In the aftermath of Romania’s presidential elections, startling revelations have emerged about alleged cyber interference and a sophisticated social media campaign that propelled candidate Călin Georgescu into an unexpected spotlight. President Klaus Iohannis has authorised the declassification of reports from key intelligence agencies following a meeting of the Supreme Council of National Defence (CSAT) which took place on November 28, shedding light on these developments.
More than just raised eyebrows.
Georgescu’s sudden and unexpected rise into the number 1 spot in the first round of presidential elections, took many by surprise. It didn't just raise eyebrows, it sent them into orbit, as for many, he came seemingly out of nowhere. Now, based on reports, it seems that his poll results have been attributed to a well-coordinated campaign primarily conducted on TikTok.
According to reports from the Romanian Intelligence Service (SRI), a network of TikTok accounts—some dating back to 2016 but dormant until recently—was activated two weeks before the first round of voting. This network reportedly comprised 25,000 accounts, with nearly 800 showing minimal activity until November 11, 2024, when they suddenly began operating at full throttle.
The accounts deployed specific strategies, including the use of hashtags such as #cg11 and targeted algorithms by combining emoticons with the candidate’s name. This orchestrated effort led to a dramatic increase in Georgescu’s visibility and follower count, with some accounts falsely presenting themselves as affiliated with the SRI’s Anti-Terrorist Brigade, amassing thousands of followers and over one million likes.
Campaign Financing Under Scrutiny
Despite declaring zero euros in campaign expenses to the Permanent Electoral Authority (AEP), evidence suggests significant financial backing for Georgescu’s promotion. The SRI has identified Bogdan Peșchir, a prominent TikTok user, as a key financier. It is alleged that Peșchir donated over €1 million, with TikTok confirming $381,000 of these funds were paid directly to accounts promoting Georgescu between October and November 2024. Additional payments were reportedly funnelled through the “Fame Up” platform, offering influencers €1,000 per video to support the candidate.
A State Actor’s Hand?
SRI officials claim the campaign bears hallmarks of a state actor’s involvement. Advanced techniques were employed to obscure the network’s scale, including assigning unique IP addresses to each TikTok account and coordinating activities via Telegram channels rather than on-platform tools.
One such channel, titled “Get Involved Too: Romania’s Revival – Food, Water, Energy,” gained nearly 4,000 subscribers in the days leading up to the election. This channel acted as a hub for distributing content, coordinating posts, and managing hashtags across social media platforms.
The intelligence service also identified attacks targeting Romania’s electoral systems and highlighted the “expert knowledge” of TikTok’s security protocols displayed by those involved. SRI officials suggested that a well-funded digital marketing team, operating with international expertise, was likely behind the campaign.
The declassified documents from the Supreme Council of National Defence (CSAT) have unveiled a series of aggressive cyber attacks aimed at compromising the electoral process. These attacks, attributed to Russian state actors, sought to infiltrate Romania’s election infrastructure and sway public opinion.
The Romanian Intelligence Service (SRI) reported over 85,000 cyber attacks targeting the country’s electoral systems. These intrusions aimed to access sensitive data, alter information integrity, and disrupt system availability. Notably, login credentials for Romania’s election network were found on Russian cybercrime platforms prior to the first round of voting.
The CSAT meeting concluded with a directive for national security and criminal investigation authorities to take immediate action to investigate these claims. The Presidential Administration urged swift and decisive measures to safeguard the integrity of the electoral process and clarify the full extent of the alleged interference.
December 8th, 2024
With the run-off for the top spot beckons ever closer and as the investigation unfolds, questions linger over the role of foreign actors and the implications for future elections. Georgescu’s sudden popularity, fuelled by unconventional methods, underscores the growing influence of social media in political campaigns—and the potential vulnerabilities it brings to democratic processes.
Romanians will head to the polls again on December 8th to finalise the presidential election process, however, this election feels very different than past elections.
For the full statement from the Presidential Administration, visit the official press release.
