Russian government cyber spies ‘hid behind Iranian hacker group’

Computer hackingRussian hackers hijacked an Iranian cyber espionage group and used its infrastructure to launch attacks, hoping that their victims would blame Iran, according to British and American intelligence officials. The information, released on Monday, concerns a Russian cyber espionage group termed “Turla” by European cyber security experts.

Turla is believed to operate under the command of Russia’s Federal Security Service (FSB), and has been linked to at least 30 attacks on industry and government facilities since 2017. Since February of 2018, Turla is believed to have successfully carried out cyber espionage operations in 20 different countries. Most of the group’s targets are located in the Middle East, but it has also been connected to cyber espionage operations in the United States and the United Kingdom.

On Monday, officials from Britain’s Government Communications Headquarters (GCHQ) and America’s National Security Agency (NSA) said Turla had hijacked the attack infrastructure of an Iranian cyber espionage group. The group has been named by cyber security researchers as Advanced Persistent Threat (APT) 34, and is thought to carry out operations under the direction of the Iranian government.

The officials said there was no evidence that APT34 was aware that some of its operations had been taken over by Turla. Instead, Russian hackers stealthily hijacked APT34’s command-and-control systems and used its resources —including computers, servers and malicious codes— to attack targets without APT34’s knowledge. They also accessed the computer systems of APT34’s prior targets. In doing so, Turla hackers masqueraded as APT34 operatives, thus resorting to a practice that is commonly referred to as ‘fourth party collection’, according to British and American officials.

The purpose of Monday’s announcement was to raise awareness about state-sponsored computer hacking among industry and government leaders, said the officials. They also wanted to demonstrate the complexity of cyber attack attribution in today’s computer security landscape. However, “we want to send a clear message that even when cyber actors seek to mask their identity, our capabilities will ultimately identify them”, said Paul Chichester, a senior GCHQ official.

► Author: Joseph Fitsanakis | Date: 22 October 2019 | Permalink

Russia preparing to swap imprisoned spies with NATO members, sources claim

LithuaniaThe Russian government is preparing to swap a number of imprisoned spies with at least two member states of the North Atlantic Treaty Organization (NATO), according to reports. The Estonia-based news agency BNS, which is the largest news agency in the Baltics, said on Wednesday that negotiations between Russian and Lithuanian, as well as probably Norwegian, officials were nearing completion.

The alleged spies at the center of the reputed spy swap are said to include Nikolai Filipchenko, who is reportedly an intelligence officer with the Russian Federal Security Service (FSB). Filipchenko was arrested by Lithuanian counterintelligence agents in 2015, allegedly while trying to recruit double agents inside Lithuania. He was charged with using forged identity documents to travel to Lithuania on several occasions between 2011 and 2014. His mission was allegedly to recruit officers in Lithuania’s Department of State Security in order to install listening bugs inside the office of the then-Lithuanian President Dalia Grybauskaite. In 2017, a district court in the Lithuanian capital Vilnius sentenced Filipchenko to 10 years in prison. The alleged Russian spy refused to testify during his trial and reportedly did not reveal any information about himself or his employer. He is believed to be the first FSB intelligence officer to have been convicted of espionage in Lithuania.

BNS reported that the Russians have agreed to exchange Filipchenko for two Lithuanian nationals, Yevgeny Mataitis and Aristidas Tamosaitis. Tamosaitis is serving a 12-year prison sentence in Russia, allegedly for carrying out espionage for the Lithuanian Defense Ministry in 2015. In the following year, a Russian court sentenced Mataitis, a dual Lithuanian-Russian citizen, to 13 years in prison, allegedly for supplying Lithuanian intelligence with classified documents belonging to the Russian government. Lithuanian authorities have refused to comment publicly about Filipchenko and Mataitis, saying that details on the two men are classified. According to BNS, the spy swap may involve two more people, an unnamed Russian national and a Norwegian citizen, who is believed to be Frode Berg, a Norwegian retiree who is serving a 16-year jail sentence in Russia, allegedly for acting as a courier for the Norwegian Intelligence Service.

