Canada expels Indian diplomat, accuses India of assassinating Canadian citizen

Sikh KhalistanTHE GOVERNMENT OF CANADA expelled a senior Indian diplomat on Monday, after accusing “agents of the government of India” of having perpetrated the assassination of a Canadian citizen on Canadian soil last June. Canadian Prime Minister Justin Trudeau released information about the alleged assassination during a rare emergency statement to parliament on Monday morning. He also warned India that Canada would continue to work with its allies around the world, including the United Kingdom, to unearth further intelligence about the alleged assassination.

The case involves the killing of Hardeep Singh Nijjar, who was gunned down on June 18, 2023, outside a Sikh cultural center in Surrey, British Columbia. Nijjar was an outspoken activist and a member of Canada’s Sikh community. The adherents of Sikhism follow a monotheistic religion that originated during the late 15th century in what today in northern India’s Punjab region. Many Sikhs support the creation of Sikh homeland, which they refer to as Khalistan —an aspiration that has sparked numerous armed conflicts in India’s history. The government of India considers such aspirations a threat to its national security and regularly refers to leading Sikh activists as terrorists.

Over half of the 1.4 million Canadians of Indian origin identify as Sikhs. This makes Canada’s Sikh population the largest in the world outside of the Punjab region of India. Canadian Sikhs tend to be outspoken in their criticism of the government of India. Many of them campaign openly about what they see as the need for the establishment of an independent Sikh homeland. Nijjar was one such outspoken activist, having risen “to become a prominent advocate for the creation of Khalistan”, according to one recent biographical article. Indian authorities had accused Nijjar of terrorism and had issued a warrant for his arrest.

On Monday, Prime Minister Trudeau referred to Nijjar’s assassination as “an unacceptable violation of [Canada’s] sovereignty, adding that the murdered man was Canadian citizen. He went on to state that Canadian security agencies had been “actively pursuing allegations of a potential link” between Nijjar’s death and “agents of the government of India”. The Canadian leader also called on the government of India “to cooperate with Canada to get to the bottom of this matter”. As of early this morning local time, the Indian embassy in Ottawa was not responding to requests for comment.

Author: Joseph Fitsanakis | Date: 19 Septembrer 2023 | Permalink

Germany charges two with ‘high treason’ for spying for Russia

FSB RussiaGERMANY HAS CHARGED TWO men, among them a German intelligence officer, with spying for Russia, in a case that has shocked German public opinion and alarmed Germany’s allies. The two men have been identified only as “Carsten L.” and “Arthur E.”, in compliance with Germany’s privacy laws. Carsten L. is accused of having provided the Russian Federal Security Service (FSB) with intelligence about the Russo-Ukrainian war, in return for nearly $500,000. Arthur E. is believed to have been Carsten L.’s accomplice and to have acted as an intermediate between him and his Russian handlers.

The German prosecutor general has charged both men with “high treason in a particularly serious case”. However, there is no public information about the timeline of Carsten L.’s recruitment by the FSB and his espionage for the Russians. He reportedly met his accomplice, Arthur E., a Russian-born German diamond trader, in Bavaria in 2021. After being recruited by Carsten L., Arthur E. is believed to have traveled frequently between Germany and Russia. During those trips, he is thought to have met with FSB officers in order to provide them with intelligence and receive payments.

When they announced the arrests of the two men back in January of this year, German officials said they had been tipped by a foreign intelligence agency. The foreign intelligence agency had allegedly found a document from the BND’s internal files in the possession of an unnamed Russian spy agency. However, the identity of the intelligence agency that provided the tip to the Germans is among several important details about this case that remain unknown for the time being. Among them are the estimated duration of Carsten L.’s alleged espionage for Moscow, the damage he caused to German intelligence, as well as his motives for spying for the FSB.

Author: Joseph Fitsanakis | Date: 12 September 2023 | Permalink

Two arrested in Britain for spying for China, report reveals

House of Commons Parliament Britain United KingdomAUTHORITIES IN BRITAIN HAVE arrested two individuals on charges of espionage, among them a researcher for the British parliament who is being investigated for spying for China. According to the British newspaper The Sunday Times, the two individuals were arrested on March 13 of this year in two different addresses. One of the suspects, reportedly in their 30s, was arrested in or around the city of Oxford. The other, reportedly an individual in their mid-20s, was apprehended in the Scottish capital Edinburgh.

