Fire at top-secret Moscow facility highlights rapid growth of Russian spy headquarters

SVR MoscowA massive fire that broke out at a top-secret spy facility in Moscow on Wednesday brought to the foreground prior reports about the unprecedented growth of the headquarters of Russia’s foreign spy service. The fire was reported at a government compound in Yasenevo, a leafy district on the southern outskirts of the Russian capital. The compound serves as the headquarters of the Russian Foreign Intelligence Service, known by its initials, SVR. The SVR is one of the successor agencies to the Soviet-era KGB. During Soviet times, the present-day SVR was known as the First Chief Directorate or First Main Directorate of the KGB. Despite its name change, however, its mission remains the same, namely to collect secrets from targets outside the Russian Federation —often through the use of espionage— and to disseminate intelligence to the president.

The fire, which local news agencies described as “huge”, was reported early in the afternoon of Wednesday. Television images showed smoke coming out of one of the multistory towers that make up the SVR building complex. According to SVR spokesman Sergey Ivanov, the fire started in what he called “a technical installation” that houses “a cable gallery” and is located beneath the multistory building. The 21-story tower block is adjacent to a large Y-shaped building and is visible for several miles around. It became operational in the early 1970s, when the KGB’s First Chief Directorate began a decade-long process of moving to the new, state-of-the-art complex in the southern suburbs of the Russian capital. Today the complex houses the entire apparatus of the SVR, including its espionage wing, and is informally known as les (the forest) or kontora (the office). Approximately 15 fire crews arrived at the scene soon afterwards, and were able to coordinate their movements despite the fact that mobile communications are blocked at the site of the compound.

The SVR spokesman added that the fire is believed to have begun at a section of the facility that is undergoing extensive maintenance work. Three members of the crew that were initially missing during the early stage of the fire were later rescued, said Ivanov, and the fire was eventually extinguished without causing fatalities or injuries. But the incident highlighted the reportedly unprecedented growth of the SVR complex that observers have noted in recent years. As intelNews reported in 2016, satellite images show that the top-secret facility has doubled —and possibly tripled— in size in the past decade. The most recent images were compiled by Allen Thomson, an analyst who worked for the United States Central Intelligence Agency in the 1970s and 1980s. They were published by Steven Aftergood, who edits the Federation of American Scientists’ Secrecy News blog. The images clearly show that at least three more large buildings have been erected alongside the landmark skyscraper and the adjoining Y-shaped office block. These additions, said Aftergood in 2016, appear to have increased the SVR headquarters’ floor space “by a factor of two or more”. Moreover, the nearby parking capacity at the complex “appears to have quadrupled”, he added. Observers often describe the compound as a constant construction site, with new buildings and facilities being built at an unprecedented speed.

On Wednesday evening, SVR officials told the Moscow-based TASS news agency that the agency would investigate the cause of the fire. It was “too early to give any comments” about it, they said, but the SVR had already initiated an official probe into the incident.

► Author: Joseph Fitsanakis | Date: 09 November 2017 | Permalink

Attack kills wife of Ukraine commander behind alleged plan to assassinate Putin

Amina Okuyeva Adam OsmayevAn armed attack in the outskirts of Kiev has killed the wife of a Chechen commander of a Ukrainian paramilitary unit, who is wanted in Russia for an alleged plan to kill President Vladimir Putin. Adam Osmayev is believed to have survived the attack, but his wife, Amina Okuyeva, was reportedly shot in the head and died on the spot. Osmayev, a Russian Chechen, became widely known in Ukraine in February of 2012, when he was arrested by police in Odessa, a major port city located on the northwestern shore of the Black Sea in the country’s south. He was found to be carrying forged identity documents. When police searched his apartment, they found large quantities of illegal explosives. Authorities in Moscow told the Ukrainian government that Osmayev was involved in a conspiracy to kill Russian President Vladimir Putin. A Chechen associate of Osmayev, Ilya Pyanzin, was handed over to Russia by the Ukrainians and was given a 10-year prison sentence by a Moscow court.

