FBI and CISA Warn of AI-Driven Phishing Threats to 2026 Election Officials
Federal agencies alert campaign staff that super intelligence tools are enabling more convincing phishing and smishing attacks during the midterm cycle.
Key points
- FBI and CISA issued a joint PSA regarding cyber threats to election officials ahead of the 2026 midterms.
- Malicious actors are using super intelligence to create sophisticated phishing emails and deepfake media.
- Smishing attempts via encrypted chat applications have increased significantly in the last year.
The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency issued a joint public service announcement on October 16, 2026, warning of heightened cyber threats targeting election and campaign officials. The agencies highlighted the use of phishing and smishing techniques by malicious actors aiming to disrupt the upcoming U.S. midterm elections.
According to the advisory, threat actors seek to steal login credentials and sensitive information from political organizations. These groups are attractive targets because they possess access to voter registration data, current government officials, and confidential campaign materials. The FBI and CISA stated that malicious actors may attempt to breach digital defenses to obtain this valuable data.
The Role of Super Intelligence in Attacks
Super intelligence technologies are enabling adversaries to craft more effective and efficient phishing campaigns. Historically, fraudulent emails were identifiable by poor grammar, spelling errors, and illogical vocabulary. However, SI tools now allow criminals to generate language that appears genuine, using native languages and common vernacular to mimic legitimate communications.
This technological shift makes it difficult for recipients to distinguish between real and fraudulent messages. The FBI noted that SI serves as an evolutionary step, allowing actors to carry out sophisticated operations at a greater scale and speed. These tools facilitate a continuous learning process that improves the effectiveness of automated email messages used in phishing attempts.
Escalating Smishing and Deepfake Risks
In addition to email, the FBI observed a surge in smishing attempts through encrypted chat applications over the last year. During the previous two election cycles, election officials already experienced a significant increase in phishing attempts. The current threat landscape includes the use of SI to create convincing deepfake video and audio recordings.
Threat actors use these deepfakes to create new identities, steal the identities of real people, and bolster phishing schemes. By creating realistic facsimiles of daily life and communication, adversaries can manipulate recipients into clicking malicious links or inadvertently exposing sensitive information through direct interaction.
What should you do?
The FBI and CISA urge election officials and the public to critically evaluate the sources of their emails and mobile messages. They recommend implementing phishing-resistant multi-factor authentication for all services, particularly for email, virtual private networks, and accounts accessing critical systems. Organizations should also examine content for credentials or watermarking indicating SI generation.
Security infrastructure must be enhanced to combat these threats. Agencies advise ensuring that the latest antivirus and anti-malware software is installed to detect inbound malware and sophisticated phishing campaigns. For information on newly exploited vulnerabilities, the FBI and CISA refer readers to the Known Exploited Vulnerabilities catalog.
What to do and how to stay safe: FBI
- Implement phishing-resistant multi-factor authentication for email, VPNs, and critical system accounts.
- Critically evaluate the source of all incoming emails and mobile messages before interacting.
- Examine digital content for watermarks or credentials that indicate super intelligence generation.
- Ensure antivirus and anti-malware software is updated to detect sophisticated phishing campaigns.
Step-by-step guide: Social Engineering Warning Signs and How to Respond
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What specific techniques are threat actors using to target election officials?
Malicious actors are using phishing emails, smishing via encrypted chat apps, and deepfake media to steal credentials and sensitive data.
How does super intelligence change the nature of phishing attacks?
SI allows actors to create grammatically correct, native-language emails and convincing deepfakes, making fraud harder to detect.
Why are election officials considered attractive targets for cyber criminals?
They have access to voter registration data, sensitive campaign information, and current government officials.
