Notes on the assassination of Iranian IRGC Commander Hassan Mahdawi

IRGC - ABTHE TARGETED KILLING OF Hassan Mahdawi, a high-ranking member of Iran’s Islamic Revolutionary Guards Corps (IRGC) and the commander of the Quds Force in Syria and Lebanon, was carried out by Israel on April 1, 2024. The actual assassination was based on precise operational intelligence, while Israel’s assessment of Iran’s response was wrong.

On the day of the attack, a building adjacent to the Iranian Embassy in the Syrian capital of Damascus was attacked with rockets. The attack killed seven IRGC members: General Muhammad Reza Zahedi, also known as Hassan Mahdawi, his deputy, and five additional officers. Mahdawi is the most senior Iranian commander to be killed since the assassination of IRGC Quds Force Commander Qasem Soleimani by the United States in 2020.

Mahdawi had close ties with Hezbollah. He maintained a close relationship with Hezbollah Secretary-General Hassan Nasrallah and was perceived by Israel to be directly coordinating the military attacks on Israel from Lebanon and Syria. In Tehran’s collective memory, Israel’s history of attacks against it includes numerous strikes on Iranian nuclear sites, assassinations of scientists within Iran, and actions against Iranian proxies in Syria, Lebanon, Iraq, and Yemen. Traditionally, these attacks have been invariably met with attacks by Iran’s proxies in the region.

This time, it was different. Iran recognized Mahdawi’s assassination as a direct attack on Iran that it could not tolerate, and had to respond to differently. Just days following Mahdawi’s assassination, Iran attacked Israel. According to the Israel Defense Forces, 99 percent of the more than 330 weapons fired at Israel (including at least 185 drones and 110 surface-to-surface missiles) were intercepted, mostly over the territory of countries adjacent to Israel. Iran’s attack on Israel was unprecedented. It was launched directly from Iranian territory in contrast to prior cases, when Iran has used its proxies, supposedly leaving its hands clean.

Israel could not tolerate such a blatant infringement on its sovereignty. After Israeli officials vowed a response to the Iranian attack, the Jewish State counter-attacked, causing minor damage to the Eighth Shekari Air Base in northwest Esfahan, a dozen kilometers from the Natanz nuclear facility. It was a calculated response designed to deliver a message to Iran that Israel could and would respond to an attack. Following Israel’s counterattack, the tensions between Iran and Israel have subsided for the time being.

While the attack on General Mahdawi was based on excellent operational intelligence, it became evident that the Israeli assessment regarding a possible Iranian response was erroneous. The Israeli assessment was that the Iranian response would be similar to what occurred in the past —namely limited attacks by Hezbollah on northern Israel and attacks on the Golan heights by Iranian proxies in Syria. Israel simply did not anticipate a direct Iranian attack on Israel from Iranian territory.

It seems that Israeli senior analysts were entangled in a conception of Iran’s past behavior and anticipated that Tehran’s response would be similar to prior cases, namely utilizing Iran’s proxies. Israel did not pay enough attention to the difference between Mahdawi’s assassination and previous attacks against Iran. This time, the attack targeted the Iranian embassy in Damascus and the target was a very senior official, who was close to Iran’s Supreme Leader Ali Khamenei.

It appears that Israel’s assessment of the Iranian response to Mahdawi’s assassination was a strategic failure. It appears more likely that the Israeli War Cabinet was provided with an incorrect assessment by the nation’s intelligence community, and less likely that it was provided with an incorrect assessment, which it then decided to ignore. There is concern in Israel that the intelligence assessment was once again wrong, after the colossal failure to anticipate the October 7 attack on Israel by Hamas.

Author: Avner Barnea | Date: 26 April 2024 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Interview reveals state of mind of Israeli intelligence prior to October 7 attack

Israeli General Staff MilitaryON MARCH 23, CHANNEL 12 of Israeli television aired a remarkable interview with Sassi Elya, the former director of technology at the Israel Security Agency (ISA). Better known by the acronyms Shin Bet or Shabak, the ISA is Israel’s domestic security service. The interview had initially been scheduled for broadcast as part of the evening news on October 7, 2023. However, its airing was canceled due to the attack on Israel by Hamas, which occurred that morning.

But on March 23, after about 5 months, Channel 12 aired the original interview with Elya. The retired official spoke with glee about the advanced technological capabilities developed by the ISA in order to prevent terrorist attacks against Israel. Elya said Israeli intelligence had built a unique system, known as “the Tool”, which allegedly provided intimate knowledge about the life of every Palestinian living in the West Bank and Gaza. This technologically advanced surveillance system allegedly monitored every move of its targets, all for the purpose of preventing potential terrorist attacks against the Jewish state. Elya claimed that, as a result of this advanced technological system, there was no chance that Israel would be surprised by Palestinian militants. This system was so advanced, he said, that intelligence agencies from all over the world were coming to Israel to learn about it.

Thanks to Channel 12, we can now examine Elya’s interview retrospectively, and especially in light of the ISA’s poor performance on October 7, as well as its failure to warn Israeli authorities about Hamas’ preparations for the attack. Notably, Elya was interviewed again for the same television program. Predictably, he admitted that his prior assessment had been wrong and regretted being so overly confident about the technology.

