Researchers uncover ‘ambitious’ Iranian hacker group that targets the Middle East
July 26, 2018 1 Comment
An American cyber security firm has reported the discovery of a previously undetected, “highly active” Iranian cyber espionage group, whose extensive target list consists mainly of large organizations and companies in the Middle East. The cyber security firm Symantec, makers of Norton antivirus software, which uncovered the cyber espionage group’s existence, has dubbed it “Leafminer”. It said the group has been active since the beginning of 2017, but has “significantly ramped up its activities” in 2018 and is currently involved in dozens of ongoing attacks.
In a report published on Wednesday, Symantec said that its security experts managed to obtain what appears to be Leafminer’s master list of targets. The list is written in the Farsi language and contains just over 800 organizations, which according to Symantec researchers is “an ambitious goal” for any cyber espionage group. The organizations listed on the target sheet come from a variety of sectors, including government, transportation, the financial sector, energy and telecommunications. But the majority of the group’s targets appear to be in the petrochemical and government sectors. Additionally, virtually all of Leafminer’s targets are located in the Middle East and North Africa, in countries such as Israel, Egypt, Bahrain, Qatar, Kuwait and the United Arab Emirates. Some of the group’s targets are located in Afghanistan and Azerbaijan.
Symantec said its researchers observed the Leafminer hackers execute attacks in real time on at least 40 targets in the Middle East, including on the website of an intelligence agency in Lebanon. According to the cyber security company, Leafminer uses a variety of hacking tools, including custom-designed malware and some publicly available software. The group’s operational sophistication is also varied, and ranges from complex, multilayered attacks to brute-force login attempts. Symantec said it concluded that the cyber espionage group originates from Iran because its master target list is written in Farsi and because Iran is virtually the only country in the Middle East that is missing from the target list. However, it said that it did not have sufficient evidence to link Leafminer to the Iranian government. In a separate development, Germany’s domestic intelligence agency, the Federal Office for the Protection of the Constitution (BfV), said this week in its annual report that the government of Iran has significantly expanded its cyber warfare capabilities and “poses a danger to German companies and research institutions”.
► Author: Joseph Fitsanakis | Date: 26 July 2018 | Permalink
Adherents of a bizarre far-right movement in Germany, who claim to be citizens of Prussia, are arming themselves and pose a growing security threat, says a new report by the country’s domestic spy service. The members of the movement call themselves Reichsbuerger (“citizens of the Reich”) and reject the legitimacy of the Federal Republic of Germany. Instead of the modern-day German state, which emerged in 1990 from the union of East and West Germany, Reichsbuergers swear allegiance to the Deutsches Reich (German Reich), the Nazi German state that existed between 1933 and 1945. They also claim that the Deutsches Reich, which they occasionally refer to as Prussia, continues to exist in its pre-1945 state and is still governed by a provisional government in exile.
The Prime Minister of Britain, Sir Alec Douglas-Home, was kept in the dark by his own home secretary about the discovery of a fourth member of the infamous Cambridge Spy Ring in 1964, according to newly released files. The Cambridge Spies were a group of British diplomats and intelligence officials who worked secretly for the Soviet Union from their student days in the 1930s until the 1960s. They included Guy Burgess, Donald Maclean and H.A.R. “Kim” Philby, all of whom eventually defected to the Soviet Union. In 1964, Sir Anthony Blunt, an art history professor who in 1945 became Surveyor of the King’s Pictures and was knighted in 1954, admitted under interrogation by the British Security Service (MI5) that he had operated as the fourth member of the spy ring.
Iranian military officials have warned of extracting “revenge from foreign intelligence services”, as Reuters reported that an aggressive campaign against Tehran has been launched by Washington. On Sunday, the Reuters news agency said that senior officials in the administration of US President Donald Trump had launched a concerted offensive “meant to foment unrest” in the Islamic Republic. 
Israel helped foil an alleged Iranian-sponsored bomb attack in Paris, which involved arrests of several Iranian agents and at least one diplomat in France, Belgium and Germany, according to media reports. As intelNews 
Several American former intelligence officials have called on their active colleagues to resign despite President Donald Trump’s retraction of his remarks about Russia’s alleged meddling in the 2016 presidential elections. On Tuesday, the US president issued an unusual retraction and correction of his public statement on Monday in Helsinki, Finland, in which he appeared to side with the Kremlin over his own Intelligence Community’s views. The Office of the Director of National Intelligence (ODNI), which is the coordinating body of the US Intelligence Community, has said that Russia tried to systematically interfere in the 2016 US presidential elections. According to the ODNI, the Kremlin’s goal was to augment the already heightened discord in American political life and deepen the mistrust between the electorate and state institutions, including Congress and the White House.
