South Korea’s top HUMINT agency probes potentially catastrophic data breach

July 29, 2024 by 1 Comment

North South KoreaIN A HIGHLY UNUSUAL move, authorities in Seoul have publicly acknowledged a data leak that may have resulted in the outing of a number of South Korean undercover human intelligence (HUMINT) operatives abroad. The South Korean Ministry of National Defense said on Sunday it was investigating an alleged link of highly sensitive data belonging to the Korea Defense Intelligence Command (KDIC).

Formed under American tutelage in 1946, KDIC is today considered South Korea’s most secretive intelligence agency. It operates under the Defense Intelligence Agency (DIA), which makes it part of the Ministry of National Defense’s chain of command. Unlike DIA’s civilian counterpart, the National Intelligence Service, KDIC rarely surfaces in unclassified news reporting, and it almost never issues press releases. Its operations primarily involve HUMINT activities, thus making it South Korea’s most active HUMINT-focused agency.

Predictably, KDIC’s primary intelligence target is North Korea. The agency gathers much of its intelligence on the North through an extensive network of undercover officers operating with diplomatic credentials. KDIC also handles non-official cover (NOC) operatives, who are located mostly in Asia. There have been periodic claims in the unclassified literature that some KDIC NOCs have operated inside North Korea at times –though such claims remain speculative.

On Saturday, the Seoul-headquartered Yonhap News Agency alleged that classified information relating to KDIC had been “leaked”. According to Yonhap, the leak included personally identifiable information about KDIC official and non-official cover personnel stationed abroad. The report claimed that the leak was discovered by South Korean authorities a month ago, and that the discovery had resulted in the recall of several KDIC undercover operatives serving overseas “due to concerns over their identities being exposed”.

The Yonhap report claimed that, according to an ongoing probe, the leak may have originated from a personal laptop computer belonging to a civilian KDIC employee. The employee has since claimed that the laptop had been hacked, but some investigators believe the suspect may have “intentionally left the laptop vulnerable to hacking by North Koreans”.

According to an official statement released on Sunday by the Ministry of National Defense, the case is “currently under investigation by military authorities”.

► Author: Joseph Fitsanakis | Date: 29 July 2024 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , , ,

Russia orders 175,000 diplomatic passports, prompting speculation about their use

April 28, 2022 by 2 Comments

Russian foreign affairs ministryTHE RUSSIAN FEDERATION HAS reportedly ordered 175,000 new diplomatic passports to be printed, prompting speculation about their possible use at a time when Western sanctions are affecting Russia’s governing elite. Diplomatic passports are travel documents that are issued to accredited diplomats and government officials, such as foreign ministry envoys and others. Pursuant to the Vienna Convention of Diplomatic Relations, holders of diplomatic passports enjoy diplomatic immunity and are typically subjected to very limited inspections by security personnel when crossing international borders.

On Wednesday, SOTA Vision, a Russian alternative news website and social media network, claimed in a report that the Ministry of Foreign Affairs of the Russian Federation had ordered nearly 175,000 diplomatic passports to be printed, at the cost of over 300 million rubles ($4 million). The report, which was translated into English by the British newspaper The Daily Mail, questioned the need for so many diplomatic passports to be printed. It noted that the Ministry of Foreign Affairs employs no more than 15,000 people, of whom only about a third spend any time abroad, and thus require diplomatic passports.

So what is the reason for the use of so many diplomatic passports? According to SOTA Vision, these may be used by members of the Russian governing and economic elite, as well as their families, to evade Western sanctions on international travel and to avoid arrest when traveling abroad. Since Russia’s invasion of Ukraine in February of this year, Russia has been subjected to the harshest sanctions by Western countries since the end of the Cold War. Additionally, employees of Russian intelligence agencies may use several thousands of these diplomatic passports for their employees to operate abroad under what is known as “official cover”. Such agencies include the Foreign Intelligence Service (SVR), the Federal Security Service (FSB) and the Federal Protective Service (FSO), SOTA Vision noted.

► Author: Joseph Fitsanakis | Date: 28 April 2022 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , ,

Irish officials raise espionage concerns about expansion of Russian embassy in Dublin

February 12, 2021 by 3 Comments

IRELAND’S COUNTERINTELLIGENCE SERVICE HAS launched an investigation into an expansion project at the embassy of Russia in Dublin. According to sources cited by The Times newspaper, the Irish government is concerned that the expansion project is part of a secret plan by Moscow to turn its embassy in Dublin into a major espionage hub in Europe.

The two nations had no diplomatic relations until September 1973, when the Republic of Ireland officially recognized the Soviet Union, and the two countries proceeded to establish embassies at each other’s capitals. Since then, the Russian embassy in Dublin has been located on Orwell Road, in the southern suburb of Rathgar. For at least three decades, the embassy has been considered by Western intelligence a hub of Russian intelligence collection operations in Europe. Some claim that the tranquil environs of the Irish capital, coupled with Ireland’s relatively relaxed counterintelligence posture, have encouraged Moscow to use its Dublin embassy as a support base for espionage activities throughout much of Western Europe.

But the Irish government changed its stance in 2018 when, in a surprising move, it introduced emergency legislation aimed at stopping a previously approved expansion of the Russian embassy complex. The government reportedly feared that the initial plan, which proposed to add 86,000 sq ft of structures to the embassy’s existing 21,000 sq ft of building space, threatened Ireland’s national security. The Russians had little choice but to comply with the restrictions imposed by the Irish government. Now, however, the Irish government is reportedly concerned that Moscow was able to proceed with the establishment of an “intelligence hub”, despite the reduced size of the embassy’s expansion.

