Leaked counterintelligence document reveals Russian concerns about Chinese spying

June 9, 2025 by 6 Comments

FSB RussiaA LEAKED REPORT AUTHORED by Russia’s primary counterintelligence agency reveals deep concern in national security circles about the intensity of Chinese spying against Russian interests, according to The New York Times. The paper said last week that the leaked report, which was produced by Russia’s Federal Security Service (FSB) between 2023 and 2024, offers “the most detailed behind-the-scenes view” of Russia’s counterintelligence concerns about China.

Following the death of Soviet Premier Joseph Stalin, the two communist countries became sworn enemies and nearly went to all-out war against each other. But in recent years Moscow and Beijing put aside their differences, prompted by their mutual desire to challenge the geopolitical supremacy of the United States and bring about a multipolar world. Since 2022, when Moscow resumed its military invasion of Ukraine, Beijing has stood firmly by the Kremlin. China has become the largest importer of Russian energy and has provided the Russian military with much-needed advanced technology. The relationship between the two neighboring nations appears to be deeper than ever before.

But according to a recently leaked report, Russia’s national security establishment is deeply concerned about Chinese efforts to dominate its ally by spying against it. The eight-page report outlines “ENTENTE-4”, a counterintelligence program run by the 7th Service of the FSB’s Department for Counterintelligence Operations. The department is known by its Russian acronym, DKRO. The DKRO’s 7th Service is tasked with counterintelligence planning and operations against Asian countries, with China being its primary target.

According to The Times, the DKRO produced the report sometime between 2023 and 2024. The document appears to have been intended for distribution to the FSB’s field offices across Russia. It was acquired by ARES Leaks, a cyber criminal syndicate, which posted images of the document on the Telegram messenger application. The paper said it shared the leaked document with “six Western intelligence agencies”, all of which assessed it to be genuine. Read more of this post

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , ,

Russian spies operated in Portugal using forged Brazilian papers, report claims

May 26, 2025 by 2 Comments

Porto PortugalTWO RUSSIAN SPIES USED forged documents acquired in Brazil in order to live in Portugal for years and use it as a base from where to conduct espionage, according to an investigation by Portuguese counterintelligence. The spies were husband-and-wife team Vladimir Aleksandrovich Danilov and Yekaterina Leonidovna Danilova, both in their 30s. According to The New York Times, they appeared in Portugal in 2018 using the names Manuel Francisco Steinbruck Pereira and Adriana Carolina Costa Silva Pereira.

Portuguese weekly newspaper Sol said on Saturday that Danilov used a Brazilian passport and supplied authorities with documentation showing his father was a Portuguese national. This allowed Danilov to eventually obtain Portuguese citizenship. Although Danilova did not apply for Portuguese citizenship, she was granted permanent residency by the European Union country. These credentials enabled the spies to move freely in the European Union’s 27 member-states without restriction.

In 2022 the Brazilian Federal Police, with the assistance of United States intelligence agencies, launched a lengthy investigation into the activities of several Russian spies who operated in Brazil in recent years. The spies appear to have used concocted Brazilian identities in order to operate around the world undetected. The investigation eventually incorporated counterintelligence services from as many as eight countries, including Portugal, according to Sol.

So far the Portuguese investigation has revealed that the Danilovs conducted a variety of espionage operations in the coastal city of Porto, which is Portugal’s second-largest urban center following the capital Lisbon. Using Porto as an operational base, the couple traveled extensively around the world using their Brazilian and Portuguese passports. Each time they were able to return to their home in Porto “without encountering any issues”, Sol reports. The two spies have vanished and their current whereabouts are unknown.

► Author: Joseph Fitsanakis | Date: 26 May 2025 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , , , , , ,

Son of senior CIA official dies ‘fighting for Russia’ in Ukraine

April 28, 2025 by 1 Comment

CIA Directorate of Digital InnovationA 21-YEAR-OLD American citizen, whose mother is a senior Central Intelligence Agency (CIA) official, died while fighting with the Russian military in Ukraine in 2024, according to a news report. Late last week, the CIA confirmed the accuracy of the story while requesting that the media afford the bereaved family “privacy at this difficult time”.

