Austria’s revamped security leadership team tackles challenges

DSN AustriaTHE CONTROVERSIES THAT CONTINUE to be associated with the Austrian intelligence agencies today took place before December 2021, when the current Directorate of State Security and Intelligence (Direktion Staatsschutz und Nachrichtendienst, or DSN) was founded. Despite this, the DSN under the leadership of its director Omar Haijawi-Pirchner is still regarded as stable and predictable.

The DSN’s Western partner agencies were more than happy that the new governing coalition in Vienna was able to prevent the rightwing populist and generally Putin-friendly Freedom Party of Austria (FPÖ) from providing the minister of the interior. The fact that the current Interior Minister Gerhard Karner has been joined by an experienced state secretary is a major plus: Jörg Leichtfried, a Social Democrat born in 1967, has been regarded as a liberal European for many years, including eleven years as a member of the European Parliament. He will be responsible for state security and intelligence agencies.

One of Leichtfried’s stated goals has been particularly well received: he has vowed to improve the country’s national infrastructure and intensify its international cooperation. Various other details, such as the future framework conditions for military intelligence agencies, are also on his list. It is certain that the operational work of the DSN will continue to be led by Haijawi-Pirchner. This is reportedly to be improved, with better monitoring of terrorist threats, made possible by the planned extended access to messenger services.

The Austrian intelligence agencies have always been characterized by the personalities of their individua leaders. It is therefore all the more important who the leadership surrounds itself with—especially as the expectations are high, not least due to the threats from Russia and China. The uncertainty regarding Europe’s partners in the United States also means that the European intelligence agencies are urgently dependent on reliable Austrian partners.

As the political-strategic organization will be the responsibility of Leichtfried, two people who work in his immediate environment, and were previously only known to insiders, have come to the fore: the head of the Cabinet, Christian Strnad, and the head of Strategy and Security Policy, Rastislav Bachora. Both previously worked on the security-policy concept of the Social Democratic Party of Austria (SPÖ), the Social Democratic Strategy for Freedom, Protection and Security. Read more of this post

Opinion: Amidst war with Iran, Netanyahu tries to subjugate Israel Security Agency

David ZiniTHE GOVERNMENT OF ISRAEL recently appointed a new acting chief at the Israel Security Agency (ISA, also known as Shabak or Shin Bet). Identified only by their first initial, “S.”, this individual is one of the deputies of the outgoing ISA chief, Ronen Bar, and has reportedly served in the ISA for nearly 30 years. For the first time in ISA’s history, the organization is now being led by someone without a permanent appointment, marking a significant departure from usual practice.

This temporary appointment arises from Israeli Prime Minister Benjamin Netanyahu’s insistence on nominating Major General (ret.) David Zini for the position. However, Zini’s nomination has been met with legal challenges. The Supreme Court of Israel has ruled that Netanyahu cannot appoint the chief of the ISA, due to a conflict of interest. This is because the ISA is currently conducting a comprehensive investigation into the connections of Netanyahu’s close advisors with Qatar—a case popularly referred to as Qatargate.

Yet, even amidst Israel’s war with Iran, Netanyahu finds time to advocate for Zini’s appointment as ISA chief, arguing that the ongoing war creates an urgent need for a permanent ISA chief. The matter is once again pending a Supreme Court decision. Nevertheless, it seems that, given the unique circumstances that Israel is currently facing, Zini is likely to be appointed head of the ISA.

It is important to note that Zini lacks experience in intelligence operations. Following the failure of the ISA to provide a warning before the Hamas attack on October 7, 2023, the ISA chief has been expected to have extensive experience in intelligence operations, and to be well-versed in Arab affairs, which are central to ISA’s operations.

The issues surrounding the appointment of Major General Zini are complex. There is concern about the fact that Zini is being nominated personally by the prime minister, who is also requesting that the ISA head relinquish their autonomy and comply with the Prime Minister’s directives. Thus, the ISA could be used as a tool by the Netanyahu administration to advance the prime minister’s own political agenda.

What are the potential immediate risks if Zini is appointed to the role of ISA chief?

  1. Zini will likely respond to Netanyahu’s request and impose secret surveillance on political activists who have long opposed the prime minister. Netanyahu demanded that the former ISA head, Ronen Bar, take similar action. However, Bar refused, asserting that political protest in Israel was legitimate and that political motives, rather than state interests, drove the prime minister’s request.

Read more of this post

Austrian intelligence service report draws international attention over Iran nuke claims

Direktion Staatsschutz und NachrichtendienstON MAY 26, THE Austrian domestic intelligence service, Direktion Staatsschutz und Nachrichtendienst (DSN) in Vienna officially presented its annual report: the Verfassungschutzbericht (VSB) [Constitution Protection Report].  The document can be downloaded [PDF] via the official homepage of the DSN.

