US government takes control of Internet domains used by SolarWinds hackers
June 3, 2021 Leave a comment

THE UNITED STATES GOVERNMENT has taken control of two Internet domains used last month in a large-scale phishing campaign by the same Russian-linked hacker group that was behind SolarWinds. The Department of Justice said on Tuesday it seized the two domains, theyardservice[.]com and worldhomeoutlet[.]com, on May 28, following a decision by a US court that authorized the action.
The large-scale attack was detected on May 25, and was delivered in over 3,000 emails sent from a compromised account belonging to the United States Agency for International Development (USAID). The compromised account was paired with the services of a legitimate email marketing company called Constant Contact. It was subsequently used to deliver phishing emails to the employees of over 150 organizations worldwide, most of them American.
The phishing emails featured an official USAID logo, beneath which was an embedded link to a purported “USAID Special Alert” titled “Donald Trump has published new documents on election fraud”. The link sent users to one of the two illicit subdomains, which infected victim machines with malware. The latter created a back door into infected computers, which allowed the hackers to maintain a constant presence in the compromised systems.
According to Microsoft Corporation, the hackers behind the phishing attack originated from the same group that orchestrated the infamous SolarWinds hack in 2020. The term refers to a large-scale breach of computer systems belonging to the United States federal government and to organizations such as the European Union and the North Atlantic Treaty Organization. The threat actor behind the attack is referred to by cybersecurity experts as APT29 or Nobelium, among other names.
Speaking on behalf of the US Department of Justice’s National Security Division, Assistant Attorney General John C. Demers said on Tuesday that the seizure of the two Internet domains demonstrated the Department’s “commitment to proactively disrupt hacking activity prior to the conclusion of a criminal investigation”.
► Author: Joseph Fitsanakis | Date: 03 June 2021 | Permalink
TURKISH SPIES ALLEGEDLY KIDNAPPED a nephew of dissident cleric Fethullah Gülen in Kenya and forcibly transported him to Turkey, according to reports in Turkish media. Citing “government sources”, Turkey’s state-owned news agency, Anadolu, said this week that Selahaddin Gülen had been “forcibly repatriated” to Turkey from abroad by officers of the National Intelligence Organization, known as MİT. But it did not specify when or where the alleged operation took place.
THE FIRST CLAIMS OF an alleged secret collaboration between the signals intelligence agencies of the United States and Denmark surfaced in November of 2020. By January of this year, it was clear that the Danish government would, sooner or later, need to deal with the fallout of its controversial spy deal with Washington, under which Denmark enabled the US to spy on some of its closest European allies. Still, the 
POLICE STATIONS IN CHINA are reportedly experimenting with a new technology that uses artificial intelligence to detect the emotions of subjects, and even monitors their skin pores, according to a source who spoke to the BBC. The source is a software engineer, whose identity has not been disclosed by the BBC. He said he helped install the controversial technology in a number of police stations in the Chinese region of Xinjiang.

A GERMAN ARMY LIEUTENANT, who led a double life as a fake Syrian refugee, has gone on trial in Frankfurt, accused of planning to kill German politicians so as to provoke anti-Arab sentiment among Germans. The man has been identified by the German media as “Franco A.”, 32, due to strict German privacy laws. He lived in France, where he served in the Franco-German Brigade, an elite military force that combines units from the French and German armies, and is meant to symbolize Franco-German rapprochement in the postwar era.




surprised observers with its range of weapons, such as long-range missiles with a reach that is in excess of 150 miles. This constitutes a strategic surprise for Israel. So far (May 13, 2021), Hamas has fired about 1,500 missiles at Israel, most of which have been intercepted by Israel’s air defense system called the Iron Dome.







Russian spy activity has reached Cold War levels, say Germany’s intelligence chiefs
June 7, 2021 by Joseph Fitsanakis 1 Comment
RUSSIAN INTELLIGENCE ACTIVITY in Germany has reached levels not seen since the days of the Cold War, while espionage methods by foreign adversaries are now more brutal and ruthless, according to the country’s spy chiefs. These claims were made by Thomas Haldenwang, who leads Germany’s Agency for the Protection of the Constitution (BfV), and Bruno Kahl, head of the Federal Intelligence Service (BND), which operates externally.
The two men spoke to the Sunday edition of Die Welt, one of Germany’s leading newspapers. Their joint interview was published on June 6. Haldenwang told Die Welt am Sonntag that the presence of Russian spies on German soil reflects Moscow’s “very complex intelligence interest in Germany”. Accordingly, Russia has “increased its [espionage] activities in Germany dramatically” in recent years, said Haldenwang.
The counterintelligence chief added that Russia has a “large number of agents” that are currently active in German soil. Their goal is to try to “establish contacts in the realm of political decision-making”. One of many topics that the Kremlin is intensely interested at the moment is the future of Russia’s energy relationship with Germany, according to Haldenwang.
At the same time, Russia’s espionage methods are becoming “coarser” and the means that it uses to steal secrets “more brutal”, said the spy chief. Kahl, his external-intelligence colleague, agreed and added that Germany’s adversaries are “employing all possible methods […] to stir up dissonance between Western states”. Their ultimate goal is to “secure their own interests”, concluded Kahl.
However, despite Russia’s increased intelligence activity in Germany, the most serious threat to the security and stability of the German state is not Moscow, but domestic rightwing extremism, said Haldenwang. Notably, the German spy chief discussed the unparalleled rise of rightwing rhetoric on social media and websites. Such propaganda is being spread by people that he termed “intellectual arsonists”. Their “hate-filled messages” are essentially anti-democratic, said Haldenwang.
► Author: Joseph Fitsanakis | Date: 07 June 2021 | Permalink
Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with BND, Bruno Kahl, espionage, Federal Office for the Protection of the Constitution (Germany), Germany, interviews, News, rightwing extremism, Russia, Thomas Haldenwang