On April 25, the independent Russian media website Important Stories (known as iStories) claimed that Michael Gloss, 21, the son of CIA Deputy Director for Digital Innovation Gallina Gloss, had “died within the borders of Ukraine” while fighting for the Armed Forces of the Russian Federation. Although his death had occurred in April 2024, the information about his American citizenship and his connection to the CIA had been kept from the media until the iStories report disclosed it to the public.

Later on the same day, a spokesperson for the CIA told NBC News that the spy agency was aware of the incident, which had been treated “as a private family matter for the Gloss family, not a national security issue”. The CIA spokesperson added that Michael Gloss had “struggled with mental health issues” and relayed the Gloss family’s wish for “privacy at this difficult time”.

According to iStories, Michael Gloss voiced strong support for Ukraine early in the Russo-Ukrainian war. He eventually traveled to Europe on his own, joining the Rainbow Family, a modern-day hippie movement with roots in late-1960s counterculture. Gloss eventually traveled across Turkey, where he reportedly began posting increasingly pro-Russian messages and strong criticism of the United States on his social media accounts.

In the summer of 2023, Gloss began posting stories and images from Russia. In one instance, he stated in a social media post that he had decided to “defeat mortality and the military-industrial complex”. Shortly afterwards he enlisted in the Russian army and began posting photos and videos from his military training alongside other international volunteers. He also began participating on Russian social media platforms, such as VKontakte, where he expressed strong support for the Russian war effort and blasted what he referred to as “Western propaganda” about Ukraine and its government.

According to iStories, Michael Gloss “died within the borders of Ukraine”, though it is not known whether he participated in any fighting. An obituary published by his family in the United States makes no mention of his enlistment in the Russian military, stating only that he was “tragically killed in Eastern Europe on April 4, 2024”, while “forging his own hero’s journey”.

► Author: Joseph Fitsanakis | Date: 28 April 2025 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , ,

Reuters publishes details about alleged Russian airline sabotage plot

April 7, 2025 by 4 Comments

DHL AviationTHE REUTERS NEWS AGENCY has disclosed more information about an alleged plot by Russian intelligence to detonate bombs on cargo flights from Europe to North America. Initial details of the plot emerged in October 2024, when it was reported that explosions had occurred earlier that year at shipping warehouses in England and Germany. It later emerged that a similar explosion had occurred at a third shipping warehouse, located in Poland.

It is now understood that the explosions occurred on July 19, 20 and 21, 2024, and that at least two of them took place in facilities belonging to DHL, a German logistics firm headquartered in Bonn. Affected facilities are reportedly located in Leipzig, Warsaw, and Birmingham. All three explosions were caused by rudimentary incendiary devices hidden inside commercial shipments. European officials said at the time that the explosions were part of a broader wider campaign by Russian intelligence to sabotage Western European transportation and shipping networks.

Now the Reuters news agency claims that the explosions were meant to test security systems in preparation for a major sabotage operation. The operation aimed to detonate explosive mechanisms in mid-air on cargo flights from Europe to the United States and Canada. Moreover, a fourth incendiary device, which was found at a Warsaw shipping facility, failed to explode and has been forensically examined by bomb experts, Reuters said. Citing “interviews with more than a dozen European security officials”, including a person familiar with the case in Poland, the news agency said it was able to provide “the most granular account yet of the alleged plot”.

The report claims the incendiary devices were concealed inside pillows, bottles of cosmetics, and sex toys. They were ignited with the use of remote timers taken from cheap Chinese electronic goods. Once detonated, the timers sparked explosions with the help of gelled flammable cocktails that included compounds such as nitromethane—a highly flammable liquid chemical used in industrial applications. All ingredients used in the incendiary devices, including nitromethane, are easily accessible to consumers at a relatively low cost.

According to Reuters, the procedures followed in the DHL attacks fit the profile of similar operations that have been carried out in recent years by the Main Intelligence Directorate of the Russian Forces’ General Staff, known as GRU. Such procedures include hiring disposable agents, most of which are not Russian citizens, for one-off operations. In the case of the DHL attacks, the agents were allegedly hired on the encrypted messaging platform Telegram and paid with the use of cryptocurrencies, or in cash.

