Finnish intelligence identifies Chinese state-linked group behind cyber-attack
March 19, 2021 3 Comments

FINLAND’S INTELLIGENCE AGENCY HAS identified a hacker group with ties to the Chinese state as the culprit of an attack of “exceptional” magnitude and intensity that targeted the Finnish Parliament last year. The attack was reported in December 2020, but had been going on for several weeks prior to being discovered by the information security department of the Eduskunta (Parliament of Finland).
Finland’s National Bureau of Investigation (NIB) said at the time that the attack had compromised parts of the Parliament’s internal communication system, including a number of Parliamentary email accounts. Some of these accounts belonged to members of Parliament, while others belonged to members of staff, according to the NIB.
Little became known about the attack in the months after the incident was first reported by Finnish media. But on Thursday the Finnish Security and Intelligence Service (SUPO) issued a press release about the incident. It said that the attack was likely part of a state-sponsored cyber espionage operation. It also identified those responsible for the attack as Advanced Persistent Threat (APT) 31. The SUPO report did not name the state that sponsored the attack. However, several private computer security firms have linked APT31 with the Chinese government.
The SUPO report stated that the attack on the Finnish Parliament was neither random nor experimental. On the contrary, it was aimed at acquiring specific information stored at the Parliament’s computer servers. Although the motive for the attack is still being investigated, it is possible that it was part of an effort “to gather intelligence to benefit a foreign state or to harm Finland’s interests”, said SUPO. The spy agency added that it would not provide further details about the case while it remains the subject a criminal investigation.
► Author: Joseph Fitsanakis | Date: 19 March 2021 | Permalink



A REMOTE BASE THAT houses an outpost of the United States Central Intelligence Agency in northeast Niger appears to have expanded in recent months, as Islamist groups continue to make their presence felt in Africa’s Sahel region. The base was built quietly in 2018 in Dirkou, a small oasis town and commune located 800 miles northeast of Niamey, Niger’s capital. The area where the CIA base is located is sparsely populated and arid, making it one of the world’s most inhospitable regions.
A GERMAN COURT HAS temporarily blocked an attempt by the country’s intelligence service to place a domestic far-right party under government surveillance for the first time since the Nazi era. The far-right party, Alternative für Deutschland, or AfD, was established in 2013. It shocked the German political establishment in 2017, when it received nearly 6 million votes, which amounted to 12.6% of the national vote. Since then, however, the AfD has been shunned by other political parties and the German media, for its alleged links with neo-Nazi groups and sympathizers.
TURKEY AND THE UNITED States, two North Atlantic Treaty Organization (NATO) allies with a checkered relationship, have agreed to jointly examine a Russian missile system that was captured by fighters in Libya. Turkish troops are present on the ground in Libya, where they are fighting in support of the United Nations-backed Government of National Accord (GNA) in Tripoli. The United Arab Emirates and Russia support the Tobruk-based Libyan National Army (LNA) of General Khalifa Haftar.
WITHOUT MUCH FANFARE LAST week, the Federal Bureau of Investigation placed on its most wanted list
BRITAIN’S GOVERNMENT COMMUNICATIONS HEADQUARTERS, one of the world’s most advanced signals intelligence agencies, has published a position paper that vows to embrace artificial intelligence in its operations. For over 100 years, GCHQ, as it is known, has been in charge of spying on global communications on behalf of the British state, while protecting the government’s own communications systems from foreign espionage. In a report published on Thursday, the agency says it intends to use artificial intelligence (AI) to detect and analyze complex threats, and to fend against AI-enabled security challenges posed by Britain’s adversaries.
A SWEDISH MAN HAS been charged with spying for Russia, after he was apprehended while meeting with a Russian diplomat stationed at the Russian embassy in Stockholm. Neither the Swedish man nor the Russian diplomat —who is believed to have been expelled from Sweden— have been named. Swedish government officials reportedly expelled the Russian diplomat following the incident, accusing him of working as an intelligence officer under diplomatic cover.
A WEB SERVER BASED in Holland and owned by a company registered in Cyprus is being used by the Iranian government to spy on its critics abroad, according to Dutch public radio. The information about Iranian espionage was
CITING NATIONAL SECURITY GROUNDS, the government of Lithuania has canceled an agreement with a Chinese-owned company to supply baggage-scanning equipment at airports across the Baltic country. The Beijing-based company, Nuctech, is owned by Tsinghua Tongfang, which is in turn controlled by the China National Nuclear Corporation (CNNC). Tasked with managing China’s nuclear fuel supply and development program, CNCC is owned by the Chinese government.
ION MIHAI PACEPA, WHO defected to the West as acting head of the Romanian intelligence service, making him the Cold War’s highest-ranking defector from the Soviet Bloc , has reportedly died in the United States of COVID-19. There has been no official announcement of Pacepa’s passing. However, a number of American and Romanian news outlets have
IRELAND’S COUNTERINTELLIGENCE SERVICE HAS launched an investigation into an expansion project at the embassy of Russia in Dublin. According to sources cited by The Times newspaper, the Irish government is concerned that the expansion project is part of a secret plan by Moscow to turn its embassy in Dublin into a major espionage hub in Europe.






Bulgaria confirms arrest of six-member spy-ring allegedly working for Russia
March 22, 2021 Leave a comment
AUTHORITIES IN BULGARIA HAVE confirmed media reports aired last week, which alleged that at least six members of a spy-ring working for the government of Russia had been arrested in the capital Sofia. News of the arrests was first reported by the Bulgarian National Television, or BNT, late on Thursday, March 18. Citing “government sources”, BNT said that “several” Bulgarian citizens had been arrested in simultaneous raids by the country’s counterintelligence service.
On Friday, March 19, the Bulgarian government confirmed the BNT report, saying that six Bulgarian citizens had been charged with espionage on behalf of the Main Directorate of the General Staff of the Russian Armed Forces, known commonly as GRU. The GRU is Russia’s foremost military intelligence agency. The six alleged spies reportedly gave Moscow secrets about Bulgarian military affairs, as well as information concerning the North Atlantic Treaty Organization (NATO) and the European Union (EU). Bulgaria, a former ally of the Soviet Union, joined NATO in 2004 and the EU in 2007.
Some reports claim that the spy ring members also gave information to the Russians about the presence and operations of United States intelligence personnel in Bulgaria. The American intelligence agencies that were allegedly affected by these disclosures include the Central Intelligence Agency and the National Security Agency. The United States has not officially commented on these reports. On Friday, US Department of State spokesperson Ned Price tweeted that “Bulgaria is a friend, NATO ally, and partner”, adding that Washington was “attentively watching the Bulgarian investigation into an alleged Russian spy ring”.
The head of the alleged spy ring is reportedly a retired senior official in the Bulgarian Ministry of Defense, who was allegedly recruited by the GRU and received training in clandestine tradecraft from his Russian handlers. Another member is a retired military counterintelligence officer, who is currently serving in a counterintelligence capacity in the Bulgarian parliament. Three other members of the spy ring are active or retired officers in the Bulgarian armed forces. According to the BNT report, the wife of the head of the spy ring, who is a citizen of both Bulgaria and Russia, operated as a courier for the spy ring. She allegedly made regular visits to the Russian embassy in Sofia, where she delivered stolen secrets in return for cash payments.
The Office of the Bulgarian State Prosecutor published a 20-minute video on Friday, which contains intercepted audio recordings of alleged conversations between members of the spy group and their Russian handlers. The video also contains surreptitiously filmed footage of alleged meetings between the members of the spy ring and their Russian handlers in public places. Some of the footage shows the exchange of documents with cash payments between assets and handlers.
► Author: Joseph Fitsanakis | Date: 22 March 2021 | Permalink
Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with Bulgaria, espionage, GRU, News, Russia, Russian embassy in Bulgaria