First published in 1997 by the predecessor of the DSN and then titled Staatsschutzbericht [State Protection Report], these reports offer rare official insights into the work of Austria’s domestic intelligence service. While their form and scope have varied over the nearly 30 years of the service’s existence, their aim and structure have roughly stayed the same: the VSB informs the public about the duties of the service, and about recent developments in the fields it is tasked with, monitoring and policing, during the calendar year prior to its publication.

Featured chapters nearly always include political extremism, terrorism, espionage, proliferation of weapons of mass destruction, protection of critical infrastructure and, since their emergence, sometimes also cyber threats. Often—thought not always—the reports feature anonymized cases from the year before and specialized essays about certain relevant topics. Traditionally the media and public give most attention to those parts of the report that deal with extremism and terrorism of all kinds inside Austria.

VSB 2024 Receives International Attention

This year, however, several paragraphs in the chapter titled “International Illicit Arms Trade and Proliferation” [“Internationaler Illegaler Waffenhandel und Proliferation”] have drawn international attention. The proliferation section—starting on page 154 of the report—deals with a number of states that can be described as partly or fully antagonistic to “the West”. In addition to Russia, China, Pakistan and North Korea, the Islamic Republic of Iran and its activities are described in the chapter. Regarding the Shia theocracy and its nuclear program, the report states (translated by the author with assistance by DeepL):

In order to assert and enforce its political claims to regional power, the Islamic Republic of Iran is striving for comprehensive armament. Nuclear weapons are intended to make the regime untouchable and to expand and consolidate its dominance in the Middle East and beyond. The Iranian program to develop nuclear weapons is well advanced. An arsenal of ballistic missiles is ready to carry nuclear warheads over long distances. [Emphasis added]

All efforts to prevent Iran’s armament with sanctions and agreements have so far proved ineffective. On the contrary: the Islamic Republic of Iran is producing weapons and weapons delivery systems on a large scale—and not just for its own use. [p.158]

Iranian intelligence services are entrusted with the development and implementation of circumvention structures for the procurement of armaments, proliferation-relevant technologies, and materials for weapons of mass destruction. They use front companies and networks inside and outside the Islamic Republic of Iran for this purpose. In particular, the [Islamic] Revolutionary Guards Corps’ widely ramified and difficult to oversee company empire serves proliferation purposes. [p.159]

The report clearly describes a program by Iran to develop nuclear weapons as a fact. It does not only suggest that it might be well advanced, but states this as a given. The report furthermore establishes that transport systems to deploy nuclear weapons—once finalized—are in place and could reach long-distance targets.

Fox News Picks Up VSB 2024

The VSB was picked up by the American media giant Fox News. The network reported on it under the title “Explosive new intelligence report reveals Iran’s nuclear weapons program still active” on May 28. The Fox News report begins by pointing out that “[t]he startling intelligence gathering of Austrian officials contradicts the assessment of the US Office of the Director of National Intelligence (ODNI)”. It goes on to note that “[t]he Austrian intelligence findings could be an unwanted wrench in President [Donald] Trump’s negotiation process to resolve the atomic crisis with Iran’s rulers because the data outlined in the report suggests the regime will not abandon its drive to secure a nuclear weapon.”

Fox News quotes David Albright, a physicist and founder/president of the Institute for Science and International Security in Washington, DC, as saying: “[t]he ODNI report is stuck in the past, a remnant of the fallacious unclassified 2007 NIE [National Intelligence Estimate]. The Austrian report in general is similar to German and British assessments. Both governments, by the way, made clear to [the] US IC [Intelligence Community] in 2007 that they thought the US assessment was wrong that the Iranian nuclear weapons program ended in 2003.”

The Fox News report also states that “[t]he danger of the Islamic Republic of Iran as a state sponsor of terrorism [and its illegal atomic weapons program] was cited 99 times in the 211-page report that covers pressing threats to Austria’s democracy.” All in all, Fox News’ reporting paints a picture that the small European state’s intelligence service has information that contradicts the assessment of the much larger American IC and insinuates that the American assessment—and by implication the political approach to dealing with Iran—is wrong. Read more of this post

Israeli Supreme Court dismisses spy chief’s firing as illegal

Yitzhak AmitEARLIER THIS WEEK THE High Court of Israel delivered its ruling regarding the dismissal of the head of the Israel Security Agency (ISA, more widely known as the Shin Bet), Ronen Bar, who had already announced his intention to leave his position. The court ruled that the Bar’s dismissal by Prime Minister Benjamin Netanyahu violated the law and that Netanyahu had a conflict of interest due to the ISA’s ongoing investigation into the “Qatar-Gate” affair.