According to The Times, the Irish government’s concerns center on a building inside the Russian embassy compound, “whose design appears to incorporate military security features”. Another issue concerns an underground car park built by the Russians at the southern rear of the embassy complex, which can accommodate up to 23 vehicles. Apparently, Irish officials cannot explain why the Russians would go to the added trouble —and expense— of building an underground car park, when there appear to be sufficient car parking spaces above ground inside the embassy compound.

The paper reports that the new review of the Russian embassy compound is being led by the Directorate of Military Intelligence and the National Crime and Security Intelligence Service of the Garda, Ireland’s national police and security service. These two entities are expected to brief the National Security Committee in the coming weeks. Known also as “Cabinet Subcommittee F”, the National Security Committee is Ireland’s highest executive decision-making body, which is led by the prime minister.

► Author: Joseph Fitsanakis | Date: 12 February 2021 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , ,

Analysis: Will the mass expulsion of diplomats affect Russia’s spy capabilities?

March 27, 2018 by 5 Comments

Russian embassy in WashingtonRelations between Russia and much of the West reached a new low on Monday, with the expulsion of over 100 Russian diplomats from two dozen countries around the world. The unprecedented expulsions were publicized on Monday with a series of coordinated announcements issued from nearly every European capital, as well as from Washington, Ottawa and Canberra. By the early hours of Tuesday, the number of Russian diplomatic expulsions had reached 118 —not counting the 23 Russian so-called “undeclared intelligence officers” that were expelled from Britain last week. Further expulsions of Russian diplomats are expected in the coming days.

It is indeed difficult to overstate the significance of this development in the diplomatic and intelligence spheres. Monday’s announcements signified the largest collective expulsion of Russian intelligence personnel (intelligence officers working under diplomatic cover) in history, and is remarkable even by Cold War standards. In the United States, the administration of President Donald Trump expelled no fewer than 60 Russian diplomats and shut down the Russian consulate in Seattle. Such a move would have been viewed as aggressive even for Mr. Trump’s predecessor, Barack Obama, and his Secretary of State Hillary Clinton, who is known for her hardline anti-Russian stance. In Europe, the move to expel dozens of Russian envoys from 23 different countries —most of them European Union members— was a rare act of unity that surprised European observers as much as it did the Russians.

RUSSIA’S ESPIONAGE CAPABILITY

However, in considering the unprecedented number of diplomatic expulsions from an intelligence point of view, the question that arises is, how will these developments affect Russia’s espionage capabilities abroad? If the Kremlin did indeed authorize the attempted assassination of the Russian defector Sergei Skripal, it must be assumed that it expected some kind of reaction from London, possibly in the form of limited diplomatic expulsions. The resulting worldwide wave of expulsions must have caught Russian intelligence planners by surprise. There is little question, therefore, that these are difficult hours for the GRU, Russia’s military-run Main Intelligence Directorate, and the SVR, Russia’s Foreign Intelligence Service. These agencies will be losing as much as two thirds of their official-cover officers in Europe and North America. The last time this happened on such a massive scale was during World War II, as Soviet embassies across Europe were unceremoniously shut down by the advancing Nazi forces. Read more of this post

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , ,

CIA pulled officers from Beijing embassy following OPM database hack

October 1, 2015 by 1 Comment

Office of Personnel ManagementThe Central Intelligence Agency (CIA) pulled a number of officers from the United States embassy in Chinese capital Beijing, after a massive cyber hacking incident compromised an American federal database containing millions of personnel records. Up to 21 million individual files were stolen in June of this year, when hackers broke into the computer system of the US Office of Personnel Management (OPM), which handles applications for security clearances for agencies of the federal government. The breach gave the unidentified hackers access to the names and sensitive personal records of millions of Americans who have filed applications for security clearances —including intelligence officers.

According to sources in the US government, the records of CIA employees were not included in the compromised OPM database. However, that is precisely the problem, according to The Washington Post. The paper said on Wednesday that the compromised OPM records contain the background checks of employees in the US State Department, including those stationed at US embassies or consulates around the world. It follows that US diplomatic personnel stationed abroad whose names do not appear on the compromised OPM list “could be CIA officers”, according to The Post. The majority of CIA officers stationed abroad work under diplomatic cover; they are attached to an embassy or consulate and enjoy diplomatic protection, which is typically invoked if their official cover is blown. However, they still have to present their credentials and be authorized by their host country before they assume their diplomatic post. The CIA hopes that foreign counterintelligence agencies will not be able to distinguish intelligence personnel from actual diplomats.

Although the US has not officially pointed the finger at a particular country or group as being behind the OPM hack, anonymous sources in Washington have identified China as the culprit. If true, The Post’s claim that the CIA pulled several of its officers from the US embassy in Beijing would add more weight to the view that the Chinese intelligence services were behind the cyber theft. The paper quoted anonymous US officials who said that the CIA’s decision to remove its officers from Beijing was directly related to the OPM hack, and it was meant to safeguard their personal security, as well as to protect CIA programs currently underway in China.

► Author: Joseph Fitsanakis | Date: 1 October 2015 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , ,