FBI files espionage charges against California man who allegedly spied for China

Xuehua Edward PengThe United States has pressed espionage charges against a naturalized American citizen who operated as a courier for Chinese intelligence while working as a tour operator in California. On Monday federal prosecutors in San Francisco filed espionage charges against Xuehua “Edward” Peng, a 56-year-old Chinese-born American citizen. Peng, a trained mechanical engineer, reportedly entered the United States in June 2001 on a temporary visa. In 2012 he became a naturalized American citizen. By that time he was working for US Tour and Travel, an independent tour operator in California.

On Friday, officers with the Federal Bureau of Investigation arrested Peng at his home in Hayward, California, and charged him with spying on behalf of the Ministry of State Security (MSS), which is China’s primary external intelligence agency. At a press conference held on Monday, David Anderson, US Attorney for the Northern District of California, said that Peng began working for the MSS in June 2015 and continued to do so until June of 2018. Throughout that time, Peng participated in at least six dead drops on behalf of the MSS, said the FBI. But he was unaware that the agent on the other end of the dead drop was in fact an FBI informant, who had lured Peng and the MSS into an elaborate sting operation. The informant is referred to in the indictment as “the source”. The FBI said it paid the informant nearly $200,000 to facilitate the sting operation.

Most of the dead drops took place at a hotel in Newark, California. Peng would book a room in the hotel using a popular online booking service. He would check in and go to his hotel room, where he would hide envelopes containing as much as $20,000 in cash. He would then leave the room key at the front desk for his contact to pick up. The contact (the FBI informant) would pick up the key and the cash, and leave memory sticks with classified US government information for Peng to pick up. Peng would then travel to China to deliver the classified information to the MSS.

Unbeknownst to Peng, the FBI was monitoring him all along, and managed to secretly tape his alleged espionage activities. The surveillance footage is now part of the federal affidavit that was unsealed on Monday. Moreover, the FBI appears to have given Peng classified information that was approved for the purposes of the counterespionage operation against him. It is not known whether the classified information was real, deceptive, or a mixture of the two. It is worth noting that Peng is not a foreign diplomat and is therefore not subject to the rules of diplomatic immunity. He now faces a maximum of 10 years in prison and a fine of up to $250,000 if convicted.

Author: Joseph Fitsanakis | Date: 01 October 2019 | Permalink

Russia fired officials over Smolenkov defection, filed INTERPOL search request

INTERPOLThe Russian government reportedly fired a number of officials over the defection of a senior Kremlin aide, who alleged worked as an American spy. Meanwhile, Moscow has filed a search request with INTERPOL about the alleged defector’s whereabouts. News of the defection was reported on September 9 by the American news network CNN. The network alleged that the man —which it did not name— was exfiltrated from Russia in 2017 by the United States Central Intelligence Agency, over fears about his life. A subsequent report in the Russian daily newspaper Kommersant identified the alleged defector as Oleg Smolenkov, 50, and said that he disappeared along with his wife and three children in the summer of 2017 while on holiday in Montenegro.

On September 11, the Reuters news agency revealed that Smolenkov was a career diplomat who served as senior aide to Yuri Ushakov, Russia’s former ambassador to the United States and senior international affairs advisor to Russian President Vladimir Putin. But the Kremlin disputes claims that Smolenkov was a highly placed official or that he could have been in possession of damaging classified intelligence.

According to a new report from Russia’s InterFax news agency, the Kremlin disciplined a number of Russian officials for permitting Smolenkov and his family to travel to Montenegro. The disciplinary action was taken soon after Smolenkov’s disappearance and led to a number of firings, said InterFax, citing anonymous government sources. In the summer of 2016, the Kremlin had issued a travel ban for Montenegro, which barred government employees from traveling there, due to the deteriorating relations between Moscow and the former Yugoslav Republic. Montenegrin authorities had previously claimed that Russia tried to stage a coup and planned to kill the country’s prime minister. According to InterFax, an investigation by “the relevant law enforcement agencies” concluded that those officials who had allowed the Smolenkovs to travel to Montenegro had “violated the ban”. They were therefore “disciplined and [some] were fired”, said the anonymous source.