But Osmayev’s legal team was able to argue that his human rights would not be guaranteed if Ukraine extradited him to Russia. In 2013, the European Court of Human Rights ruled that Osmayev should serve his sentence in Ukraine, at which point Kiev rejected Moscow’s extradition request. In late 2014, Osmayev was released from prison and allowed to remain in Ukraine. Soon after his release from prison, Osmayev entered the ranks of the Dzhokhar Dudayev battalion. The armed group was one of over 30 paramilitary units organized by Ukraine’s Ministry of Defense to combat pro-Russian separatists in southeastern Ukraine. By early 2015, Osmayev had risen to the rank of commander of the battalion and was increasingly treated as a celebrity by Ukrainian nationalists. But he continued to face threats from Russia and pro-Russian separatists in Ukraine. On June 1 of this year, Osmayev and Okuyeva survived an apparent assassination attempt by a man who was wounded but managed to escape following a shootout with the couple.

Ukrainian media reported on Monday that Okuyeva was killed earlier that day, after the car that her husband was driving was ambushed by a group of masked assailants on the outskirts of Kiev. According to eyewitnesses’ accounts, the assailants opened fire at Osmayev’s car as it was passing through a railway crossing. Osmayev was reportedly injured in the attack, but Okuyeva was shot in the head and died at the scene. Footage aired on Ukrainian national television showed Osmayev’s heavily damaged car, which reportedly sustained “a hail of bullets” fired by the attackers. The Chechen paramilitary commander told reporters that the attackers’ main goal was to assassinate him. No group or government has claimed responsibility for the attack.

► Author: Joseph Fitsanakis | Date: 31 October 2017 | Permalink

Russian spies arrested by the FBI in 2010 had targeted Hillary Clinton

Hillary ClintonA major reason behind the Federal Bureau of Investigation’s decision to arrest ten Russian spies across the United States in 2010 was their increasing proximity to the then-Secretary of State Hillary Clinton, it has been claimed. The spies had been specifically instructed by their handlers in Moscow to target Clinton, who was seen as the most likely successor to US President Barack Obama, according to recently released FBI files. Ten Russian deep-cover spies, who had no official cover and thus no diplomatic immunity, were arrested by the FBI in June 2010, following a ten-year counterintelligence investigation codenamed Operation GHOST STORIES.

The ten had entered the country from various destinations, including Canada, Latin America and Europe. Some were posing as citizens of third countries, while others had fraudulently assumed the names of dead Americans. They had been tasked by the SVR, Russia’s Foreign Intelligence Service, with blending into American society and finding their way into senior policy circles in Washington, DC, and other major decision-making hubs of the US government. US Justice Department documents refer to the SVR spy ring as “the illegals program” or “the Russian illegals program”.

On Sunday, the Washington-based newspaper The Hill said that it was able to shed more light into the Russian illegals program, after accessing recently unsealed FBI documents and interviewing US government officials. The paper said that the SVR had specifically instructed some of the illegals to concentrate on penetrating the Department of State. Their primary goal was to uncover information about the Obama administration’s policy on Russia. A key target of the Russian illegals was US Secretary of State Hillary Clinton, who was seen by Moscow as the leading voice on Washington’s Russia policy. Read more of this post

Israel reportedly behind discovery of Russian antivirus company’s spy links

Computer hackingIsraeli spy services were reportedly behind the United States government’s recent decision to purge Kaspersky Lab antivirus software from its computers, citing possible collusion with Russian intelligence. Last month, the US Department of Homeland Security issued a directive ordering that all government computers should be free of software products designed by Kaspersky Lab. Formed in the late 1990s by Russian cybersecurity expert Eugene Kaspersky, the multinational antivirus software provider operates out of Moscow but is technically based in the United Kingdom. Its antivirus and cybersecurity products are installed on tens of millions of computers around the world, including computers belonging to government agencies in the US and elsewhere. But last month’s memorandum by the US government’s domestic security arm alarmed the cybersecurity community by alleging direct operational links between the antivirus company and the Kremlin.

On Tuesday, The New York Times reported that the initial piece of intelligence that alerted the US government to the alleged links between Kaspersky Lab and Moscow was provided by Israel. The American paper said that Israeli cyber spies managed to hack into Kaspersky’s systems and confirm the heavy presence of Russian government operatives there. The Times’ report stated that the Israelis documented real-time cyber espionage operations by the Russians, which targeted the government computer systems of foreign governments, including the United States’. The Israeli spies then reportedly approached their American counterparts and told them that Kaspersky Lab software was being used by Russian intelligence services as a backdoor to millions of computers worldwide. The Israelis also concluded that Kaspersky’s antivirus software was used to illegally steal files from these computers, which were essentially infected by spy software operated by the Russian government.