Among the alleged suspects in the case is a Ukrainian man identified by Reuters as Vladyslav Dekravets, who was recruited in southern Poland and is now facing extradition to Poland from Bosnia. Another suspect, identified in the Reuters report as Alexander Bezrukavyi, allegedly packaged parcels containing sneaker shoes for shipment to the United States and Canada. The shipments were intended to help the GRU “gather information about parcel-processing methods and timing”. During the operation, the two men came in contact with individuals who appeared to be GRU officers, using the cryptonyms WARRIOR and MARY.

The DHL cases remain at a pre-trial stage in several European countries, Reuters said. They involve the pending extradition of suspects from elsewhere in Europe. The trials are going to feature evidence gathered from criminal investigators and intelligence agencies, according to the report.

► Author: Joseph Fitsanakis | Date: 07 April 2025 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , , , , ,

Russia expels two UK diplomats, accuses London of sabotaging Trump peace plan

March 10, 2025 by 3 Comments

FSB RussiaTHE RUSSIAN FEDERATION HAS revoked the accreditation of two British diplomats over espionage allegations, while also accusing the United Kingdom of sabotaging the United States’ “peace plan” for Ukraine. The Russian Federal Security Service (FSB) said on Monday that the diplomatic expulsions involved two British men, a diplomat stationed at British embassy in Moscow, as well as a spouse of another British diplomat.

According to the FSB, the two men “intentionally provided false information” to Russian authorities when they were granted official permission to enter the country, which made them ineligible for continued accreditation. Additionally, the FSB claims it has in its possession evidence that the two men have been “carrying out intelligence and subversive work” on Russian soil, which “threatens the security of the Russian Federation”.

In February of this year, the United Kingdom expelled a Russian diplomat in an apparent response to earlier expulsions of British diplomats by Russia, which occurred in November 2024. The rounds of diplomatic expulsions between London and Moscow go back to at least 2022, after Russia invaded eastern Ukraine for the second time. This week’s expulsions raise the number of British diplomats that have been expelled from Russia to seven.

Meanwhile Russia’s Foreign Intelligence Service (SVR), which carries out intelligence operations abroad, has accused Britain of being “the world’s biggest warmonger”. In a statement shared with reporters on Monday, the SVR claimed that London was actively sabotaging American efforts to “secure peace” in Ukraine by “undermining the peacekeeping efforts” of United States President Donald Trump.

In a statement issued on Monday, the British Foreign and Commonwealth Office said it was not the first time that Russia had leveled “malicious and baseless accusations” against its diplomats.

► Author: Joseph Fitsanakis | Date: 10 March 2025 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , ,

Pentagon orders its cyber arm to stop operations against Russia [updated]

March 1, 2025 by 12 Comments

PentagonTHE UNITED STATES DEPARTMENT of Defense has reportedly ordered its Cyber Command to “stand down from all planning” of cyber operations aimed at Russia. According to technology news source The Record, the order was issued by President Donald Trump’s newly appointed Secretary of Defense, Pete Hegseth. Citing three anonymous sources familiar with the matter, the Record said US Cyber Command’s outgoing Director of Operations, Marine Corps Major General Ryan Heritage, communicated the order last week to all component commands.

Established in 2009, the US Cyber Command is among the 11 unified combatant commands of the US Armed Forces. It coordinates and directs cyber operations in the Department of Defense, having achieved a degree of autonomy from the National Security Agency (NSA), which has historically led the US military’s defensive and offensive cyber operations.

According to the Record, Secretary Hegseth’s order appears to encompass all offensive cyber operations aimed at Russia. These are carried out by US Cyber Command’s National Mission Teams, as well as all component commands, which reside under the US Armed Forces branches —namely the Army, Marine Corps, Air Force, and Navy. The order also appears to apply to all cyber operations carried out by the US European Command. However, the order does not apply to the NSA, according to the report.

The precise scope of Secretary Hegseth’s order remains unclear. The exact duration of the order is also not known at this time. But, according to the Record, Hegseth’s order provides “more evidence of the White House’s efforts to normalize ties with Moscow,” as the Trump administration continues to push for a negotiated end to the Russo-Ukrainian war.

In a separate development, Secretary Hegseth reportedly told Mexican government officials on Friday that the US military was “prepared to take unilateral action” to combat drug cartels in the country. According to the Wall Street Journal, which first reported this development, the Trump administration has begun transporting nearly 2,000 troops to the US-Mexican border, to assist in “machine operation, medical evacuation and administrative support.

UPDATE: The New York Times is also reporting this as of March 2, stating that move is “apparently part of a broader effort to draw President Vladimir V. Putin of Russia into talks on Ukraine and a new relationship with the United States.”

► Author: Ian Allen | Date: 01 March 2025 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , ,

Germany charges three dual German-Russian nationals with espionage

January 6, 2025 by 2 Comments

Grafenwoehr Training Area GermanyTHE OFFICE OF THE Federal Prosecutor in Germany has charged three dual German-Russian citizens with acts of espionage on behalf of Russia, with the intent of harming the national security of the German state. In compliance with German privacy laws, the three espionage suspects have been publicly identified only by their first names and last name initials. They are: Dieter S.,  Alex D., and Alexander J.

Dieter S. appears to be the central suspect in this case. Following his arrest by the German Federal Criminal Police Office, he was found to have participated in military operations of the secessionist Donetsk People’s Republic in Ukraine. By that time, German authorities had already charged him with being in contact with an individual known to be a member of Russian intelligence, who operated as his handler.

According to the indictment, throughout his interactions with his Russian handler, Dieter S. repeatedly made it known that he was willing and able to carry out acts of sabotage against security-related installations in Germany, on behalf of the Russian Federation. He also offered to carry out arson attacks and use explosives against transportation facilities and infrastructure, such as railway lines, which were used by the German state to transport military supplies to Ukraine.

Subsequently, Dieter S. was instructed by his Russian handler to collect intelligence about potential targets in southeastern Germany. He thus engaged in systematic surveillance activities targeting the Grafenwoehr Training Area, a United States Army military training base located near Grafenwöhr, in eastern Bavaria. Grafenwöhr is the largest training facility maintained by the United States in Europe. Since 2022, it has been used to instruct Ukrainian troops on how to operate American-built tanks.

Dieter S. is also believed to have conducted surveillance at several loading stations used by the German and American militaries, as well as the facilities of private-sector contractors to the German military. In his surveillance operations, Dieter S. was assisted by Alex D. and Alexander J. All three men took photographs and videos of the targeted facilities. The collected material was eventually passed on to Dieter S.’s Russian handler.

Official charges against the three suspects were filed before the State Security Senate of the Munich Higher Regional Court on December 9. They were publicized by the office of the Federal Public Prosecutor General on December 30. A trial date is now pending.

► Author: Joseph Fitsanakis | Date: 06 January 2025 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , , ,

Analysis: The fate of Russia’s military bases in Syria seems highly uncertain

December 9, 2024 by 1 Comment

Khmeimim Air Base SyriaTHERE ARE CONFLICTING REPORTS about the fate of Russia’s military bases in Syria, following the complete collapse of the 54-year-long Assad dynasty. Late on Sunday it was announced on Russian state media that the Kremlin had extended Bashar al-Assad and his family political asylum “on humanitarian grounds”. Attention quickly turned to the fate of the Russian embassy in the capital Damascus and the Russian military facilities in Tartous and Khmeimim.

It is difficult to overstate the strategic significance of the Russian military facilities in Syria, some of which date as far back as 1971, when Hafez al-Assad, Bashar al-Assad’s father, assumed power in the country. The Russian naval base in Tartous is currently the only Russian military facility outside of the former Soviet Union. Furthermore, it constitutes the sole warm-port fueling and repair facility that is exclusively available to the Russian Navy. It is home to the Russian naval group in Syria, which consists of a submarine and five warships.