Meanwhile it was reported on Friday that the Russian Ministry of Foreign Affairs filed a search request for Smolenkov and his family with INTERPOL, the international agency that facilitates worldwide cooperation between national police organizations. When asked about it by Western news media, a Russian government spokeswoman said that Russia did what any other country would do in this situation: it contacted INTERPOL with “questions regarding the disappearance of […] a citizen of Russia on the territory of a foreign state along with his family […] and his presence on the territory of the United States”, said the spokeswoman.

Author: Joseph Fitsanakis | Date: 16 September 2019 | Permalink

CIA denies Trump’s mishandling led to alleged exfiltration of senior Russian asset

Trump CIA - JFThe United States Central Intelligence Agency has questioned the accuracy of a media report, which claimed that “repeated mishandling” of intelligence by President Donald Trump resulted in the exfiltration of a high-level source from Russia. According to the American news network CNN, the CIA carried out the exfiltration operation in 2017. Despite the success of the operation, the removal of the asset has left the US without this high-level source at a time when it is most needed, said CNN. The network cited “a person directly involved in the discussions” to exfiltrate the asset, but said it was withholding key details about the case in order to “reduce the risk of the person’s identification”.

According to CNN, the CIA asset was so highly placed inside the Kremlin that the US had “no equal alternative” inside the Russian government. The asset was in a position to provide “both insight and information” on Russia’s secretive President, Vladimir Putin. But by 2016, the sheer length of the asset’s cooperation with the CIA had caused some intelligence officials at Langley to consider exfiltrating him from Russia. Typically agents-in-place have short careers; they are either captured by their adversaries or are exfiltrated once their handlers start to believe that they are burned out or that their life may be in danger. But exfiltration operations in so-called “denied areas” —regions or countries with formidable counterintelligence resources that make it difficult for the CIA to operate there— are rare.

The CNN report claims that the decision to exfiltrate the high-level source was taken after a May 2017 meeting between Trump and Putin, with the participation of senior American and Russian officials. The latter included Foreign Minister Sergei Lavrov and then-Ambassador to Washington Sergey Kislyak. Citing an American “former senior intelligence official”, CNN alleges that Trump “repeatedly mishandled classified intelligence” at that meeting, which could have led to the exposure of the CIA’s asset. At that time, the CIA decided that it was time to exfiltrate the asset and proceeded to do so successfully.

But the CIA disputed the accuracy of CNN’s story. The agency’s Director of Public Affairs, Brittany Bramell, dismissed what she called “CNN’s narrative” as “inaccurate”. She added that the agency’s judgements about exfiltrations of agents are “life-or-death decisions” that are based solely on “objective analysis and sound collection”, not on “misguided speculation that the President [mishandled] our nation’s most sensitive intelligence —which he has access to each and every day”. CNN said on Monday that Trump and “a small number of senior officials” were told about the exfiltration in advance. The news network also said that it was not privy to details about the extraction operation or about the current whereabouts of the exfiltrated asset.

Author: Joseph Fitsanakis | Date: 10 September 2019 | Permalink

Threat from espionage is bigger than terrorism, says Australia’s spy chief

Duncan LewisThe director of Australia’s main national security agency has warned in a public speech that the threat from espionage —including cyber espionage— is greater than terrorism, and poses an “existential” danger to established states. Duncan Lewis was appointed director of the Australian Security Intelligence Organisation (ASIO) in 2014, having already served for more than four decades in the Australian military and civilian government sectors. On Wednesday, Lewis gave a rare public address at the Lowy Institute in Sydney, ahead of his retirement from government service later this month.

The ASIO director said in his speech that terrorism poses “a terrible risk” and should be seen as “a very serious matter”. On the other hand, “terrorism has never been an existential threat to established states”, said Lewis. Additionally the risk from the current wave of Salafi-Jihadist terrorism has “plateaued” and should not be expected to increase drastically, he noted. On the other hand, the threat of foreign espionage “is ultimately an existential threat to the state, or it can be an existential threat to the state”, added Lewis. The ASIO director described espionage and foreign-influence activities as “typically quiet, insidious and with a long tail”. Thus, “unlike the immediacy of terrorism incidents”, the harmful effects of espionage may not appear for many years or even decades after the initial activity has been carried out, he said.