A third address, located in an eastern borough or London, was also searched by the Counter-Terrorism Command of the Metropolitan Police, which is leading the investigation into the two suspects. Notably, the parliamentary researcher had worked for prominent members of the Conservative Party, including members of parliament. These reportedly included Alicia Kearns, who chairs the Foreign Affairs Select Committee of the British House of Commons. The Times reported that the suspect had also worked for the Minister of State for Security Tom Tugendhat. The Guardian newspaper reported that Tugendhat said he had not been in touch with the suspect since he assumed his current ministerial role in September of 2022. Kearns did not comment on the case.

The last time a British newspaper reported claims of Chinese espionage was in February of 2021, when The Telegraph reported on the expulsion of three Chinese citizens, who were working as journalists. The paper claimed that the three had been “quietly expelled” after they were caught carrying out espionage. Citing an anonymous “government source”, The Telegraph said that, according to Britain’s Security Service (MI5), the three Chinese journalists were in reality employees of China’s Ministry of State Security. The report did not provide details about when the three Chinese citizens had been expelled, saying only that the expulsions had occurred at different times in the previous year.

According to The Times, the two suspects who were arrested in last March were initially transferred to a south London police station, where they were arraigned. They were then released on bail and are expected to appear in court in October.

Author: Ian Allen | Date: 11 September 2023 | Permalink

Alleged Israeli spies with Russian citizenship arrested in Lebanon

Rafic Hariri International Airport Beirut LebanonLAST WEEK, LEBANON’S GENERAL Security Directorate charged two Russian citizens with spying for Israel. The two Russians, who appear to be legally married to each other, were detained by authorities at Beirut’s Rafic Hariri International Airport as they were attempting to leave the country. The detentions were reported by the Lebanese newspaper Al-Akhbar, which is affiliated with the Lebanese militant group Hezbollah.

According to the Al-Akhbar report, one of the suspects admitted that he had been recently recruited into Israeli intelligence. He also reportedly admitted that, as part of his espionage activities, he received maps of sites and instructions about gatherings at facilities in Lebanon belonging to the Hezbollah organization. He added that he had been instructed to access, inspect and, if possible, photograph these facilities. He also reportedly admitted that he had visited southern Lebanon and entered Hamas-controlled areas of southern Beirut, where he had collected data and verified it against the information available to his handlers.

The report added that the suspect’s wife, who was also arrested, admitted under interrogation that she was aware of her husband’s work and that she had assisted him in his tasks. According to the report the General Security Directorate had suspected the Russian citizen, because he had traveled in southern Lebanon several times. Lebanese authorities were able to track his movements and connections, eventually tracing his place of residence. He was arrested along with his wife soon after being notified by his handlers that he should leave the country immediately.

Al-Akhbar added that, prior to the arrest, the General Security Directorate had informed the Russian Embassy in Beirut of its intention to arrest the Russian citizens. The agency’s Director, Elias Elbisri, said following the arrest: “A spy ring for the benefit of the Israeli enemy was foiled at the Beirut airport, consisting of two people who tried to leave Lebanon”. According to Elbisri, “we carried out the necessary investigations; this cell posed a threat to Lebanon”.

Israeli authorities did not respond to news about the incident. It should be noted that, if Russian citizens were indeed recruited and employed by Israeli intelligence, this development could further-damage the relationship between Israel and Russia, which is already fragile due to ongoing developments in Syria and Ukraine. Israel regularly launches attacks on Iranian facilities and equipment in Syria —a Russian ally. Israel is also believed to provide security assistance to Ukraine, which is engaged in a bloody war over territory with Russia.

In recent days, there have been leaks in Israel that an intense debate took place in the Israeli Security Cabinet, following the rise in Palestinian acts of terrorism in Israel, which, according to Israeli security agencies, are guided by Hezbollah and Hamas. As a result, Hamas operatives in the Gaza Strip are taking protective actions, fearing the renewal of targeted killings by Israeli forces. Salah al-Aruri, commander of Hamas’ Izz ad-Din al-Qassam Brigades, who is directing his forces against Israel from abroad, could also be a target for the Israeli intelligence community.