It was following the tip by the Israelis that he Department of Homeland Security issued its memorandum saying that it was “concerned about the ties between certain Kaspersky [Lab] officials and Russian intelligence and other government agencies”. The memorandum resulted in a decision by the US government —overwhelmingly supported by Congress— to scrap all Kaspersky software from its computer systems. Kaspersky Lab has rejected allegations that it works with Russian intelligence. In a statement issued in May of this year, the company said it had “never helped, nor will help, any government in the world with its cyberespionage efforts”.

► Author: Joseph Fitsanakis | Date: 11 October 2017 | Pemalink

Intelligence chief warns of foreign interference in German coalition talks

A senior German intelligence official has warned that foreign powers, including Russia, could try to shape the outcome of talks by German parties to form a governing coalition, following last week’s national elections. The elections resulted in a major shakeup of Germany’s political landscape, as Chancellor Angela Merkel’s Christian Democratic Union lost nearly 10 percentage points compared to its 2013 election result. It is now forced to seek the participation of other conservative or centrist political parties in a broad governing alliance. Meanwhile, the far-right Alternative for Germany (AfD) won 12.6 percent, propelling it to third place and giving it 91 seats in the Bundestag. The AfD result marks the first time since 1945 that a German far-right party has managed to secure parliamentary representation.

On Thursday, senior intelligence official Burkhard Even said that, unlike France and the United States, Germany was spared major foreign interference during its recent election period. Speaking at a security conference in Berlin, Even, who is director of counterintelligence at the Federal Office for the Protection of the Constitution, said interference attempts were limited in both volume and impact. He described them as “low-level propaganda” operations conducted mainly by Russian media, which “did not have a significant impact on voters” and did not affect “the election outcome as a whole”. However, the official added that such attempts were possible in the post-election period. For instance, there could be efforts by foreign intelligence agencies to discredit certain government officials or political figures, said Even. Alternatively, methods of propaganda could be employed by a foreign power “to affect the forging of a new government”, he added, referring to the ongoing talks between German political parties to enter into a governing coalition. “The risks are enormous”, said Even, and “they are not diminishing”.

The far-right AfD campaigned in favor of ending Muslim immigration to Germany and expelling most non-Western immigrants from the country. The party has also called for a tighter relationship between Berlin and Moscow and opposes Germany’s decision to impose economic sanctions on Russia in response to its alleged intervention in Crimea. Some have suggested that the Russian intelligence services launched a secret campaign to gather voter support for the AfD in the run-up to last week’s elections.

 

► Author: Joseph Fitsanakis | Date: 29 September 2017 | Permalink

Sons of exposed Russian deep-cover spies want their Canadian citizenship back

FoleyThe sons of a Russian couple, who fraudulently acquired Canadian citizenship before being arrested for espionage in the United States, are seeking to reinstate their Canadian citizenship, which was annulled when their parents were found to be Russian spies. Tim and Alex Vavilov are the sons of Donald Heathfield and Tracey Foley, a married couple arrested in 2010 under Operation GHOST STORIES —a counterintelligence program run by the US Federal Bureau of Investigation (FBI). Following their arrest, their sons, who allegedly grew up thinking their parents were Canadian, were told that their parents were in fact Russian citizens and that their real names were Andrei Bezrukov and Elena Vavilova. Their English-sounding names and Canadian passports had been forged in the late 1980s by the KGB, the Soviet Union’s primary external intelligence agency.

The two boys were at the family’s home in suburban Cambridge, MA, on Sunday, June 27, 2010, when FBI agents conducted coordinated raids across New England, arresting their parents and eight more Russian ‘illegals’. The term is used to signify Russian non-official-cover operatives, namely intelligence officers who operate abroad without diplomatic cover and typically without connection to the country they spy for. It is now believed that Bezrukov and Vavilova were recruited as a couple in the 1980s by the KGB’s Department S, which operated the agency’s ‘illegals’ program.

But the two brothers, who were born in Canada, are currently involved in a prolonged legal battle to have their Canadian citizenship reinstated. The latter was rescinded when it became clear that their parents’ Canadian passports were fraudulent. According to the Canadian Citizenship Act, children born in Canada to “employees of a foreign government” are not entitled to Canadian nationality. But the brothers argue that they were 20 and 16 when their parents were arrested and were unaware of their double identities. It follows, they told Canada’s newsmagazine Maclean’s in August, that they cannot be punished for their parents’ crimes.