Additionally, said Lewis, Australia’s “middle power status” and close alliances with Western countries make it a major target for state-sponsored human and cyber espionage attacks. Adversary nations see Australia as “a rich target”, he said, and launched espionage operations against it daily. As a result, foreign intelligence operations against Australia are “on a growth path” and are taking place on an “unprecedented” scale and scope, according to Lewis. Such operations include “covert attempts to influence and shape the views of the [Australian] public, media, government and diaspora communities, both within Australia and overseas”, said Lewis, adding that they take place “every day”.

The espionage threat to Australia does not come from “one particular nation”, said the AFIO director, although some nations tend to display more “intent, sophistication and commitment” than others. Australia is obligated to resist against these threats by continuing to develop its counter-espionage capabilities and finding innovative and effective ways to detect and defend against foreign interference, Lewis said at the conclusion of his talk.

Author: Joseph Fitsanakis | Date: 05 September 2019 | Permalink

Analysis: Iran’s energy sector is now a high-stakes espionage target

Iran Petroleum Oil MinistryThe state-owned energy sector of Iran, one of the world’s most lucrative, has become a major target of international espionage since the imposition of new sanctions by the United States this year. The purpose of Washington’s sanctions is to limit the Islamic Republic’s ability to export energy, and by doing so end the country’s reliance on its primary source of income. It is estimated that Tehran’s energy exports have fallen by about 80 percent during the past year, and may continue to fall if the US has its way. This means that American and Iranian intelligence agencies are currently engaged in an intense war of espionage that concentrates on what remains of Iran’s oil exports. Iran continues to entice international buyers by selling energy at below-market prices, while sales are facilitated through the use of throwaway bank accounts that are difficult to trace. Exports are then carefully smuggled into overseas destinations through a variety of means.

In an article published last week, The New York Times’ Farnaz Fassihi explains that every snippet of information about Iran’s oil industry has now become “a prized geopolitical weapon” in a “a high-stakes global game of espionage and counterespionage”. Fassihi quotes a recent statement by Iran’s Minister of Petroleum Bijan Zanganeh that “information about Iran’s oil exports is war information”. That includes information on how Iran manages to deliver its exports abroad and how it gets paid for doing so. Once the US tightened its sanctions on Tehran, Iranian energy officials began to suspect that most inquiries to purchase oil were from foreign spies in search of information on the methods of transaction, writes Fassihi. So the Ministry of Petroleum stopped allowing thousands of freelance energy brokers to mediate between it and buyers. It proceeded to concentrate all transactions into the hands of fewer than five vetted individuals with prior tenure in the Iranian Revolutionary Guards Corps and other vetted government agencies. It also began to train Ministry officials on security and counterespionage protocols.

When the Iranians made it difficult to access information through the Ministry of Petroleum, foreign spy agencies changed their tactics, writes Fassihi. They used foreign academic researchers, including PhD students, who offered payments in hard cash for information on Iranian oil export methods that would help them in their research. Others descended on Tehran offering visas to the US, alcohol, prostitutes, and cash payments ranging from $100,000 to over $1 million in exchange for intelligence on the Iranian energy export sector. There is an atmosphere of paranoia in the Iranian capital, writes Fassihi, and the process of purchasing oil from Iran resembles a Hollywood spy thriller. Representatives of foreign buyers are asked to come to Tehran in person and are regularly required to switch hotels in the middle of the night. Additionally, once a transaction is agreed upon, the buyer’s representative is required to stay at a Petroleum Ministry safe house until the funds are transferred into Iranian government coffers. After that, the representative is allowed to leave, writes Fassihi.

Author: Joseph Fitsanakis | Date: 13 August 2019 | Permalink

Austria issues international arrest warrant for alleged Russian spy

Igor Egorovich ZaytsevThe Austrian government has issued an international arrest warrant for a Russian man who allegedly recruited a retired colonel in the Austrian Federal Army to spy for Moscow. The arrest warrant was issued on Tuesday by the public prosecutor’s office in the city of Salzburg. It identifies the Russian man as Igor Egorovich Zaytsev. Austrian officials allege that the Moscow-born Zaytsev is in fact an intelligence officer for the Main Directorate of the General Staff of the Russian Armed Forces. Known as GRU, the organization is Russia’s primary military-intelligence agency.