Supreme Court President Yitzhak Amit and Justice Dafna Barak-Erez were in the majority, with Supreme Court Vice President Noam Solberg in the minority. “The government’s decision [to fire Bar] is unprecedented in the history of the State of Israel,” they ruled. The legal advisor to the government, Israel’s Attorney General Gali Baharav-Miara, requested that the court issue a verdict of principle regarding the relationship between a prime minister and the ISA. Her request followed an earlier request by government for the court to dismiss the petitions against the dismissal, claiming that they were no longer relevant.

Justice Amit ruled that “Israel’s security agencies, including the ISA, are responsible for maintaining the security of Israel, the security of its citizens, and the institutions of the state and the democratic regime. Their activities, roles, and powers make the security agencies a central component of the country’s governmental and legal foundations. Having been entrusted with the holiest of holies of the state, all heads of the security agencies —including the head of the ISA— owe a duty of loyalty to the public.”

According to Amit, “[t]he loyalty of the heads of the security apparatus is not a party-political loyalty to a particular government or personal loyalty to one or another prime minister. It is loyalty to the entire Israeli public, which has entrusted them with what is most precious: its life and its security. This duty of loyalty does not contradict the duty of the Shin Bet head to fulfill and promote government policy, but rather expresses the core principle of the fundamental commitment of all state authorities to the rule of law.”

Justice Amit added that, although the petitions were dismissed, as the dissenting judge, Justice Solberg, emphasized, there is still a need to create a deterrent against the government so that such cases do not recur. “The matter may repeat itself, and it is necessary to deter similar and inappropriate behavior in the future, in the sense of preempting a disaster,” he stated. “A question of legality or interpretation of a general norm arises.” Read more of this post

Before resigning, Israeli security official accuses Netanyahu of serious misconduct

Israel Supreme CourtVETERAN ISRAELI INTELLIGENCE OFFICER Ronen Bar, who has led the Israeli Security Agency (ISA, more widely known as the Shin Bet) since 2021, has submitted an affidavit to Israel’s Supreme Court, accusing Prime Minister Benjamin Netanyahu of serious misconduct. Netanyahu fired Bar in March, but the Supreme Court later suspended Bar’s firing.

Now Bar has submitted an open affidavit alongside a confidential one, alleging serious misconduct by Netanyahu, accusing him of attempting to use the ISA’s investigative powers against protestors and activists. He links this accusation to a number of conspiracies that are circulating in Israel, blaming the ISA for the October 7 intelligence failure. The veteran security official concludes his open affidavit by stating that he “will soon announce the date on which I will end my duties”. Last week, Bar said he would resign in June.

The ISA director also repeats earlier claims regarding the reasons behind Netanyahu’s statement that he “distrusts” him. Among other things, Bar claims that Netanyahu “expressed himself to me more than once in a way that sought to substantiate his expectation that the ISA should act against citizens involved in legal protest activities and demonstrations against the government”. Thus, Bar was asked to provide details about the identities of Israeli citizens, mostly protesting activists, because, according to Netanyahu, they were “following security targets”.

Furthermore, Bar claims he was asked to use the investigatory powers of the ISA to “monitor protest financiers”. He adds he was told during a conversation on the topic that, in the event of a constitutional crisis, he, as the head of the ISA, was required to take his orders from prime minister, and not from the High Court of Justice —another name for the Israeli Supreme Court. Bar notes that the full details of the matter will be provided to the Supreme Court in his confidential affidavit.

In his open affidavit, Bar clarifies that he established several criteria to address the question of whether the ISA should exercise its investigative powers without violating the constitutional right to protest. The criteria were largely based on the legal definition of subversion, defined as illegal activity involving clandestine aspects and has the potential for violence. According to Bar, actions that fail to meet this criterion are not a matter the ISA; rather, if any monitoring is warranted, the police should intervene in the interests of public order. “In borderline cases we consulted with the government’s legal counsel to ensure that the ISA’s broad powers would only be exercised within its designated framework and functions”, states Bar. He adds that “[t]he prime minister’s requests to act contrary to these criteria were refused. In quite a few cases, [Netanyahu] asked to discuss issues related to these issues at the end of working meetings, and after asking the military secretary and the typist, who operates the recording device, to leave the room with the clear goal that the exchange of words would not be recorded”. Read more of this post

Review of “Chinese Espionage Operations and Tactics” (Second Edition)

Chinese Espionage Operations and TacticsMUCH HAS HAPPENED IN the West and in China since Nick Eftimiades first published Chinese Espionage Operations in 1994. It was the first in-depth study of Chinese espionage operations, which for decades had been overshadowed by Soviet intelligence and their espionage operations.

Throughout much of the latter part of the 20th  century, United States and other Western security services viewed Chinese intelligence and security services as being focused on their own internal security matters. They were not nearly as well-known or recognized as other adversarial intelligence and security services.  Nick was one of first experts to shine a light on Chinese intelligence operations. Since that time, he has dedicated his career and untold time and efforts to better understand Chinese intelligence tactics and techniques.

In the second edition of the book, Nick provides a comprehensive analysis and assessment on how the espionage and intelligence threat from China has grown significantly over the past three decades. He explains this in very clear and unambiguous terms to anyone who seeks a better understanding of these threats. This book is a culmination of more 30 years of dedicated research and the analysis of hundreds of cases that involve China. It focuses, not only on traditional espionage cases and operations, but examines motives, techniques and tactics relating to economic espionage, the theft of trade secrets and the theft of academic research and development.

There are a number of detailed case studies and real-life examples in the book, which show it is not only Chinese government organizations that pose a significant threat to United States and Western interests, but also a multitude of actors —e.g., academia, business people and researchers, with access to universities, commercial entities and think tanks. Chinese intelligence operatives conduct activities in all these areas in order to help China fulfill its strategic information and technology requirements and objectives. Nick examines China’s Whole of Society approach to a number of recent traditional and non-traditional collection efforts.

Chinese Espionage Operations and Tactics is an absolute must-read for individuals who handle national security matters; for state and local officials who are engaged in discussions with Chinese officials; for American and other Western businesses who are, or who will be, doing business with Chinese counterparts; for those in academia and research institutes involved with technology research and development, and finally for those who seek a better understanding of the threats posed by China’s growing and expanding worldwide presence and intelligence apparatus.

Author: John N. Wanat* | Date: 19 February 2025 | Permalink

  • John N. Wanat retired as Assistant Director for Investigations, Office of Export Enforcement, Bureau of Industry and Security, Department of Commerce.

Israeli soldiers working for Iranian intelligence spied on the Iron Dome

Iron Dome IsraelLAST MONTH, ISRAEL ARRESTED two reservists following an investigation that lasted several months and centered on uncovering espionage for an Iranian state entity during wartime. The two reservists had completed their regular military service before joining the reserves.

The two soldiers, identified as Yuri Eliasfov and Georgi Andreyev, held sensitive positions, and a least one was serving as a member of staff in Israel’s Iron Dome air defense system. The soldier serving in the Iron Dome is accused by the police, the Israel Security Agency (ISA), and the Israel Defense Forces (IDF), of aiding the enemy during wartime, for which the penalty is life imprisonment or death without the discretion of the court. A prosecutor’s statement has been filed against the two soldiers.

According to the investigation, the espionage affair began when one of the suspects, who served in a classified security system, sought to make contact with Iranian intelligence on social media. During his search, he contacted an Iranian operator, who asked him to complete various tasks in exchange for payments. The investigation revealed that the two soldiers were recruited by Iranian intelligence through the Internet to carry out missions in exchange for payments.

They two men were initially required to spray anti-government graffiti in Tel Aviv and in Israel’s the northern region. Giorgi Andreyev, fearing the consequences of such actions, withdrew from the operation. “We are working for Iran and doing something dangerous,” he told Eliasfov. Despite this, however, Eliasfov, who is reportedly the main suspect in the case, continued his activities.

The undercover investigation revealed that Eliasfov, who serves in the Iron Dome system, filmed a video while participating in a classified information, which he then sent to his Iranian handler. He received $3,500 from the same Iranian official, while his at-times accomplice received $70. During his interrogation, Eliasfov claimed that he committed the acts due to being in a difficult financial situation and because he sought to obtain money easily.

One of the interesting findings that emerged from the investigation of the suspects was that other soldiers and family members were aware of Eliasfov’s initial actions and warned him that he was connecting himself with Iranian elements. Despite that, Eliasfov continued his espionage activities, which included filming a video from inside an Iron Dome facility. The footage reportedly contained classified material that could significantly endanger the security of the State of Israel. Read more of this post

FBI’s top New York official urges personnel to ‘dig in’ for ‘battle’ with White House

FBITHE HEAD OF THE Federal Bureau of Investigation’s largest field office sent an email to his staff last night, urging them to “dig in” for “battle” after the White House began scrutinizing the Bureau’s investigation into the January 6 riots. James E. Dennehy, assistant director in charge of the FBI’s New York field office, sent a defiant email to FBI employees just hours after the Department of Justice (DOJ) began compiling the names of Bureau personnel who participated in the probe of the January 6, 2021, attack on the U.S. Capitol.