BNS said on Wednesday that the Lithuanian State Defense Council, which is chaired by the country’s president, had approved the spy exchange, and that Moscow had also agreed to it. On Thursday, however, a spokeswoman for Russia’s Foreign Affairs Ministry said she had “no information on this issue” that she could share with reporters.

► Author: Joseph Fitsanakis | Date: 18 October 2019 | Research credit: E.G. | Permalink

Russia detains American diplomats for traveling to top-secret military site

SeverodvinskRussian authorities detained three American diplomats because they allegedly tried to enter a highly secret weapons testing site in northern Russia, according to reports. The site in question is located near the northern Russian city of Severodvinsk. The city is home to a number of military shipyards and is thus restricted for non-Russians. The latter require a special permit to enter it.

In August of this year, Western media reported on a mysterious explosion that took place in a weapons research site located near Severodvinsk. The explosion allegedly happened during testing of a top-secret prototype rocket engine. Russian authorities revealed that five workers died as a result of the explosion, but denied media reports that the explosion had caused a radiation leak that had affected Severodvinsk. The Russian Ministry of Defense also denied allegations that a large-scale nuclear clean-up operation had been conducted in and around Severodvinsk. At the same time, Russian authorities restricted maritime traffic in the White Sea, on the shores of which Severodvinsk is situated.

On Wednesday, the Russian news agency Interfax reported that three American diplomats had been detained by authorities near Severodvinsk, allegedly because they tried to enter the city without the necessary permits. The diplomats were not named but are believed to be military attachés that serve in the United States embassy in Moscow. Interfax said the three were detained on Monday while onboard a passenger train. They were removed from the train, questioned and eventually released. However, they might still face charges of trying to enter a restricted area without permission.

The United States Department of State issued a statement claiming that the three diplomats “were on official travel and had properly notified Russian authorities of their travel”. A State Department spokesman said on Wednesday that the three diplomats’ travel plans had been authorized by the Russian Ministry of Defense. But authorities in Russia said that the three military attachés had been authorized to travel to the city of Arkhangelsk, which is located approximately 30 miles east of Severodvinsk. “We are quite willing to provide the United States embassy with a map of the Russian Federation”, the Russian statement concluded.

► Author: Joseph Fitsanakis | Date: 17 October 2019 | Permalink

US Special Forces secrets could fall into hands of Russians as Kurds side with Syria

Yekîneyên Antî Teror‎American defense officials with knowledge of Special Operations Forces activities in Syria are concerned that their secrets may fall into the hands of the Russians, as the Kurds switch their allegiance to the Moscow-backed Syrian government. Members of the United States Special Operations Forces and the Central Intelligence Agency (CIA) have had a presence in Kurdish-dominated northern Syria since at least 2012. Following the rise of the Islamic State in 2014, the Americans have worked closely with the Kurds in battling the Islamist group throughout the region.

Throughout that time, US Special Operations Forces have trained members of the Syrian Democratic Forces (SDF), a political and military umbrella of anti-government Syrian groups, which is led by the Kurdish-dominated People’s Protection Unit (YPG) militias. Until recently, the SDF and the YPG were almost exclusively funded, trained and armed by the US through its Special Operations Forces units on the ground in northern Syria. US Special Operations Forces were also behind the creation in 2014 of the SDF’s most feared force, the Anti-Terror Units. Known in Kurdish as Yekîneyên Antî Teror‎, these units have been trained by the US in paramilitary operations and are tasked with targeting Islamic State sleeper cells.

As of this week, however, the SDF and all of its US-trained militias have switched their allegiance to the Russia-backed government of Syrian President Bashar al-Assad. The dramatic move followed the decision of the White House earlier this month to pull its Special Operations Forces troops from norther Syria, effectively allowing the Turkish military to invade the region. According to the American defense news website Military Times, US Pentagon officials are now worried that the SDF may surrender to the Russians a long list of secrets relating to US Special Operations Forces’ “tactics, techniques, procedures, equipment, intelligence gathering and even potentially names of operators”.

One former US defense official told The Military Times that SDF “may be in survival mode and will need to cut deals with bad actors” by surrendering US secrets. Another source described this scenario as “super problematic” and a symptom of the absence of a genuine American strategy in the wider Middle East region. The website also cited US Marines Major Fred Galvin (ret.), who said that Special Operations Forces tend to reveal little about themselves and their capabilities when working with non-US actors. However, this is uncharted territory for them, said Galvin, since “we’ve never had a force completely defect to an opposition like this before”.

