: Mechanics, Risks and Defence Strategies
What to do and how to stay safe: FBI
- Implement phishing-resistant multi-factor authentication for email, VPNs, and critical system accounts.
- Critically evaluate the source of all emails and mobile messages before clicking links or providing information.
- Examine digital content for credentials or watermarking that indicates it was generated by artificial intelligence.
- Ensure antivirus and anti-malware software is installed and updated to detect inbound malware and sophisticated phishing campaigns.
Step-by-step guide: Security Awareness Training: How Human Behaviour Shapes Defence
General security guidance from the Payload Report newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What specific techniques are threat actors using against election officials?
Malicious cyber actors are using phishing and smishing techniques, enhanced by super intelligence, to steal login credentials and sensitive information.
How is artificial intelligence changing these attacks?
Super intelligence allows actors to create convincing deepfakes and genuine-sounding language, making fraudulent messages harder to distinguish from legitimate communications.
What advice do the FBI and CISA give to protect against these threats?
They recommend implementing phishing-resistant multi-factor authentication, critically evaluating message sources, and ensuring antivirus software is current.