On January 31, President Donald Trump’s administration summarily dismissed nine senior FBI officials. The following day, the Bureau’s interim leadership received a DOJ directive instructing them to provide information on all employees involved in the January 6 investigation. This request applies not only to special agents but also to thousands of FBI personnel who provided support services for what remains the largest investigation in the agency’s history.

Approximately 15% of the FBI’s workforce —an estimated 6,000 employees— was involved in the investigation. On Sunday, around 4,000 of them received an email from the Department of Justice asking them to voluntarily disclose their role in the probe. Reports indicate that recipients must submit the requested information by 6:00 p.m. Eastern Time today. Many within the FBI fear this inquiry is part of a broader effort by the Trump administration to remove rank-and-file employees who worked on January 6 cases.

In response, Dennehy, a former U.S. Marine who joined the FBI after seven years in the Corps, sent an email on Sunday afternoon to personnel in the New York field office, delivering what appears to be a message of defiance. “Today,” he wrote, “we find ourselves in the middle of a battle of our own, as good people are being walked out of the FBI and others are being targeted because they did their jobs in accordance with the law and FBI policy.”

Dennehy praised the Bureau’s interim leaders, Brian Driscoll and Robert C. Kissane, for resisting DOJ requests to provide lists of FBI personnel, calling them “warriors.” He also recounted his Marine Corps experience, describing a time when he had to dig a five-foot-deep foxhole to survive, stating he would “dig in” similarly now. He emphasized that he had no plans to resign from the FBI or step down from his current position. Read more of this post

Analysis: Assad’s collapse in Syria was a strategic surprise to Israel

Syria IsraelTHE COLLAPSE OF THE regime of Syrian President Bashar al-Assad on December 8 caught the Israel Defense Forces (IDF) and Israel’s intelligence community —mainly Israel Military Intelligence (IMI) and the Mossad— by surprise. Assad’s collapse occurred much faster than Israel had estimated. Israel did not expect that the Syrian Arab Army would disintegrate so resoundingly, within 48 hours of the attack by the Syrian rebels.

Israeli intelligence assessed that, despite the shocks it had suffered in recent months, the so-called Axis of Resistance against Israel —mainly Hezbollah, Syria, and Iran— was stable. A scenario of rapid collapse of the government in Syria had not been assessed as a possibility, or even given a low probability tag. That was primarily because the Assad family had governed Syria for almost 60 years.

Following the Assad regime’s collapse, the focus of Israel’s intelligence is on analyzing the intentions of the major rebel organization, Hayat Tahrir al-Sham, and understanding how —if at all— it will lead the new administration in Syria. Israel is also examining developments in southern Syria, as well as what is happening at the Syrian and Russian military bases in Latakia and Tartus. Moreover, the IDF is monitoring the activities of Iranian elements in Syria, including on the border with Lebanon, to prevent the possibility of military equipment being transferred from Syria to Hezbollah.

It is clear to Israel that Turkey stands behind the Hayat Tahrir al-Sham organization and that Ankara armed and supported the group for a significant period. What is less clear is whether and how Turkey’s involvement in Syria could threaten Israel’s interests, given that Israel’s relations with Turkey have deteriorated dramatically in recent years.

Assad was a key member of the pro-Iranian Axis of Resistance. Following his fall from power, Iran and Hezbollah could lose their main logistical hub for producing, transferring, and storing weapons, as well as training their forces and militias. Additionally, Syria under Assad constantly posed the threat of turning into yet another battlefront against Israel. Without Assad, Russia could lose its grip on Syria —the only country in the Middle East where Russian influence dominates that of the United States. The Russians could also lose access to their military bases in Syria, which offered the Russian Navy access to the waters of the Mediterranean.

Despite the fall of the bitter enemy that was Assad’s Syria, and the deep shock suffered by the Iranian-led Axis of Resistance camp that has been dominant in the Middle East in recent decades, Israeli intelligence is not optimistic about the emerging situation in post-Assad Syria. Syria is a collection of minorities —Druze, Kurds, Alawites, and Christians— that have been artificially joined together despite carrying bitter, bloody scores. The latter may erupt sharply, especially against the Alawites. Concepts such as liberal politics, civil society, or a cohesive nation-state, have never existed inside Syria.

It follows that Israel is very concerned about the emerging uncertainty in Syria. Immediately after the fall of Assad, the IDF strengthened its defenses on the Golan Heights border to ensure that the chaos in Syria did not spill over into Israel. Meanwhile, Israel is in contact —both directly and through intermediaries— with several Syrian rebel groups, including Hayat Tahrir al-Sham. The Israeli message at this stage is a demand that the rebels not approach the border, along with a warning that, if they violate the separation of forces agreement, Israel will respond with force.

And a final note: assessments in relation to the Syrian regime’s collapse continue to emerge in the IDF and the Israeli intelligence community. These assessments concern the extent to which the lessons of October 7 have been sufficiently analyzed and assimilated within Israel. Specifically, there are questions about whether this new intelligence surprise in Syria may stem from the fact that an in-depth investigation into the lessons of October 7 has yet to be carried out during the 14 months of the war with Hamas.

Author: Avner Barnea* | Date: 20 December 2024 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Mounting concern in the EU about Indian black operations targeting dissidents

BLACK OPERATIONS, WHICH AIM to liquidate targeted individuals, are once again the subject of various reports. The primary focus tends to be on Russian intelligence agencies targeting alleged traitors worldwide. Michael Weiss, US publisher of The Insider, spoke in a recent interview of “more than 60 mysterious deaths of Putin’s enemies in Russia and Europe since the Ukraine war began”.

Somewhat-less-black operations, in which individuals —usually living abroad— are not killed, but intimidated, persecuted, threatened, or roughed up, appear to be increasingly utilized as a tool by certain states that have little tolerance for domestic political opposition. Ken McCallum, Director General of Britain’s Security Service (MI5), stated on 8 October 2024 that, “since January 2022, with police partners, we have responded to twenty Iran-backed plots presenting potentially lethal threats to British citizens and UK residents”.

Back in September 2023, The Guardian reported having spoken to 15 Iranian activists living in the United Kingdom, France, Germany, Spain, Switzerland and Sweden, who were being persecuted and intimidated, or had been threatened in various ways by the Iranian regime’s henchmen and its intelligence services. There are numerous similar examples of journalists and dissidents who have been a thorn in the side of the Turkish government for several years now. In addition to threats and violence, there are reports of abductions by Turkey’s National Intelligence Organization (MIT). In recent years, China too has increasingly relied on intimidation directly in the West, and has also engaged Western investigators and helpers for this purpose.

One concerning development is the fact that these states are apparently increasingly resorting to the help of members of Outlaw Motorcycle Gangs (OMCG), members of drug cartels, and other criminals. Regardless of whether it is for purposes of sabotage, threats, or assassinations, shady figures —typically apolitical— are undertaking missions on behalf of the intelligence agencies of authoritarian states on European soil.

The Case of India

Another country that has been in the spotlight for some time is India, which has historically maintained a low profile in the West, in terms of black operations. Western intelligence agencies could have predicted that there would be an escalation —i.e. Indian black operations on Western soil— which could lead to the liquidation of alleged or actual terrorists. If one observes the reports of Indian intelligence agencies and analysts on the activities of its mortal enemy, Pakistan, and its intelligence agency, the Inter-Services Intelligence (ISI), it quickly becomes apparent that India is less and less willing to tolerate what it regards as terrorism sponsored by Pakistan. This applies particularly to individuals and organizations operating from abroad. Read more of this post

British soldier who spied for Iran found guilty of espionage and terrorism

Wandsworth prisonDANIEL KHALIFE, A BRITISH soldier who spied for Iran, has been found guilty of espionage and terrorism, in a case that has revealed serious vulnerabilities in the British security clearance-vetting system. The then-20-year-old Khalife was arrested in January 2022 while serving on active duty in Staffordshire, in Britain’s Midlands region. He was charged with violating the Official Secrets Act 1911 and the Terrorism Act 2000.

Prior to his arrest, Khalife was reportedly seen by his fellow soldiers and superiors as a promising soldier. Having joined the British Army at 16, he was quickly promoted to lance corporal (the lowest ranking of a non-commissioned officer) and cleared to work in the area of signals intelligence. He had also expressed a strong interest in joining the Special Air Service (SAS), which are the British Army’s special forces.

However, on November 9, 2021, Khalife voluntarily called the national security concerns hotline of the British Security Service (MI5). He told the operator on the other end of the line that he was a British soldier who had been spying for Iran for “more than two years”, but had now decided to become a double agent by cooperating with the British government. Khalife called again, and although he did not identify himself during the telephone conversations, MI5 was able to track him.

It has since become known that Khalife began spying for Iran when he was just 17 years old, shortly after joining the British Army. Over the next two years, Khalife provided his Iranian handlers with information about the identities of SAS personnel, military computer systems, as well as government surveillance programs and hardware, including unmanned aerial vehicles. Throughout that time, he communicated with his Iranian handlers via the Telegram instant messaging service, or via dead drops in Britain, as well as during trips abroad.

Shockingly, Khalife was temporarily able to escape justice twice following his arrest. In January 2023, he disappeared while on bail. He was found after nearly a month, living in a stolen van, which he had converted into a rudimentary camper. In September of that year, Khalife escaped from Wandsworth prison (pictured) in southwest London, by hiding beneath a delivery vehicle. He was captured three days later and eventually taken to court, where he was convicted and is now awaiting sentencing.

