Killing of Iranian cyberwarfare expert sparks rumors of assassination

Iran and its regionBy JOSEPH FITSANAKIS | intelNews.org
The Iranian and Israeli governments have remained silent about the recent killing of a member of an Iranian cyberwarfare unit, who was found shot dead near his home in Iran. The dead body of Mojtaba Ahmadi, who is said to have worked for the cyberwarfare command of Iran’s Islamic Revolutionary Guard Corps (IRGC), was found on October 2. Witnesses said the victim was discovered in a wooded area near his home in Karaj, a town situated 12 miles west of Iranian capital Tehran. One eyewitness is said to have claimed that Ahmadi’s body bore two bullet wounds in his chest, and that he appeared to have been shot at close range, execution-style. The news has sparked widespread speculation that the IRGC member fell victim to an assassination operation orchestrated by Israeli intelligence agency Mossad. Others seem to believe that Ahmadi was killed as a consequence of a power struggle inside IRGC, sparked by Tehran’s apparent diplomatic rapprochement toward Washington. The IRGC, whose formal name is Army of the Guardians of the Islamic Revolution, is a branch of the Iranian military, whose mission is to protect the Islamic system by which the country is governed. It includes the Quds Force, which is the IRGC unit tasked with exporting the Iranian Revolution abroad. But the IRGC has so far dismissed rumors that Ahmadi died as a result of an assassination. Last week, Sepah News, a website that carries IRGC-approved information, termed Ahmadi’s murder “a horrific incident”, but said that “the motive of the attacker [had] not been specified” and was “being investigated”. Read more of this post

Canada denies reports of spy devices found in military complex

Former Nortel campusBy JOSEPH FITSANAKIS | intelNews.org
The government of Canada has denied media reports that surreptitious listening devices were found in an Ottawa building complex that is currently being prepared to house Canada’s Department of National Defence. Canadian media reported on Monday that the mysterious spy devices were found by workers employed at the former headquarters of Nortel Networks, a Canadian telecommunications company that went bankrupt in 2009. Canada’s conservative government purchased Nortel’s former headquarters in Ottawa in 2011, and has invested close to C$1 billion (US$960 million) on a plan to move the country’s Defence Department to the site. The media reports did not specify whether the alleged eavesdropping devices were installed recently, or whether they date from the time when Nortel was headquartered at the site. In 2009, when the company declared bankruptcy, there were intense rumors that its operations had been harmed irreparably by an aggressive industrial espionage campaign conducted by Chinese hackers. On Monday, Canada’s CTV News reported that the country’s Department of National Defence was considering scrapping plans to move to the former Nortel complex, due to the discovery of the listening devices. On Monday, the Department of National Defence refused to comment directly on the allegations, stating simply that it could not provide “any information regarding specific measures and tests undertaken to secure a location or facility for reasons of national security”. On Tuesday, however, Canadian government officials told The Ottawa Citizen newspaper it had been assured by the Defence Department that “no listening devices” had been found at the former Nortel site. Read more of this post

News you may have missed #852

North and South KoreaBy IAN ALLEN | intelNews.org
►►Did US deny entry to German author because he criticized the NSA? Questions have arisen after the German author Ilija Trojanow was denied entry to the United States, apparently without reason. Trojanow had been invited to a German language convention in the US city of Denver. However, he was left stranded at Salvador da Bahia airport, in Brazil. A colleague of the writer claims his call for clarity about US spying activity is the answer. A spokeswoman for Trojanow’s publisher said he was on his way back to Germany on Tuesday.
►►Analysts stress ‘sophisticated tradecraft’ after Iranian spy arrested in Israel. Israeli officials over the weekend released details regarding the arrest of an Iranian-Belgian citizen accused of conducting extensive espionage against Israeli and American targets inside the Jewish state, deepening concerns regarding the scope and sophistication of Iranian intelligence tradecraft. Ali Mansouri, in his mid-50s, was arrested on September 11 at Tel Aviv’s Ben-Gurion Airport by the Shin Bet intelligence service. One Israeli military correspondent observed that, in the case of Mansouri, “Iran followed the playbooks of the most advanced intelligence agencies in the world”.
►►Northern spy lifts cloak on Koreas’ deadly rivalry. Kim Dong-sik is a North Korean agent captured in the South in 1995. He underwent four years of interrogations before joining the South Korean military counterintelligence command. He is now an analyst at the Institute for National Security Strategy, a research organization affiliated with the National Intelligence Service. His tale, detailed in a new memoir, provides a rare, firsthand look at the often lethal spy war that the rival Koreas waged for decades and that many fear may persist today.