This case demonstrates the overestimation by Israeli intelligence of its own capabilities, because of arrogance and over-confidence. This approach refutes the basic premise of intelligence work: be skeptical and be modest. Furthermore, this case highlights that Israeli intelligence agencies overly relied on technology (SIGINT) in the lead-up to October 7, while seemingly neglecting the low-tech activity of gathering information through human intelligence (HUMINT).

The system that Elya described in his initial interview as the ultimate counterintelligence tool was reportedly criticized internally by some in the ISA for gathering huge amounts of information without offering sufficient analytical capability. This imbalance between collection and analysis can render an entire surveillance system practically useless. The bottom line is that, almost by accident, we are now aware of the state of mind that the ISA was in before the sudden attack by Hamas on October 7, which cost so many lives as a result of the ISA’s complacency.

► Author: Avner Barnea | Date: 01 April 2024 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Opinion: Five months into the war, Israeli intelligence failure looks even worse

Israel Hamas warSINCE OCTOBER 7, 2024, when Israel was caught off guard by a sudden and highly damaging attack from Hamas, more information has surfaced regarding why there was no prior warning about the attack and the failures of Israeli intelligence in this regard.

It has become clear that Israeli intelligence miscalculated Hamas’s intentions. The Israeli security concept, spearheaded by the Israel Military Intelligence (IMI) and the Israel Security Agency (ISA), was that: (a) Hamas had been deterred from launching large-scale attacks; and (b) Hamas was focused on carrying out terrorist attacks against Israelis in the West Bank and not on Israel proper. This flawed security concept, which had been fully adopted by the Israeli cabinet and the Israel Defense Forces (IDF) was proven to be groundless. In fact, Hamas successfully exploited it in order to develop and accelerate its attack strategy.

One significant reason for the failure of the IDF, both in the area of intelligence collection and operationally, was its underestimation of the capabilities of Hamas and the intentions of its leader, Yahya Sinwar. There was also an overestimation by many in Israel, including the security establishment, of Israel’s own intelligence Q Quotecapabilities. Another important insight is that the counterintelligence structures inside Hamas were successful in preventing Israeli intelligence from recruiting agents who were close enough to Sinwar to be able to alert Israel about the impending attack. Furthermore, Israel’s collection and analysis of signals intelligence was unproductive, possibly because Hamas was successful in countering Israel’s ability to produce effective intelligence from signals intercepts.

As the IDF moved deeper into Gaza, and as more information was collected from Hamas facilities, it became clear that there were significant gaps in information regarding the preparations for the attack by Hamas inside Gaza. These preparations lasted for a long time and involved numerous operatives who remained undetected by Israeli intelligence. It looks like the compartmentation system inside Hamas, based on a need-to-know only model, was highly effective.

The IDF attacked the Gaza Strip in 2014 in Operation Protective Edge. Its mission was to destroy Hamas’s ability to carry out assaults against Israel through tunnels dug deep inside Gaza and crossing the border into Israel. Indeed, about 20 such tunnels were destroyed during that operation. Later, Hamas built 250 miles of new tunnels in Gaza that were aimed at defense and to hide combatants when Israel attacked. It has been suggested that this construction project was funded by cash sent to Gaza by Qatar, with Israel’s approval —though Qatar denies this claim. Read more of this post

Analysis: Israel underestimated Hamas while overestimating its own capabilities

IDF IsraelTHE OCTOBER 7 ATTACK on Israel was a total surprise. There was no warning. There were very few signs of a possible attack. Israeli intelligence evaluated these signs as elements of a routine military exercise by Hamas, and even assessed them as parts of an imaginary scenario. It therefore gave no warning to those Israeli Defense Forces (IDF) units that were stationed on the border with Gaza. Meanwhile, what we know about the intelligence failure of October 7 will likely pale before what the commission of inquiry will reveal once it is established. That was precisely what happened in the case of the Agranat Commission of Inquiry, which made significant revelations while investigating the intelligence failings of the IDF in the run up to the 1973 Yom Kippur War.

In the eyes of the Israeli generation of the Yom Kippur War, the possibility of such a failure happening again was unthinkable. Yet there is a significant difference between the events of 1973 and the events of last October 7. In 1973 the intelligence failed, but the IDF reacted quickly and acted efficiently. This Q Quotetime, in the first two days of the conflict the IDF was confused and acted without direction, in the apparent absence of relevant action plans for what to do in the event of a massive invasion. The IDF was clearly not ready for such a scenario.

Recently, another important piece of information about the intelligence failure of October 7 was revealed. It was reported that, two months before the surprise attack by Hamas, information was received from an agent handled by the Israel Security Agency (ISA) in Gaza, with a “very high” reliability level. The agent allegedly reported that Hamas was planning “a major move in the week after Yom Kippur”. Yet that warning was not marked as significant; the assumption was that, if the warning materialized, it would be corroborated with additional intelligence. It was thus kept from higher levels of command and from Israeli Military Intelligence (IMI). The ISA did not deny the report, saying instead in a statement: “Focusing on one specific piece of news or another does not reflect the intelligence picture at the time”.