According to reports, British authorities are still unable to piece together the entirety of the information that Khalife shared with the Iranians. Consequently, the full extent of the damage he caused to British national security remains unknown. What is clear is that the Khalife case has exposed serious vulnerabilities in the security clearance-vetting process, which is “lacking in a lot of ways” —not least in the fact that it relies largely on self-reporting, as one expert told The Guardian newspaper on Saturday.

Author: Joseph Fitsanakis | Date: 02 December 2024 | Permalink

Russia using nontraditional means to gather intelligence, Finland warns

SUPO FinlandRUSSIA’S NEED TO GATHER intelligence from Scandinavian targets has increased considerably since Finland and Sweden joined the North Atlantic Treaty Organization (NATO), prompting Moscow to seek nontraditional means of collecting intelligence, according to Finland’s spy agency. A new report by the Finnish Broadcasting Company (Yle) relays a warning by the Finnish Security and Intelligence Service (SUPO) that Russian spies are increasingly operating in Scandinavia without relying on diplomatic protection.

Human intelligence (HUMINT) operations are typically carried out of diplomatic facilities by intelligence officers who enjoy various degrees of diplomatic immunity. Such protections are seen as crucial for the safety of intelligence personnel, who tend to engage in illegal activities while stationed abroad. However, the number of Russian intelligence officers who are based in diplomatic facilities in Finland and elsewhere in Scandinavia has “significantly decreased” in recent years, according to the Yle report.

The reason for the decline in numbers rests with the numerous expulsions of Russian diplomatic personnel —which include intelligence officers— that took place throughout Europe in the months following Russia’s February 2022 invasion of Ukraine. Since then, Finland is one of dozens of European countries that have repeatedly denied Russia’s requests for the issuance of diplomatic visas. As a result, Russian embassies and consulates in Finland remain understaffed and mostly devoid of intelligence personnel.

In response to this new reality, the Kremlin has been experimenting with using nontraditional HUMINT collectors. The latter are not based in diplomatic facilities and are not protected by diplomatic immunity. Such nontraditional intelligence collectors operate as “journalists or researchers”, according to SUPO. At the same time, Russian intelligence agencies increasingly target for recruitment Finns who life in Russia, or try to recruit them while they are traveling elsewhere in Europe.

Lastly, Russian intelligence agencies are systematically hiring criminals to carry out specific tasks on behalf of the Kremlin, in return for money. Such criminals include computer hackers, who are attracted by the Russian state. Indeed, the Russian government is systematically “providing favorable conditions” for computer hackers to operate out of Russian territory. They receive money and protection in return for letting the Russian state use them as a cover for cyber espionage, sabotage, and influence operations.

Author: Joseph Fitsanakis | Date: 18 November 2024 | Permalink

Israeli couple who spied for Iran made ample use of digital applications

Israel and IranTHE ISRAEL SECURITY AGENCY (ISA) recently announced the arrests of an Israeli couple of Azeri origin on suspicion of spying for Iran. The couple, both 32 years old, were allegedly recruited by an Iranian handler of Azeri origin named Elshan Agheev. As part of their activities, and for about two years, the couple gathered intelligence on critical infrastructure and security sites in Israel, and even conducted surveillance on an academic working for the Institute for National Security Studies, allegedly in order to kill her.

The case demonstrates how software that is easily accessible on the Internet makes it possible to encrypt information communicated between a handler and an agent, as well as how money is transferred to the agent. The official indictment reveals details about the couple’s modus operandi, including the identity of the particular software the spies used to communicate with their Iranian handler.

One of the applications the couple used is Zangi, which facilitates the exchange of encrypted instant messages. According to the company’s website, Zangi offers voice and video calling, text messaging, and file transfer services “without registration and without data collection”. In fact, according to Zangi, the data is saved on the user’s device only. In addition to using the Zangi application, the couple also appear to have used the Zolotaya Korona money-transfer platform. The couple allegedly used the platform in order to receive payments by their Iranian handlers, and to transfer funds to other parties involved in Iranian-led espionage activities inside Israel.

Another application allegedly used by the couple is Ecos Dos, a digital wallet for storing and transferring digital currencies. Ecos Dos is a software wallet that can be installed on a computer or mobile phone. It supports a wide variety of crypto-currencies and is used to store and transfer cryptocurrencies. It is known for its simplicity of use and friendly interface. It is popular among users who wish to maintain anonymity when transacting in digital currencies. It does not require identifying a user’s details when operating, so anyone can create an account and receive funds anonymously.

The suspects are also believed to have used a software called Encryptor in order to encrypt information. This software allows files and folders to be encrypted so that only those who have the encryption key can open them. The couple allegedly used Encryptor to encrypt the information they collected before passing it on to their Iranian handlers, thus making it difficult for Israeli authorities to decipher the information.