Author: Avner Barnea | Date: 04 September 2023 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Leading German university suspends Chinese state-funded researchers

FAU UniversityONE OF GERMANY’S LEADING universities has suspended researchers funded by the Chinese government, citing concerns about academic freedom and industrial espionage. The Friedrich Alexander University of Erlangen-Nuremberg (FAU) announced the suspension of Chinese government-funded researchers in June of this year. In announcing the measure, the university stated that the move was designed to protect academic freedom and freedom of expression among its faculty and staff. Earlier this week, however, German media reported the contents of an internal FAU email, which expressed concerns that the Chinese state could be utilizing government-funded researches as spies.

Founded in Bavaria in 1743, FAU is among Germany’s leading universities. On June 1, it became the first university in Germany to suspend researchers funded by the China Scholarship Council (CSC). The CSC is an outreach unit of the Chinese Ministry of Education, which funds the work of Chinese researchers in foreign universities, while also providing scholarships to foreign citizens who apply to study in China. In January 2023, Swedish daily Dagens Nyheter reported that, in order to become recipients of CSC scholarships, Chinese citizens were required to pledge “support [to] the leadership of the Chinese Communist Party […] and to have a correct world view, outlook on life, and values system”.

On June 1, the FAU leadership announced that the CSC funding methods conflicted with Germany’s Basic Law (the country’s Constitution). Furthermore, according to the FAU leadership, the CSC funding methods violated the principles of academic freedom and freedom of expression for its faculty, as practiced in Germany. On Saturday it was reported that, according to an internal FAU email, university officials also expressed concerns that the Chinese state could use CSC researchers to spy on FAU scientific and industrial research, and to compromise FAU’s data security and intellectual property practices.

FAU’s decision was reportedly met with support by Germany’s Minister for Education, Bettina Stark-Watzinger, who said that German universities and research establishments have “a responsibility to safeguard themselves against espionage activities conduced by students receiving scholarships from the Chinese government”. It is also reported that other universities in Germany and elsewhere in Western Europe are considering following FAU in suspending CSC-funded Chinese researchers.

Author: Joseph Fitsanakis | Date: 31 August 2023 | Permalink

Alleged Islamic State informant sues Danish spy services over prison sentence

PET DenmarkA DANISH CITIZEN IS suing two Danish spy agencies, claiming that he was wrongly jailed for being a member of the Islamic State, when in fact he had been asked by his handlers to join the group as an undercover informant. The lawsuit has been brought in Copenhagen by Ahmed Samsam, a 34-year-old Danish citizen of Syrian origin. Samsam’s father, Jihad Samsam, fled to Denmark from Syria following the 1982 Hama massacre, when the Syrian military violently quelled an anti-government uprising by members of the Muslim Brotherhood.

Ahmed Samsam grew up in Copenhagen with his six siblings. He was involved in numerous criminal activities, including robbery and drugs possession. In September 2012, he traveled to from Denmark to Turkey. From there he entered Syria, intending to join the civil war on the side of the anti-government rebels. Upon returning to Denmark in December of that year, Samsam was imprisoned for a prior criminal offense. It was during his time in prison that members of the Danish Security and Intelligence Service (PET) allegedly approached him, asking him to work as an undercover informant abroad. Samsam claims that he undertook several trips to Syria as an informant between 2013 and 2015. While he was there, he claims that he spied on the Islamic State on behalf of the PET and the Danish Defense Intelligence Service (FE), which also recruited him as a spy.

Samsam eventually returned to Denmark, but in 2017 fled to Spain, allegedly to escape harassment by a rival criminal gang in Copenhagen. In June of that year, he was arrested by Spanish police near the coastal city of Malaga in southern Spain. Samsam was charged with terrorism, after police discovered several photos of himself posing with Islamic State symbols and flags on his mobile telephone. He was eventually convicted to eight years in prison, which were later reduced to six. Since 2020, Samsam has been serving his prison sentence in Denmark.