► Author: Joseph Fitsanakis | Date: 16 October 2019 | Permalink

Russia has a dedicated spy unit to destabilize Europe, Western officials claim

GRU

Russian intelligence maintains an elite spy unit whose sole goal is to run operations that have the potential to subvert European political and economic systems, according to a new report by The New York Times. The unit is behind a string of intelligence operations in recent years, which range from espionage to disinformation campaigns and even assassinations.

The Times cited “four Western officials” who said that the group is known as Unit 29155 and operates within the Main Directorate of the General Staff of the Russian Armed Forces, commonly known as GRU. It has allegedly been in existence for at least 10 years, but it only recently appeared on the radar of Western intelligence agencies. The latter began to take note of Unit 29155 in 2016, after it was alleged that an elite unit of Russian spies tried to stage a coup in the tiny Balkan country of Montenegro. The former Yugoslav Republic was seeking to join the North Atlantic Treaty Organization at the time. It was claimed that the Russian intelligence operatives carried out a failed attempt to kill its prime minister and instigate a pro-Russian coup.

According to the paper, Western intelligence officials do not have a clear picture of the structure of Unit 29155, nor are they able to predict where it will strike next. But they believe that it consists of a very tightly knit group of no more than 200 intelligence officers and 20 operations officers, led by Major General Andrey V. Averyanov (alias Andrey Overyanov), a hardened veteran of Russia’s Chechen wars. The existence of the unit is so secret that even other GRU operatives are unlikely to have heard of it, said The Times. Members of the unit frequently travel to Europe to carry out sabotage and disinformation campaigns, kill targets, or conduct other forms of what some experts describe as the Kremlin’s hybrid war. They tend to travel on the cheap, in order to economize and avoid attention, said the paper.

The Times said it reached out to the Kremlin with a number of questions about Unit 29155. It received a response from Kremlin spokesman Dmitri S. Peskov, who suggested that the questions be directed instead to Russia’s Defense Ministry. But the ministry did not return any messages.

► Author: Joseph Fitsanakis | Date: 09 October 2019 | Permalink

Iran arrests Russian journalist for espionage in rare spat with key ally Moscow

Yulia YuzikIn a surprising move last week, Iranian authorities arrested a Russian journalist and expert on the Caucasus region, whom they accused of spying for Israel. They later agreed to release her following significant diplomatic pressure from Russia. But the move surprised observers, because Iran rarely acts in ways that have the potential to damage its close relations with Moscow.

The journalist in question is Yulia Yuzik, a 38-year-old reporter with considerable expertise on Russia’s Caucasus region. Her articles on the security situation in the Caucasus have been published in several Russian and Western outlets, including Foreign Policy and GQ. She has also authored a number of books on Islamist militancy in the Russian Caucasus, which have been translated into several foreign languages, such as German, Italian and French.

In 2017, Yuzik spent several months in Iran while working on a number of stories. She returned to Russia before returning to Iran on September 29 of this year, reportedly “on a private trip”. Media reports stated that Yuzik intending to meet a number of Iranian journalists that she worked with back in 2017. However, upon landing at Iran’s Imam Khomeini International Airport, Yuzik had her passport confiscated without explanation, and was forced to enter the country without identity and travel documents. Then, last Thursday she was arrested at her hotel in downtown Tehran by members of the Iranian Revolutionary Guard Corps (IRGC), who apparently broke down the door of her hotel room before arresting her.

There were no news of Yuzik’s whereabouts until the following day, when staff at the Russian embassy in the Iranian capital were contacted by her family. Yuzik’s family said that the IRGC had charged her with collecting intelligence for the Mossad, Israel’s spy service. Russian media reports said that the accusations against Yuzik took Russian diplomats by the surprise, given that Yuzik has no apparent connection to Israel, nor does she have a travel visa to enter that country. She reportedly spent a few days there in 2004 while writing a story about the Israel Defense Forces for Russian newspaper Komsomolskaya Pravda.