This past June, Canada’s Federal Court of Appeal overturned the decision of a lower court and ordered the government to reinstate Alex Vavilov’s Canadian citizenship. Now the government has until September 20 to decide whether to appeal the Federal Court of Appeal’s decision to the Supreme Court. If it does not, or if it upholds the decision of the Federal Court of Appeal, it is thought that Alex’s brother, Tim, will also have his Canadian citizenship reinstated.

But the case may be further-complicated by allegations made by the Canadian Security Intelligence Service (CSIS) that Tim was aware of his parents’ espionage activities when they were arrested by the FBI. The CSIS claims that the two Russian spies had groomed Tim to enter the intelligence profession, and that the then-20-year-old had given an oath of allegiance to the SVR —the KGB’s post-Cold-War successor agency. But Tim Vavilov denies he was groomed or “sworn-in” by the Russians, and argues that he has never been presented with evidence of this allegation, even though his parents’ home in Massachusetts was bugged by the FBI for nearly a decade.

► Author: Joseph Fitsanakis | Date: 15 September 2017 | Permalink

Russia jailed senior intelligence officers for helping CIA nab notorious hackers

FSB - JFTwo senior officers in the Russian intelligence services were charged with treason after they were found to have helped the United States catch two notorious Russian hackers, according to reports in the Russian media. Sergey Mikhailov was a career officer in the Federal Security Service —a descendant of the domestic section of the Soviet-era KGB— which is often referred to as Russia’s equivalent of the United States Federal Bureau of Investigation. Mikhailov had risen through the ranks of the FSB to eventually head the agency’s Center for Information Security. Known in Russia as CIB, the Center is tasked with investigating electronic crime in the Russian Federation.

But in December 2016, Mikhailov and one of his trusted deputies in the CIB, Dmitry Dokuchaev, were suddenly removed from their posts and arrested. The arrests marked some of the highest-profile detentions of intelligence officers in Russia since the demise of the Soviet Union. Russian authorities refused to reveal the reasons for the arrests, but confirmed that the two men had been charged with treason. Reports soon surfaced in the Russian media, claiming that Mikhailov and Dokuchaev were arrested for their involvement in a Russian criminal hacker gang. Some Western media, including The New York Times, speculated that the two men may have been arrested for helping US intelligence investigate Russian interference in the 2016 US presidential election.

But now a new report alleges that Mikhailov and Dokuchaev were charged with treason after helping the US Central Intelligence Agency catch two prolific Russian hackers. The report was aired on Russian television station TV Dozhd, also known as TV Rain, a privately owned channel based in Moscow, which broadcasts in Russia and several other former Soviet Republics. One of the hackers, Roman Seleznev, known in hacker circles as Track2, reached worldwide notoriety for defrauding major credit card companies of tens of millions of dollars. He was arrested in 2014 in the South Asian island country of Maldives and eventually extradited to the US to stand trial. He was sentenced to 27 years in prison, which he is currently serving. The other hacker, Yevgeniy Nikulin, was arrested in the Czech Republic in 2016, pursuant to a US-issued international arrest warrant. He is now awaiting extradition to the US, where he is expected to be tried for hacking several high-profile companies, including DropBox and LinkedIn.

TV Dozhd said that Russian authorities are also suspecting the men of being members of hacker gangs, but that their main charges relate to their close cooperation with American intelligence agencies, reportedly in exchange for cash.

► Author: Joseph Fitsanakis | Date: 25 August 2017 | Permalink

Russian spy services raid bomb lab in Moscow, foil large-scale suicide plot

ISIS RussiaRussian intelligence services say they have foiled a large-scale bomb plot, after raiding an explosives laboratory belonging to the Islamic State and arresting four suspects. The four men were allegedly planning to target the Moscow Metro transit system and a busy shopping center in the Russian capital. In a statement released to the media this morning, the Russian Federal Security Service (FSB) did not specify the intended targets of the plotters. But it said it had arrested four people during an early morning raid at an explosives laboratory located in the Moscow suburbs. The FSB said that its officers confiscated large quantities of peroxide-based explosives that resemble the material used by the Islamic State in the November 2015 attacks in Paris, the March 2016 attacks in Brussels, and last May’s suicide bombing in Manchester.