Likewise, the Khmeimim Air Base in Syria’s Latakia province is home to dozens of Russian fighter jets, which have been stationed there since 2015, ostensibly in order to protect the Syrian government from the Islamic State. However, Russia regularly uses the Khmeimim Air Base to transport troops and war materiel to Africa, and to project air power in the Mediterranean, through the presence of several bomber aircraft. The latter can be found, not only in the Khmeimim Air Base, but also in the Syrian military airports of Homs and Palmyra.

But these two military airports are now in the hands of the Hayʼat Tahrir al-Sham (HTS) forces that have captured much of Syria in the past two weeks. It is doubtful that the Russian Aerospace Forces will be able to use them from now on. Moreover, there are reports that Moscow will be forced to engage in a strategic withdrawal of the entirety of its military forces from Syria within hours, if not days.

On Sunday, the Russian Ministry of Foreign Affairs issued a dismissive statement claiming that, although Russian troops in Syria had been placed on high alert, “no serious threat to their security” had been detected. According to the Reuters news agency, the Russian government had been in communication with the leadership of the HTS leadership for several days. As a result of this communication, an agreement had allegedly been struck, which guaranteed “the safety of Russian military bases and diplomatic institutions in Syria”. Read more of this post

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , ,

Russia using nontraditional means to gather intelligence, Finland warns

November 18, 2024 by 3 Comments

SUPO FinlandRUSSIA’S NEED TO GATHER intelligence from Scandinavian targets has increased considerably since Finland and Sweden joined the North Atlantic Treaty Organization (NATO), prompting Moscow to seek nontraditional means of collecting intelligence, according to Finland’s spy agency. A new report by the Finnish Broadcasting Company (Yle) relays a warning by the Finnish Security and Intelligence Service (SUPO) that Russian spies are increasingly operating in Scandinavia without relying on diplomatic protection.

Human intelligence (HUMINT) operations are typically carried out of diplomatic facilities by intelligence officers who enjoy various degrees of diplomatic immunity. Such protections are seen as crucial for the safety of intelligence personnel, who tend to engage in illegal activities while stationed abroad. However, the number of Russian intelligence officers who are based in diplomatic facilities in Finland and elsewhere in Scandinavia has “significantly decreased” in recent years, according to the Yle report.

The reason for the decline in numbers rests with the numerous expulsions of Russian diplomatic personnel —which include intelligence officers— that took place throughout Europe in the months following Russia’s February 2022 invasion of Ukraine. Since then, Finland is one of dozens of European countries that have repeatedly denied Russia’s requests for the issuance of diplomatic visas. As a result, Russian embassies and consulates in Finland remain understaffed and mostly devoid of intelligence personnel.

In response to this new reality, the Kremlin has been experimenting with using nontraditional HUMINT collectors. The latter are not based in diplomatic facilities and are not protected by diplomatic immunity. Such nontraditional intelligence collectors operate as “journalists or researchers”, according to SUPO. At the same time, Russian intelligence agencies increasingly target for recruitment Finns who life in Russia, or try to recruit them while they are traveling elsewhere in Europe.

Lastly, Russian intelligence agencies are systematically hiring criminals to carry out specific tasks on behalf of the Kremlin, in return for money. Such criminals include computer hackers, who are attracted by the Russian state. Indeed, the Russian government is systematically “providing favorable conditions” for computer hackers to operate out of Russian territory. They receive money and protection in return for letting the Russian state use them as a cover for cyber espionage, sabotage, and influence operations.

► Author: Joseph Fitsanakis | Date: 18 November 2024 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , ,

Possible Russian role probed in incendiary devices found in Britain and Germany

October 21, 2024 by 2 Comments

DHLAUTHORITIES IN BRITAIN AND Germany are reportedly investigating the possibility that the Russian intelligence services may be behind two fires that occurred in shipping warehouses last summer. The fires occurred in late July in facilities belonging to DHL, a German logistics firm headquartered in Bonn.

On September 1, the German government issued a warning about unknown suspects allegedly shipping “unconventional incendiary devices” throughout Europe. The warning referenced a fire that occurred at a DHL logistics center in the east German city of Leipzig. Germany’s Federal Office for the Protection of the Constitution (BfV) warned at the time that “further incendiary incidents” were anticipated, but provided no further details.

