US-led ‘Five Eyes’ alliance dismantled Russia’s ‘premier espionage cyber-tool’
May 11, 2023 3 Comments
AN ESPIONAGE TOOL DESCRIBED by Western officials as the most advanced in the Russian cyber-arsenal has been neutralized after a 20-year operation by intelligence agencies in the United States, Australia, Canada, the United Kingdom and New Zealand. The operation targeted Turla, a hacker group that cyber-security experts have long associated with the Russian government.
Turla is believed to be made up of officers from Center 16, a signals intelligence unit of Russia’s Federal Security Service (FSB), one of the Soviet-era KGB’s successor agencies. Since its appearance in 2003, Turla has used a highly sophisticated malware dubbed ‘Snake’ to infect thousands of computer systems in over 50 countries around the world. Turla’s victims include highly sensitive government computer networks in the United States, including those of the Department of Defense, the National Aeronautics and Space Administration, and the United States Central Command.
The Snake malware has also been found in computers of privately owned firms, especially those belonging to various critical infrastructure sectors, such as financial services, government facilities, electronics manufacturing, telecommunications and healthcare. For over two decades, the Snake malware used thousands of compromised computers throughout the West as nodes in complex peer-to-peer networks. By siphoning information through these networks, the Turla hackers were able to mask the location from where they launched their attacks.
On Tuesday, however, the United States Department of Justice announced that the Federal Bureau of Investigation (FBI), along with its counterparts in the United States-led ‘Five Eyes’ intelligence-sharing alliance, had managed to dismantle Snake. This effort, codenamed Operation MEDUSA, was reportedly launched nearly 20 years ago with the goal of neutralizing the Snake malware. In the process, Five Eyes cyber-defense experts managed to locate Turla’s facilities in Moscow, as well as in Ryazan, an industrial center located about 120 miles southeast of the Russian capital.
The complex cyber-defense operation culminated with the development of an anti-malware tool that the FBI dubbed PERSEUS. According to the Department of Justice’s announcement, PERSEUS was designed to impersonate the Turla operators of Snake. In doing so, it was able to take over Snake’s command-and-control functions. Essentially, PERSEUS hacked into Snake and instructed the malware to self-delete from the computers it had compromised. As of this week, therefore, the worldwide peer-to-peer network that Snake had painstakingly created over two decades, has ceased to exist, as has Snake itself.
► Author: Joseph Fitsanakis | Date: 11 May 2023 | Permalink
A UKRAINIAN PARAMILITARY GROUP has claimed to be behind a targeted attack against an influential figure in Russian literature and social media on Saturday, which killed his fellow passenger and prompted strong denouncements by the Kremlin. The attack appeared to target Yevgeny Nikolayevich Prilepin, 47, known in Russia as Zakhar Prilepin. One of the best-known novelists in Russia, Prilepin spent much of his late teens and early twenties serving in the Russian National Guard. He saw action during two tours in Chechnya.
IN A SERIES OF rare public comments, the director of Taiwan’s primary intelligence agency has singled out 2027 as a year of paramount significance for China’s military plans for Taiwan. On Thursday, Tsai Ming-yen (pictured), director-general of Taiwan’s National Security Bureau (NSB) since February, spoke to an audience of graduating students at Taiwan’s National Chung Hsing University in Taichung City. According to 
OFFICIALS IN UKRAINE HAVE 
Russia’s border with Belarus, two trains were 
AUTHORITIES IN POLAND HAVE seized an abandoned school building in the Polish capital Warsaw, allegedly because it was being used as a base for espionage activities by the Russian government. Following the seizure of the building complex, Russian officials issued stern but vague warnings, saying that action will be taken in response to what they termed as an “act of provocation” by the Polish government.
THE UNITED STATES HAS arrested two residents of New York City for allegedly conspiring to create and operate a clandestine police station run by the Chinese government in the borough of Manhattan. The arrests come a month after authorities in Canada launched an 
AN AUSTRALIAN BUSINESSMAN, WHO has worked in China for over two decades, is facing up to 15 years in prison for allegedly selling secrets to two foreign intelligence officers. The businessman, Alexander Csergo, 55, grew up in Sydney, but moved to China in 2002 and currently works for a digital solutions firm in Shanghai. According to 
A NEW REPORT PUBLISHED by a London-based security think-tank concludes that Russia has employed unconventional operations effectively to subdue the population in occupied areas of Ukraine. These successes contrast sharply with the inferior performance of Russia’s conventional military forces, as revealed last week in a series of leaked documents belonging to the United States Department of Defense.