One of the men arrested has been named by the FSB as Akbarzhon A. Dzhalilov, 22, a Kyrghyz-born Russian citizen. The other three men, who have not yet been named, are all from former Soviet Republics of Central Asia. Russian media reported that the Moscow cell was being commanded and directed by the Islamic State in Syria. Two Russian-speaking men from the Russian Caucasus, who are located in Syria, are thought to have been handling the cell’s activities. Russian intelligence services estimate that at least 2,500 Russian citizens have move to the Middle East to join jihadist groups in the past three years.

Had it been carried out, the attack would have been added to a growing list of terrorist incidents against Russia since 2015, which are related to the Kremlin’s decision to enter the Syrian Civil War. In October of that year, the Islamic State claimed responsibility for the bombing of Metrojet Flight 9268, a chartered commercial flight operated by Russian company Kogalymavia. The chartered airliner went down over Egypt’s Sinai Peninsula, killing all 217 passengers and crew on board —the worst disaster in Russian aviation history. In November of 2016, the FSB reportedly foiled another attack by five members of the Islamic State in Moscow. In February of this year, a seven-member Islamic State cell was busted in Yekaterinburg, Russia’s fourth-largest city, while it was planning attacks in several metropolitan areas, including Moscow and St. Petersburg. In April, the North Caucasus-based Imam Shamil Battalion claimed responsibility for a suicide attack in the St. Petersburg Metro transit system, which killed 15 train passengers. The group, whose existence was unknown before the St. Petersburgh attack, said it supported al-Qaeda and perpetrated the attack in retaliation for Moscow’s involvement in the Syrian Civil War.

► Author: Ian Allen | Date: 14 August 2017 | Permalink

Russian aid center in Serbia rejects claims that it is an intelligence base

Russian-Serbian Humanitarian CenterStaff at a Russian disaster relief center in southern Serbia have rejected claims by American officials that the facility operates as an espionage arm of Moscow’s foreign policy in the Balkans. The Russian-Serbian Humanitarian Center was built in 2012, at a cost of nearly $40 million, following an agreement between Belgrade and Moscow. Its stated mission is to “provide humanitarian emergency response in Serbia and other Balkan states” through the provision of humanitarian assistance to those in need and training local emergency response crews. The center is located in the outskirts of Serbia’s fourth largest city of Niš, not far from the country’s border with Kosovo, a former Serbian province that unilaterally declared independence in 2008. Serbia refuses to recognize Kosovo’s independence, a decision that is strongly backed by Russia. It is also close to the headquarters of the North Atlantic Treaty Organization’s peacekeeping force stationed in Kosovo, which houses 4,000 international troops, including 600 Americans.

Western officials have raised concerns that the disaster relief center is in reality an intelligence base, from which Russia conducts some of its espionage operations in the Western Balkans. It has also been suggested that the center could operate as a military base in a potential Russian military operation in the former communist state. In June, the United States Deputy Assistant Secretary of State for European and Eurasian Affairs, Hoyt Brian Yee, publicly described the compound as “the so-called humanitarian center” in Serbia. Speaking during a US Senate hearing on southeastern European politics, Yee said the Department of State was concerned about the center’s unofficial use. He also expressed reservations about Moscow’s request that the Serbian government grants the center diplomatic immunity, similar to that which covers the activities of the Russian embassy in Belgrade.

Moscow responded to American allegations of espionage by inviting local and international media representatives to the center on Wednesday. The center’s co-director, Viacheslav Vlasenko, told reporters that the center was “very open”, adding that its staff consisted of 15 Serbs and five Russians who were dispatched to Serbia from Russia’s Ministry of Emergency Situations, known as EMERCOM. Vlasenko said that Moscow’s request for diplomatic immunity for the center was solely aimed at reducing the annual taxes that the facility had to pay.

Regular readers of intelNews will recall allegations made last October by authorities in Serbia’s neighboring state of Montenegro —later repeated by Britain— that nationalists from Russia and Serbia were behind a failed plot to kill the country’s then-Prime Minister Milo Dukanović and spark a pro-Russian coup in the country. The allegations surfaced after 20 Serbians and Montenegrins were arrested by police in Montenegro on election day, October 16, as Montenegrins were voting across the Balkan country of 650,000 people. In response to allegations that the coup had been hatched in neighboring Serbia, Serbian Prime Minister Aleksandar Vučić said that he would not allow Serbia to “act as the puppet of world powers”, a comment that was clearly directed at Moscow. Russia has vehemently denied the allegations.