Yuzik’s family told the Russian embassy that she had been scheduled to appear in a Tehran court on Saturday. The Russian embassy gave a press briefing to reporters on Friday, saying that the Russian Foreign Ministry had summoned the Iranian ambassador to Moscow to complain about Yuzik’s arrest. Then early on Saturday, Maria Zakharova, a spokeswoman for the Russian Foreign Ministry in Moscow, announced that Yuzik would be released soon and would be allowed to return home to Russia.

The incident has surprised observers, because Russia is one of Iran’s closest international allies. It is therefore highly unusual for Tehran to take any action that might potentially provoke Moscow or otherwise damage its diplomatic relations with the Kremlin.

► Author: Joseph Fitsanakis | Date: 07 October 2019 | Permalink

Gas explosion reported at Russian research facility that houses Ebola and smallpox

Vector RussiaRussian authorities announced on Tuesday that a gas explosion had damaged a section of a medical facility in Siberia that houses live samples of viruses such as Ebola and smallpox, but added that there was no need to declare a biomedical emergency. The explosion reportedly took place on Monday at the State Research Center of Virology and Biotechnology, known as Vector. The six-floor concrete and steel facility is located in the isolated Siberian town of Kotsovo, near the city of Novosibirsk, 600 miles from the Mongolian border.

Vector was founded in 1974 by the Soviet state to study mass infectious agents that could be used to build biological weapons. Today it remains as one of the world’s largest virology research centers, specializing in the treatment of some of the most lethal infectious diseases, such as Ebola, tularemia and swine flu. The Vector facility is believed to be one of two locations in the world that house live samples of the smallpox virus. The Centers for Disease Control and Prevention in the United States city of Atlanta is also believed to house samples of the virus.

According to a statement issued on Tuesday by the Russian state-owned news agency TASS, the Vector facility sustained an explosion on Monday afternoon local time. The explosion was reportedly caused by a gas canister used by workers who were carrying out repairs at a sanitary inspection room located on the fifth floor of the Vector facility. An employee suffered unspecified injuries as a result of the explosion, according to the statement. However, “no work with biological agents was being carried out in the [Vector] building” at the time of the explosion, so there was no need for a state of emergency, according to the statement. Russian media reported on Tuesday that Vector personnel were present on the site and that no biological threat alerts had been issued.

► Author: Ian Allen | Date: 18 September 2019 | Permalink

Russia fired officials over Smolenkov defection, filed INTERPOL search request

INTERPOLThe Russian government reportedly fired a number of officials over the defection of a senior Kremlin aide, who alleged worked as an American spy. Meanwhile, Moscow has filed a search request with INTERPOL about the alleged defector’s whereabouts. News of the defection was reported on September 9 by the American news network CNN. The network alleged that the man —which it did not name— was exfiltrated from Russia in 2017 by the United States Central Intelligence Agency, over fears about his life. A subsequent report in the Russian daily newspaper Kommersant identified the alleged defector as Oleg Smolenkov, 50, and said that he disappeared along with his wife and three children in the summer of 2017 while on holiday in Montenegro.

On September 11, the Reuters news agency revealed that Smolenkov was a career diplomat who served as senior aide to Yuri Ushakov, Russia’s former ambassador to the United States and senior international affairs advisor to Russian President Vladimir Putin. But the Kremlin disputes claims that Smolenkov was a highly placed official or that he could have been in possession of damaging classified intelligence.

According to a new report from Russia’s InterFax news agency, the Kremlin disciplined a number of Russian officials for permitting Smolenkov and his family to travel to Montenegro. The disciplinary action was taken soon after Smolenkov’s disappearance and led to a number of firings, said InterFax, citing anonymous government sources. In the summer of 2016, the Kremlin had issued a travel ban for Montenegro, which barred government employees from traveling there, due to the deteriorating relations between Moscow and the former Yugoslav Republic. Montenegrin authorities had previously claimed that Russia tried to stage a coup and planned to kill the country’s prime minister. According to InterFax, an investigation by “the relevant law enforcement agencies” concluded that those officials who had allowed the Smolenkovs to travel to Montenegro had “violated the ban”. They were therefore “disciplined and [some] were fired”, said the anonymous source.