A group of 12 female North Korean restaurant workers and their male manager claim that their widely advertised defections in 2016 were fake, and that they were in fact abducted by South Korea’s spy services. The North Korean government maintains a chain of North Korea-themed restaurants throughout Asia, which operate as popular tourist attractions across Southeast Asia. The state-owned restaurants help provide the cash-strapped regime in Pyongyang with desperately needed foreign funds. The North Korean staff —almost all of them female— who work at these restaurants are carefully vetted and chosen to represent the reclusive regime abroad. Some observers 
A joint Indian-American counterintelligence operation, described as “unprecedented in its scale and scope”, reportedly foiled a major suicide attack by the Islamic State in New Delhi and helped achieve “a string of victories” against the group in Afghanistan and Pakistan. 
A member of one of the United Arab Emirates’ seven royal families has defected to Qatar and asked for political asylum, in what appears to be the first time that an Emirati royal has publicly turned against the oil-rich kingdom. In May of last year, the UAE 
In a rare moment of downturn in relations between Athens and Moscow, Greece has expelled two Russian diplomats and refused to accredit two more, reportedly for “undermining Greek national security”. Greece was not among nearly 30 countries that expelled or refused to accredit over 150 Russian diplomats in March, in an act of solidarity with the United Kingdom. The 
Intelligence directors from Russia, China, Iran and Pakistan met on Tuesday to discuss regional cooperation with particular reference to combating the Islamic State in Afghanistan. Information about the high-level meeting was 
North Korea offered to stop selling missile technology to Iran and other enemies of Israel in exchange for $1 billion in cash from the Jewish state, according to former senior North Korean diplomat who has now defected. The account of the offer can be read in Password from the Third Floor, a book published earlier this year by Thae Yong Ho. Thae, a member of a prominent North Korean family, defected with his wife and children in 2016, while he was serving as a senior member of the diplomatic staff of the North Korean embassy in London. 
Holland has expelled two Iranian diplomats without saying why, leading to speculation that the expulsions may be related to the arrests of members of an alleged Iranian sleeper cell in Belgium, Germany and France last week. On Friday, a spokesperson from Holland’s General Intelligence and Security Service (AIVD) 
An Iranian diplomat and members of what authorities described as an “Iranian sleeper cell” were arrested this week in Belgium, Germany and France, as they were allegedly planning to a bomb a high-level meeting in Paris. The arrests came after a complex investigation by several European intelligence agencies and were announced by Belgium’s Minister of the Interior, Jan Jambon.
intelNews.org 
FIFA World Cup host Qatar ‘used ex-CIA agents to sabotage rival bids’
July 30, 2018 by Joseph Fitsanakis 1 Comment
Now controversy over Qatar’s winning bid is likely to intensify following a claim by a leading British newspaper that the oil kingdom hired former CIA officers and public-relations specialists to discredit rival bids. According to the London-based Sunday Times newspaper, Qatar employed the public-relations firm Brown Lloyd Jones (now known as BLJ Worlwide) and a team of ex-CIA operatives. The Times said it had seen internal documents leaked by an unnamed whistleblower, which reveal the sinister nature of Qatar’s public-relations offensive. Much of it, said The Times, centered on propagating the view that World Cup bids by the United States and Australia would not be supported by the two countries’ domestic audiences. Organizations, academics, journalists and pressure groups from Australia and the United States, who were critical of their countries’ efforts to host the tournament, were clandestinely funded in order to promote their views. Additionally, BLJ and the former CIA operatives compiled intelligence folders on the leading figures of the rival countries’ bids.
If The Sunday Times’ allegations are correct, it would mean that Qatari authorities violated FIFA’s regulations for bidding to host tournaments. But last night the Supreme Committee for Delivery and Legacy, Qatar’s state-run group that organized the country’s World Cup bid, disimssed the newspaper’s accusations. Its spokesman rejected “each and every allegation put forward by The Sunday Times” and assured reporters that Qatar had “strictly adhered to all FIFA’s rules and regulations”.
► Author: Joseph Fitsanakis | Date: 29 July 2018 | Permalink
Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with BLJ Worlwide, Brown Lloyd Jones, FIFA, FIFA World Cup, International Federation of Association Football, News, Qatar, sports