► Author: Joseph Fitsanakis | Date: 13 July 2017 | Permalink

Russia allegedly planning to expel 30 American diplomats in a few weeks

US embassy in MoscowRussia is planning to expel approximately 30 American diplomats from its territory, and seize buildings and property belonging to the United States Department of State, according to Russian media reports. The expulsions will be in response to the expulsion last December of 35 Russian diplomats stationed in the US by the administration of President Barack Obama. In addition to expelling the diplomats, Washington also reclaimed two “recreational facilities” (in reality intelligence outposts) that were used by the Russians in New York and Maryland. The White House said that the expulsions were ordered in response to alleged efforts by Russia to interfere in the 2016 US presidential election.

Observers, including the present author, were confident at the time that the Kremlin would respond in kind. In a surprising move, however, the Russian President Vladimir Putin said he would not respond to Mr. Obama’s move, in the hope that US-Russian relations would improve with the arrival of the new president in the White House. He added that Russia reserved the right to retaliate at a later time. Moscow’s response was met with praise by the then-president-elect Donald Trump and his transition team.

But Russia’s hopes for warmer relations with the US under Mr. Trump’s leadership do not seem to be materializing. A recent article in the daily Russian newspaper Izvestia reported that the Kremlin thought it was “outrageous” that the Trump White House had not yet returned the two seized compounds to the Russian Ministry of Foreign Affairs and not rescinded the expulsions of the 35 diplomats and their families. It also claimed that President Putin raised the issue with his US counterpart during their July 7 meeting in the German city of Hamburg. The Moscow-based newspaper quoted unnamed senior Russian officials, who said that Russia was preparing to expel dozens of American diplomats and seize US diplomatic facilities soon.

It appears that Russia will wait until the upcoming meeting between the US Undersecretary of State Thomas Shannon and the Russian Deputy Foreign Minister Sergei Ryabkov, which has been scheduled for later this month in St. Petersburg. If no US assurances for the return of the compounds and diplomats are made at that time, Moscow will proceed with its tit-for-tat plan. When asked about Izvestia’s article, the Russian Minster of Foreign Affairs, Sergei Lavrov, replied that the Kremlin was “weighing specific measures” in response to last December’s expulsions of Russian diplomats from the US. However, Mr. Lavrov said he did not want to elaborate at the present time, while also refusing to deny the newspaper’s allegations.

► Author: Joseph Fitsanakis | Date: 12 July 2017 | Permalink

North Korea secretly imports Russian oil through Singapore, says defector

Ri Jong-hoThe government of North Korea uses intermediary firms in Singapore to import thousands of tons of Russian oil each year, according to a senior North Korean defector who has spoken publicly for the first time since his defection. Ri Jong-ho was a senior official in the Democratic People’s Republic of Korea under its previous leader, the late Kim Jong-il. He rose through the ranks of the Workers’ Party of Korea and was directly mentored by Kim, who personally appointed him to a post in Bureau 39. The powerful body is in charge of securing much-needed foreign currency for Pyongyang —often through illegal activities— and partly funds the personal accounts of the ruling Kim dynasty.

From the mid-1990s until his 2014 defection, Ri spent nearly three decades in senior positions inside the DPRK. These included the chairmanship of the board of the Korea Kumgang Group, a state-managed firm that oversees large-scale economic activity in North Korea, such as constructing energy networks and commissioning oil and natural-gas exploration. Between 1998 and 2004, Ri lived in the Chinese city of Dalian, where he headed the local branch of the Korea Daesong Trading Corporation. The Pyongyang-based company facilitates North Korea’s exports to China in exchange for Chinese goods and products.

But Ri’s mentor, Kim Jong-il, died in 2011. His son and successor, Kim Jong-un, engaged in a brutal campaign to remove his father’s advisers and replace them with his own people. During that time, said Ri, thousands of senior and mid-level officials were purged, some physically. Frightened and disillusioned, Ri defected with his family to South Korea in October 2014; fifteen months later, in March 2016, he arrived in the United States. On Tuesday, the Voice of America published Ri’s first public interview since his defection.