The use of these applications attests to the sophistication of the Iranian spy network that was recently busted in Israel, and its efforts to hide its activities inside the Jewish state. The recent indictment against the couple details a collection of serious security offenses, including aiding the enemy in war and providing information to the enemy to harm the security of the state. Iran is clearly stepping up its efforts to recruit Israeli citizens for espionage and terrorist activities.

Author: Avner Barnea | Date: 11 November 2024 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Israeli citizens arrested on suspicion of working for Iranian intelligence

Ronen Bar Israeli Security AgencyTHE ISRAELI SECURITY AGENCY (ISA) has announced the arrest of 18 Israeli citizens suspected of working for Iranian Intelligence. Among them are seven Israelis, who immigrated to Israel from Azerbaijan, and are suspected of having been in contact for two years with Iranian intelligence. Some of the seven were caught carrying out surveillance against a senior Israeli Air Force officer, whom they were reportedly planning to assassinate.

Israeli authorities accuse the suspects of photographing and collecting information on military bases and facilities, including Air Force bases, Iron Dome battery sites, a power plant, and other energy infrastructure facilities. The suspects are also accused of having received from their Iranian handlers a set of maps of Israeli strategic sites, including the Golani Brigade’s training base, where four Israeli soldiers were killed by a drone attack last week. In over two years, the suspects allegedly performed approximately 600 missions under the direction of two handlers from Iranian intelligence. They did so in return for hundreds of thousands of shekels, which were paid to them in cash and various crypto-currencies.

Another Israeli citizen, who was arrested on suspicion of spying for Iranian intelligence in return for payments, has been named as Vladimir Varehovsky, 35, from Tel Aviv. Among other tasks, Varehovsky is suspected of gathering information about an Israeli scientist, whom he agreed to murder in exchange for a $100,000 payment. The suspect had reportedly acquired weapons for the assigned task, but the ISA arrested him before he could carry it out.

In another counterintelligence operation, the ISA arrested seven young Palestinians from the east of Jerusalem, who have been charged with working for Iranian Intelligence. The main suspect recruited the other six to carry out tasks for a fee. Tasks included setting cars on fire, gathering information about a city mayor in Israel, and plotting to assassinate one of the country’s top scientists. The suspects used social media for recruitment purposes. They were reportedly arrested before they were able to execute their missions. Read more of this post

US-based Afghan man who planned election-day attack ‘worked as CIA guard’

CIAAN AFGHAN NATIONAL BASED in the United States, who was allegedly planning to carry out a terrorist attack during the upcoming Election Day, previously worked for the Central Intelligence Agency (CIA) as a guard, reports claim. According to the US Department of Justice, Nasir Ahmad Tawhedi, 27, was arrested by the Federal Bureau of Investigation (FBI) on October 7, alongside a number of co-conspirators who have so far not been named.

Tawhedi’s arrest occurred shortly after he purchased two AK-47 assault rifles, 10 magazines, and several rounds of ammunition from an FBI employee posing as a seller of the merchandise. The suspect allegedly told at least two FBI informants working on the case that he intended to use the weaponry to target “large gatherings of people” on Election Day. Tawhedi is also reported to have boasted that he expected to die in the attack. His indictment suggests that he planned to carry out the attack on behalf of the Islamic State of Iraq and al-Sham (ISIS).

Tawhedi has lived in the US for a little over three years, having arrived on US soil soon after Washington began withdrawing its forces from Afghanistan, following a two decades-long military campaign. Like thousands of other Afghans, Tawhedi was able to enter the US through an emergency entry privilege known as a “humanitarian parole”. He then applied for a Special Immigrant Visa, which is customarily offered by the US government as a form of protection to foreign nationals who have provided services to its military and security agencies. According to reports, Tawhedi’s Special Immigrant Visa application had been approved and was in the last stages of being officially issued.

Last week, the American television network NBC reported that Tawhedi had been employed as a guard by the CIA in Afghanistan. The network cited “two sources with knowledge of the matter”. Later on the same day, another American television network, CBS News, said it had been able to independently verify the earlier report by NBC. It is notable that, according to both NBC and CBS, Tawhedi worked as a guard for a CIA facility, rather than an informant or an asset for the intelligence agency.

The recent media reports about Tawhedi have yet to answer the question of whether he had been communicating with identifiable ISIS handlers, or whether he was independently radicalized through his online activity. It is also not known whether Tawhedi was a supporter or an affiliate of ISIS during his stint with the CIA, or whether he became radicalized after arriving in the US in September 2021.

Author: Joseph Fitsanakis | Date: 14 October 2024 | Permalink