Late last week, British newspaper The Guardian reported that an incident like the one that occurred in Leipzig had taken place in a DHL warehouse in Minworth, a suburb of the city of Birmingham, located in the British Midlands region. In subsequent reporting, the paper alleged that British and German authorities have been investigating a link between the two incidents. Moreover, authorities are reportedly probing the possibility that the incidents may be part of a wider campaign by Russian military intelligence to sabotage Western European transportation and shipping networks.

Meanwhile, Lithuanian media revealed on Friday that a suspect had been arrested in Lithuania in connection with the two fires in Britain and Germany. The reports suggested that the two incendiary devices had been shipped from Lithuania by the same individual. However, there have been no updates about who may be behind the apparent sabotage campaign.

► Author: Joseph Fitsanakis | Date: 21 October 2024 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , , , ,

Leaked documents reveal plans for extensive Russian influence campaign in Israel

September 30, 2024 by 4 Comments

2023 Israeli judicial reform protestsLEAKED INFORMATION PUBLISHED BY leading German media outlets has revealed Russia’s plans for an influence campaign targeting Israel. The information was leaked earlier this month by the German newspaper Süddeutsche Zeitung and German television stations Norddeutscher Rundfunk (NDR) and Westdeutscher Rundfunk (WDR), as well as by Israeli news outlets. It allegedly came from Social Design Agency (SDA), a Moscow-based firm hired by the Kremlin, which operates in Israel and several countries in the West.

Founded in 2017, the SDA is reportedly one of a host of firms and organizations that are collaborating with Russian intelligence in its efforts to influence public opinion worldwide. Earlier this year, the United States imposed sanctions on SDA, “for providing services to the government of Russia in connection with a foreign malign influence campaign”. The SDA’s founder is Ilya Gambashidze, who is said to be in direct contact with Russian President Vladimir Putin and other Kremlin officials.

Israel has been a central target of SDA’s Russian influence campaign. The country’s internal situation, with mass demonstrations against the legal reform is “perfect for launching a campaign to influence public opinion”, an SDA document from 2023 reads. The document accurately describes the political and social situation in Israel and names a number of influential Russian expatriates whose activities should be monitored.

According to the leaked documents, the purpose of the planned campaign was to raise support for Russia in its war against Ukraine, and strengthen the proportion of Israelis who espouse anti-Ukrainian sentiments. Another central goal was to ensure that no party in the Knesset —the IsraeliQ Quote parliament— would support a possible transfer of military aid to Ukraine.

From the documents, it appears that the conclusions formulated by the SDA were infused into around 50 cartoons distributed every month on social networks, around 20 fictitious articles appearing on websites pretending to be legitimate, and many reactions on various social networks. Among other things, the company distributed through paid ads on Facebook cartoons showing Ukrainian President Volodymyr Zelensky burning the Israeli flag, as well as cartoons accusing Israeli leftists of supporting Hamas.

One of the main revelations of the recent leaks is that the Arab community in Israel constitutes a target of the Russian influence campaign. For example, a fake Arabic-language article that was circulated online claimed that Israel did not have in its possession enough precision weapons, because it had given them to Ukraine. The article went on to claim that the lack of such weapons would lead to failures on the battlefield. “The good news should be heard by all believers living under occupation”, the article states. “The policy of the occupation government will soon lead to its defeat. We will wait for a spark to ignite our war of liberation, in which the entire Muslim world will support us”. The purpose of the article appears to be to prompt the Israeli-Arab population to turn against the Israeli government based on Israel’s alleged weakness, and to support Israel’s enemies. Read more of this post

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , ,

At least four Russians released in prisoner exchange with West are verified ‘illegals’

August 5, 2024 by 2 Comments

SVR hqAT LEAST FOUR OF the eight Russians released by the United States and its allies last week, in exchange for 16 people held in Russian prisons, are verified ‘illegals’ —the term used to describe Russian non-official-cover intelligence personnel. All four operated using third country identity documents, including passports. In every case but one, these identity documents had been illegally acquired.