But, in a lawsuit he brought against the Danish state, Samsam claims he had engaged with Islamic State fighters in Syria at the behest of the PET and the FE, and argues that he should not be jailed for terrorism offenses. However, the Danish intelligence agencies have rejected calls to confirm or deny that Samsam had been recruited by them as an informant. Attorney Peter Biering, who represents the defendants in the case, told the court last week that forcing the intelligence agencies to identify their informants would “harm [the agencies’] ability to […] protect [their sources] and prevent terrorism”. Samsam’s attorney, Erbil Kaya, argues that the Danish state is morally obligated to admit to his client’s role as an undercover informant, even if this is formally prevented by the law of the land.

The trial is expected to conclude on September 8. Several witnesses, including government officials and investigative reporters, have been scheduled to testify in court, almost certainly behind closed doors.

Author: Joseph Fitsanakis | Date: 28 August 2023 | Permalink

Chinese government arrests second alleged CIA spy in 10 days

Chinese Ministry of State SecurityFOR THE SECOND TIME in 10 days, the government of China has announced the arrest of a Chinese government employee on suspicion of spying for the United States Central Intelligence Agency (CIA). In a statement issued on Monday, China’s civilian intelligence agency, the Ministry of State Security (MSS), said it had launched an investigation into an official of a government ministry, who was allegedly caught conducting espionage on behalf of the CIA.

The MSS statement did not name the government ministry where the alleged spy works. But it identified the accused by his surname, Hao, describing him as a 39-year-old Chinese national. According to the MSS statement, Hao spent a number of years as a graduate student in Japan. While he was studying in Japan, he allegedly visited the United States embassy in Tokyo, in order to apply for a travel visa. During his visit to the embassy, he met a United States embassy official, who befriended him.

Over time, Hao allegedly formed a close relationship with the unnamed American embassy official. The latter treated him to meals, sent him gifts in the mail, and secured funds for him to conduct research. Eventually, the embassy official introduced Hao to another American official, who, according to the MSS, was a CIA case officer. The CIA case officer allegedly recruited Hao to spy for the United States and instructed him to seek employment at “a core and critical department” of the government upon his return to China.

After completing his studies in Japan, Hao returned to China and secured employment in a government agency. He continued to meet regularly with his alleged CIA handler and other CIA officers, who to whom he “provided intelligence” in return for “espionage funds”, according to the MSS statement. The statement said that Hao’s case remains under investigation and that no official charges have yet been filed.

The MSS statement about Hao’s case came exactly 10 days after the spy agency posted on its WeChat social media account that it had caught another government official spying for the CIA. On August 11, the MSS said it had detained an alleged CIA spy named Zeng, whom it described as a 52-year-old “staff member of a Chinese military industrial group and an important confidential employee” of the Chinese state. Zeng had reportedly been sent to Italy by his employer, presumably in order to pursue graduate studies or receive technical training. While in there, he was allegedly accosted and eventually recruited by an employee of the United States embassy in Rome.

It is not known if the two cases are in any way connected. Government officials in Washington and at the United States embassy in Beijing have not commented on the story.

Author: Joseph Fitsanakis | Date: 23 August 2023 | Permalink

Eighth person detained in sprawling Taiwanese probe of Chinese spy ring

Kaohsiung High Court, TaiwanA SEVENTH PERSON HAS been detained in Taiwan as a result of a broadening investigation into a Chinese spy ring that allegedly provided Beijing with sensitive military intelligence. The existence of the investigation was revealed in January of this year, when the Taiwanese authorities announced the arrests of one retired and six active-duty military officers, all of whom were charged with spying for China.

On January 6 of this year, a retired Taiwanese Air Force colonel, identified only by his last name, Liu, was arrested for spying. According to court documents unsealed at the Taiwan High Court branch in Kaohsiung, Liu retired from the Air Force 2013. Soon afterwards, he began business dealings in China. It was during one of his trips to China when Liu was allegedly recruited by the Chinese government. He then carried out espionage operations on behalf of Beijing for approximately eight years.

Throughout his espionage activities, Liu allegedly used his military contacts to recruit six active-duty Taiwanese Air Force and Navy officers to carry out espionage, in return for monetary payments. The six active-duty military officers were arrested along with Liu on January 6. In April of this year, all seven individuals were formally charged with spying for China, in violation of Taiwan’s Classified National Security Information Protection Act.