Israel arrests Belgian citizen for ‘spying for Iran’

Alex MansBy JOSEPH FITSANAKIS | intelNews.org
A Belgian citizen has been arrested in Israel on suspicion of spying on behalf of the Islamic Republic of Iran. The man, Alex Mans, was arrested two weeks ago, but the Israeli government kept the incident under wraps until Sunday. Israeli media reports state that Mans was arrested by Israeli Police and officers of Shin Bet, Israel’s internal security service. He was reportedly detained at Ben-Gurion International Airport as he was preparing to leave Israel. According to Israeli security officials, Mans made frequent trips to Israel, during which he presented himself as a Belgian investor interested in export opportunities in Israel. He allegedly used his business venture in selling windows and roofing material for commercial buildings in order to establish contacts with businesses in Tel Aviv. But officials at Shin Bet maintain that Mans’ business operations, which included seemingly legitimate websites and social media profiles, served as a cover for his spy activities. These are alleged to have included “intelligence gathering [and support for] terrorism”, as well as efforts to “bypass the embargo on trade and financial transactions with Iran”. Israeli security officials believe that Mans was born in Iran in 1958 and had the name Ali Mansouri. He is thought to have moved to Turkey in 1980, aged 22, where he lived for nearly 20 years. In 1997 he received an immigration visa to Belgium, where he met and married a Belgian citizen and changed his name to Mans. Soon afterwards, however, he divorced, and in 2007 he moved back to Iran, where he married a local woman. According to Israeli media reports, Mans told Shin Bet interrogators that he was approached in 2012 by the Islamic Revolutionary Guards Corps (IRGC) and offered up to $1 million to spy on Israel on behalf of the Iranian government. He reportedly agreed and was handled by Haji Mustafa, of the IRGC’s Special Operations Unit. Read more of this post

Files reveal names of Americans targeted by NSA during Vietnam War

NSA headquartersBy JOSEPH FITSANAKIS | intelNews.org
The names of several prominent Americans, who were targeted by the United States National Security Agency (NSA) during the height of the protests against the Vietnam War, have been revealed in declassified documents. The controversial communications interception operation, known as Project MINARET, was publicly acknowledged in the mind-1970s, during Congressional inquiries into the Watergate affair. We know that MINARET was conducted by the NSA between 1967 and 1973, and that it targeted over a thousand American citizens. Many believe that MINARET was in violation of the Agency’s charter, which expressly prevents it from spying on Americans. But despite the media attention MINARET received during the Watergate investigations, the names of those targeted under the program were kept secret until Wednesday, when the project’s target list was declassified by the US government. The declassification decision was sparked by a Freedom of Information Request filed by George Washington University’s National Security Archive. The two Archive researchers who filed the declassification request, William Burr and Matthew Aid, said MINARET appears to have targeted many prominent Americans who openly criticized America’s involvement in the Vietnam War. The reason for the surveillance was that US President Lyndon Johnson, who authorized the operation, was convinced that antiwar protests were promoted and/or supported by elements outside the US. The newly declassified documents show that Dr. Martin Luther King, Jr., was a major surveillance target of the government. Read more of this post

