FastSaying

A Nation State or Cyber-Mercenary won’t hack e-voting machines one by one. This takes too long and will have minimal impact. Instead, they’ll take an easier approach like spear phishing the manufacturer with malware and poison the voting machine update pre-election and allow the manufacturer to update each individual machine with a self-deleting payload that will target the tabulation process.

James Scott, Senior Fellow, Institute for Critical Infrastructure Technology

cybersecurityelectionelectionshackingmalwaremercenariesmercenaryphishingvoting

Related Quotes

What do you mean “Should we worry about cyber adversaries getting into state voter registration databases?” They’re already in and selling exfiltrated voter registration data on the dark web! Next election cycle black hats will be selling ‘access as service’.
— James Scott, Senior Fellow, Institute for Critical Infrastructure Technology
adversaries-votingadversaryblack-hat
E-Voting machines are nothing more than dilapidated, barebones PCs with zero endpoint security.
— James Scott
CybersecurityE-votingElection
The local and state election tabulation process is so riddled with vulnerabilities that it only makes sense that foreign and domestic actors are attempting to manipulate the election.
— James Scott
CybersecurityE-votingElection
Consider all tabulation systems infected by bad actors until a third party, not affiliated with the manufacturer or election officials, proves they are secure.
— James Scott
CybersecurityD.c.Election
Every conceivable layer of the election process is completely riddled with vulnerabilities, so yes, hacking elections is easy!
— James Scott
Cyber ThreatCybersecurityE-voting