Cyber Threat Looms Large over German Election

Intruders might even try to sabotage the actual vote on election night, September 26, by hacking into the software used to count votes or into the program officials use to report early results.  

Germany’s BSI said it was working with authorities and candidates to help them shield themselves from such attacks.  

But those security measures will not help counter what’s considered the second key cyber threat: misleading or false information that is spread to manipulate how voters think or behave.

The Disinformation Threat
Tankred Schipanski, a member of parliament and the digital policy spokesperson for Merkel’s conservative bloc, described disinformation campaigns as “our greatest challenge.” The representative added that such campaigns are “often organized and financed abroad but spread thanks to the help of domestic actors like the Alternative for Germany,” Germany’s far-right party known by its acronym, AfD. 

Social scientists found that false information criminalizing refugees that spread before the last federal election in 2017 drove voters to the AfD.

This year, AfD officials have already tried to cast doubt on the upcoming vote by spreading debunked allegations that mail-in ballots could easily be manipulated — a move that takes inspiration from Donald Trump’s campaign to discredit postal voting. 

The far-right German party, whose voters traditionally prefer casting ballots in person, have decried attempts to make postal voting easier during the coronavirus pandemic. Such amendments, they argue, would be introduced specifically to harm the AfD.

Similar disinformation campaigns have popped up around the world. They are so numerous and sophisticated that experts have coined the term “infodemic.”  

In December, US tech giant Facebook shut down 17 coordinated large-scale efforts on its platforms, a record number. One targeted users in Germany, although it was unrelated to the elections.  

In late February, a Facebook spokeswoman said the company, which has over 43 million users in Germany, had “not seen evidence of … operations targeting the German election” but added that the company is “staying vigilant” — not least because of therise of new deepfake technology that lets users produce realistic fake videos in which people appear to do or say things they never did.

Hybrid Attacks
Then there is a third kind of cyberthreat looming over the election: complex operations known as “hybrid attacks.” These combine hacking with the placement of distorted information, and they often start with intruders breaking into the accounts of political decision-makers or their confidants by masquerading as trusted contacts.  

Such phishing attempts have become more frequent and professional. The majority detected by Microsoft could be traced back to Russia and China, but also North Korea and Iran. “It is legitimate to say that actors from those countries have both the capabilities and, at least in part, a geopolitical interest to become active around the German federal elections too,” Neutze pointed out.   

After the hacking, damaging material obtained is put online, where it takes on a life of its own.  

Users who are unaware of the material’s origin share it on social media or messenger services. Once it reaches a certain number of people, it tends to be picked up by political players with a larger following. They, in turn, are quoted by professional journalists, who bring the issue to the forefront of public debate.   

What makes countering such hybrid campaigns so difficult is that the leaked material is often not false per se but distorted or deliberately taken out of context to inflict harm. 

Experts therefore speak of “malinformation” rather than “disinformation.” They say boosting digital media literacy among social media users is key to helping them recognize information designed to deceive.  

Germany, however, has missed several chances to build such resilience among its population of 83 million over the past ten years, said Manuel Höferlin, a member of parliament for the opposition Free Democrats and the party’s digital policy spokesperson. 

“That is a huge failure,” he added.  

No Rules for Online Campaigning
What complicates the situation further is that even though social media companies have rules for their platforms, political online advertising remains, in effect, unregulated in Germany. 

In the offline world, the country has strict rules and restrictions for election campaigning, like limiting the time campaign billboards can stay up or restricting time slots for campaign ads on TV — but no such restrictions have been put in place for online campaigning.

The European Union has drafted proposals to regulate digital campaigning, but it will take years for them to be implemented, and Berlin has run out of time to come up with its own national rulebook.  

Behind closed doors, talks are being held over whether the country’s parties could agree on a voluntary code of conduct for the upcoming online campaign. It could include a deal that would oblige them to mark online campaign advertising, or ban buying followers or likes.  

A decision could be made in the coming weeks, according to an official involved in the negotiations who spoke on the condition of anonymity. 

“And if some parties refuse to participate, that in itself would be telling,” the official said.  

Janosch Delcker is chief technology correspondent at Deutsche Welle.This article is published courtesy of Deutsche Welle (DW).