Key points
- Super intelligence enables threat actors to create grammatically perfect, native-language phishing messages that bypass traditional detection cues.
- Smishing attempts via encrypted chat applications have increased significantly in the past year, according to the FBI.
- No software patch is involved; the threat relies on social engineering techniques rather than code vulnerabilities.
The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency issued a joint public service announcement regarding cyber threats to election and campaign officials ahead of the 2026 U.S. midterm elections. The agencies state that malicious actors are leveraging super intelligence to generate sophisticated phishing and smishing campaigns. These efforts aim to steal login credentials and sensitive campaign data from political organizations and government officials.
In plain English
Super intelligence allows attackers to craft emails and text messages that use natural language and correct grammar. Historically, recipients could spot fraud through spelling errors or poor vocabulary, but AI-generated content appears genuine. This makes it difficult for targets to distinguish between legitimate communications and malicious attempts. The technology also enables the creation of convincing deepfake audio and video recordings to bolster these schemes.
The background
Election officials are attractive targets because they hold access to voter registration data and sensitive campaign information. During the last two election cycles, officials faced a surge in phishing attempts. In the last year, the FBI observed an increase in smishing attempts delivered through encrypted chat applications. Threat actors use AI to automate and scale these operations, creating a continuous learning process that improves the effectiveness of their deceptive messages.
What changes now
The agencies urge officials and the public to critically evaluate the source of every email and mobile message. Users must remain vigilant for attempts to manipulate them into disclosing financial information or installing malware. A comprehensive cybersecurity approach is essential. This includes examining content for credentials or watermarks indicating it was generated by super intelligence. Organizations should ensure their security infrastructure is enhanced to detect inbound malware and sophisticated phishing campaigns.
Who needs to act first
Teams usually prioritize updating access controls for accounts that hold sensitive voter or campaign data. Check whether multi-factor authentication is enabled on all email and virtual private network services. Back up critical configuration files before making changes to security settings. Test new detection rules in a isolated environment to ensure they do not block legitimate communications. Verify that all staff members understand how to identify suspicious messages that lack obvious errors.
Background: Phishing
Phishing exploits human trust rather than technical flaws. Protect your organization by enforcing multi-factor authentication, restricting administrative privileges, and verifying external requests through secondary channels. Regular training and strict email filtering reduce the likelihood of successful credential theft or malware deployment.
Read the full guide: Phishing Risks and Protection for Small Business Operations
What to do and how to stay safe: FBI
- Implement phishing-resistant multi-factor authentication for all services, particularly email, virtual private networks, and accounts accessing critical systems.
- Examine potentially malicious content for content credentials or watermarking that indicates it was generated by super intelligence tools.
- Ensure your organization has the latest antivirus and anti-malware software installed to detect and defend against inbound malware and spam.
- Refer to the CISA Known Exploited Vulnerabilities catalog for information on newly exploited vulnerabilities in your systems.
Step-by-step guide: Cybersecurity Incident Response Plan Example and Structure
General security guidance from the Patch Herald newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What specific technologies are threat actors using to improve phishing campaigns?
Malicious actors are using super intelligence to generate larger, more efficient, and effective phishing emails and smishing messages.
How has the method of attack changed in recent years?
The FBI saw an increase in smishing attempts through encrypted chat applications within the last year, alongside a surge in phishing during previous cycles.
Why are election officials targeted by these cybercriminals?
They are targeted due to their access to voter registration data, current government officials, and sensitive campaign information.