Meanwhile it was reported on Friday that the Russian Ministry of Foreign Affairs filed a search request for Smolenkov and his family with INTERPOL, the international agency that facilitates worldwide cooperation between national police organizations. When asked about it by Western news media, a Russian government spokeswoman said that Russia did what any other country would do in this situation: it contacted INTERPOL with “questions regarding the disappearance of […] a citizen of Russia on the territory of a foreign state along with his family […] and his presence on the territory of the United States”, said the spokeswoman.

► Author: Joseph Fitsanakis | Date: 16 September 2019 | Permalink

CIA denies Trump’s mishandling led to alleged exfiltration of senior Russian asset

Trump CIA - JFThe United States Central Intelligence Agency has questioned the accuracy of a media report, which claimed that “repeated mishandling” of intelligence by President Donald Trump resulted in the exfiltration of a high-level source from Russia. According to the American news network CNN, the CIA carried out the exfiltration operation in 2017. Despite the success of the operation, the removal of the asset has left the US without this high-level source at a time when it is most needed, said CNN. The network cited “a person directly involved in the discussions” to exfiltrate the asset, but said it was withholding key details about the case in order to “reduce the risk of the person’s identification”.

According to CNN, the CIA asset was so highly placed inside the Kremlin that the US had “no equal alternative” inside the Russian government. The asset was in a position to provide “both insight and information” on Russia’s secretive President, Vladimir Putin. But by 2016, the sheer length of the asset’s cooperation with the CIA had caused some intelligence officials at Langley to consider exfiltrating him from Russia. Typically agents-in-place have short careers; they are either captured by their adversaries or are exfiltrated once their handlers start to believe that they are burned out or that their life may be in danger. But exfiltration operations in so-called “denied areas” —regions or countries with formidable counterintelligence resources that make it difficult for the CIA to operate there— are rare.

The CNN report claims that the decision to exfiltrate the high-level source was taken after a May 2017 meeting between Trump and Putin, with the participation of senior American and Russian officials. The latter included Foreign Minister Sergei Lavrov and then-Ambassador to Washington Sergey Kislyak. Citing an American “former senior intelligence official”, CNN alleges that Trump “repeatedly mishandled classified intelligence” at that meeting, which could have led to the exposure of the CIA’s asset. At that time, the CIA decided that it was time to exfiltrate the asset and proceeded to do so successfully.

But the CIA disputed the accuracy of CNN’s story. The agency’s Director of Public Affairs, Brittany Bramell, dismissed what she called “CNN’s narrative” as “inaccurate”. She added that the agency’s judgements about exfiltrations of agents are “life-or-death decisions” that are based solely on “objective analysis and sound collection”, not on “misguided speculation that the President [mishandled] our nation’s most sensitive intelligence —which he has access to each and every day”. CNN said on Monday that Trump and “a small number of senior officials” were told about the exfiltration in advance. The news network also said that it was not privy to details about the extraction operation or about the current whereabouts of the exfiltrated asset.

► Author: Joseph Fitsanakis | Date: 10 September 2019 | Permalink

Italy arrests Russian ex-foreign ministry official for espionage following US request

Naples International AirportItaly has arrested a Russian business executive and former foreign ministry official who is wanted by the United States for carrying out espionage against an American aviation firm. Alexander Yuryevich Korshunov, 57, who is a former official in Russia’s Ministry of Foreign Affairs, was reportedly arrested on August 30 at Naples International Airport in Italy. On Thursday, the US Department of State filed a criminal complaint against Korshunov, accusing him of trade secret theft. According to the complaint, Korshunov’s espionage benefited a Russian state-owned aviation company. He was allegedly assisted by 59-year-old Maurizio aPolo Bianchi, an Italian citizen, who remains at large.