British, American citizens among Kenya shopping center attackers

Westgate shpping mallBy JOSEPH FITSANAKIS | intelNews.org
Several Americans and at least one British subject were allegedly involved in planning and carrying out the armed attack on a shopping center in Kenya last week, according to the Kenyan government. The bloody attack was carried out on September 21 at the upscale Westgate shopping mall in Kenyan capital Nairobi. At least 15 attackers stormed the shopping complex and executed several shoppers in cold blood, before proceeding to take several people hostage. Responsibility for the attack has been claimed by Somali Islamist group al-Shabaab. The group has been at war with the Kenyan government since October of 2011, when Kenyan troops invaded Somalian territory. The group said that the attack had been carried out as retribution for Kenya’s invasion of Somalia. Kenyan officials have so far refused to speculate on the precise identity of the perpetrators of the Westgate attack. But on Tuesday, Kenyan President Uhuru Kenyatta said during a televised address to the nation that some of the identities of the armed militants who stormed the complex had been confirmed. He added that the perpetrators included a British woman and “two or three” American citizens. A few hours later, Kenyan Minister of Foreign Affairs, Amina Mohamed, said during a press conference that, according to information currently available, “one Brit[ish subject], a woman”, had been involved in the attack. She added that the female suspect “has done this many times before”, implying that she is a seasoned Islamist militant. Minister Mohamed added that “two or three Americans […], aged about 18 or 19”, were also involved in the attack, adding that they were Arab or Somali in origin and had moved to Africa from “Minnesota and one other place” in the United States. Read more of this post

India disbands spy unit that conducted covert operations abroad

VK SinghBy IAN ALLEN | intelNews.org
A controversial military intelligence unit that conducted at least eight covert operations in foreign countries between 2008 and 2012 has been disbanded by the government of India. The country’s Ministry of Defense authorized the establishment of the unit in late 2008, following the Mumbai attacks, which killed over 150 and injured nearly 600 people. The attacks, which lasted for almost four days, involved a dozen coordinated bombing attacks and shooting incidents in India’s largest urban center, carried out by Pakistani nationalists. The covert-action unit was named Technical Services Division (TSD) and led by retired General VK Singh, who served as the Indian Army’s Chief of Staff from 2010 to 2012. According to Indian news media, the TSD was approved by a host of senior Indian government officials, including Lieutenant General RK Loomba, Director General of India’s Military Intelligence. The new agency was tasked with “planning and executing special operations inside depth areas of countries of interest” to India. It was also tasked with “countering enemy efforts within the country by effective covert means”. Most of its “special operations” on foreign soil are said to have been conducted inside Pakistan, in an effort to combat what the Indian government views as “state-sponsored terrorism” by Pakistan’s Inter-Services Intelligence Directorate (ISI). Its main tactical mission centered on targeting Hafiz Saeed, the leader of Pakistani militant group Lashkar-e-Taiba, said to have been behind the 2008 Mumbai attacks. But the TSD has now been disbanded following revelations that it used its mandate to spy on Indian politicians in New Delhi and the Indian province of Kashmir, whose political views on India’s relations with Pakistan were seen as too conciliatory. Read more of this post

CIA warned Tunisian officials about murder of opposition politician

Brahmi supporters in TunisBy JOSEPH FITSANAKIS | intelNews.org
The Tunisian government has admitted that it received advance warning by “an external intelligence source” of an assassination operation against a popular opposition figure. The politician, Mohammed Brahmi, a widely respected member of the country’s National Constituent Assembly, was gunned down 11 days after the alleged warning was received. His death, in July of this year, plunged the country into political chaos, which continues to dominate Tunisian politics today. Speaking to lawmakers on Thursday, Tunisia’s Minister of the Interior, Lotfi Ben Jeddou, said the warning had been received on July 15, 2013. He refused to identify the source of the warning, but Tunisian media speculated that it was most likely the United States Central Intelligence Agency (CIA). The warning was included in a memorandum, which stated that Brahmi was likely to be targeted by “Salafist elements” because of his secular and liberal political beliefs. The minister said that the warning contained no “further clarification”, but added that the absence of details in the memorandum did not justify the failure of the Tunisian security establishment to adequately respond to it. Brahmi, died on July 25 after being shot over a dozen times at close range outside his house in the al-Gazala neighborhood of Tunisian capital Tunis. On Saturday, two days after Minister Ben Jeddou’s revelation, Tunisian newspaper Al Maghreb published a leaked memorandum that contains a summary of the warning about Brahmi’s killing. The leaked summary, which is signed by Tunisia’s Director General of National Security, Mustafa Ben Amor, appears to be dated July 15, 2013, exactly 11 days before Brahmi’s assassination. It describes a warning issued by a CIA official, concerning credible threats to Brahmi’s life. Read more of this post

