Russian state-aligned threat actors, Storm-1679 and the recently disrupted Storm-1099, have been identified as engaging in online influence operations aimed at undermining the upcoming Olympic Games in Paris. These activities involve the dissemination of fake news, altered images, and AI-generated videos on social media platforms. A recent report by Microsoft highlighted the objectives of these operations, which include tarnishing the reputation of the International Olympic Committee (IOC) – which has previously taken actions against Russia – and instilling fear of potential violence during the Summer Games.
The tactics employed by Storm-1679 have been particularly noteworthy, as they have created sophisticated content that mimics official communications from various organizations such as the CIA, France’s General Directorate for Internal Security (DGSI), and leading news agencies like France24. These videos often convey warnings about security threats to the upcoming Olympics in a compelling and persuasive manner. In contrast, Storm-1099 has focused on spreading false information through a network of French-language websites, targeting topics like corruption within the IOC, concerns about violence at the Games, and criticisms of French President Emmanuel Macron.
The history of Russia’s involvement with the Olympics has been marred by controversies, including a well-publicized doping scandal and a significant cyberattack during the 2018 Winter Games in PyeongChang, South Korea. The Olympic Destroyer cyberattack disrupted IT systems at the event, causing disruptions to Wi-Fi services, monitors, and ticketing platforms. Furthermore, the attack was designed to falsely implicate North Korea’s Lazarus group, highlighting the deceptive nature of cyber operations in the context of major sporting events.
In light of these past incidents and the current influence operations targeting the Paris Olympics, there are growing concerns about the potential for physical attacks on the event. The complex and varied IT infrastructure supporting the Games presents a significant vulnerability that could be exploited by malicious actors. This has prompted experts like Sean McNee, head of research for DomainTools, to emphasize the importance of robust security measures and international cooperation in safeguarding the event against cyber threats.
McNee highlights the need for a fully operational security operations center (SOC) staffed with trained personnel to monitor and respond to possible attacks during the Games. Given the evolving cybersecurity landscape and the unique challenges posed by the Olympics’ IT infrastructure, proactive planning and preparation are essential to ensure the safety and integrity of the event. With the Games occurring only once every four years, the security teams must be agile and adaptable to address emerging threats effectively.
As the countdown to the Paris Olympics continues, the focus on cybersecurity and risk mitigation will remain critical to thwart potential disruptions and ensure a safe and successful event for athletes, spectators, and organizers alike. The coordinated efforts of cybersecurity experts, law enforcement agencies, and government authorities will be vital in securing the Games against the evolving tactics of threat actors and safeguarding the integrity of this global sporting event.