Taiwanese government prosecutors alleged that each member of the spy ring received between NT$200,000 and NT$700,000 (approximately US$6,500-23,000) for agreeing to spy for Beijing. As the principal agent, Liu received individual bonuses of between NT$30,000 and NT$100,000 (US$1,000-3,200) each time he gave his Chinese handlers information gathered by one of the members of the spy ring.

On August 16, the Taiwanese government announced that one more individual, referred to as “a field officer” was detained on suspicion of spying for China. The suspect was identified only by his last name, Cheng. He was reportedly arraigned in the Taiwan High Court branch in Kaohsiung, the same court that last January delivered espionage charges against the other seven suspects involved in the spy ring investigation. All eight suspects have been denied bail. Their trial has not yet been set.

Author: Joseph Fitsanakis | Date: 21 August 2023 | Permalink

UK charges three Bulgarians with spying for Russia in ‘major national security’ case

Bizer Dzhambazov and Katrin IvanovaAUTHORITIES IN BRITAIN HAVE charged three Bulgarian nationals with spying for Russia, as part of “a major national security investigation” that led to at least five arrests as early as last February. Two of the Bulgarians appear to be legally married. They have been identified as Bizer Dzhambazov, 41, and Katrin Ivanova, 31, who live in Harrow, a northwestern borrow of Greater London. The third Bulgarian, Orlin Roussev, 45, was arrested in Great Yarmouth, a seaside town in the east coast identity dof England. None of the suspect appears to have a formal diplomatic connection to either Bulgaria or Russia.

The Bulgarians were reportedly arrested in February of this year by the Counter-Terrorism Command of the Metropolitan Police, whose law enforcement mandate includes working on counterespionage cases. Two other individuals who were arrested at the time have not been charged or named. The three suspects have been charged under Section 4 of the United Kingdom’s Identity Documents Act 2010, which prohibits the possession of fake identity documents with “improper intention” and with the owner’s knowledge that they are fake. According to British government prosecutors, the suspects possessed forged passports and identity cards for Spain, France, the United Kingdom, Croatia, Italy, Greece, Bulgaria, the Czech Republic, and Slovenia.

Dzhambazov and Ivanova are believed to have moved to the United Kingdom as a couple in 2013. Both worked in the British healthcare sector —Ivanova as a laboratory assistant for a private company and Dzhambazov as a driver for a hospital. Roussev moved to the United Kingdom in 2009 and worked on the technical side of the financial services industry. He claims to have worked as an adviser for the Ministry of Energy of Bulgaria. He also claims to have previously owned a private company that operated in the area of signals intelligence (SIGINT), which involves the interception of electronic communications.

Bulgaria was one of the Soviet Union’s closest allies during the Cold War. Relations between Bulgaria and Russia plummeted in the 2000s, but pro-Russian sentiments continue to survive among some nationalist segments of the Bulgarian electorate. In June of this year, Kiril Petkov, the leader of Bulgaria’s We Continue the Change party, which today backs Bulgaria’s Prime Minister, Nikolai Denkov, spoke publicly about “Moscow-backed agents” operating inside Bulgaria’s intelligence services. Petkov proposed an ambitious plan to reform the Bulgarian intelligence services in order to “diminish the influence of Russia”. He proposed to do this through the administration of “integrity and ethical tests” to intelligence personnel.

Author: Joseph Fitsanakis | Date: 15 August 2023 | Permalink

China arrests government worker who gave CIA ‘core information’ about military

US embassy Rome ItalyA CHINESE GOVERNMENT EMPLOYEE gave “core information” about China’s military to the United States, after he was recruited by a Central Intelligence Agency (CIA) officer in Italy, a Chinese state agency has said. The allegation was made in a statement that was issued on Friday by China’s civilian intelligence agency, the Ministry of State Security (MSS), on its WeChat social media account.

The MSS statement did not specify the period during which the alleged espionage took place. But it named the alleged spy as “Zeng” and described him as a 52-year-old “staff member of a Chinese military industrial group and an important confidential employee” of the Chinese state. According to China’s state-owned newspaper The Global Times, Zeng had been sent to Italy by his employer, presumably in order to pursue graduate studies or receive technical training. While in Italy, Zeng was allegedly accosted by an employee of the United States embassy in Rome, which the MSS identified as “Seth”.

According to the MSS, Seth was a CIA case officer, who befriended Zeng through “dinner parties, outings and trips to the opera”. The Chinese man “developed a psychological dependence” on Seth and was “indoctrinated” by him “with Western values”, the MSS statement claims. Seth eventually convinced Zeng to sign an agreement with the CIA to conduct espionage, after which the Chinese man allegedly received intelligence tradecraft training. Upon returning to China from his stay in Italy, Zeng is alleged to have carried out espionage on behalf of his CIA handlers. The MSS claims Zeng gave his CIA handlers “a great amount of core intelligence” during “multiple secret meetings” with them.

The information Zeng is alleged to have provided to the CIA concerned “key developments about China’s military” to which he had access through his employer. In exchange for this information, Zeng is accused of having received “a huge amount of [financial] compensation” by his CIA handlers. The latter also promised him that they would help his family emigrate to the United States, as per the MSS statement. The spy agency said that Zeng remains in detention while the case is under investigation. The MSS statement also warned other Chinese citizens living or traveling abroad of “the risks and perils” of recruitment by Western spy agencies.

The Reuters news agency said it contacted the United States embassy in Beijing about the MSS allegations, but received no response.

Author: Joseph Fitsanakis | Date: 14 August 2023 | Permalink

China’s intelligence modernization has outpaced military increases: British report

Chinese Ministry of State SecurityTHE MODERNIZATION OF CHINA’S intelligence community is without parallel in recent history and has even outpaced the funding increases given to the Chinese military, a British government report has concluded. According to the same report, the Chinese government spends more on what it perceives as domestic threats than on external targets involving Western countries and their allies.

The redacted version of the report was issued last month by the British Parliament’s Intelligence and Security Committee, which monitors the activities of the British intelligence community. It concentrates on China’s domestic and global ambitions and discusses the role of the Chinese intelligence services in these pursuits. A theme that permeates the 222-page report is that China’s domestic and international ambitions are interconnected, as Beijing does not distinguish between its key national interests in the domestic and foreign domains. Moreover, the report notes that the Chinese intelligence community plays a central role in both facets.

The report notes that China “almost certainly maintains the largest state intelligence apparatus in the world”, dwarfing those of its Western rivals. The latter are forced to concentrate their counterintelligence work “on those aspects that are most demanding”. The official Chinese intelligence agencies are three, the report notes; they consist of the Ministry of State Security and the Ministry of Pubic Security —both of which are civilian— as well as the Strategic Support Force of the Chinese People’s Liberation Army. The latter provides signals intelligence support, whereas the two civilian agencies carry out a host of intelligence and counterintelligence duties.

Nevertheless, the Chinese state’s “whole-of-government” approach on matters of security means that almost every government agency fulfils some type of intelligence-related role. This makes it difficult to calculate with accuracy the full extent of the Chinese intelligence apparatus, the report notes.

Notably, Chinese intelligence agencies are focused primarily on what the Chinese government perceives as domestic threats to its rule, which Beijing has termed “the five poisons”. According to the report, these consist of: the Taiwanese independence movement; the separatist movements in Tibet and Xinjiang; the Falun Gong religious movement; and pro-democracy activism inside China. Intelligence collection and other operations that relate to the so-called “five poisons” include intelligence activities that take place abroad and target Chinese expatriate communities.

It is also worth noting that, according to the report, Beijing spends “almost 20% more on domestic security than on external defence”. Moreover, the rise in expenditures for intelligence infrastructure and operations is impressive by any standards of assessment and “has outpaced even China’s recent dramatic military modernization” of recent years, the report notes. The increase in spending “appears to have led to an improvement in capability”, the report concludes.

Author: Joseph Fitsanakis | Date: 09 August 2023 | Permalink

Russian spies allegedly impersonated Microsoft staff to hack government agencies

SVR hqMEMBERS OF A PROLIFIC hacker group that many associate with Russian intelligence impersonated Microsoft technicians in order to compromise nearly 40 government agencies and companies around the world. Microsoft security researchers said last week that the “highly targeted” social engineering campaign was guided by “specific espionage objectives” by the hackers.

According to Microsoft, the hackers behind the spying campaign are associated with a prolific hacker group named APT29 (also known as “Cozy Bear” and “Midnight Blizzard”) by cybersecurity researchers. It rose to infamy in 2020, when it was connected with the worldwide SolarWinds attack, which some experts described as possibly being among “the most impactful espionage campaigns on record”. It is believed that APT29 is closely associated with the Russian Foreign Intelligence Service (SVR, pictured).

Starting in late May 2023, APT29 hackers used several previously compromised Microsoft 365 accounts in order to set up internet domains with technical support-themed names. They then used these domains to contact a number of “highly targeted” individuals through Microsoft Teams, pretending to be Microsoft technical support representatives. Eventually, some of their targets were persuaded to provide the hackers with information they received through Microsoft’s multifactor authenticator system, thus granting them full access to their user accounts.

Microsoft did not disclose the identities of the targets, saying only that they were nearly 40 in number, and included government agencies, various multinational technology and manufacturing firms, media companies, as well as non-governmental organizations.

Author: Joseph Fitsanakis | Date: 07 August 2023 | Permalink

Poland’s super-secretive ‘school of spies’ marks 50 years of operation

ABW PolandDURING THE COLD WAR, Poland hosted the Eastern Bloc’s only known intelligence training facility for operations officers situated outside of the Soviet Union. The highly secretive training facility operated out of a heavily guarded compound located near the northern Polish village of Stare Kiejkuty in Gmina Szczytno county, approximately 65 miles from the Polish-Soviet border. Today, 50 years after its establishment, the facility continues to train the operations officers of post-communist Poland’s intelligence services.

During World War II, and in the immediate post-war period, Soviet authorities trained Polish intelligence personnel in Kuybyshev (in 1991 renamed to Samara) in southwestern Russia. This setup continued following the establishment of the Soviet-controlled Polish intelligence community. By the 1960s, the Polish intelligence community was being led by the Ministry of Public Security, referred to by its Polish initials, SB. The SB’s elite operations officers, which staffed its First Department, were all trained in the Soviet Union and in a Soviet-controlled facility in Warsaw.

But in 1970, Poland’s reformist President, Edward Gierek, put in motion a plan to modernize the Polish intelligence services. Gierek’s goal was for Polish intelligence to catch up with the pace of technological development, especially in the emerging digital realm. He also wanted Polish spy organizations to be able to compete directly against rival agencies in Western Europe. The rapid establishment of the Intelligence Personnel Training Centre near Stare Kiejkuty was the centerpiece of Gierek’s intelligence reforms.

Construction began in 1971 and was mostly completed within two years. In 1973, the heavily guarded training facility, which had been disguised as a “holiday resort” in official government maps, welcomed its first students. Students were taught how to operate undercover in the West and how to recruit sources in countries like West Germany, France and the United Kingdom. They were taught about Western European lifestyles and had access to Western products, including soft drinks and vending machines, which were absent from Polish life. Read more of this post

Brazil judges block international requests to extradite alleged Russian spy

GRUTHE BRAZILIAN GOVERNMENT IS blocking requests from the United States and Russia to extradite an alleged Russian deep-cover spy, whose forged Brazilian identity papers were discovered by Dutch counterintelligence. Sergey Cherkasov was expelled by authorities in the Netherlands in June 2022, after he attempted to enter the country using a Brazilian-issued passport under the name of Victor Muller Ferreira.

Within a few days of his expulsion, Dutch and American counterintelligence had outed Cherkasov as an intelligence officer of the Main Directorate of the Russian Armed Forces’ General Staff, which is commonly known as GRU. Cherkasov is alleged to have built his forged identity over several years, while operating in Brazil and the United States. Upon returning to Brazil, Cherkasov was sentenced to 15 years in prison for using forged Brazilian identity documents.

Last week, Cherkasov’s sentence was reduced to 5  years, after a court in Brazil dropped some of the initial charges that had been filed against him by the Brazilian government prosecutor’s office. Cherkasov’s lawyers are now arguing that their client does not pose a flight risk and should therefore be allowed to serve the remainder of his sentence outside of prison, wearing an electronic tagging device.

These recent developments are of concern to authorities in the United States. The latter have filed an extradition request for Cherkasov, claiming that he spent several years as a graduate student in an American university while using his forged Brazilian identity papers. During that time, Cherkasov is alleged to have repeatedly communicated with his Russian intelligence handlers, supplying them with information about American politics and policy.

However, the Ministry of Justice and Public Security of Brazil said on Friday that Washington’s extradition request had been denied and that Cherkasov would remain in Brazil. The apparent reason for the denial is that Brazil’s Supreme Federal Court had already approved a similar extradition request for Cherkasov, which was filed in April by the Russian government. Moscow claims that Cherkasov is wanted in Russia for narcotics trafficking. The Russians also deny that the alleged spy worked for the GRU or any other government agency.

Yet, despite claims to the contrary, the Brazilian government appears to be essentially stalling on Moscow’s extradition request. On Friday, Flávio Dino, who serves as Minister of Justice under the administration of President Inácio Lula, stated that Cherkasov would continue to serve his prison sentence in Brazil until further notice. In the United States, CBS News reported that Cherkasov’s extradition to Russia would take place “only […] after the final judgment of all of his cases here in Brazil” has been issued, according to the accused spy’s lawyers.

Author: Joseph Fitsanakis | Date: 31 July 2023 | Permalink

Revealed: Little-known Russian counterintelligence unit that targets foreigners

FSB - JFAN INVESTIGATIVE REPORT BY the Wall Street Journal discusses a little-known Russian counterintelligence unit that targets foreign diplomats in ways that often “blur the lines between spycraft and harassment”. Among other activities, this secretive unit is likely behind a string of operations targeting American citizens, which have led to the arrest of at least three of them since 2018. These include the Wall Street Journal correspondent Evan Gershkovich, who earlier this year became the first American reporter to be held in Russia on espionage charges since the Cold War.

The Journal Text highlights the activities of the Department for Counterintelligence Operations, or DKRO, a highly clandestine unit belonging to the counterintelligence arm of Russia’s Federal Security Service (FSB). It is believed that the DKRO is responsible for monitoring the activities of foreigners living in Russia. The unit reports to Vladislav Menshchikov, director of the counterintelligence arm of the FSB. Prior to his current post, Menshchikov headed the Office of Special Presidential Programs, a Kremlin outfit that operates and safeguards secret underground facilities in Russia’s metropolitan areas.

According to the paper, the DKRO consists of sub-units that focus on various nationalities of foreigners living in Russia, including diplomats. Its first and largest section, known as DKRO-1, focuses on Americans and Canadians. The operations of this sub-unit have intensified significantly in recent times, as relations between Washington and Moscow have worsened. The Journal’s information reportedly came from “dozens of interviews” with senior Western diplomats in Europe and the United States, American citizens that were previously detained and imprisoned in Russia, as well as Russian analysts and journalists who now live abroad.

In addition to Menshchikov, the DKRO has been behind operations that led to the arrests of two other Americans, Paul Whelan (arrested in 2018) and Trevor Reed (arrested in 2019), both of whom were charged with carrying out espionage for the United States. However, most of the activities of the DKRO focus on monitoring the activities of foreign subjects inside Russia. These include journalists and diplomats. Many of the DKRO’s targets have been subjected to campaigns of harassment and intimidation, the Journal claims. Examples include following diplomats’ children to school, breaking into diplomats’ residences to plant recording devices, sabotaging diplomatic vehicles, and even “cutting the power to the residence of the current U.S. Ambassador”.

The paper also reports that, according to American diplomatic staff, the Russian police officers that are posted along the perimeter of the United States embassy in Moscow are in fact “DKRO officers in disguise”. The Journal said it reached out to the FSB and the Kremlin for comment on these allegations, but received no response. The paper also reached out to the United States embassy in Moscow and to the State Department, but officials there declined to comment.

Author: Joseph Fitsanakis | Date: 12 July 2023 | Permalink