Given the high number of casualties and the horrendous destruction that resulted from the October 7 attack, many Israelis, including some in the security establishment, feel that it is far too long to wait until a commission of inquiry is established and publishes its conclusions. It will likely take at least two years Q Quotefor those conclusions to become public. What is to be done in the meantime? There is public pressure to launch the inquiry soon.

Recently the State Comptroller of Israel, Matanyahu Engelman, announced that he has begun to investigate the intelligence failure. This is an appropriate move. However, with all due respect to the state comptroller’s inquiries, we know from previous experience that his findings have no teeth. For instance, in the context of Hamas, the state comptroller’s review of Operation TZUK EITAN (the 2014 Gaza War) was published in early 2017. It revealed serious instances of misconduct in the intelligence community dating several years prior to the operation. Yet this severe criticism passed below the public’s radar and was practically ignored, while no actions were taken against IDF and ISA security personnel that were shown to have acted irresponsibly.

I would like to point to a number of stronger factors that led to the tragic complacency of October 7, drawn from the field of psychology. It relates to how a country (mainly through its intelligence analysts) perceives its enemies and how this affects the evaluations of said enemies. We know that there was a conception on the Israeli side that Hamas had no interest in attacking Israel at this stage. It seems that the State of Israel underestimated Hamas and its leader, Yahya Sinwar, based on the available evidence of Hamas and Sinwar. Read more of this post

The OSINT factor in Hamas’ operational success and Israel’s intelligence failure

Hamas GazaIT HAS BECOME CLEAR that Hamas had up-to-date intelligence on Israeli targets prior to the attack on October 7, 2023, the largest and most devastating terrorist attack in Israel’s history. Hamas did not have access to clandestine information sources but rather relied on open-source intelligence (OSINT) to understand the structure and weaknesses of Israel’s defense system along the border fence. In addition to publicly available maps, Hamas meticulously gathered online intelligence about specific sites within the Israeli communities near the Gaza Strip.

It is also possible that some of the intelligence came from human intelligence (HUMINT) sources, largely through Gazan workers who were employed in Israel. Moreover, Hamas had access to constant Israeli media broadcasts, which supplied them with invaluable intelligence on the border communities and adjacent military facilities, as well as on communities that were located further to the north and east. Although the Israeli state exercises censorship in the Q Quoteinterests of national security, the public’s ‘right to know’ purview is substantial. Thus, significant amounts of information are available online.

In assessing the behavior of Hamas in recent years, one can observe that it did not act as a terrorist group for quite some time. Rather, it operated as a government organization, while monitoring its enemy and waiting patiently for an opportune moment to attack. Simultaneously, Hamas utilized disinformation tools to conceal its attack plans. It trained its fighters within commando units that employed information effectively and relied on actionable intelligence, rather than chance. This can be observed from interrogations of Hamas members who were detained by Israeli authorities after October 7. In one example, Hamas used detailed maps of Israeli communities near the Gaza border, which are available on Google Earth, to plan its attacks of October 7. Printouts of these maps were found among the belongings of Hamas assailants that were killed during the attacks.

Some in Israel are now advocating for increased protection of OSINT, particularly for Israeli sites related to security, including civilian first-response units, defense systems guarding settlements, and civil technological assets. However, implementing such measures within the current framework of Israel’s open society seems challenging. Despite the known importance of OSINT to Hamas and its potential risk to Israel’s security, significant changes in this regard may not occur, as they could impact the country’s democratic values. However, it is still possible to improve the quality of security censorship regarding sensitive civilian information that can be used by adversaries. Such moves would include protecting databases, limiting information relating to the addresses of senior officials, or putting in place stricter policies on the movement of Gazan workers in Israel.

Contrary to Hamas’, Israel’s OSINT systems underperformed in the run-up to the October 7 attacks. That was so especially after the central OSINT unit of the Israeli Military Intelligence was dissolved, for reasons that remain to be investigated. CNN was among many news outlets that have revealed how Hamas advertised its military drills on social media, but somehow Israeli intelligence failed to pay attention to them.

When Hamas openly declared its intention to attack communities near the Gaza border, and trained its units for that purpose, the Israeli intelligence community, including the IMI and the Israel Security Agency (ISA), underestimated its real attack capabilities based on OSINT materials. This miscalculation stemmed from incorrectly assessing Hamas’s capabilities and overestimating the Israel Defense Forces’ ability to swiftly respond and prevent the attack on civil and military targets. Unfortunately, this assessment proved to be a significant mistake.

The effective use of OSINT lies at the heart of Hamas’ operational plan to attack simultaneously several Israeli targets and to cause extensive damage. It appears that Hamas was able to utilize the OSINT factor to its maximum extent, thus adding significant value to the success of the attack.

► Author: Dr. Avner Barnea | Date: 05 December 2023 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Analysis: Israel’s misjudgment of Hamas caused the October 7 intelligence failure

Gaza StripSINCE OCTOBER 7, WHEN Hamas launched its surprise attack on Israel, many more details about the intelligence failure have emerged. It appears that Israeli intelligence officials have warned for years about military exercises held by Hamas in the Gaza Strip, which have included practice raids on cities deep inside Israel. However, the Israel Military Intelligence (IMI) did not heed to the warnings, because it considered Hamas operationally incapable of carrying out such raids. Instead, the IMI estimated that the Hamas leadership aimed to arrive at a settlement with Israel. That seems like the result of a highly successful disinformation operation, which added significantly to the effectiveness of the sudden attack on Israel on October 7.

It now appears that several months after the Israel Defense Forces (IDF) Operation Guardian of the Walls, which targeted Hamas in the Gaza Strip in May of 2021, Hamas began to train for a large-scale operation against Israel. However, the IMI estimated that Hamas was not capable of attacking aQ Quote large number of settlements simultaneously. It also believed that such an operation would go against the spirit of Hamas leadership’s spirit intention to settle with Israel.

As early as 2022, the IMI had analyzed videos of Hamas’ military exercises, which Hamas itself had made available on social media networks. Meanwhile, the intelligence information that emerged from the Gaza Strip showed that the professionalization of Hamas’ military arm, the Izz ad-Din al-Qassam Brigades, was improving. However, IMI officials rejected the need to build an operative response to the mass-attack scenario that these exercises pointed to, because they saw them simply as exercises.

Israeli intelligence also analyzed the communications discourse between the commanders of Hamas, which it had acquired through intercepts. It purportedly indicated that Hamas intended to carry out raids on Israeli communities located near the fence between Israel and Gaza, but also on targets located deeper inside Israel. The communications discourse also indicated that such attacks could occur, not only using tunnels, but with incursions above ground and even through aerial methods.

One of the methods that Hamas trained on, and one that was known to Israeli intelligence, focused on disabling the highly sophisticated observation posts, sensors and remote-controlled machine guns, which Israel has installed along the border fence with the Gaza Strip. The purpose of these exercises was to enable an attack on the fence and overtake it these sophisticated tools with Hamas operatives, thus effectively blinding the Israeli forces. However, Israeli authorities made no effort to prepare for such a scenario by protecting these installations.

The broad picture that is emerging raises serious questions about why the IDF did not take a reasonable course of action against Hamas’ operational plan —and why it failed to do so despite being aware of the intensity of the Hamas exercises, and despite being aware of the group’s stated intentions. Q QuoteIndeed, a preventive course of action should have been in place even in the absence of specific intelligence warnings —if only to enable the IDF to repel a surprise attack by Hamas. There was no need to estimate what Hamas would do in order to prepare for a surprise attack.

Yet it is now patently obvious that there was ample intelligence about Hamas’ intentions. The latter were both apparent and known. Even without the wisdom of hindsight, it is clear there was enough intelligence to enable Israel to act in a timely manner against Hamas’ plan. Yet Israel severely misjudged Hamas’ intentions. In retrospect, it appears that ample intelligence about Hamas’ intentions had been gathered, that the IMI and Shin Bet were severely underprepared for a surprise attack, that the precise details of Hamas’ attack were missed, and that Hamas’ intentions were misjudged. These are the reasons why Israel was caught unprepared and suffered a catastrophic surprise on October 7.

Author: Dr. Avner Barnea | Date: 10 November 2023 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Analysis: How Israeli Intelligence Failed to Anticipate the Hamas Attack

Hamas GazaSEVERAL DAYS HAVE PASSED since October 7, the day when Hamas stunned Israel with a surprise attack against several settlements near the Gaza border. It is now clear that Israeli intelligence was in possession of warning indicators about the attack, and that these indicators were misjudged.

The IMI and ISA Assessment

It is important to note that the intelligence division of the Israel Defense Forces (IDF), known as Israeli Military Intelligence (IMI), and the  Israel Security Agency (ISA), have been monitoring Hamas for years. These two agencies are believed to have conducted a situation assessment approximately two weeks before the October 7 attack. The assessment concluded that Hamas was deterred and had no interest in changing the status quo by attacking Israel in the short run. This assessment was communicated to Prime Minister Benjamin Netanyahu and Minister of Defense Yoav Gallant.

It appears that this assessment was not supported by concrete intelligence. The agencies that produced it relied primarily on monitoring the recent behavior of Hamas, including the fact that it was allowing Palestinians living in Gaza to work inside Israel. Additionally, the assessment noted the fact that Hamas was receiving funds from Qatar to help the poverty-stricken residents of Gaza. In retrospect, this assessment appears to have been based on wishful thinking.

The Egyptian Warning

It is now known that Abbas Kamel, Director of the Egyptian General Intelligence Directorate, sent a warning to Israel a few days before Hamas’ attack. Kamel allegedly warned of “something unusual, a terrible operation”, which was about to take place from the direction of Gaza. The warning was forwarded to Prime Minister Netanyahu’s office. The Israeli newspaper that published this report, Yedioth Ahronot, is known for its serious reputation and quality sources inside the Egyptian establishment. According to the report, Kamel was told by the Israelis that they were focused on preventing terrorist attacks in the West Bank.

Yet, in a speech that Netanyahu delivered immediately after the October 7 attack broke out, he denied claims about the Egyptian warning and claimed that they were fake news. However, American Congressman Michael McCaul, Chairman of the House Foreign Affairs Committee, said on October 11: “We know that Egypt […] warned the Israelis three days prior that an event like this could happen”. Speaking to reporters following a closed-door intelligence briefing on the crisis for American lawmakers, McCaul added: “I don’t want to get too much into classified [details], but a warning was given”. An Egyptian government source also asserted that Egyptian intelligence officials warned their Israeli counterparts that Hamas was planning “something big” ahead of the October 7 surprise onslaught. But this intelligence appears to have been ignored. Read more of this post

Analysis : Attack on Israel Points to Systemic Failure at All Levels

Hamas Israel - BarneaTHE COMPARISON BETWEEN THE October 2023 attack on Israel and the Yom Kippur War is reasonable. We still have an obscured perspective on what happened on October 7. But even this partial picture makes it possible to draw a preliminary comparison. Undoubtedly, there is no precedent for such a monumental failure in the history of Israeli intelligence.

The most striking difference between the two case studies is that in 1973 the system as a whole did not fail. The failure was personal, on the part of several key people, who did not perform according to expectations. The events of 2023 point to a systemic failure at all levels, not personal mistakes. The failure is at the level of intelligence warning, the military response to the attack, and even the actions of Israel’s political leadership.

An Intelligence and Military Failure

In 1973, the intelligence-gathering system was working well, and Egypt’s war intentions were known. Thousands of reports from observations along the Suez Canal spoke of the Egyptian preparations. The wireless transmissions that were issued testified to preparation for war in the Egyptian army. All this did not translate into a warning of war, due to the failed performance of some senior officers in the Israeli Military Intelligence (IMI), who stuck to their preconceived notions until the last moment.

In 2023, the failure is systemic. It involves both the level of collection and at the level of assessment. It relates both to the IMI and the Israel Security Agency (ISA). It has already become clear that the intelligence collection mechanisms failed to detect large-scale preparations for an all-out attack from the Gaza Strip. A massive intelligence system failed to detect the preparatory actions of the assailing forces.

When the perceived enemy is Palestinian civilians and when Israel Defense Forces (IDF) soldiers spend their time guarding settlements and worshipers, instead of engaging in hard training, the result is catastrophic. On October 7, we witnessed the operations of an army whose main mission is occupation. Given what we saw on that day, namely more than 1,000 civilian and military casualties and approximately 150 kidnapped Israelis, it is not clear how this army will be able to face the upcoming challenges in this war. The need for the professionalism and resilience of the IDF, which was there in 1973, continues to exist.

A Political Failure

The comparison between the political leadership of 1973 and 2023 is also discouraging. Back then, the root of the failure was that the intelligence information the leadership received from Eli Zeira, the director of IMI, who was the nation’s most senior intelligence officer, was distorted and false. It is now understood that the IMI’s assessments were based on the concept of reassuring the political leadership. Yet, Prime Minister Golda Meir and Minister of Defense Moshe Dayan were challenged after the war, and were eventually removed from their positions. However, they acted responsibly.

In contrast, there is not much to say about Israel’s current political leadership. It suffices to look at the composition of the Security Cabinet and the first leaks that have already begun to emanate from it, or at the surge of slander that members of the governing coalition have begun to heap on the finest of the IDF’s officers. It is nothing short of a disgrace and a disaster.

This war has just begun. It is still too early to draw conclusions. But we can examine the conclusions from the Yom Kippur War and assess their relevance to today. When Israeli Prime Minister Benjamin Netanyahu talks about revenge, it is advisable to remember those lessons. The conflict with the Palestinians is long and bitter. They will not give up their ambition for their state. It is now time to comprehend the full cost of the continuation of the conflict.

► Author: Avner Barnea | Date: 11 October 2023 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Alleged Israeli spies with Russian citizenship arrested in Lebanon

Rafic Hariri International Airport Beirut LebanonLAST WEEK, LEBANON’S GENERAL Security Directorate charged two Russian citizens with spying for Israel. The two Russians, who appear to be legally married to each other, were detained by authorities at Beirut’s Rafic Hariri International Airport as they were attempting to leave the country. The detentions were reported by the Lebanese newspaper Al-Akhbar, which is affiliated with the Lebanese militant group Hezbollah.

According to the Al-Akhbar report, one of the suspects admitted that he had been recently recruited into Israeli intelligence. He also reportedly admitted that, as part of his espionage activities, he received maps of sites and instructions about gatherings at facilities in Lebanon belonging to the Hezbollah organization. He added that he had been instructed to access, inspect and, if possible, photograph these facilities. He also reportedly admitted that he had visited southern Lebanon and entered Hamas-controlled areas of southern Beirut, where he had collected data and verified it against the information available to his handlers.

The report added that the suspect’s wife, who was also arrested, admitted under interrogation that she was aware of her husband’s work and that she had assisted him in his tasks. According to the report the General Security Directorate had suspected the Russian citizen, because he had traveled in southern Lebanon several times. Lebanese authorities were able to track his movements and connections, eventually tracing his place of residence. He was arrested along with his wife soon after being notified by his handlers that he should leave the country immediately.

Al-Akhbar added that, prior to the arrest, the General Security Directorate had informed the Russian Embassy in Beirut of its intention to arrest the Russian citizens. The agency’s Director, Elias Elbisri, said following the arrest: “A spy ring for the benefit of the Israeli enemy was foiled at the Beirut airport, consisting of two people who tried to leave Lebanon”. According to Elbisri, “we carried out the necessary investigations; this cell posed a threat to Lebanon”.

Israeli authorities did not respond to news about the incident. It should be noted that, if Russian citizens were indeed recruited and employed by Israeli intelligence, this development could further-damage the relationship between Israel and Russia, which is already fragile due to ongoing developments in Syria and Ukraine. Israel regularly launches attacks on Iranian facilities and equipment in Syria —a Russian ally. Israel is also believed to provide security assistance to Ukraine, which is engaged in a bloody war over territory with Russia.

In recent days, there have been leaks in Israel that an intense debate took place in the Israeli Security Cabinet, following the rise in Palestinian acts of terrorism in Israel, which, according to Israeli security agencies, are guided by Hezbollah and Hamas. As a result, Hamas operatives in the Gaza Strip are taking protective actions, fearing the renewal of targeted killings by Israeli forces. Salah al-Aruri, commander of Hamas’ Izz ad-Din al-Qassam Brigades, who is directing his forces against Israel from abroad, could also be a target for the Israeli intelligence community.

Author: Avner Barnea | Date: 04 September 2023 | Permalink

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).

Probing the intelligence failure behind the assassination of Israeli PM Yitzchak Rabin

Rabin ArafatLAST WEEK, THE CHAIRMAN of the Israeli Religious Zionist Party, Bezalel Smotrich, who will soon be appointed as a cabinet minister, alleged that the Israel Security Agency (ISA) encouraged the killer of the late Israeli Prime Minister, Yitzhak Rabin. Smotrich’s allegation shocked many Israelis, because of the unfortunate timing —it was uttered close to the annual Remembrance Day for Prime Minister Rabin, who was assassinated by radical rightwing activist Yigal Amir 27 years ago. But also because of the unacceptable content, which echoes conspiracy theories that have accompanied Rabin’s assassination for many years. To counter these conspiracy theories, it is fitting to discuss the failure to defend Rabin that did occur under the responsibility of the ISA.

The failure that caused Rabin’s assassination was investigated by a National Inquiry Commission (known as the Shamgar Commission), which found the ISA responsible. In fact, it was deemed a double failure: the first by the personnel of the VIP Security Unit of the ISA, and the second by the intelligence personnel of the ISA, whose job it was to thwart in advance murderous intentions by extreme rightwing elements in Israel. The intelligence failure was not investigated in depth by the Shamgar Committee. It dealt mainly with the security failure and only partially with the intelligence failure. Its investigation focused on the activities of ISA agent Avishi Raviv (code name CHAMPAGNE) who was tasked by the ISA to infiltrate extreme rightwing groups. The Committee did not ask: could the ISA’s intelligence have prevented the murder?

It is also possible to ask: why was the mandate of the Shamgar Committee limited to investigating the area of security, and not intelligence? And why did its members refrain from extending their investigation to the issue of the intelligence failure? There are no answers to this question, even in the autobiographical book of the Committee’s chairman, the late Supreme Court Chief Justice Meir Shamgar.

A Key Piece of Intelligence

Smotrich referred to agent Raviv, who was indeed run in a deficient and unprofessional manner. Yet no malicious intentions can be attributed to the ISA. In any case, Raviv’s defense attorney convinced the court that Raviv did not know about the assassin’s intentions before the murder. The key piece of intelligence, which the ISA had received six months before Rabin’s murder, regarding Amir’s intentions, was handled extremely poorly: an asset of the IDF Central Command’s intelligence department told his commander that he had heard “a small, rotund and armed Yemeni” speaking at a bus stop about his intention to assassinate Rabin. The intelligence was immediately passed on to the head of the appropriate department in the ISA. Unfortunately, however, instead of the source being interrogated by trained ISA personnel, a police investigation was conducted that did not reveal any significant additional information. Read more of this post

Israel Security Agency uses Facebook to reach out to young Palestinians – report

Israeli West Bank barrier

AN ARTICLE PUBLISHED LAST month in one of Israel’s leading newspapers, Haaretz, shed light on how the Israel Security Agency (ISA) is using Facebook to combat militant groups in the Palestinian occupied territories, namely the West Bank and the Gaza Strip. According to the article’s author, Amira Hess, the ISA operates about 35 Arabic-language profile pages on Facebook, which are accessible in the various Palestinian areas under Israeli occupation.

ISA case officers (agent handlers) with Arabic monikers are in charge of various regions. For example, the officer in charge of the Hebron area is known as “Captain Eid”, the officer in charge of the Al-Amari refugee camp is known as “Captain Zaker”, and so on. Every Facebook profile page has a telephone number for users to send messages using WhatsApp. In addition, a general Facebook page of the ISA was opened under the heading in Arabic, “Badna Naish” (“Want to Live” in Arabic).

The transition to using Facebook pages is in the spirit of the times, and reflects the fact that many younger Palestinians receive their daily news through social networks, and not through traditional media, such as radio or television. The purpose of the ISA’s open-referral method using Facebook is to talk to the Palestinian population directly, and especially to the younger generation, who is very active on social networks. This also allows social media users to pass on security information to thwart terrorist attacks without disclosing their identity. The Facebook pages also serve the ISA as a tool for recruiting Palestinians who are willing to help Israel.

