Iranian state-backed cyber spies becoming increasingly skilled, says report
September 21, 2017 Leave a comment
A group of cyber spies with close links to the Iranian government is becoming increasingly competent and adept, and could soon bring down entire computer networks, according to a leading cyber security firm. The California-based cyber security company FireEye said that it has been monitoring the operations of the mysterious group of cyber spies since 2013. The company, whose clients include Sony Pictures, JP Morgan Chase and Target, said that the Iranian group appears to be especially interested in gathering secrets from aviation, aerospace and petrochemical companies.
In a detailed report published on Wednesday, FireEye said that the Iranian group has a very narrow target focus. Moreover, it attacks its targets —which are typically companies— in highly customizable ways. The latter includes the use of cleverly designed phishing tools that are designed to attract the attention of the company’s unsuspecting employees. So far, companies that have been targeted include Saudi petrochemical conglomerates, American aviation firms, as well as South Korean and other Southeast Asian companies that have aviation or energy holdings, said FireEye. The security company said it had codenamed the group “APT33”, which stands for “Advanced Persistent Threat #33”. It also said that APT33 was clearly distinct from other known Iranian hacker groups, because of the sophistication of its operations and the quality of its cyber weapons. The cyber security firm said that APT33 was the first Iranian hacker group to be included on a select list of the most capable cyber spy groups from around the world.
Some experts believe that APT33 is run by Iran’s Revolutionary Guard Corps, an irregular branch of the Iranian military, which is seen by many as a state within a state in post-1979 Iran. The FireEye report does not appear conclusive on this point. However, it notes that APT33 has built an offensive cyber arsenal “with potential destructive capabilities”, but that it currently appears to focus solely on intelligence collection, not sabotage or warfare.
► Author: Joseph Fitsanakis | Date: 21 September 2017 | Permalink
Australia rejected a secret request by the United States Central Intelligence Agency to open an embassy in North Korea, which the Americans hoped to use as a base from where to collect intelligence on the communist state.
Germany’s most famous living spy is on trial this week for hiding assets totaling $50 million in offshore bank accounts. He claims the money was given to him by unspecified “Western intelligence agencies” for his services. Werner Mauss became widely known in 1997, when he was arrested in Colombia for using a forged passport. He had traveled to the Latin American country to secure the release of a German woman who had been kidnapped by leftist guerrillas. The Colombian authorities eventually released him, following heavy diplomatic pressure from the German government. But the German media began investigating his background, and it soon became apparent that he was working for the German Federal Intelligence Service.
South Africa’s National Treasury threatened to terminate all funding for covert operations last year, after the country’s spy agency refused to account for tens of millions of dollars in expenses, saying the money had been put to “secret use”. An investigation by two leading South African news outlets, the Afrikaans-language weekly newspaper Rapport and the English-language online news portal News24, has revealed the existence of a major bureaucratic spat between the National Treasury and the State Security Agency (SSA), the country’s primary civilian intelligence organization.
The sons of a Russian couple, who fraudulently acquired Canadian citizenship before being arrested for espionage in the United States, are seeking to reinstate their Canadian citizenship, which was annulled when their parents were found to be Russian spies. Tim and Alex Vavilov are the sons of Donald Heathfield and Tracey Foley, a married couple arrested in 2010 under Operation GHOST STORIES —a counterintelligence program run by the US Federal Bureau of Investigation (FBI). Following their arrest, their sons, who allegedly grew up thinking their parents were Canadian, were told that their parents were in fact Russian citizens and that their real names were Andrei Bezrukov and Elena Vavilova. Their English-sounding names and Canadian passports had been forged in the late 1980s by the KGB, the Soviet Union’s primary external intelligence agency.
Officials in Saudi Arabia said on Tuesday that they foiled an elaborate suicide attack on the country’s defense ministry headquarters and infiltrated a foreign spy ring in the Kingdom, arresting its members. The near-simultaneous announcements were made by a member of the Presidency of State Security, an intelligence body founded only in July of this year, which is directly accountable to the county’s prime minister.
A former director of Kazakhstan’s feared intelligence agency has been given a lengthy prison sentence, as a ruthless power struggle between rival factions surrounding the country’s president widens. From 2001 to 2006, Nartai Dutbayev directed the Kazakh National Security Committee (KNB), a direct institutional descendant of the Soviet-era KGB. Founded in 1992, the KNB is today directly controlled by Kazakhstan’s authoritarian President, Nursultan Nazarbayev. Many officials serving in senior KNB positions are members of the president’s family, or close friends.
A sophisticated spying device disguised as a rock, which was allegedly planted by Israeli intelligence, was found by Lebanese Army troops on a hill located a few miles from the Lebanese-Israeli border. The discovery was reported early on Saturday by several Lebanese news websites, including Al-Mayadeen and Al-Manar, which are closely affiliated with Hezbollah. Al-Manar
The Turkish government has refused to comment on reports from Iraq, which suggest that Kurdish forces have captured at least two senior Turkish intelligence officers. News of the arrests first
A French police officer has been charged with illegally sharing secret government documents in an espionage case involving France’s border police and diplomats from Morocco and Algeria. According to information published by the French daily Libération, the police officer supplied Moroccan intelligence with classified information about France’s border-control policies and procedures. He also gave the Moroccans information about the movements in France of Moroccan nationals and senior Algerian government officials.
An investigation by a consortium of European newspapers has uncovered details of a massive slush fund worth nearly $3 billion, which was allegedly used by Azerbaijan’s governing elite to bribe officials, business leaders and journalists at home and abroad. The fund was operated out of Baku, the capital of the former Soviet state, which is routinely accused of human-rights abuses. Western countries, including the United States,
The Parliament of Australia is reportedly reviewing the use of cell phones built by a Chinese manufacturer, after an Australian news agency expressed concerns about the manufacturer’s links with the Chinese military. The cell phone in question is the popular Telstra Tough T55 handset. It is made available to Australian parliamentarians though the Information, Communications and Technology (ICT) unit of the Department of Parliamentary Services (DST). Any parliamentarian or worker in Australia’s Parliament House can order the device through the Parliament’s ICT website. According to data provided by the DST, 90 Telstra Tough T55 cell phones have been ordered through the ICT in the current financial year.
American officials have revealed more information about a mysterious sonic device that is believed to have caused numerous diplomats to suffer hearing loss and other serious ailments. Last month, the Associated Press
The former director of South Korea’s main intelligence agency has been sent to prison for organizing a large-scale illegal campaign to influence the result of the country’s 2012 presidential election. Won Sei-hoon headed the NIS from 2008 to 2013, during the administration of conservative President Lee Myung-bak. During the 2012 presidential election, Won ordered a group of NIS officers to “flood the Internet” with messages accusing liberal political candidates of being “North Korean sympathizers”. One of those candidates, Moon Jae-in, of the left-of-center Democratic Party of Korea, is now the country’s president. Mr. Moon succeeded his main right-wing rival, Park Geun-hye, who resigned in March of this year following a series of financial scandals. She is now facing charges of bribery, abuse of power, leaking government secrets, and corruption.






Facing skepticism by experts, NSA backs down in global encryption standards debate
September 22, 2017 by Joseph Fitsanakis 1 Comment
Deliberations for establishing new industry standards for data encryption have been taking place for over three years under the supervision of the International Organization for Standardization (ISO). The ISO is a worldwide standard-setting body founded in 1947, which brings together representatives from national standards organizations. The US delegation, had proposed the adoption of two new data encryption techniques, known as ‘Simon’ and ‘Speck’. The techniques had the approval of the US national standards organization, which is known as the American National Standards Institute (ANSI) . However, it also had the approval of the NSA, America’s signals intelligence agency, whose representatives were members of the US delegation to the ISO. According to the Reuters news agency, the presence of the NSA representatives in ANSI prompted skepticism among other national delegations.
Eventually, encryption experts from countries including Israel, Japan, Germany, and the United Kingdom, rejected ‘Simon’ and ‘Speck’. The reason, according to Reuters, was that they were “worried that the [NSA] was pushing the new techniques not because they were good encryption tools, but because it knew how to break them”. Some commentators believe that this incident illustrates the suspicion with which the NSA is seen by American allies following headline-grabbing revelations made Edward Snowden, a former employee of the NSA who defected to Russia in 2013. Some of Snowden’s most sensational revelations involved alleged NSA operations targeting Germany, France, Israel, Japan, and other American allies. The revelations shocked public opinion in Europe and elsewhere, and resulted in the unprecedented expulsion of the CIA station chief in Berlin —the most senior US intelligence official in the country. ISO delegates are now thought to be working on a revised plan to keep some of ANSI’s proposed standards but enhance them with stronger layers of encryption, said Reuters.
► Author: Joseph Fitsanakis | Date: 22 September 2017 | Permalink
Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with American National Standards Institute, encryption, International Organization for Standardization, News, NSA, privacy, United States