Sources: Trump's re-election campaign is the presidential campaign that Microsoft said was targeted by Iranian hackers

SAN FRANCISCO — Iranian hackers targeted President Trump's re-election campaign, two people with knowledge of the attacks said on Friday, in a sign of how cyberattacks …

New York Times 2019-10-06

Context & Ripple Effects

In October 2019, unnamed sources identified Trump's re-election operation as the presidential campaign behind a Microsoft threat warning about Iranian hackers — the first time Iran's targeting of a US campaign was pinned to a specific political organization. Before this, the campaign existed only as an anonymous entry in vendor threat reporting.

The arc since then has been one of repetition and escalation: Microsoft reported in September 2020 that hackers backed by Russia, China, and Iran had escalated attacks on people and organizations involved in the presidential election (a three-nation escalation report), and by August 2024 the Trump campaign itself confirmed internal communications were hacked, citing the same Microsoft spear-phishing finding, while the FBI probed suspected Iranian attempts against Trump, Biden, and Harris alike.

First-order effects

The Trump campaign moves from being an unnamed victim in Microsoft's threat data to a publicly confirmed target, forcing immediate hardening of staff accounts and phishing defenses ahead of the 2020 primary season.
Microsoft is cast in a new role: not just a software vendor but the de facto public intelligence channel through which election-targeting operations reach the press.

Second-order effects

Other campaigns and election-adjacent organizations must assume they are in the same target set — a presumption borne out by 2024 coverage framing Iran as the most aggressive foreign threat to the US election.
The sourcing pattern pushes law enforcement toward formal investigations rather than quiet attribution, setting up the FBI probes that eventually followed.

Third-order effects

If the 2019-to-2024 sequence holds as a template, foreign cyber operations against campaigns stop being episodic incidents and become a fixed feature of every US election cycle, with vendor threat reports serving as the standing early-warning system.
Attribution migrating from anonymous 'sources' disclosures to FBI-level investigation points toward a structural normalization: campaigns planning security postures around named nation-state adversaries rather than generic hacking risk.

The trend: Iranian state hacking has evolved from one-off targeting of a single presidential campaign into a sustained, multi-cycle threat to US elections, tracked largely through Microsoft's public threat reporting.

Discussion

@nicoleperlroth Nicole Perlroth on x
Just your periodic reminder that election interference can cut both ways. Especially when it's Iran doing the hacking. https://twitter.com/...
@maxboot Max Boot on x
Trying to imagine how Republicans would react if Biden said, “Tehran if you're listening,” and offered Iran a generous nuclear deal in return for dirt on Trump. Bet they wouldn't think it's all a big joke. https://www.nytimes.com/...
@alexstamos Alex Stamos on x
Multiple countries trying to intervene on opposing sides in 2020 was part of my @lawfareblog speculative fiction that doesn't look so speculative anymore. https://www.lawfareblog.com/ ... https://twitter.com/... https://twitter.com/...
@wildpalmsltd @wildpalmsltd on x
Russia is not the only country interested in swaying the 2020 election. But their success and our failure to harden our democracy has emboldened others. #HandMarkedPaperBallots #ElectionInterference https://www.wired.com/...
@shadowingtrump Shadow Cabinet on x
Hmm, here come the Iranians. Where did they get the idea of manipulating our elections? https://www.washingtonpost.com/ ... https://twitter.com/...
@nicoleperlroth Nicole Perlroth on x
BREAKING: The candidate Iranian hackers targeted? Microsoft will not say but sources confirm it was @realDonaldTrump's. https://twitter.com/...
@nxthompson Nicholas Thompson on x
One consequence of Russia's successful 2016 election malfeasance: other countries are now trying the same thing. Today we learn that Iran has tried to hack into at least one Presidential campaign. https://www.wired.com/...
@posttech @posttech on x
A campaign believed to be tied to the Iranian government attempted to identify, attack and breach email addresses belonging to U.S. presidential campaigns, government officials and journalists. Via @greene and @TonyRomm https://www.washingtonpost.com/ ...
@hawaiidelilah @hawaiidelilah on x
Will be interesting to see if Republicans thinks this is very legal and very cool. https://twitter.com/...
@natashafatah Natasha Fatah on x
#BREAKING Iranians tried to hack U.S. presidential campaign in effort that targeted hundreds, Microsoft says Reuters and other news media outlets report the hackers targeted President Trump's campaign https://www.washingtonpost.com/ ...
@sheistenacious True Blue on x
Seems like a good time to beef up election security. Isn't that right #MoscowMitch ? #DemForce https://twitter.com/...
@wired @wired on x
Russia doesn't have a monopoly on election hacking. In an aggressive new email phishing push, Microsoft says, Iranian hackers have targeted a US presidential campaign. https://www.wired.com/...
@adegrandpre Andrew deGrandpre on x
'The aggressiveness of Iran's digital efforts has escalated as its political standing with Washington has worsened, particularly in recent months as President Trump has threatened sanctions over the country's nuclear program.' https://www.washingtonpost.com/ ...
@scotttaylorva Scott Taylor on x
We must create a Cyber “Monroe” doctrine. Policy with teeth to deal with attacks on election/infrastructure/ national interests. U.S. Should lead on this. I introduced legislation early in 115th Congress and would immediately do so again if elected. https://twitter.com/...
@nytimes @nytimes on x
Breaking News: Hackers backed by Iran targeted the email accounts of at least one presidential campaign, journalists and U.S. officials, Microsoft said https://www.nytimes.com/...
@alirezanader Alireza Nader on x
Who becomes the next US President is critical to the survival of the Islamic Republic, esp as sanctions take their toll and the regime figures out a way to return America to JCPOA https://twitter.com/...
@politicalmiller Jack Miller on x
We have a president who won't lift a finger to protect American democracy. And now our enemies know it too. https://twitter.com/...
@ap @ap on x
BREAKING: Microsoft says that hackers linked to Iranian government targeted a U.S. presidential campaign, government officials, media targets and prominent expatriate Iranians. https://apnews.com/...
@wajahatali Wajahat Ali on x
Well, when Trump invites foreign interference... https://www.nytimes.com/...
@washingtonpost @washingtonpost on x
Microsoft linked the hacking campaign to Iran's government but did not identify the targets https://www.washingtonpost.com/ ...
@bing_chris Chris Bing on x
“The targeted accounts are associated with a U.S. presidential campaign, current and former U.S. government officials, journalists covering global politics and prominent Iranians living outside Iran” https://blogs.microsoft.com/ ...
@jasonmbrodsky Jason Brodsky on x
Interesting blog post by @Microsoft. It discloses “significant cyber activity by a threat group we call Phosphorous, which we believe originates from #Iran.” It has targeted accounts associated w/ a 2020 U.S. presidential candidate. https://blogs.microsoft.com/ ...

Chronicles