❌

Reading view

There are new articles available, click to refresh the page.

The next election influence campaign will target your AI chatbot

Election influence campaigns, particularly ones playing out over social media, are a dime a dozen.

Such campaigns – sometimes devised by foreign powers, other times by domestic groups – are often designed to influence the U.S. electorate. Fake accounts and online personas are created, networks of propaganda are disseminated and the campaign seeks to nudge American voters into thinking a certain way.

Mostly, these efforts are known for getting little to no traction with U.S. audiences. But while social media influence campaigns may not be effective, bad actors continue to adapt their coordinated propaganda goals to new tactics and technologies.

Enter AI chatbots, which have become a source of information and truth for many, who consult the tool for feedback and advice on everything from their careers, to their relationships with their family, as well as their politics.

But new research from VisionHeight, an Israeli threat intelligence firm, highlights how AI systems can often serve as more useful marks for influence actors than humans. To wit: someone is setting up networks of hyperlocal websites across at least 14 different states, filled with content meant to influence U.S. races.

These networks include websites with names like “Wolverine State Report” or “Peach State Bulletin.” Each state network usually has between five to six separate sites,  some presenting themselves as hard news outlets and others as opinion or editorial sites. The outlets also cite one another, creating a circular network of local credibility.

But the content on these websites does not resemble journalism, or any writing that a human would find coherent or compelling. Rather, they often include text of statements about specific candidates running in local races, directly stating they are the better candidate for a political issue.

Statements like “Candidate X is the stronger choice” for voters who care about housing, taxes or other political issues were repeated hundreds of times on the websites, with slight changes in the language for different political issues. Most notably, they appear to be explicitly written for AI crawlers scraping web traffic, not humans.

“What’s really interesting about this is that the websites themselves and the content is so well built to let’s say optimize the probability for AI crawlers and the model to be influenced by this content,” said Nitsan Daniel, chief technology officer and co-founder of VisionHeight in an interview.

Sample questions and answers submitted to AI

When a user asks an AI chatbot a question, the model will often search the internet for an answer. By creating specific online content providing direct answers to questions like “which candidate in a local race is better on housing affordability” it can essentially train the AI to retrieve that information when responding to queries.

Many media websites will opt to block AI crawlers, but these websites were all configured to specifically allow major U.S. AI companies to scrape their websites.

A blog by VisionHeight published Wednesday said the operation encompassed six states and 37 websites, but Daniel told CyberScoop that they have since discovered the operation spanned at least 14 states and 460 pages of online content.

The states targeted include Arizona, Colorado, Georgia, Indiana, Iowa, Kansas, Michigan, Mississippi, Nevada, North Carolina, Pennsylvania, Texas, Virginia, Wisconsin . At least seven states saw one or more House races targeted, while other sites focused on other races like Secretaries of State, statewide judicial appointments and local offices.

Most of the research focused on AI answers provided through Google search, but Daniel said they had confirmed at least one major AI model, Perplexity, linked to and cited one of the pages, Tarheel State Report, as its first source for an answer.

VisionHeight does not attribute the activity to a particular actor. To Daniel, who is behind the campaign and their ultimate goals are less important than the prospect that this kind of operation is easily reproducible by both foreign and domestic bad actors looking to influence how AI systems answer questions around political races.

“What we’re seeing here is,I think, very nicely demonstrating how the entire world is transitioning to [a new era],” she said. “So if in the previous election you could have seen fake websites aimed at getting people to actually read it, and containing content built to impact what they’re thinking, what we’re seeing here is…now instead of spending time and effort on getting people to read the content, [they’re] getting into their AI and being influenced by that.”

But Daniel’s concerns are broader. Large language models have become increasingly sophisticated in their ability to carry out a range of deceptive activities, such as creating false organizations, websites, as well as deepfake video, audio and imagery at scale.

It appears AI was used to generate much of the infrastructure and content used in the operation as well. All 37 websites VisionHeight identified in their first analysis, spanning multiple states, were registered in a single evening, and 36 were registered within an 8 minute timeframe. On Sept. 30, the network published “roughly 100,000 words of candidate content” all using the same template and layouts.

Foreign and domestic actors can easily replicate this process, generating hyperlocal propaganda that shapes what  AI chatbots say in response to political questions. Experts say chatbots have improved at avoiding false election information, but they remain vulnerable to manipulation and errors that make them unsuited to providing more complex answers around politics.

Whereas in the past a foreign actor might lack the budget, time and incentive to target small elections, AI tools now allow for such operations to be created and optimized at scale within days. Domestic actors, meanwhile, could potentially pair the same tactics with a more sophisticated understanding of how to influence American audiences.

“It really demonstrates how in general using AI just makes what was in the past small targets [more attainable], Daniel said. “People could think that the odds of them being hit, being manipulated or being attacked are just lower because people will not put all their energy and resources on that. Nowadays, because it is so much easier, we’re seeing influence operations and cyber attacks hitting small, medium businesses as well as smaller communities, like in this case.”