In an accompanying press statement issued on Tuesday, the Austrian Ministry of the Interior said that Zaytsev had facilitated the “betrayal of state secrets” and that his actions had been “to the detriment of the Republic of Austria”. The arrest warrant accuses Zaytsev of having participated in the “intentional disclosure of a military secret”, but does not provide details. However, in a subsequent statement, Austrian police directly linked the search for Zaytsev with an espionage case that was reported in the Austrian media last year. The statement said that Zaytsev is believed to have recruited a man known as “Martin M.” to spy on Austria. This appears to refer to the arrest last November of a 70-year-old colonel in the Austrian Army, who was stationed in Salzburg. He is believed to have spied for Russia from at least 1992 until his arrest. Austrian media reported that the accused spy was believed to have given Russia information on a range of weapons systems used by the Austrian Army and Air Force, as well as the personal details of high-ranking officers in the Austrian Armed Forces.

Soon after the arrest of “Martin M.”, Austrian authorities arrested a second man, identified only as “O.”, who is also suspected on having spied for Russia. According to the Vienna Public Prosecutor’s Office, “O.” was an employee of the Austrian Office for Protection of the Constitution and Counterterrorism, known as BVT. He had been investigated on suspicion of espionage for more than a year prior to his arrest. The man’s arrest took place alongside simultaneous raids at two residential addresses associated with him, according to reports. No further details have been made available since the arrest. It is not known whether Zaytsev’s is also connected with the case of “O.”.

Author: Joseph Fitsanakis | Date: 26 July 2019 | Permalink

Analysis: Did the US Central Intelligence Agency lose 17 spies in Iran?

US embassy IranIf the announcements from Tehran are to be believed, the United States Central Intelligence Agency lost at least 17 spies in Iran in the months leading up to March 2019. According to Iran’s Ministry of Intelligence, the Islamic Republic busted an alleged “CIA network” operating in sensitive private sector companies and government agencies that relate to defense, aerospace and energy. At least some of the 17 alleged spies have reportedly been sentenced to death, though their exact number remains unknown.

Officials in Tehran said on Sunday that all of the purported spies are Iranian nationals and were lured by the CIA with promises of receiving visas to enter America. Others were already in possession of visas and were “blackmailed” to spy for the US in order to have them renewed by the US Department of State, according to Iranian media reports. Visa applicants were allegedly carefully selected based on their work in critical areas such as Iran’s nuclear program or defense procurement.

A government-sanctioned documentary, which aired on Iran’s state owned television on Monday, claimed that the 17 spies did not know each other, but all had been trained independently in clandestine tradecraft. This allegedly included setting up and using secret communications systems, as well as carrying out dead drops without being detected. Dead drops utilized containersQ Quote made to look like rocks, which were located “in parks and other mountainous areas” in Iran and elsewhere in the Middle East, according to Iranian officials. Some of the assets communicated with their handlers while attending science conferences through- out Europe, Africa and Asia.

The Iranian television documentary claimed that the 17 arrests had “dealt a lethal blow to US foreign intelligence”. But US President Donald Trump said in a tweet that Tehran’s allegations were “totally false” and contained “zero truth”, just “more lies and propaganda” from Tehran.

Who is right? To begin with, there is no question that the CIA recruits heavily in Iran, given that the Islamic Republic is one of America’s —indeed the world’s— primary intelligence targets. What is more, since 1979, when Washington lost its embassy in Iran, the CIA have found it more difficult to collect accurate information from inside the energy-rich country. Therefore, the need for dependable assets inside Iran has increased exponentially, and has become even more pressing now, given the importance placed on Iran by Donald Trump. Additionally, Read more of this post

Poland frees on bail former intelligence officer arrested for spying for China

Orange PolskaThe Polish government has authorized the release on bail of a former counterintelligence officer who was charged in January of this year with spying for China. The man has been identified in media reports as Piotr Durbajlo and is believed to have served as deputy director of the Internal Security Agency, Poland’s domestic counterintelligence service. A cyber security expert, Durbajlo also served in Poland’s Office of Electronic Communications with a top security clearance and unrestricted access to classified systems of Poland and the North Atlantic Treaty Organization, of which Poland is a member.