Interview with US airman who spied for East Germany

Jeff CarneyBy JOSEPH FITSANAKIS | intelNews.org
A former intelligence specialist in the United States Air Force, who became one of East Germany’s most lucrative spies in the West, has given a rare media interview. Jeff Carney was a linguist and intelligence specialist assigned to the US Electronic Security Command at Tempelhof Central Airport in West Berlin during the closing stages of the Cold War. In April of 1983, Carney, who was then aged just 19, walked across the dividing line between West and East Berlin and asked to speak to representatives of the East German government. He has since argued that his defection was prompted by his disagreement with the foreign policy of the administration of US President Ronald Reagan. But in an interview aired on Wednesday by the BBC, he claimed there was “nothing ideological about his decision to defect”, and that he, as a gay man, “felt unwanted” because of the US military’s stance on homosexuality. His plan, which he described in his interview as “an impulsive move” was to request to live in the German Democratic Republic. But instead of granting his wish, East German intelligence officials commanded him to return to his post at Tempelhof and become an agent-in-place. Carney claims that they threatened to reveal to his US Air Force superiors his attempt to defect if he refused to cooperate. The young airman returned to his base and began spying for East Germany’s Ministry for State Security (MfS), commonly known as Stasi. He was provided with a miniature camera, given the operational codename UWE, and was told supply his handler, codenamed RALPH, with classified documents, which he smuggled out of Tempelhof in his shoes and clothing. His West German tour came to an end in 1984, when he was transferred to the US state of Texas. While there, he continued to spy for the Stasi, traveling to Rio de Janeiro, Brazil, and Mexico City, Mexico, in order to meet with his East German handlers. However, in 1985, believing that his superiors in the Air Force were beginning to suspect him of espionage, he traveled to Mexico and walked in the East German embassy in Mexico City, demanding to be transferred to East Germany. The Stasi eventually smuggled him out of Mexico to Cuba, and from there to Czechoslovakia before resettling him to East Germany. Read more of this post

Belgian state telecom targeted by ‘international espionage’

Belgacom headquartersBy JOSEPH FITSANAKIS | intelNews.org
Belgium’s largest telecommunications service provider has fallen victim to a sophisticated cyberespionage operation that was most likely carried out by a government agency of another country. According to Flemish newspaper De Standaard, the operation targeted Belgacom, which is Belgium’s state-owned telecommunications company. The paper said that the cyberhacking was uncovered in June of this year during a routine maintenance check by technicians, who detected an “unidentified virus” that had infected several dozen mainframe computers. Belgacom’s technical experts seem to think that the malware had been active for at least two years on Belgacom’s computers, and that it specifically targeted telecommunications traffic carried by Belgacom’s international subsidiaries. Among them is Belgacom International Carrier Services (BCIS), which specializes in providing wholesale carrier services to over 1,000 telecommunications service providers across Africa and the Middle East. De Standaard’s article said that the sophisticated malware had been designed so as to prevent disruption of BCIS’ voice and Internet traffic, thus remaining unnoticed. Its ultimate goal, said the paper, was “not sabotage, but rather collecting strategic communications content”. Federal prosecutors told the Reuters news agency that the technical complexity of the virus meant that it must have been designed by “an intruder with significant financial and logistic means”. The malware’s complexity, coupled with its grand scale, “points towards international state-sponsored cyber espionage”, said the Federal prosecutors. Commenting on the story, De Standaard claimed that “everything points to the [United States] National Security Agency as the culprit” of the cyberespionage. Read more of this post