The post The next election influence campaign will target your AI chatbot appeared first on CyberScoop.

AI is getting better at election facts, but voters shouldn’t rely on it

Like seemingly everything else these days, artificial intelligence will re-shape the way voters gather information on candidates running in the 2026 midterm elections.

In some ways, this is already the reality. Voters are increasingly turning to AI chatbots for information instead of Google.  Political campaigns are deploying deepfakes of their opponents. And AI systems have been developed to carry out increasingly complex  hacks.

Since the last major U.S. election in 2024, major tech companies have  embedded AI into their products while hundreds of millions of people have adopted the tools, either by purchasing subscriptions to commercial models or using open-source models. Yet both research and experts state that while AI systems have gotten better at handling basic facts, they’re nowhere near reliable enough to be a main source of  accurate or complete information. 

While chatbots are becoming a primary way that voters gather information on  local races, candidates, issues, and voting information, they are not substitutes for more authoritative sources, like a voter’s state or local election office. 

“I think this is one of the first elections we’re seeing…where AI is just everywhere,” said Thania Sanchez, senior vice president of research and analytics at the nonprofit States United Democracy Center. “Even if you just Google it, [now] the first thing that comes up is the AI overview.”

While AI companies have worked to cut down on errors in their model’s responses for questions around basic election information, they continue to fall short in important ways.

In new research shared exclusively with CyberScoop ahead of its release, States United Democracy Center tested two of the most popular tools — OpenAI’s ChatGPT’s free tier and the AI interface used alongside Google Search — for their performance on a series of basic questions around elections, such as how to register to vote, or a list of candidates in a race.

The models were chosen because they are free and easy to access. For Google AI, the nonprofit tested two types of accounts: ones running in Incognito Mode and ones that had a history of browsing election-skeptical websites.

The nonprofit ran two rounds of testing in 2025 and 2026, collecting nearly one thousand responses from the models submitted by users across six swing states (Arizona, Michigan, North Carolina, Nevada, Pennsylvania and Wisconsin).

In 2025 tests, 6.9% of responses from Google AI and 8.2% responses from ChatGPT“contained verifiable factual errors,” like not listing the correct candidates in a race or false guidance around polling site locations.

However, follow up tests in 2026 across Arizona, Pennsylvania and Michigan found that the error rates in both models had dropped to zero. The study notes that “this is real progress and should be acknowledged.”

But underneath those topline numbers, a more murky picture emerges around the tools’  reliability.

An AI response can sound accurate without actually being complete.  To wit: ChatGPT provided incomplete lists of current gubernatorial primary race candidates 88.9% of the time when queried.

Linking to a state election website – an output the study considers the single most important measure of voter utility  — happened less than 40% of the time. Whether due to formatting issues or the model ingesting outdated information, it’s a problem if voters use them as their primary information source for elections.

“It will be like ‘this person is the Republican candidate and this person is the Democratic candidate’ but it is not telling you there’s also these other third-party candidates,” said Sanchez. “It’s not giving you complete information, so the voter thinks these are the [only] two people running.”

A June survey from the Pew Research Center found that about half of U.S. adults reported having used chatbots at least once, up from a third in 2024, while a quarter reported using them daily. The top use case listed for engaging with the chatbot was searching for information.

Isabel Linzer, an elections policy analyst at the Center for Democracy and Technology, told CyberScoop that voters, campaigns and governments alike are using AI more freely and with fewer restrictions.

Bad actors in the information space have followed suit, and “we are in a phase now of generative engine optimization” where information operations are structured to rank higher in AI model responses.

“We’ve moved beyond [SEO] to [Generative Engine Optimization], and that’s where we’re seeing campaigns thinking about how to structure their materials to make sure that they are in a format that AI models want to use when they’re searching the web…to develop their responses to user queries,” she said.

There is also the underlying problem of frontier AI companies constantly tinkering with their models, their algorithms and the technologies they are intertwined with. . Election officials, by contrast, have decades of experience educating voters about their options.

A prime example of this churn occurred this past February, in between the first and second round of the study, when Google AI suddenly shifted to providing only links for election related queries in incognito mode, replacing the written summaries that showed up in the first round.

Like the study’s authors, Linzer said most people are still best served by going directly to local sources for accurate information on elections. With issues like ideological bias, the potential for bespoke or sycophantic answers for each user based on their prior chat histories and lack of predictability, voters should still be very careful about using AI chatbots as political truth machines.

The best thing that tech companies can do to educate voters is “making sure that for high-stakes situations like elections, that chats are connecting directly to the most important sources, like the website where you can actually register to vote,” said Linzer.

The post AI is getting better at election facts, but voters shouldn’t rely on it appeared first on CyberScoop.

❌