LLMMedium
Iranian Hacker Group Cotton Sandstorm Reportedly Integrating AI into Cyber Influence Operations
- Occurred
- May 2, 2023
- Published
- Oct 25, 2024
- Source
- AI Incident Database
Summary
The Iranian state-sponsored group Cotton Sandstorm, linked to the IRGC, has integrated generative AI into cyber influence operations. In December 2023, it launched Operation “For Humanity," using AI-crafted messaging to hijack a U.S.-based IPTV streaming service with propaganda about the Israel-Hamas conflict. The group also engages in election-related reconnaissance, which suggests they used AI-enhanced influence efforts ahead of the 2024 U.S. election.
Developers
- Islamic Revolutionary Guard Corps (IRGC)
- Government of Iran
- Cotton Sandstorm
- Generative AI developers
Deployers
- Islamic Revolutionary Guard Corps (IRGC)
- Government of Iran
- Cotton Sandstorm
Harmed parties
- political candidates
- Media organizations
- General public of the United States
- American voters
- Democratic integrity
Tags
- Disinformation
- Election meddling
- Hacking
- Cyber operations
- Cyber threats
- Iran
- Cotton Sandstorm
- Microsoft Threat Analysis Center
- IPTV propaganda
Classification
Category confidence: 85%
Severity confidence: 80%
Rationale: AI used for cyber influence operations and propaganda, but no direct physical harm or major financial loss reported.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8