News you may have missed #851

EuropolBy IAN ALLEN | intelNews.org
►►Allegations that NSA has a listening post in Vienna. Both the US and Austrian governments have denied reports claiming to expose a major surveillance operation by the National Security Agency from within a villa in the Austrian capital Vienna. Austrian media reported last week that the US government had decided to end operations at the site because its cover was blown. Meanwhile, the allegations have turned into an Austrian affair of state.
►►Europol fighting unprecedented crime levels. Europe is dealing with an unprecedented surge in organized crime as sophisticated multinational groups, including child sex abusers and counterfeit gangs, expand their networks, according to Rob Wainwright, the British head of the European Union’s criminal intelligence agency, Europol. Wainwright says that thousands of gangs are capitalizing on the rise of smartphone and internet technology.
►►Are NSA revelations helping US tech industry? Edward Snowden’s unprecedented exposure of US technology companies’ close collaboration with national intelligence agencies, widely expected to damage the industry’s financial performance abroad, may actually end up helping. Despite emphatic predictions of waning business prospects, some of the big Internet companies that the former National Security Agency contractor showed to be closely involved in gathering data on people overseas –such as Google and Facebook– say privately that they have felt little if any impact on their businesses.

Ex-CIA officer seeks Italian pardon for role in abduction operation

Giorgio Napolitano By JOSEPH FITSANAKIS | intelNews.org |
A former officer of the United States Central Intelligence Agency (CIA), who has been convicted in absentia in Italy for his role in an abduction operation, has contacted the Italian president seeking a formal pardon. Robert Seldon Lady was the CIA station chief in Milan in February 2003, when a team of 23 Americans, most of them CIA operatives, abducted Mustafa Osama Nasr. The CIA suspected the Egyptian-born Nasr, also known as Abu Omar, of working as a recruiter for a host of radical Islamist groups, including al-Qaeda. In 2005, Italian authorities, which had not authorized Nasr’s kidnapping, convicted Lady, along with 22 other Americans, of abduction. The convictions were delivered in absentia, as the Americans had earlier left the country. Washington has refused to extradite them to Rome. Earlier this week, Lady wrote a letter to the President of the Italian Republic, Giorgio Napolitano, saying he had never intended to “disrespect Italy’s sovereignty” and asking for the President’s “personal forgiveness and pardon”. In his letter, Lady argues that he operated “under orders from senior American officials” with the aim of protecting lives, adding that US intelligence activities had been able to “stop numerous plans and targets of terrorists operating in Milan and elsewhere in Italy”. The former CIA officer also claims that the 2003 kidnapping of Nasr had taken place “in liaison with senior members of the Italian government”. He concludes by expressing his “regret” for his “participation in any activities which could be viewed as contrary to the laws of Italy”. Read more of this post

NSA gives Israel raw intercepts containing US citizens’ data

NSA headquartersBy JOSEPH FITSANAKIS | intelNews.org |
The United States National Security Agency (NSA) shares raw intercepted data with Israeli intelligence without first deleting information pertaining to American citizens, according to a leaked document. British newspaper The Guardian published on Wednesday an informal memorandum of understanding between the NSA and the Israel SIGINT National Unit (ISNU). The five-page document was supplied to the newspaper by Edward Snowden, a technical contractor for the NSA who defected to Russia this past summer. It outlines an agreement reached in 2009 between the NSA and the ISNU, under which the American side provides the Israelis with raw intercepts, which often contain telephone and email data belonging to American citizens. The memorandum describes this type intelligence sharing as a “routine” aspect of a broader “SIGINT relationship between the two organizations”. SIGINT refers to signals intelligence, a term used in the intelligence community to describe the interception of communications data or content. Additionally, the document specifically mentions that the data shared with the Israelis is “raw” or “unminimized”, meaning it has not been subjected to the process of extracting and deleting information that identifies US citizens or residents —known as “US persons”. By law, the NSA is not permitted to spy on US persons and is required to ‘minimize’ intercepted data so that the communications of US persons remain private, unless they are absolutely indispensible in understanding a piece of foreign intelligence. The memorandum describes a number of restrictions on the use of this information by Israeli intelligence, stating that the ISNU is forbidden from using it in order to target US persons. It also states that the ISNU must shield the identities of US persons when sharing the information with other Israeli government agencies. Read more of this post