The US government claims that the two men conspired to steal blueprints for the design of gearbox accessories used in jet engines. The company they allegedly stole the information from is GE Aviation, a company based in the US state of Ohio. Bianchi reportedly used to work for one of GE Aviation’s subsidiaries in Italy and dealt with clients from Russia and China, among other countries. But he eventually left the company and joined another firm that contracted with Aviadvigatel, a subsidiary of United Engine Corporation. The latter is a Russian-owned aerospace company that employed Korshunov. During his work for Aviadvigatel, Bianchi is accused of having employed a number of current and former employees of GE Aviation as consultants. But the work that Bianchi carried out for his new company compromised trade secrets belonging to GE Aviation, according to the US Department of Justice. Moreover, the Department claims that both Bianchi and Korshunov, who supervised Bianchi’s work on behalf of Aviadvigatel, were aware that they were exploiting trade secrets that did not belong to them.

There is no information on Bianchi’s whereabouts. If convicted, the two men face up to 10 years in prison each. On Thursday, the Russian President Vladimir Putin dismissed the charges against Korshunov as biased and said they were likely motivated by “unfair competition” practices by American companies. The Italian government has issued no public comment about Korshunov’s arrest.

► Author: Joseph Fitsanakis | Date: 06 August 2019 | Permalink

Russian bank accused of being ‘den of spies’ relocates to NATO member Hungary

Nikolai KosovA Russian-backed development bank, which is accused by its critics of being an intelligence front for Moscow, has relocated to Hungary, a member of the European Union (EU) and the North Atlantic Treaty Organization (NATO). The International Investment Bank (IIB) was founded in 1970 by the Soviet Union as a multilateral development banking institution. Its purpose was to assist in the economic development of the Soviet Union’s allies under the umbrella of the Soviet-led Council for Mutual Economic Assistance (COMECON). Like other Soviet financial institutions with foreign branches, it was suspected by Western spy agencies of being used by Moscow to station intelligence personnel under non-official cover.

In 1991, following the disintegration of the Soviet Union and the Eastern Bloc, the IIB entered a period of stagnation, as did many Soviet institutions of the Cold War period. But in 2002 Russian President Vladimir Putin spearheaded a government-led effort to revive the bank. Today the Russian government has a 47 percent stake in the IIB, with the remaining 53 percent owned by its other member-countries. These are all communist of former communist states: Cuba, Vietnam, Cuba, Bulgaria, Romania, Slovakia, the Czech Republic, and Hungary. Each of these member states is represented on the IIB with an official who speaks for his or her government.

Some critics express concerns that the IIB continues to serve as a front company for Russian intelligence. Some point to the IIB’s director, Nikolai Kosov, whose parents were officers in the KGB and served in several European countries, including Hungary, during the Cold War. Such criticisms resurfaced earlier this year, when it was announced that the IIB would move its headquarters to Budapest. The Hungarian government said it would host IIB’s 100 personnel and granted the IIB building privileges that are usually extended to diplomatic facilities. For instance, Hungarian authorities will not be able to enter the IIB premises without prior authorization by the bank.

The Hungarian government of Prime Minister Viktor Orban has said that the IIB’s relocation to Budapest will further-strengthen Hungary’s relations with Russia and help promote the former Soviet ally as a growing financial hub in Europe. But one critic told the Al Jazeera news network that the IIB “is more likely to make Budapest a Russian intelligence center than a financial hub”. Another critic, referred to by Al Jazeera as a “diplomatic source”, said that NATO has limited its sharing of classified information with Hungary “due to fears it leaves the door open to Russia”.

► Author: Joseph Fitsanakis | Date: 03 September 2019 | Permalink

Chechen shot dead in broad daylight in Berlin, Russian spy services suspected

Zelimkhan KhangoshviliAuthorities in Germany suspect that Moscow may have been behind the assassination of a Chechen separatist who was shot in broad daylight in Berlin by a man wearing a wig and carrying a pistol fitted with a silencer. The victim of the attack was Zelimkhan Khangoshvili, 40, who was a leading figure in the so-called Second Chechen War. The conflict pitted the Russian military against groups of Muslim fighters in the North Caucasus between 1999 and 2009.

Khangoshvili, a Muslim who was born in Georgia, was a bodyguard of Aslan Maskhadov, the self-described leader of the Muslim separatists in the Northern Caucasus. Maskhadov was killed in 2005 in a raid by Russian Special Forces, and Khangoshvili fled to his native Georgia. In 2015, Khangoshvili sought political asylum in Germany after two men tried to kill him in Tbilisi. The German authorities initially placed him on a terrorism watch list, but removed him after he began to collaborate with German counterterrorism agencies and participate in programs designed to de-radicalize Muslim youth.