In intelligence parlance, the term ‘illegals’ emerged during the Cold War to describe Russian intelligence personnel who operated without any formal association with Russian diplomatic facilities. In many cases, these operatives used third country passports. This enabled them to operate with an unusual degree of flexibility and evade the attention of rival intelligence services. At the same time, however, the absence of diplomatic credentials prevented these operatives from claiming diplomatic immunity if caught. It thus exposed them to the possibility of lengthy prison terms upon discovery.

THE TWO GRU ILLEGALS

Among the prisoners exchanged last week was Pavel Alekseyevich Rubtsov. Rubtsov was born in the Soviet Union as the grandson of a Spanish evacuee, who had been taken to Moscow as a child by the leftist Spanish Republic during the Spanish Civil War. At the age of 9, Rubtsov moved with his mother to Spain, where he had his name legally changed to Pablo González Yagüe and grew up in Catalonia and the Basque Country. He was arrested in Poland in 2022 and charged with participating in foreign intelligence activities against Poland on behalf of the Main Directorate of the Russian Armed Forces’ General Staff, which is commonly known as GRU.

IntelNews has previously reported on the case of Mikhail Valeryevich Mikushin, who was also released and returned to Russia on Thursday. Mikushin lived for several years in Canada and Norway using a Brazilian passport under the name of José Assis Giammaria. When he was arrested by Norwegian authorities, Mikushin was working as a researcher on arctic security affairs for the Arctic University of Norway. Among other things, Mikushin was a volunteer researcher for a UiT GreyZone, a scholarly project that studies contemporary hybrid threats and grey zone warfare. Like Yagüe, Mikushin is also believed to have been employed by the GRU.

THE TWO SVR ILLEGALS

Arguably the most unusual case of illegals among those unveiled last week is that of Artem Dultsev and Anna Dultseva. The couple moved from Argentina to Ljubljana, the capital of Slovenia, in 2017. They brought with them their two young children, a boy and a girl, both of whom appear to have been born in Argentina. Artem Dultsev’s Argentinian passport bore the name Ludvig Gisch, born in 1984 in the West African country of Namibia. Dultsev posed as an information technology executive. His wife, Anna Dultseva, who operated an art gallery, used the cover name Maria Rosa Mayer Munos and went by Mayer. Read more of this post

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , , , , , , , , , , , , ,

Russia uses merchant navy fleet for intelligence operations in North Sea, study reveals

June 24, 2024 by 10 Comments

undersea telecommunications cable

HUNDREDS OF RUSSIAN MERCHANT ships have been utilized by the Kremlin for over a decade to carry out intelligence operations in the North Sea, a major new investigation has revealed. Belgian newspaper De Tijd and the investigative journalism website Follow the Money (FTM) carried out the joint investigation, using data provided by Global Fishing Watch, a Google-based international nonprofit organization that gathers information on commercial fishing activities worldwide.

Encompassing 220,000 square miles, the North Sea lies between France, Belgium, the Netherlands, the United Kingdom, Norway, Denmark, and Germany. It hosts many of the world’s major shipping lanes, an extensive network of energy pipelines, as well as key undersea communication cables. The development of large-scale offshore energy production has further-augmented the significance of the North Sea for the security of Europe in recent years. The strategic value of the North Sea has become even clearer since the onset of the Russo-Ukrainian war in 2014.

According to the De Tijd/FTM study, the Russian government has been highly active in the North Sea through a variety of stealthy means –primarily by deploying civilian vessels to collect intelligence and possibly even carry out sabotage operations. The study focused on 1,012 Russian-flagged non-military vessels that have been active in the North Sea since 2014. These consist of oil tankers, scientific research vessels, fishing boats, cargo ships, and even privately owned yachts.