Australian civil servant accused of spying denied access to evidence

Embassy of South Korea in AustraliaBy IAN ALLEN | intelNews.org |
Australia’s Federal Court has rejected a bid by a senior civil servant to view the evidence the government is using to accuse him of espionage. Until September of 2011, Dr. Yeon Kim was a career civil servant with the Australian Bureau of Agricultural and Resource Economics and Sciences (ABARES). His specialization in international trade policy required a security clearance, which Kim had possessed since 2001. But in 2011, he was sacked and had his security clearance revoked for allegedly holding clandestine meetings with officers of South Korea’s National Intelligence Service (NIS). The Australian government accuses Kim of meeting repeatedly with Hoo-Young Park, an employee of the South Korean embassy in Canberra, who had been declared to the Australian government as an NIS liaison officer. According to court documents, three other NIS officers serving under diplomatic cover in Australia, Bum-Yeon Lee, Sa-Yong Hong, and a third man named Kim, were involved in collecting intelligence on Australian trade secrets. The Australian Security Intelligence Organisation (ASIO), which detained Kim, said that he willingly participated in the “foreign interference” operation by the NIS. For several months now, Kim has been contesting the Australian government’s legal case against him in the Federal Court. His legal team recently requested that the Court annul two certificates issued by the Australian attorney general, designed to bar the defense from accessing evidence against Kim. The certificates were originally submitted by government prosecutors during an earlier Administrative Appeals Tribunal hearing. But the Court declined the request, saying the defense waited too long to challenge the certificates. In issuing the ruling, Justice Lindsay Foster said Kim’s legal team should have requested that the certificates be declined during the original hearing. The judge censured Kim’s defense lawyers for “stand[ing] by and watch[ing] while the certificates were [originally] deployed”, adding that it would undermine the integrity of the legal process to allow the certificates to be challenged at this late stage. Read more of this post

Commission urges probe of plane crash that killed UN secretary general

Dag HammarskjöldBy JOSEPH FITSANAKIS | intelNews.org |
A commission of experts formed to examine the 1961 death of former United Nations Secretary General Dag Hammarskjöld has urged the reopening of an investigation into the airplane crash that killed him. Hammarskjöld died when the Douglas DC-6 transport aircraft that was carrying him crashed in the British-administered territory of Northern Rhodesia (now Zambia). He was on his way to Congo’s mineral-rich Katanga region to meet European-supported chieftains who in 1960 had seceded from the nationalist government of Congolese Prime Minister Patrice Lumumba. Two subsequent investigations into the crash, conducted by the Rhodesian Board of Investigation and the Rhodesian Commission of Inquiry, failed to determine the precise cause of the crash. But an official United Nations Commission of Investigation, conducted in 1962, concluded that deliberate sabotage could not be ruled out as a likely cause of the tragedy. In 2011, a Swedish investigator argued in a report that Hammarskjöld’s plane had been “shot down by an unidentified second plane”. The investigator told The Guardian newspaper that British colonial authorities had deliberately left the sole surviving airplane passenger, American sergeant Harold Julian, to die of his injuries at a makeshift hospital in Northern Rhodesia. In 2012, the Hammarskjöld Inquiry Trust appointed an international team of lawyers to study all available evidence and report to the United Nations. The team, called the Hammarskjöld Commission, is composed of a diplomat and three judges from the Netherlands, the United Kingdom, South Africa, and Sweden. On Monday, they held a press conference to present the findings of their investigation. Its conclusion is that the UN should reopen the 1962 probe into the plane crash, because “significant new evidence” has recently emerged. The Commission report suggests that American intelligence agencies, in particular the National Security Agency (NSA), may hold “crucial evidence” that could help clarify the causes of the crash. Read more of this post