Foreign Interference In US Elections 'Will be repeated'

The United States’ former top cyber diplomat has warned that foreign interference in the US and other democratic national elections will keep happening if western countries don’t get better at imposing consequences on so-called ‘bad actors’ on the Internet.

Chris Painter, (pictured) who was until last year the Director of Cyber Issues at the US State Department and previously the head of cybersecurity in the Obama White House’s National Security Council, told SBS News that US government cyber specialists had been “caught off guard” by Russian online operations aimed at dissuading voters from voting for Hillary Clinton in favour of now President Donald Trump in the 2016 election.  

Those operations are the subject of an indictment by Special Counsel Robert Mueller which last week charged 13 Russian nationals for allegedly attempting to interfere in the US electoral process. There is the possibility that if the 13 ever travel to a third country with an extradition treaty with the US, they will have to face a US court.  

“There was some detection, our director of National Intelligence, our FBI director, our head of Homeland Security came out during the election and said this was happening,” Mr Painter said of the interference operations. 

“But what we didn’t really see coming was this hybrid attack that was cyber-enabled but also more of a traditional influence operation... I don’t think we were looking at the whole range of activity out there. I think that caught us a bit off guard but... once it was seen, there was a lot of activity to respond to it.”

Mr Painter said before the 2016 election the US cyber community was largely focused on instances or threats of more “traditional” cyber-crime.

“We were looking at things like theft of intellectual property, or intrusion and theft of personal information, credit card information; we were focused on the threat of attacks on critical infrastructure like an attack on the electrical grid or financial system,” he said.

He warned that the Russian operation will be emulated by other state and non-state groups seeking to destabilise democracies.

“This is something that absolutely will be repeated again. If there’s no consequence for this bad action it will be repeated - it’s an invitation to repeat it. So we really have to as a community in the US and around the world make sure we are doing everything we can to prevent this, both by hardening our system, and making sure there’s costs and consequences for the people who do it,”.   

But he said the Trump administration has fallen well short of an effective response.

“There’s more we can do frankly,” he said. “One of the things the US needs to do is come out with a strong declaratory statement that this activity will not be countenanced and there will be consequences. It has to come from the very top and we haven’t had that yet.”

Mr Painter was the world’s first top cyber diplomat, a job created out of the recognition that transnational crimes and threats require high-level coordination between countries. With malicious hackers or other cyber criminals operating from anywhere in the world, and often routing their attacks through countries with lax cyber jurisdictions, a single nation's law enforcement cannot achieve much without coordinating with other nations.

Since Mr Painter's 2011 appointment under former Secretary of State Hillary Clinton, at least 25 countries have followed suit, Australia included. Australia’s Ambassador for Cyber Affairs is Dr Tobias Feakin, appointed one year ago by Prime Minister Turnbull with the brief to lead a “whole of government” approach to protecting Australia’s interests and security in cyberspace.

Mr Painter is visiting Australia with the Canberra think tank the Australian Strategic Policy Institute, meeting policy-makers, researchers and bureaucrats involved in the country's cybersecurity infrastructure. He said that Australia had been responding effectively to the range of cyber threats, but that no one country has yet successfully figured out how to deter cybercrime.

“One thing we have not done well, no one in the international community has done well, is deterrence, imposing costs on adversaries when they do bad things. Calling them out is good, name and shame is part of it, but it’s not going to change your behaviour necessarily if you’re a nation state getting a benefit out of it.”

Other tools might be economic sanctions, law enforcement indictments (such as the five Chinese PLA officers indicted in the US in 2014 for industrial espionage) or offensive cyber tools which he said are more limited in use than people understand.

Despite some successes in creating what Mr Painter calls “rules of the road” in cyberspace, including a 2015 agreement between China and the US not to steal intellectual property for the benefit of the commercial sector; the international community is still grappling with the dimensions and implications of cyber threats.

UN Secretary General Antonio Guterres last week called for international rules protecting civilians from the potentially deadly impacts of cyber warfare such as attacks on power grids.

Australia is a big target of cybercriminals as a rich country that’s heavily dependent on technology. A report by Norton Cyber Security Insights released recently said more than one in four Australians were the victims of cybercrime last year, losing an average $195 each and two days dealing with the consequences. 

Australia’s mandatory data breach reporting laws has come into effect, which will force companies to reveal when they’ve been hacked. 

SBS:       Image: Nick Youngson

You Might Also Read: 

Leaked NSA Report Claims Russian 'Cyber Espionage' Against US Elections:

Hillary Clinton’s Cyber Warfare Warning:

Russian Fake Brexit Tweets & Attacks On The UK:
 

 

« Millions Of Compromised Accounts Discovered On The Dark Web
AI Will Boost Cybercrime & Security Threats »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

CERT.GOV.AZ

CERT.GOV.AZ

Azerbaijan Government Computer Incident Response Team

Konfidas

Konfidas

Konfidas provide high-level cybersecurity consulting and professional tailored solutions to meet specific cybersecurity operational needs.

Indusface

Indusface

Indusface offers best website security, web application firewall and SSL certificate to keep your online business much safer.

LuJam Cyber

LuJam Cyber

LuJam Cyber is a cybersecurity company that provides protection to SME Networks.

Redstor

Redstor

Redstor's complete data management helps you discover, manage and control your data from a single control centre, unifying backup and recovery, disaster recovery, archiving and search and insight.

Evanston Technology Partners (ETP)

Evanston Technology Partners (ETP)

ETP provides services and solutions to enable and transform businesses in the areas of cybersecurity, data protection, and efficient operations practices.

Allied Telesis

Allied Telesis

Allied Telesis delivers the secure, flexible, and agile solutions needed to meet the expectations of any industry’s critical mission.

Aptum

Aptum

Aptum is a global hybrid multi-cloud managed service provider delivering complex and high-performance cloud solutions with an integrated secure network.

GISEC Global

GISEC Global

GISEC Global provides vendors and companies from around the world with access to lucrative opportunity to capitalize on what's set to become one of the world's booming markets.

BioID

BioID

BioID are a German company offering deepfake detection, liveness detection, facial authentication & identity verification as a Service. 

QFunction

QFunction

QFunction works within your existing security stack to detect anomalies and threats within your data.

Evolve Business Group

Evolve Business Group

Evolve is an independently-owned managed network solutions provider, creating bespoke packages for customers globally since 2005.

Twilio

Twilio

Twilio are the customer layer for the internet, powering the most engaging interactions companies build for their customers. We provide simple tools that solve hard problems.

SECTA5

SECTA5

SECTA5 is a cybersecurity company building a next-generation Continuous Threat and Exposure Management platform, leveraging the expertise of offensively trained cyber defenders.

INTfinity Consulting

INTfinity Consulting

The INTfinity team brings together decades of professional experience in cybersecurity. We're here to apply that same experience and proficiency in defending your networks.

Hicomply

Hicomply

Hicomply simplifies compliance management with smart, user-friendly tools, helping you scale your processes and stay in control - no matter how complex.