However, at the time of his arrest on January 10, Durbajlo had left government service and was a mid-level executive at Orange Polska. The company operates as the Polish branch of a French multinational telecommunications carrier with sister companies in several European Union countries. Along with Durbajlo, Polish authorities arrested Wang Weijing, a Chinese national who worked for the Chinese telecommunications manufacturer Huawei. Orange Polska is Huawei’s main domestic partner in Poland. Wang reportedly learned Polish at the Beijing Foreign Studies University. In 2006 he was posted by the Chinese Ministry of Foreign Affairs at the Chinese consulate in Gdansk, Poland’s largest Baltic Sea port. In 2011 he left the Foreign Service and joined the Polish office of Huawei. Following his arrest on January 10, he was charged with espionage. Huawei denied it had any role in espionage against the Polish state, but fired Wang nonetheless. Both Wang and Durbajlo have been in pretrial detention since their arrest in January.

On Friday, July 5, Durbajlo’s legal team announced that he would be set free on July 7, on a $31,500 bail that must be paid within 30 days to secure his release. His lawyers explained that the charges against him had not been dropped, but did not explain why he was being released. It is worth noting that Durbajlo’s release on bail was announced during a visit to Poland by a high-level Chinese delegation, aimed at discussing economic and political ties between Warsaw and Beijing. Late on Tuesday it was announced that Wang would remain in pretrial detention for at least three more months.

Author: Joseph Fitsanakis | Date: 10 July 2019 | Permalink

Tunisia suspects espionage after Belarusians are caught with several passports

Sfax TunisiaTunisian authorities are investigating two Belarusian men who were found to be in possession of several forged passports and electronic surveillance equipment. The two men were reportedly arrested on Tuesday in Sfax, Tunisia’s second most populous city, which is located on the Mediterranean coast. It is worth noting that Sfax was also the home of Mohamed Zaouari, the 49-year-old Hamas avition engineer who was shot dead in December 2016 by a group of assailants using gun silencers. Hamas claims that he was Zaouari was killed by Israel’s Mossad intelligence agency.

Tunis Afrique Presse, a private news agency headquartered in Tunis, said on Monday that the two Belarusians arrived in Sfax in early June, and checked into a hotel using Belarusian passports. They reportedly attracted the attention of the hotel staff, because Sfax is not a noted tourist destination and attracts few of the foreigners who visit the North African country. Hotel staff alerted the authorities after the two Belarusians forbade anyone, including hotel cleaning staff, to enter their room. Tunisian security officers then monitored the two Belarusians for two weeks before entering their room and searching their belongings, after receiving permission from their superiors. The search reportedly produced several forged passports from Ukraine, the Maldives and Poland, as well as SIM cards and electronic surveillance equipment. At a press conference in Sfax on Monday, Mourad Turki, a court official, said that the Tunisian Prosecutor’s Office decided to issue an arrest warrant for the two Belarusians. An investigation has been launched, he said.

Tunisia and Belarus do not have active diplomatic relations. There have been several high-level meetings between Tunisian and Belarusian officials in recent years, but diplomatic relations between the two countries have remained stagnant. Belsat TV, a Belarusian news network based in Poland, contacted the Belarusian Ministry of Foreign Affairs but a spokesman refused to comment on the cases of the two men. The United States-based Radio Free Europe was told by a government official in Minsk that the Belarusian government is looking into the matter.

Author: Ian Allen | Date: 04 July 2019 | Permalink

Spy services seeking access to Angela Merkel’s medical file, reports claim

Angela MerkelForeign intelligence agencies are allegedly trying to acquire the medical file of German Chancellor Angela Merkel after she was seen trembling uncontrollably in public twice in as many weeks. Reports about foreign spy interest in Merkel’s health emerged in German and British newspapers last weekend, after the German chancellor was seen trembling during high-level meetings earlier this month. The first incident took place during an official meeting with Ukrainian President Volodymyr Zelensky on June 18. The German Chancellery said Merkel had suffered from dehydration and “felt like herself again after drinking a few cups of water”. But the tremors were back again on June 27 during the German leader’s visit to Japan for the G20 Summit. Reports stated that the chancellor was seen “clutching her arms in a failed attempt to prevent herself shaking” during the ceremonial part of the proceedings. At a press conference afterwards, Merkel told reporters that the trembling had been caused by “psychological stress” and that she was convinced it would “disappear just like it appeared”. But she avoided answering questions about whether she had sought medical attention about the trembling.

On June 30, British newspaper The Sunday Times said that foreign spies were showing interest in finding out Merkel’s medical state. The paper added that “one Western intelligence agency believed that the German leader was suffering from a ‘neurological problem’”, but did not specify the agency or the alleged condition. Two days earlier, on June 28, the German tabloid Bild claimed that foreign intelligence agencies had been detected attempting to gain access to the German leader’s private medical file. The paper said that foreign governments in Europe and beyond were suspicious of Merkel’s health state following her refusal to speak openly about it to the media. Several intelligence agencies were therefore “trying to get their hands on Merkel’s medical records” in an attempt to verify whether her trembling was caused by stress and dehydration, or whether it may denote a deeper neurological cause, it said. The paper added that the German leader’s medical records were kept “in a secure military facility” somewhere in Germany.

There has been intense speculation in the German media in the past four days about whether Chancellor Merkel will be able to stay in power until the end of her final term as leader of the country. In October 2018, the German leader announced that she would not seek reelection as Chancellor once her current term expires in 2021. She is scheduled to be replaced by Annegret Kramp-Karrenbauer, who last year also replaced her as leader of the Christian Democratic Union Party.

Author: Joseph Fitsanakis | Date: 01 July 2019 | Permalink

Iran announces arrest of 16 oil ministry officials for spying for CIA

Iran Petroleum Oil MinistryIranian state media announced on Sunday the arrest of 16 officials in the country’s Ministry of Petroleum, allegedly for sabotaging Iranian energy policy. It is not known whether these arrests are in any way connected with Tehran’s announcement last week that it had dismantled “one of the most complicated” espionage operations by the United States Central Intelligence Agency in several countries. According to the state-owned Fars News Agency, the 16 officials were arrested over the weekend in synchronized pre-dawn raids. All of them had managerial positions in Iran’s oil industry —including in the areas of exploration, production and distribution of Iran’s oil and petrochemical products inside the country as well as abroad.

The report about the latest arrests cited Hossein Ali Haji Deligani, a senior legislator representing the most conservative political wing in the Iranian parliament. Deligani said that the ministry employees “operated under a woman”, whom he did not name. Working in concert, the employees had been “able to influence […] the oil ministry to put off important decisions” and to “make wrong decisions”. These decisions were “in line with the enemies’ goals and against Iran’s national interest”, and ultimately delivered “a blow to the country in the United States economic war against Iran”, said Deligani. He did not elaborate on the topic and did not discuss whether the arrests were linked to the dismantling of an alleged CIA cyber espionage operation, which Iran announced last week.

Sunday’s announcement by the Fars News Agency comes two days after the execution of Jalal Haji Zavar, an employee of Iran’s Aerospace Industries Organization, which operates under the Iranian a unit of the Ministry of Defense. Zavar was executed on Friday after a military court found him guilty of having committed espionage against Iran on behalf of the CIA. Media reports said that unspecified incriminating documents and “spying equipment” were found in Zavar’s home.

Author: Joseph Fitsanakis | Date: 25 June 2019 | Permalink

Israeli officials announce arrest of alleged deep-cover spy for Iran

Thaer Sha'afutIsraeli authorities announced on Thursday the arrest of a deep-cover intelligence operative who allegedly attempted to establish a base for Iranian intelligence in Israel and the West Bank, according to news reports from Israel. Shin Bet, Israel’s domestic security and counterintelligence agency, said it arrested Thaer Sha’afut (pictured), a Jordanian national, on espionage charges. The arrest reportedly occurred in April, but was only announced this week. According to Shin Bet officials, Sha’afut was an accredited deep-cover intelligence operative for the Iranian spy services. He was allegedly was commissioned “to carry out missions that were meant to establish a network in Israel and the West Bank, which would be used for covert operations by the Iranians”.

Israeli officials said Sha’afut received instructions from his Iranian handlers to enter Israeli territory between July and August of 2018. After entering Israel, his goal was “to form business ties” in the West Bank and in Israel proper. He planned to do that, said the Shin Bet, by hiring Shiite Muslims to staff a new factory in Jordan and then use the new venture “as an anchor for future Iranian activities in Israel and the West Bank”. These activities included the eventual recruitment of “spies who would help collect intelligence for Iranian interests”, according to court documents. The Shin Bet said that Sha’afut’s handlers were two Arabic-speaking Iranian intelligence officers based in Lebanon and Syria, who went by the names Abu Sadek and Abu Jaffar. They allegedly provided Shafut with “an encrypted communication device”, which he used to arrange clandestine meetings with them throughout 2018 and 2019.

Sha’afut’s Iranian handlers allegedly planned to use him as a conduit for transferring funds to spies in the West Bank and Israel. They had told Sha’afut that Iranian intelligence would make an initial investment of $500,000 in his factory venture in Jordan and to an import-export business, in order to sustain his base of operations, with more funds to follow. Once the factory was set up, Sha’afut was expected to travel clandestinely to Iran in order to complete his training as a deep-cover case officer. Israeli daily Haaretz said on Thursday that Sha’afut was indicted earlier this month by military prosecutors in Jerusalem for “contact with an enemy country, contact with a hostile organization, and conspiracy to funnel money from an enemy entity”.

Author: Joseph Fitsanakis | Date: 21 June 2019 | Permalink

Iran says it dismantled a ‘complicated’ CIA cyber operation in several countries

Ali ShamkhaniA senior Iranian security official said on Monday that Tehran had dismantled “one of the most complicated” espionage operations by the United States Central Intelligence Agency, leading to “arrests and confessions” of suspects in several countries. The announcement was made by Ali Shamkhani (pictured), secretary of the Supreme National Security Council of Iran, the Islamic Republic’s highest security decision-making body, which is chaired by the country’s president.

Speaking in Tehran to reporters from pro-government news agencies, including IRIB and Fars News, Shamkhani said that Iran had “exposed” what he described as a CIA-run cyber espionage network, which carried out “operations in different countries”. He said the alleged espionage network had been detected by Iranian counterintelligence agencies “some time ago and was dismantled”. Iran’s counterintelligence actions had led to the “identification and arrest of CIA intelligence agents”, said Shamkhani, many of whom had been arrested “in different countries”. The arrests occurred after Iran “shared the information about the exposed network with our allies”, said Shamkhani, which led to the “disclosure and dismantling of a network of CIA officers” as well as the “detention and punishment of several spies”. Shamkhani did not specify the number of people arrested, or in which countries, but appeared to refer to both CIA personnel and local assets. He concluded his remarks by saying that Iran was building a regional alliance “to counter American espionage”. He also urged Iran’s Ministry of Intelligence to release “videos and confessions” relating to the arrests.

Meanwhile, Iranian anti-government groups based abroad alleged on Monday that a senior official in the Islamic Revolutionary Guard Corps was arrested in Tehran for allegedly working for Israel. The unidentified individual is believed to have helped Israel’s Mossad intelligence agency gain access to the archive of the Iranian nuclear program in 2018, and steal an unspecified number of classified documents. It is not known whether this alleged arrest is connected with Shamkhani’s announcement on Monday.

Author: Joseph Fitsanakis | Date: 18 June 2019 | Permalink

North Korean leader’s half-brother worked with CIA before his death, paper claims

Kim Jong-nam murderKim Jong-nam, the half-brother of North Korean leader Kim Jong-un, held regular meetings with American intelligence officers before he was assassinated with VX nerve gas at a busy airport terminal in Malaysia. Two women approached Kim Jong-nam as he was waiting to board a plane at the Kuala Lumpur International Airport on February 13, 2017. The estranged half-brother of the North Korean leader was about to travel to the semi-autonomous Chinese territory of Macau, where he had been living in self-exile since 2007. Soon after his encounter with the two women, Kim collapsed and eventually died from symptoms associated with VX nerve agent inhalation.

But a new book published on Tuesday by a Washington Post reporter, and an article that came out in The Wall Street Journal on the same day, allege that Kim Jong-nam was working with the United States Central Intelligence Agency and was in fact in Malaysia to meet with his American spy hander when he was killed. The Wall Street Journal article said that many details of Kim Jong-nam’s precise relationship with the CIA remain “unclear”. It is doubtful that the late half-brother of the North Korean leader had much of a powerbase in the land of his birth, where few people even knew who he was. So his usefulness in providing the CIA with crucial details about the inner workings of the North Korean regime would have been limited. However, the paper quoted “a person knowledgeable about the matter” as saying that “there was a nexus” between the CIA and Kim. The article also alleges that Kim met with CIA case officers “on multiple occasions”, including during his fateful trip to Malaysia in February of 2017.

In her just-published book The Great Successor, Anna Fifield, a correspondent with The Washington Post, claims that Kim spent a number of days on the island of Langkawi, a well-known resort destination in Malaysia. Security footage at his hotel showed him meeting with “an Asian-looking man [Korean-American, according to The Wall Street Journal] who was reported to be an American intelligence [officer]”. It was one of regular trips Kim took to places like Singapore and Malaysia to meet his spy handlers, according to Fifield, who cites “someone with knowledge of the intelligence”. She adds that, although meeting with this CIA handler may not have necessarily been the sole purpose of Kim’s fateful trip to Malaysia, it was certainly a major reason. Fifield alleges that the backpack Kim was carrying when he was killed at the Kuala Lumpur International Airport was found to contain $120,000 in cash. The Wall Street Journal claims that, in addition to meeting with the CIA, Kim held regular meetings with spy agencies of other countries, including China.

Meanwhile, two South Korean government agencies, the National Intelligence Service and the Ministry of Reunification, said on Tuesday that they were unable to confirm that Kim was indeed an asset of the CIA or any other intelligence agency. They also said that they could not confirm whether Kim had traveled to Malaysia to meet with a CIA case officer at the time of his assassination.

Author: Joseph Fitsanakis | Date: 12 June 2019 | Permalink

Despite spying allegations, African Union deepens ties with Chinese telecoms firm

African UnionDespite allegations in the French press that China has been spying for years on the internal communications of the African Union, the organization appears to be deepening its ties with a leading Chinese telecommunications firm. The allegations surfaced in January of last year in the Paris-based Le Monde Afrique newspaper. The paper claimed in a leading article that African Union technical staff found that the computer servers housed in the organization’s headquarters in Addis Ababa, Ethiopia, were secretly communicating with a server facility in Shanghai, China. The secret communications reportedly took place at the same time every night, namely between midnight and 2 in the morning. According to Le Monde Afrique, the African Union servers forwarded data to the servers in Shanghai from 2012, when the building opened its doors, until early 2017.

Beijing donated $200 million toward the project and hired the state-owned China State Construction Engineering Corporation to build the tower, which was completed in 2012. Since then, the impressive 330 feet, 19-storey skyscraper, with its reflective glass and brown stone exterior, has become the most recognizable feature of Addis Ababa’s skyline. The majority of the building material used to construct the tower was brought to Ethiopia from China. Beijing even paid for the cost of the furniture used in the impressive-looking building. The paper noted that, even though the organization was allegedly notified about the breach by its technical staff in January of 2017, there was no public reaction on record. However, according to Le Monde Afrique, African Union officials took immediate steps to terminate the breach. These included replacing the Chinese-made servers with new servers purchased with African Union funds, without Beijing’s mediation. Additionally, new encryption was installed on the servers, and a service contract with Ethio Telecom, Ethiopia’s state-owned telecommunications service provider, which uses Chinese hardware, has been terminated.

Last week, however, the African Union deepened its ties with Huawei Technologies, the Chinese telecommunications firm that provided all the hardware, as well as much of the software, used in the organization’s headquarters. Last week, at a meeting in the Ethiopian capital, Thomas Kwesi Quartey, deputy chair of the African Union’s Commission signed a memorandum of understanding with Philippe Wang, Huawei’s vice president for North Africa. According to the memorandum, Huawei will increase its provision of hardware and services to the African Union “on a range of technologies”. These range from broadband telecommunications to cloud computing, as well as 5G telecommunications capabilities and artificial intelligence systems. The Chinese firm will also continue to train African Union information technology and telecommunications technicians. Both the African Union and the government of China have denied the Le Monde Afrique allegations.

Author: Joseph Fitsanakis | Date: 07 June 2019 | Permalink