Weeks earlier than the 2024 election, American navy hackers carried out a secret operation to disrupt the work of Russian trolls spewing false info at US voters.
From their perch at Cyber Command at Fort Meade, Maryland, the navy hackers took purpose at the pc servers and key personnel of at the very least two Russian firms that had been covertly pumping out the propaganda, in response to a number of sources briefed on the operation.
The trolls had been attempting to affect election leads to six swing states by publishing fictitious information tales that attacked American politicians who supported Ukraine. One of the firms had held “strategy meetings” with Kremlin officers on how one can covertly affect US voters, in response to an FBI affidavit.
In one case, the Cyber Command operatives deliberate to knock offline pc servers primarily based in a European nation that one among the Russian firms used, the sources stated. Though the Russian trolls continued to create content material by Election Day, when President Donald Trump defeated then-Vice President Kamala Harris, one supply briefed on the hacking effort stated it efficiently slowed down the Russians’ operations.
The hacking marketing campaign, which hasn’t been beforehand reported, was one among a number of US cyber operations towards Russian and Iranian teams geared toward blunting foreign affect on the 2024 election. It was a part of a broader US authorities effort involving the FBI, the Department of Homeland Security, and different intelligence and safety companies that uncovered and disrupted foreign meddling.
But a yr right into a second Trump administration, lots of the authorities facilities beforehand tasked with repelling foreign affect operations have been disbanded or downsized — and native election officers are making ready to face a continued onslaught of foreign affect operations largely on their very own.
The administration has shut down foreign-influence-focused facilities at the Office of the Director of National Intelligence, the FBI and the State Department that helped warn the public that China, Russia and Iran’s spy providers had been concentrating on Americans with election-related disinformation. The Department of Homeland Security has additionally slashed its election safety groups, which move intelligence to native election places of work and assist them defend towards cyber threats.
The Trump administration has accused these federal applications of censoring Americans and conducting home interference in US elections.
While navy cyber operations are nonetheless an choice, there may be widespread concern amongst present and former officers that the US authorities’s willingness to fight foreign efforts to form elections has waned. The cuts to election safety applications threat inflicting an exodus of experience at US intelligence and safety companies that was constructed up over practically a decade.
The cuts come whilst the US intelligence neighborhood discovered, in a menace evaluation launched by the Office of the Director of National Intelligence Tulsi Gabbard, that foreign powers will proceed to attempt to affect US elections.
“I find it devastating and deeply alarming for our national security,” stated Mike Moser, a former election safety specialist at DHS’ Cybersecurity and Infrastructure Security Agency, who resigned after the company froze its election work final yr. “To see those partnerships unilaterally dismantled is a tragedy. We are losing the human and technological infrastructure that protects our democracy.”
Foreign affect and propaganda have a tendency to extend in years when common elections or midterms are held. But even in the off-year of 2025, teams tied to authoritarian regimes had been weighing in on races like the New York City mayoral election.
Chinese state-owned media accounts repeatedly amplified Trump’s assaults on Zohran Mamdani, the Democrat who ended up profitable New York’s mayoral election, in response to disinformation-tracking agency Alethea Group. Some pro-Iranian influencer accounts, in the meantime, pivoted to attacking Mamdani as a “Zionist apologist” in October after Mamdani made overtures to Jewish voters in New York, Alethea stated.
But by the time that election was held in November of final yr, the cuts to election safety efforts had already taken maintain.
The 2026 midterms might be a litmus take a look at for the way foreign adversaries reply to a US authorities that’s much less forceful in publicly combating affect operations.
“We’ve not had a disaster take place because, in many ways, the procedures and policies and tools set up during the first Trump administration helped keep us safe,” Sen. Mark Warner of Virginia, the high Democrat on the Senate Intelligence Committee, instructed NCS. “We’re going into a (2026) election cycle with our guard down.”
Multiple authorities companies and processes for countering foreign affect which are now being reduce had been arrange throughout Trump’s first time period, together with a devoted staff at the FBI that tracked counterintelligence threats to elections.