Among other things, the former Bureau 39 official said that the North Korean regime sustains itself with the help of oil it imports from nearby countries. One of the regime’s main sources of energy is Russia, which supplies Pyongyang with between 200,000 and 300,000 tons of oil every year. But the trade does not occur directly, said Ri. Moscow sells the oil to energy-trading companies in Singapore. These mediators then sell the oil to the DPRK through separately agreed contracts, so that Russia does not appear to be providing Pyongyang with desperately needed oil. The so-called “Singapore line” was established by North Korea in the 1990s, said Ri, and appears to still be active. In addition to Russian oil, the DPRK imports approximately 500,000 tons of oil per year from China, through pipelines, according to Ri.

► Author: Joseph Fitsanakis | Date: 29 June 2017 | Permalink

New clues emerge about targeted efforts by Russia to hack US elections

GRUNew information about carefully targeted attempts by Russian operatives to compromise the November 2016 presidential elections in the United States have emerged in a newly published intelligence document. The document, which dates from May of this year, was produced by the US National Security Agency and published on June 5 by The Intercept. The web-based outlet published the leaked document on the same day that Reality Leigh Winner, a US federal contractor with a top-security clearance, was charged with espionage for leaking classified documents to the media. This has led to speculation that Winner may be the source of the leak.

The NSA document details attempts by hackers to compromise the online accounts of over 100 election officials, as well as employees of private contractors involved in administering the election process. The attempts reportedly took place during the period leading up to November 8, 2016. To do that, hackers resorted to a technique commonly known as ‘spear-fishing’. They sent carefully crafted emails, claiming to be from Google, to specifically targeted individuals. The goal was to trick the email recipients into downloading and opening Microsoft Word attachments, which were infected with malware. The infected software would then allow the hackers to remotely access the compromised computers. The NSA document states that at least one targeted person had his or her computer compromised though the ‘spear-fishing’ technique. Importantly, the leaked document appears unequivocal in its assessment that the hackers behind the ‘spear-fishing’ attacks worked for the General Staff Main Intelligence Directorate (GRU) of the Russian armed forces. The document also states that the main goal of the attacks was to compromise the software used to manage voter registration lists, and that the attackers were operating under a “cyber espionage mandate specifically directed at US and foreign elections”.

American intelligence officials have previously said that Russian spies launched in a complex and prolonged campaign to undermine public faith in the US electoral process. It is also known that the Russian campaign targeted election officials in the months leading up to the November 2016 elections. But the NSA report is the first publicly available description of some of the specific techniques employed by the alleged Russian hackers as part of their campaign. The leaked document does not provide technical details about the ‘spear-phishing’ campaign. Nor does it discuss whether the attacks were successful, whether vote tallies were actually compromised, or whether the election process itself was sabotaged by the hackers. The Intercept said it contacted the NSA and the Office of the Director of National Intelligence, who refused to publicly comment on the content of the NSA report.

► Author: Joseph Fitsanakis | Date: 09 June 2017 | Permalink

Russian espionage in US increasingly sophisticated and brazen, say sources

Russian embassy in WashingtonRussian espionage in the United States has become increasingly sophisticated and brazen, and American counterintelligence professionals are finding it difficult to contain it “after years’ worth of inattention” according to sources. According to Politico, Washington ignored Russian intelligence operations in the 1990s, believing that Moscow’s numerous domestic problems kept its attention away from America. But under Vladimir Putin, Russia rebuilt its espionage network in the US, to the point that now “Moscow’s espionage ground game [on American soil] is growing stronger and more brazen than ever”.

The news outlet cited “half a dozen current and former US intelligence officials”, who said that America has been “ignoring Russia for the last 15 years”. During that time, Washington focused much of its intelligence-related attention to the Middle East and Central Asia. But Russia used that opportunity to rebuild its espionage network on American soil. Currently, the Federal Bureau of Investigation —the US agency that is in charge of counterintelligence work— is finding it difficult to keep an eye on Russian espionage operations, partly because of the size of Russian operations. One US intelligence official told Politico that the Russians “have just got so many bodies” and are able to evade FBI surveillance.

It is now commonplace, say sources, for Russian “diplomats” to be found wandering around the US without permission from American authorities. Foreign diplomats are required to notify the US Department of State in advance each time they intend to travel more than 50 miles from their consular base, and the FBI must consent before permission to do so is granted. But the Russians are now routinely breaking this requirement; what is more, “half the time they’re never confronted” by the FBI, allegedly because Washington is does not wish to antagonize Moscow in light of the fragile state of affairs in Syria. One US intelligence official told Politico that the Russian “diplomats” appear to be secretly visiting locations across America “where underground fiber-optic cables tend to run”. They appear to be mapping the US telecommunications infrastructure, “perhaps preparing for an opportunity to disrupt it”, said the source.