Khangoshvili was reportedly killed last Friday as he was walking to his local mosque. Witnesses said a man on a bicycle approached Khangoshvili from behind as he was walking in the middle of Kleiner Tiergarten, a small park in downtown Berlin. The cyclist shot Khangoshvili and then immediately fled the scene on his bicycle. Police later found a Glock 26 semi-automatic pistol fitted with a silencer, a wig and the assailants bicycle. All had been dumped in a nearby lake. Later that evening the police announced the arrest of a Russian citizen identified only as “Vadim S.”, who is alleged to have shot Khangoshvili.

German newsmagazine Der Spiegel quoted Martin Steltner, from the Berlin prosecutor’s office, who said that Vadim S. had arrived in Berlin from Moscow via Paris less than a week before Khangoshvili’s murder. Steltner added that there were “indications the deed was pre-planned and may have political motives behind it”. An anonymous source from German intelligence told Der Spiegel that “if it turns out that a state actor like Russia is behind this, we will have a second [Sergei] Skripal case on our hands, with all that this entails”.

► Author: Joseph Fitsanakis | Date: 28 August 2019 | Permalink

Russian deep-cover spy speaks to Western media for first time

Elena Vavilova Andrei BezrukovOne of the ten Russian deep-cover spies who were arrested in the United States in 2010, and swapped with American- and British-handled spies held by Moscow, has spoken to Western media for the first time. Elena Vavilova was arrested by the Federal Bureau of Investigation in June of 2010 along with her husband, Andrei Bezrukov. In its two decades of operating under deep cover in the US, the married couple used the stolen identities of two dead Canadian citizens, Tracy Foley and Donald Heathfield. Vavilova claimed to be of French-Canadian origin and worked as a real estate agent. The couple never spoke Russian at home and their two sons, Alex and Tim Foley, were unaware of their parents’ secret identities.

Last week, Vavilova, who now works as a private consultant in Moscow, spoke to Shaun Walker, Russia correspondent for British newspaper The Guardian. It was the first face-to-face encounter between a Western news outlet and one of the 10 outed Russian ‘illegals’. The reason for the interview was Vavilova’s upcoming book, A Woman Who Can Keep Secrets (in Russian), which presents a fictionalized account of her career and marriage to Bezrukov. It offers rare insights into the longstanding Russian ‘illegals’ program, which dates back to Soviet times. The book’s two protagonists meet as students in Siberia, where they are eventually recruited by the KGB, and spend several years training in languages and tradecraft. Part of their training includes living in a KGB house modeled after suburban American homes, so that they can get used to domestic life in the West. This account is believed to include true elements of the lives and careers of Vavilova and Bezrukov. The two married in Russia but moved to Canada separately, using fake Canadian identities. They pretended to meet for the first time in Canada, where they ‘dated’ and eventually ‘married’ before moving to the US to begin their espionage work.

Vavilova told Walker that the popular view of the 10 Russian illegals as having achieved little of intelligence value during their time in the US is misguided. “Of course I can’t talk about it”, she said, “but I know what we were doing and it doesn’t matter what others say”. She also said that training for illegals involved learning how to handle guns and using martial arts. But she added that these skills were never used in the field and were mostly good for building self-confidence —especially for missions that took place under cover of night in America, where street crime was far more prevalent than in Russia during the Cold War. Walker said that Vavilova’s English remains perfect, as does her husband’s. Like Vavilova, Bezrukov now works as a consultant and also teaches at a university in Moscow. Vavilova refused to discuss current Russian politics in her interview.

► Author: Joseph Fitsanakis | Date: 26 August 2019 | Permalink

New report details growing presence of Russian private security firms in Africa

Central African Republic RussiaA new report by the American news network CNN has shed new light into the little-researched subject of Russian-owned private military and security operations in Africa. CNN said the report took a month to complete. It claims that a Russian tycoon by the name of Yevgeny Prigozhin has been instrumental in the growth of Russian private security operations in the continent. Prigozhin is one of the closest confidantes of Russian President Vladimir Putin. The United States accuses him of helping fund the Internet Research Agency, a Russian company based in Saint Petersburg, which allegedly participated in the Kremlin’s efforts to meddle in the 2016 US presidential election. CNN claims that Prigozhin is also connected with PMC Wagner, a Russian security contractor with presence on the ground in Syria and eastern Ukraine. Western officials allege that firms like Wagner could not operate without permission from the Kremlin.