Additionally, the ISA uses Facebook’s pages to warn Palestinians who plan terrorist acts before they go into action. Here are some examples of the use of Facebook’s pages: In March of this year, an ISA case officer using the moniker “Captain Eid” wrote on his Facebook page covering the Hebron area that he called several masked men who fired shots in the air while welcoming the released terrorist Mahmoud Hushia, and warned them that their identities were known. “In their deeds, they will be punished. Please stay away from unnecessary problems”, wrote Captain Eid. Read more of this post

Book review of “We Never Expected That” by Avner Barnea

Barnea We Never Expected ThatIN HIS NEW BOOK, We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books), Dr. Avner Barnea has coined two new terms in the field of strategic surprise. One is diffused surprise and the other is concentrated surprise, two terms that help us to better understand why intelligence failures occur. In a diffused surprise there is difficulty in identifying the intelligence target and therefore the chance of a surprise increases; while in a concentrated surprise the intelligence target is usually a recognized organization. At the same time, the mistake lies in the assessment of the target’s abilities and intentions.

To illustrate the difference between the types of strategic surprises in the two areas, the author analyzes these types of surprises through a discussion of four test cases. Two of them are from the field of national intelligence and two from the field of competitive intelligence. In the field of national intelligence, Barnea analyzes the surprise of the outbreak of the First Intifada (Palestinian uprising) in 1987 and the surprise of the attacks of September 11, 2001. The first Intifada was a strategic surprise for the State of Israel and broke out as a result of a popular uprising. Therefore Barnea defines it as a diffused surprise. The September 11 terror attack is defined by Barnea as a concentrated surprise, since the terrorist organization, al-Qaeda, which was known to American intelligence, initiated and carried out the terrorist attack. One of the reasons for the surprise was that the American intelligence agencies did not properly assess al Qaeda’s intentions and capabilities, nor did they share the intelligence information that had accumulated.

In competitive intelligence and the business world, units within an organization share intelligence information. One of the lessons of the September 11 surprise in the United States is that intelligence information needs to be shared between the various intelligence organizations. The test cases that Barnea discusses in the field of competitive intelligence include the process of deterioration of the IBM Corporation that almost led to its demise in 1993. This is a classic case of concentrated surprise. IBM’s board  of directors did not internalize the processes and transformations in the field of computer hardware, while competing companies like Dell, Toshiba, and others were aware of the changing needs of customers in this field and also offered customers appropriate solutions. As a result of this failure of a concentrated surprise, IBM’s revenue fell sharply and the company almost declared bankruptcy. The new CEO of IBM, who took office during the crisis, has since adapted the company to changes in the competitive environment. Read more of this post

Analysis: Counterintelligence dimensions of the Gilboa prison break in Israel

Gilboa Prison break

EARLIER IN SEPTEMBER, FIVE members of Palestinian Islamic Jihad and one member of Fatah escaped from the Gilboa Prison in Israel, by digging a tunnel under the prison walls. The escape was a dramatic surprise and caused wonder in the Israeli defense establishment, since the Gilboa Prison is one of the most secure prisons in the country. The Israeli police, together with the Israeli Defense Forces (IDF) and the Israeli Security Service (ISA), immediately began an intense pursuit. About five days later, four of the six men were arrested inside Israel’s borders, after they asked for assistance from Israeli Arabs, who reported them to the Police. The remaining two were arrested a week later in the city of Jenin in the Occupied Territories.

The initial investigation revealed serious misconduct in the Israel Prison Service. Following these findings, the Israeli government decided to establish a state inquiry commission headed by a judge, in order to investigate the prison break and the conduct of the Prison Service. There are already indicators showing a lack of intelligence before and after the prison break.

The Israel Prison Service has a large intelligence unit, whose main purpose is to prevent 6,500 Palestinian prisoners from escaping. In the nine months during which the tunnel was excavated, the Israel Prison Service’s intelligence unit had no information about this activity. Throughout that time, there were various indications that suspicious activity was taking place in the prison, such as blockages of the prison’s sewer pipe with sand. Also, after the six prisoners got out of the prison walls, a system of cameras and sensors did give various signals, but these failed to get the attention of the guards. Serious endemic problems have been found in the intelligence unit, which include its senior director. This individual was allegedly appointed despite having no experience in intelligence and having taken no courses on the subject. Additionally, it is alleged that he does not speak Arabic and is not acquainted with Palestinian culture and outlook.

The second intelligence issue relates to intelligence collection after the prison break. Although some of the most advanced collection tools and significant search resources were used to locate the fugitives, the information that eventually led to their capture came from human intelligence (HUMINT) —namely Israeli Arab citizens, whom the escapees met by chance and asked for help. These Israeli Arabs have demonstrated, contrary to the opinion of right-wing political elements in Israel, their loyalty to the state. Two of the fugitives managed to cross the security fence between Israel and the Occupied Territories and reached the city of Jenin. It then took only a short time for them to be caught, as the ISA has a highly efficient HUMINT system there. Additionally, the two escapees made serious errors, such as when one of them called his father on a cell phone.

Although all six fugitives were captured, they are now considered heroes on the Palestinian street, not just among Islamic Jihad and Hamas supporters.

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA).