A POWERFUL EXPLOSION, LIKELY caused by a bomb hidden inside a decorative figurine, has killed one of the most prominent pro-Kremlin bloggers as he was giving a public talk in downtown St. Petersburgh, Russia. The bomb killed Maxim Fomin, 40, who was known in online blogger circles under the pseudonym Vladlen Tatarsky. Born in eastern Ukraine, Fomin supported the pro-Russian secessionist movement in the Donbas. By 2021, when he obtained Russian citizenship, he had already made a name for himself as a pro-Kremlin military blogger on the Telegram social media platform.
A RUSSIAN INTELLIGENCE OPERATIVE, who lived in Maryland using forged Brazilian identity documents, has been charged with espionage and other crimes by the United States Department of Justice. Victor Muller Ferreira, a Brazilian national, was stopped from entering the Netherlands in June of last year, where he had intended to join the International Criminal Court (ICC) as an intern.
GREEK INTELLIGENCE OFFICIALS ANNOUNCED late last week that they had uncovered the identity of a female Russian spy who lived in central Athens using a set of forged identity documents. According to the Greek National Intelligence Service (NIS/EYP), the case is under investigation by several Western intelligence agencies. Additionally, there seems to be a connection with Brazil where the Russian spy’s husband lived until recently, using forged identity papers.
AUTHORITIES IN CANADA ARE reportedly probing claims that the Chinese government is operating at least two “clandestine police stations” in Montreal, which allegedly monitor the activities of Chinese citizens and Canadians of Chinese origin. The announcement comes less than four months after a similar 
THE SPIRALING SOCIAL UNREST in Israel and the Palestinian Territories may harm longstanding intelligence-sharing agreements between Israel and its Western allies, including the United States, according to reports. Historically, intelligence-sharing partnerships between Israel and its closest ally, the United States, have tended to remain largely unaffected by regional upheavals. This time, however, some Israeli officials are concerned that the Israeli-American intelligence relationship is “under a question mark and under great tension”.
intelNews.org 
Senior members of South Korea’s largest trade union charged with espionage
May 12, 2023 Leave a comment
The operation came to light on January 18, when hundreds of police officers, led by officers of the National Intelligence Service (NIS), conducted search raids at a number of regional offices of the Korean Confederation of Trade Unions (KCTU). Founded in the mid-1990s, the KCTU represents over 1.1 million members. Most of its membership consists of supporters of the Democratic Party of Korea (DPK), a left-of-center liberal coalition that ruled South Korea until last year. Since its establishment in 2014, the DPK has been engaged in a bitter political rivalry with the People Power Party (PPP), a conservative coalition that currently governs South Korea.
On Wednesday, four KCTU officials, all of them men, between the ages of 48 and 54, were charged with several violations of South Korea’s National Security Act, including carrying out espionage on behalf of North Korea and meeting illegally with North Korean intelligence officers. South Korean government prosecutors accuse the four of meeting several times with their alleged North Korean handlers. The alleged meetings too place during overseas trips in Vietnam and Cambodia between 2017 and 2019.
While abroad, the four alleged spies were allegedly trained and given instructions to establish what prosecutors describe as “an underground organization [operating] under the guise of legal union activities”. The four men were allegedly tasked with steering the KCTU toward actions and rhetoric that were against the United States and Japan. They were also asked to helping organize worker rallies against the policies of the PPP. In other instances, the alleged spies photographed American military installations located in South Korea.
The opposition DPK has strongly condemned the charges, calling them politically motivated and describing them as a return to the days of rightwing military rule, which South Korea experienced until 1987. The NIS remains highly controversial among left-of-center South Koreans, many of whom view it as a corrupt state entity that is politically aligned with the conservative PPP. Between 2018 and 2022, the liberal DPK government spearheaded what it described as an “anti-corruption campaign” inside the NIS. As a result of that campaign, three former NIS directors were charged with —and eventually convicted of— secretly diverting funds from the agency’s clandestine budget. The funds were eventually used to aid the re-election campaign of the then-South Korean President, Park Geun-hye. Their apparent goal was to prevent the DPK from coming to power, fearing that the left-of-center party was too close to Pyongyang. President Park also went to prison for accepting financial bribes from the NIS.
► Author: Joseph Fitsanakis | Date: 12 May 2023 | Permalink
Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with counterintelligence, espionage, Korean Confederation of Trade Unions, National Intelligence Service (South Korea), News, South Korea