According to the CNN report Prigozhin turned to African countries like Sudan, Libya and the Central African Republic in order to make up for his financial losses in Syria and Ukraine. He allegedly has a role in many of Russia’s 20 military agreements with African states where he provides security and weapons training on behalf of Moscow. In return, his group of companies, headed by a firm called Concord, receives exploration permits and the rights to exploit precious metals found throughout Africa, according to CNN. The network sent correspondents to the Central African Republic where they found that a radio station and a major military training base are run by a group of 250 Russian contractors. None of them will say who pays them, according to CNN, and at least one of them claims to be a “security adviser” for Central African Republic President Faustin-Archange Touadéra. Most of the Russians operate out of Palais de Berengo, a dilapidated presidential palace located 30 miles south of the capital Bangui, which used to belong to the country’s late dictator Jean-Bedel Bokassa. At a nearby mining site there are now hundreds of locals who work for the Russians, said CNN.

The CNN report also notes that last year three Russian journalists, Kirill Radchenko, Alexander Rastorguyev and Orkhan Dzhemal, were ambushed and executed near Sibut in the central region of the country, allegedly “by men wearing turbans and speaking Arabic after refusing to surrender their vehicle and equipment”. They were in the Central African Republic to research the presence of Russian private security firms. Their trip was funded by the Center for Investigation, a London-based foundation owned by the Russian exiled billionaire Mikhail Khodorkovsky. No one has been arrested or charged for the killings of the three Russian journalists. Central African Republic authorities told CNN that “investigations were continuing” into the matter.

► Author: Ian Allen | Date: 14 August 2019 | Permalink

Austria issues international arrest warrant for alleged Russian spy

Igor Egorovich ZaytsevThe Austrian government has issued an international arrest warrant for a Russian man who allegedly recruited a retired colonel in the Austrian Federal Army to spy for Moscow. The arrest warrant was issued on Tuesday by the public prosecutor’s office in the city of Salzburg. It identifies the Russian man as Igor Egorovich Zaytsev. Austrian officials allege that the Moscow-born Zaytsev is in fact an intelligence officer for the Main Directorate of the General Staff of the Russian Armed Forces. Known as GRU, the organization is Russia’s primary military-intelligence agency.

In an accompanying press statement issued on Tuesday, the Austrian Ministry of the Interior said that Zaytsev had facilitated the “betrayal of state secrets” and that his actions had been “to the detriment of the Republic of Austria”. The arrest warrant accuses Zaytsev of having participated in the “intentional disclosure of a military secret”, but does not provide details. However, in a subsequent statement, Austrian police directly linked the search for Zaytsev with an espionage case that was reported in the Austrian media last year. The statement said that Zaytsev is believed to have recruited a man known as “Martin M.” to spy on Austria. This appears to refer to the arrest last November of a 70-year-old colonel in the Austrian Army, who was stationed in Salzburg. He is believed to have spied for Russia from at least 1992 until his arrest. Austrian media reported that the accused spy was believed to have given Russia information on a range of weapons systems used by the Austrian Army and Air Force, as well as the personal details of high-ranking officers in the Austrian Armed Forces.

Soon after the arrest of “Martin M.”, Austrian authorities arrested a second man, identified only as “O.”, who is also suspected on having spied for Russia. According to the Vienna Public Prosecutor’s Office, “O.” was an employee of the Austrian Office for Protection of the Constitution and Counterterrorism, known as BVT. He had been investigated on suspicion of espionage for more than a year prior to his arrest. The man’s arrest took place alongside simultaneous raids at two residential addresses associated with him, according to reports. No further details have been made available since the arrest. It is not known whether Zaytsev’s is also connected with the case of “O.”.

► Author: Joseph Fitsanakis | Date: 26 July 2019 | Permalink