► Author: Joseph Fitsanakis | Date: 02 June 2017 | Permalink

Ukraine raids Russian internet search engine company as part of ‘treason’ probe

YandexUkrainian security service personnel raided the offices of a Russia-based internet search engine firm in two cities on Tuesday, as part of a treason investigation. The probe is reportedly related to the ongoing dispute between Kiev and Moscow, which intensified after 2014, when Russia unilaterally annexed the Russian district of Crimea. The Ukrainian government also accuses the Kremlin of clandestinely supporting pro-Russian insurgents in southeastern Ukraine, something that Moscow denies.

Earlier this month, Kiev announced that it would be blocking its citizens from using social media networks that are popular in Russia, including Yandex, a search engine that holds the lion’s share of the Russian internet usage market. The Ukrainian government argued that Russian social are were being used by Moscow to stir up pro-Russian sentiment and organize pro-Russian insurgents and activists inside Ukraine.

On Tuesday, members of Ukraine’s Security Service (SBU) raided the offices of Yandex in the Ukrainian capital Kiev and in the city of Odessa, Ukraine’s third largest city, located on the Black Sea coast. The two locations that were raided by the SBU are registered as subsidiaries of Yandex, which is based in the Russian capital Moscow. In a statement issued on the same day, the SBU said that the simultaneous raids were part of a wider “treason probe”. The security service argues in the statement that Yandex had been found to be sharing the personal information of Ukrainian Internet users with the Russian intelligence services. The illegally shared information included the details of Ukrainian military personnel, said the SBU statement. In turn, Moscow used the data provided by Yandex to plan, organize and carry out “espionage, sabotage and subversive operations” in Ukraine, said the SBU.

Late on Tuesday, a statement issued by Yandex in Moscow confirmed the SBU raids and said it would cooperate with the investigation by the Ukrainian authorities. Meanwhile, Kiev has said that the ban on Russian social media and Internet search engines will remain active for at least three years.

► Author: Joseph Fitsanakis | Date: 31 May 2017 | Permalink

Israel revises intel-sharing rules with US, after alleged disclosure to Russians

Donald Trump and Benjamin NetanyahuAuthorities in Israel have revised their intelligence-sharing protocols with the American government after it became known that United States President Donald Trump inadvertently exposed Israeli secrets to Russia. The alleged exposure of Israeli secrets came earlier this month, during a meeting between Mr. Trump and a delegation of Russian government officials, which included Foreign Minister Sergey Lavrov and Sergey Kislyak, Moscow’s Ambassador to Washington.

During the meeting, the US President allegedly gave the two Russians details about plans by the Islamic State to smuggle explosives onboard airplanes, by hiding them inside laptop computers. However, according to reports in the American press, the information shared by Mr. Trump originated from Israel, which had voluntarily shared it with US intelligence. What is more, Tel Aviv had not authorized Washington to share the precise details behind this intelligence with other countries. Some reports in the US media suggest that Mr. Trump shared the Israeli-derived intelligence with the Russians in such a way as to expose ‘sources and methods’ —that is, the most sensitive aspects of the intelligence business, which intelligence agencies typically never disclose to adversaries. Additionally, even though the US president claims he never disclosed the source of the information, American media reports suggest that the Russians could easily determine that it came from Israel.

Israeli sources allegedly complained strongly to Washington, claiming that the intelligence shared by the US president “had put an [Israeli] agent’s life in peril”. Tel Aviv’s reaction appears to have been swift. On Wednesday, Israel’s Defense Minister Avigdor Liberman said in an interview that Tel Aviv promptly “did our checks” and “clarified [things] with our friends in the United States”. Speaking to Israel Army Radio, the official radio station of the Israel Defense Forces, Mr. Liberman said that Israel had done “a spot repair”, prompting the Voice of America to claim that the Jewish state had altered its intelligence-sharing methods with the US. Liberman was asked by the Israel Army Radio to clarify, but refused to specify what changes had been made in the Israel-US intelligence-sharing arrangements. He only added that “there is [now] unprecedented intelligence cooperation with the United States”.

► Author: Joseph Fitsanakis | Date: 25 May 2017 | Permalink