Author: Avner Barnea | Date: 24 September 2021 | Permalink

Analysis: The mysterious case of IDF ‘Officer X’ who died in an Israeli prison

Aviv Kochavi

The State of Israel has been in turmoil for several weeks, after it became known that an outstanding officer in one of the elite technological units of the Israel Defense Forces (IDF) Intelligence Division (Israel Military Intelligence, or IMI) was found dead while in custody in a military prison. He had been serving an eight-month sentence on suspicion of causing serious security damage to a critical intelligence technological system. The IDF’s chief of staff, Major General Aviv Kochavi (pictured), said in relation to the case: “The officer from the IMI committed very serious offenses. He committed them on purpose, for reasons I cannot describe. He almost [revealed] a big secret and we stopped it in the [last] minute”.

After the officer’s death, it was revealed by the IDF that his arrest was not a case of treason, or espionage and that he acted for personal, rather than for ideological, nationalistic or financial motives. Following public pressure about IDF’s handling of the matter and the unclear circumstances of the officer’s death, the IDF has provided some more details.

Officer X, who, according to an American website was named Tomer Aiges, was a 25-year-old captain with three honorary awards by the IMI. He had graduated from high school while simultaneously receiving a BSc in computer sciences at the age of 18. Before enlisting in the IDF, he worked in several hi-tech companies in Israel. People who worked with him there testified that he was a young man with extraordinary technical abilities, which is why he was recruited to the technology unit of the IMI.

There are two main issues of concern among the Israeli public. One is how the officer was held in custody for a long time without being brought to trial, even though a serious indictment —the details of which are not known— was filed against him, and when no one except his parents knew about it. To the young man’s acquaintances it seemed that he had mysteriously disappeared. What is more, much of his page on Facebook was deleted and no further updates appeared following his arrest. It was reported that during his arrest, there was a process of criminal mediation, in which the State of Israel sought to sentence him to ten years in prison.

The second problematic issue concerns the circumstances of his death. There are many questions about to how he could have died when his detention cell was under non-stop surveillance by closed-circuit cameras. Further questions remain as to why the investigation into the circumstances of his death has yet to be completed. There have been demands by Israeli former intelligence officers to hand over the investigation to a civilian inquiry committee headed by a Supreme Court judge, as there is grave concern that the IDF could be hiding information that could demonstrate it was negligent in protecting the officer’s life.

The publication of additional details about this case is subject to a strict ban by the Israeli military censorship —it should be noted that Israel is the only Western country that exercises security censorship. The Israeli public is eagerly awaiting the publication of further details about the circumstances of the death of the intelligence officer, Officer X.

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA).

Author: Avner Barnea | Date: 18 June 2021 | Permalink

Operation Guardian of the Walls: Israel’s double intelligence failure

Lod Israel

For several days now, a war has been going on between the State of Israel and the Hamas organization that controls the Gaza Strip. The confrontation began after unrest broke out among Palestinians in Judea and Samaria, who raised allegations of Israeli damage to the Temple Mount and the Al-Aqsa Mosque. In firing missiles at Israel, Hamas tries to portray itself as protecting the sanctuaries of Islam in Jerusalem. In doing so, it seeks to strengthen its political position in Judea and Samaria against the Palestinian Liberation Organization (PLO), which is leading the Palestinian Authority. Since then, Israel has been using airstrikes against targets in Gaza, while Hamas has been firing hundreds of missiles at Israel daily. Israel is desperately trying to undermine Hamas’ military and operational capabilities, including armaments factories, while also eliminating senior commanders of the organization.

Hamas’ missile attacks managed to surprise Israel. Israeli intelligence (the Israeli Military Intelligence, known as IMI, and the Israeli Security Agency, ISA) previously estimated that Hamas’ goal was to maintain the status quo, and was not ready to initiate attacks against Israel. Not only did Israeli intelligence err in assessing Hamas’ intentions, but Hamas Q Quotesurprised observers with its range of weapons, such as long-range missiles with a reach that is in excess of 150 miles. This constitutes a strategic surprise for Israel. So far (May 13, 2021), Hamas has fired about 1,500 missiles at Israel, most of which have been intercepted by Israel’s air defense system called the Iron Dome.

At the same time, extensive riots broke out within Israel between Palestinian Israeli Arabs and Israeli far-right groups. The attacks have spread throughout the country, and the Israeli police appear unable to control them. The ISA is responsible for monitoring terrorism-related developments in the area of political subversion, including assessing the intentions of Israeli Arabs and the level of threat posed by these intentions. It appears that the ISA, was completely surprised by recent developments. The spontaneous mobilization of Israeli Arabs stems from fears that Israel intends to harm the Temple Mount and the Al-Aqsa Mosque. It is also a form of identification with their brethren in the Gaza Strip. At present, the government of Israel has not managed to restrain the mobilization of the Israeli Arabs.

In conclusion, Israeli intelligence demonstrates two blind spots. One concerns Hamas’ intentions and offensive capabilities. The other concerns misreading the intentions and degree of threat to public order in Israel by Israeli Arabs. This is why the military clash between Israel and Hamas, as well as the riots by Israeli Arabs, have not yet ended.

Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA).

Author: Avner Barnea | Date: 14 May 2021 | Permalink