The study identified 60,000 loitering events involving these Russian vessels. In the shipping domain, the term ‘loitering event’ refers to vessels that deviate from their normal route, reduce speed for no obvious reason, drift aimlessly, or circle around a location that may initially appear arbitrary. Loitering and other such peculiar behavior by merchant ships makes no economic sense, as it requires more fuel and results in added compensation for crews. Notably, close to 1,000 loitering events by nearly 170 different Russian ships were found to have taken place within less than a mile from an underground cable or energy pipeline. Read more of this post

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , ,

France arrests Russian-Ukrainian dual national with fake passports following explosion

June 6, 2024 by 2 Comments

Roissy-en-FranceAN INVESTIGATION HAS BEEN launched in France after a Ukrainian-born Russian national reportedly detonated explosives in a hotel room near Paris, suffering severe burns in the process. Sources from France’s National Anti-Terrorism Prosecutor’s Office (PNAT) said the incident occurred on Monday in a hotel in Roissy-en-France, a small bedroom community located 15 miles northeast of downtown Paris.

At the scene of the explosion police found a severely burned man, who was later identified as a 26-year-old from the Donbas region of eastern Ukraine. Most of the Donbas region has been under Russian military occupation since 2014. The man is reportedly a Russian speaker and holds both Ukrainian and Russian nationalities. He is currently in hospital receiving treatment for severe burns, and is formally under arrest.

The PNAT and the General Directorate for Internal Security (DGSI), France’s counterterrorism and counterespionage agency, are investigating the suspect’s background and activities. According to media reports, the suspect’s hotel room contained “substances and materials intended for the manufacture of explosive devices”. A number of guns and forged passports were also found in the room.

As intelNews reported earlier this week, French police arrested a Bulgarian, a Ukrainian and a German national, who deposited five coffins, draped in French flags, at the base of the Eiffel Tower. The flags reportedly bore the inscription “Dead French Soldiers of Ukraine”. While the investigation is ongoing, French authorities are said to have classified the incident as a Russian psychological operation aimed at affecting French public opinion. It is not known whether the two cases are in any way connected.

► Author: Joseph Fitsanakis | Date: 06 June 2024 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , , , , ,

French police arrest foreign nationals in suspected Russian influence operation

June 4, 2024 by 4 Comments

Eiffel TowerFRENCH POLICE ARRESTED THREE foreign nationals on Monday, accusing them of having deposited five coffins draped in French flags at the foot of the Eiffel Tower. The flags bore the inscription “French Soldiers of Ukraine”, while the coffins were found to contain sacks of plaster, according to media reports. The reports quoted French intelligence officials as saying that the stunt was likely a Russian operation aimed at influencing French public opinion against a potential military involvement in Ukraine.

Close circuit television footage led French police to the driver of a van that carried the coffins to the Eiffel Tower at 9:00 a.m. local time on Saturday. The 34-year-old driver, identified as “Georgi F.”, is believed to be a Bulgarian national. He told police he had arrived in Paris from Bulgaria on Friday and had been paid €40 by two other men to help transport the coffins to the iconic Paris monument. The two men, who allegedly paid the Bulgarian national, were arrested shortly afterwards while they were preparing to board a bus to Germany. One of them is believed to be a German national, while the other is said to hold Ukrainian citizenship.

The two men allegedly told French police they had been paid €400 to transport the coffins. French authorities reportedly believe the stunt was “organized from abroad” and that “Russian agents” may be behind it. There are allegations that the individual who paid the men may have been the same person who organized a similar stunt in May. In the early hours of May 14, someone defaced the Wall of the Righteous at the Mémorial de la Shoah, which includes the Holocaust museum in Paris’ 4th arrondissement. The names of nearly 4,000 people who helped save Jews in France are inscribed on that wall.

Last November, French authorities accused Russia of being behind stenciled images of Stars of David that had mysteriously appeared in the streets of Paris in late October. At least two of those arrested in the ensuing days were Moldovan nationals. The Paris prosecutor said at the time that the culprits had been in contact with a Russian-speaking individual who had offered to pay them in exchange for graffitiing the stars. Some reports speculated that the graffiti may have been part of a campaign by a “foreign actor trying to undermine French social cohesion”.

► Author: Joseph Fitsanakis | Date: 04 June 2024 | Permalink

Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with , , , ,

← Older posts

Newer posts →