In April, Trump fired Gen. Tim Haugh, the head of Cyber Command and the National Security Agency ,who had led quite a few operations countering Russian meddling.
“The foundation that we built to protect our electoral process was driven by the first Trump administration’s direct guidance to NSA and Cyber Command — the focus that they put at CISA and FBI to counter foreign influence and then any potential hacking activity targeting our electoral process,” Haugh instructed NCS in his first interview on the topic since being fired. He declined to touch upon any Cyber Command operations throughout the 2024 election.
Far-right activist and Trump confidant Laura Loomer had pushed for Haugh’s removing, publicly calling him “disloyal” to Trump as a result of the incontrovertible fact that he had served alongside former Chairman of the Joint Chiefs of Staff Gen. Mark Milley. Haugh has denied the allegation.
Nearly 10 years after Russian brokers tried to affect the 2016 election by hacking and disinformation, Americans are arguably extra inclined to covert propaganda than ever, in response to specialists.
“This is just an enormous set of vulnerability for our nation,” Haugh stated. “We have shown a decreasing ability to discern truth from fiction as a society.”
Cyber Command declined to remark for this story. The NSA referred to inquiries to ODNI.
Cuts to federal funding for cybersecurity providers for election places of work have pressured these places of work to scramble for various funds, stated Paul Lux, a Republican who’s the high election official for Okaloosa County, Florida.
Election officers are additionally uncertain whether or not the FBI and CISA will proceed to carry labeled briefings for them on threats to elections, one thing these companies have performed for years.
The briefings had been “illuminating,” Lux stated. “They allowed me to personally connect some dots” by making the threats extra tangible, he added.
The FBI had no remark when requested by NCS whether or not the briefings would proceed.
A CISA spokesperson didn’t immediately reply a query about the briefings but supplied a press release that learn, partially, “since January 2025, CISA has issued 38 joint cybersecurity advisories with law enforcement and international partners and provided threat intelligence guidance to combat evolving threats and protect critical infrastructure, and we will continue to ensure election officials remain informed of any emerging issues going forward.”
With or with out federal safety and intelligence assist, election officers shall be able to do their job, Lux stated. “Our mission doesn’t change. (It is to) provide safe, free and fair elections with as much transparency as possible.”
The identical kind of Russian trolls that Cyber Command took purpose at in the 2024 election proceed to churn out content material. A Russian covert affect community targeted on undermining Western assist for Ukraine has arrange at the very least 200 pretend web sites since final March to focus on audiences in the US, France and elsewhere, according to the cyber intelligence agency Recorded Future.
The concern amongst greater than a dozen present and former officers who spoke to NCS is that the Trump administration took a hatchet, relatively than a scalpel, to federal applications geared toward countering the kind of affect operation that Recorded Future uncovered. The applications might have been downsized, relatively than abruptly canceled, in a method that met the Trump administration’s objective of chopping bureaucratic crimson tape, the sources stated.
The State Department’s Global Engagement Center, which targeted on combating foreign propaganda, posted a large US intelligence dump on Russian meddling previous to the 2024 election. (The Trump administration formally shut down the State Department heart final April after Congress let its funding expire.)
ODNI’s Foreign Malign Influence Center, which was arrange beneath then-President Joe Biden, turned intelligence on Russian AI-generated movies posted on X purporting to indicate voter fraud into public statements in the days earlier than Election Day in 2024.
Without that heart, it’s unclear which authorities company would warn the public of such efforts.
In asserting the Foreign Malign Influence Center’s closure in August, ODNI stated the heart was “redundant” and that different parts of the intelligence neighborhood carry out a few of the identical work. Some Republican lawmakers agree.
“I am confident ODNI and the (intelligence community) will remain poised to assess and warn policymakers of covert and overt foreign influence operations targeting (US government) policies and manipulating public opinion,” stated Rick Crawford, an Arkansas Republican who chairs the House intelligence committee, in a press release to NCS.
But Haugh, who spent greater than three a long time in the Air Force, stated the cuts at numerous federal companies imply that the US authorities has fewer levers to tug to punish or expose foreign affect operations.
ODNI didn’t reply an in depth record of questions on how the company plans to counter foreign affect, together with whether or not ODNI has a high intelligence specialist devoted to the problem, because it has had in years previous. An ODNI spokesperson referred NCS to a earlier company assertion saying the Foreign Malign Influence Center’s core features could be moved to different elements of ODNI.
Gabbard stated in August that ODNI would reduce its workforce by over 40% and save taxpayers a whole bunch of thousands and thousands of {dollars} in the course of.
Trump’s new choose to interchange Haugh and lead the NSA and Cyber Command, Lt. Gen. Joshua Rudd, pledged to guard the electoral course of from foreign interference throughout his Senate affirmation listening to.
“Any foreign attempt to undermine the American process of democracy, and at the center of that is our electoral process, as you all know far better than I do, has got to be safeguarded,” Rudd instructed senators on January 15.
The FBI’s election safety posture right now has been formed by Trump’s grievances over the bureau’s investigation into his 2016 marketing campaign’s contacts with Russia and his false claims of a stolen 2020 election.
As president-elect in 2017, Trump was incsensed when then-FBI Director James Comey briefed him on the existence of a salacious, and later debunked, file about Trump gathered by a former British intelligence agent. Many see a by line between that day and the FBI’s present counterintelligence posture for elections.
“You could argue that where we are today happened because Comey briefed Trump, Trump got embarrassed and the rest is one big revenge tour,” stated a former senior FBI counterintelligence official who served throughout the first Trump time period and Biden’s time period. They spoke on the situation of anonymity out of concern of retaliation from the Trump administration
If and when US officers converse publicly on foreign efforts to form US democracy is an intensely delicate topic in the second Trump administration. Trump has bristled at US intelligence findings that Russia tried to affect the 2016 election in his favor, whereas Democrats have typically exaggerated these findings to assault Trump.
A yr after FBI brokers had been caught off-guard in 2016 by the scale of Russian hacking and propaganda geared toward voters, the bureau arrange a Foreign Influence Task Force (FITF), a staff of about 30 individuals to deal with the menace of foreign meddling. The activity drive handed intelligence about what foreign spies had been doing on Facebook and Twitter to these social media platforms.
In February 2025, Attorney General Pam Bondi dissolved FITF, citing the have to “free resources to address more pressing priorities, and end risks of further weaponization and abuses of prosecutorial discretion.”
The affect of Bondi’s memo goes past FITF, in response to present and former FBI officers. It’s a disincentive for any FBI agent to take up a case involving Russian election affect.
“Say the Russians influence the election again — I’m worried that we won’t know it until after the fact,” the ex-FBI official stated.
In a press release to NCS, the FBI stated it continues to pursue instances associated to “foreign influence efforts by adversarial nations.”
“The Counterintelligence Division and our field offices work together to defend the homeland against all foreign influence efforts, including any attempts at election interference,” the FBI stated.
The Cyber Command operation towards Russian trolls in 2024 adopted the Justice Department’s public disclosure that it had seized web domains utilized by the trolls. US officers noticed the hacking as an added, clandestine counter-punch to enrich the regulation enforcement seizure. Under the second Trump administration, the public might not know if the Justice Department takes such an motion main as much as an election.
After Trump received the 2024 election, a planning doc utilized by his transition staff and reviewed by NCS lamented a “surge in politicization and meddling in US politics by US intelligence agencies,” and stated the Justice Department and the FBI ought to revisit how they convey threats to the public, “e.g. in announcing indictments of foreign hackers or getting involved in threats to election security in partisan ways.”
Cyber Command, the NSA and different elements of the US intelligence neighborhood started taking part in a extra outstanding position in the cyber protection of US elections after the Russian intervention in 2016. The federal Cybersecurity and Infrastructure Security Agency emerged as a conduit between these highly effective navy and spy companies and native election places of work, constructing belief with these places of work and passing on intelligence on foreign threats. Trump signed a regulation establishing CISA as part of the Department of Homeland Security throughout his first time period.
But Trump and his high advisers by no means forgave CISA’s management for saying the 2020 election was safe. They accused CISA of “censoring” conservative voices when in the first Trump time period, at the urging of Republican and Democratic election officers, the company flagged to social media platforms posts that unfold false details about voting. The second Trump administration final yr paused all of CISA’s election safety work and reassigned the company’s election specialists or put them on administrative depart
CISA spokespeople say the company nonetheless gives some cybersecurity providers to election places of work, because it does different sectors. But election officers say the affect from the cuts to so many places of work, together with CISA, is evident.
A day after the US bombed Iranian nuclear services in June, pro-Iranian hackers breached an Arizona state election web site and changed candidates’ photographs with a picture of Iran’s Supreme Leader Ayatollah Ali Khamenei. It had echoes of 2020, when, in response to the FBI, Iranian hackers arrange an internet site with violent threats to election officers.
But whereas CISA was central to the federal response to the 2020 incident — and communicated proactively with election officers then — Arizona election officers now say they aren’t getting the identical degree of collaboration with the company. In a press release to NCS, a CISA official stated the company “worked with Arizona and provided direct assistance to support their response efforts.”
The cuts to CISA have “drastically reduced national visibility into foreign threats and increased the potential for security failures,” Moser, the former CISA election safety official, instructed NCS. “While state and local officials take great care to secure elections, now they are effectively being siloed and expected to combat sophisticated nation-state adversaries with severely limited federal support.”
A CISA spokesperson stated: “Every day, DHS and CISA are providing our partners the most capable and timely threat intelligence, expertise, no-cost tools and resources these partners need to defend against risks.”
Foreign powers, with the assist of synthetic intelligence, will proceed to focus on American voters with disinformation, the ODNI stated in its annual worldwide menace assessment revealed in March.
“Reinforcing doubt in the integrity of the U.S. electoral system achieves one of (Russia’s) core objectives,” the intelligence report says.
China, particularly, is making alarming leaps in AI-powered affect exercise, in response to researchers at Vanderbilt University’s Institute of National Security. In August, the institute published paperwork leaked from a Chinese agency that seem to indicate it concentrating on the 2024 Taiwan election with a wave of social media posts. The Chinese agency has additionally put collectively profiles on at the very least 117 members of Congress and greater than 2,000 American political figures and “thought leaders,” in response to the analysis.
“This election cycle, foreign governments will be able to use AI tools to essentially whisper in the ear of anyone they target,” stated Emerson Brooking, a former Pentagon cyber coverage adviser who now research affect operations at the Atlantic Council’s Digital Forensic Research Lab. “And the Trump team isn’t just unprepared; they’ve deliberately knocked down a lot of the defenses built over the past eight years.”
Last yr, Gabbard and Iowa GOP Sen. Chuck Grassley launched declassified intelligence paperwork associated to the FBI and intelligence neighborhood’s probes of Russian affect on the 2016 election. Contrary to Gabbard’s public claims, the paperwork don’t present the probes had been a hoax. But they do present the lengths to which Russia’s SVR foreign intelligence service was keen to go both to impress their Kremlin bosses or to play thoughts video games with US officers analyzing the hack, in response to Michael van Landingham, a former CIA analyst, and Alex Orleans, a counterintelligence researcher.
That Americans are nonetheless arguing about Russia’s 2016 affect operations 10 years later is strictly what Russian intelligence hoped for, they stated.
“SVR officers are definitely dining out on the fact that our national discourse still can’t fully escape the riptides of 2016,” Orleans instructed NCS.
NCS’s Katie Bo Lillis and Evan Perez contributed to this report.