After Trump’s Saudi Arabia Speech, Iran Responds

After President Trump delivered his speech in Saudi Arabia that included harsh words, rightly so regarding Iran, it was predicted by the owner of this site that Tehran would respond. Responses are beginning to surface and militant operations are probable.

Primer:

Iran’s Motivations for Supporting Terrorist and Militant Groups

In part from Byman: Iran has supported terrorist and militant groups in the Islamic world since the 1979 revolution. In his 2016 testimony, Director of National Intelligence (DNI) James Clapper warned: “Iran—the foremost state sponsor of terrorism—continues to exert its influence in regional crises in the Middle East through the Islamic Revolutionary Guard Corps—Qods Force (IRGC-QF), its terrorist partner Lebanese Hizballah, and proxy groups” – an assessment that has stayed roughly constant for many years.

Iran has long sought to “try hard to export our revolution to the world,” in the words of Ayatollah Khomeini, the clerical regime’s dominant revolutionary leader. This goal is embedded in Iran’s constitution and in the missions of organizations such as the Islamic Revolutionary Guard Corps (IRGC), a military and paramilitary organization that oversees Iran’s relationships with many substate groups. More here.

***   ArmControl.org

Iranian President: ‘We Need Missiles’ to Confront Trump Admin, Enemies
Recently re-elected Rouhani takes aim at Trump administration as Congress passes new sanctions

Recently re-elected Iranian President Hassan Rouhani lashed out at the Trump administration this week, describing it as ignorant and saying that Iran “needs missiles” to confront the United States and its allies, according to recent remarks certain to rile leaders in Washington, D.C.

Just days after President Donald Trump blasted the Islamic Republic for its illicit ballistic missile program and support of terrorism in the Middle East, Rouhani confirmed that Iran would not cease its missile activity, despite repeated calls by U.S. officials.

“We need missiles and the enemy should know that we make everything we need and we don’t pay an iota of attention to your words,” Rouhani was quoted as saying on Wednesday during a meeting with Iranian cabinet members. “The remarks by the enemies of the Iranian nation against Iran’s missile power are out of ignorance.”

The Iranian leaders remarks support recent comments by senior military leaders in the country, who have repeatedly declared that Iran will “never stop” developing ballistic missiles, a program that has raised concerns with the U.S. intelligence community, which assesses that Iran’s missile program could be used to carry a nuclear weapon.

The remarks came as Iran announced the construction of a third underground ballistic missile production factory, helmed by Iran’s Revolutionary Guard Corps, or IRGC.

Iranian General Amir Ali Hajizadeh, and IRGC leader, said the factory is meant to boosts Tehran’s “missile power” and intimidate the United States and “Zionist regime,” or Israel.

“We will increase our missile power. Our enemies, the United States, and the Zionist regime (Israel) are naturally upset and get angry at our missile production, tests and underground missile facilities because they want Iran to be in a weak position,” Hajizadeh announced on Thursday.

The facility was built in the last few years, according to the IRGC. Iranian military leaders also are working on building Iran’s first “ground-to-ground” ballistic missile.

Iran’s repeated test firing of ballistic missiles, as well as its multiple space launches—which are believed to be cover for an intercontinental ballistic missile program—have riled the Trump administration and leaders of both parties on Capitol Hill.

A bipartisan delegation of nearly 50 senators announced on Thursday that it is moving forward with new legislation to increase economic sanctions on Iran as a result of its missile program, as well as the Islamic Republic’s support for terrorism and illegal weapons trade.

Sen. Robert Menendez (D., N.J.), a chief sponsor of the legislation, said that it is part of a larger effort to ensure that “Iran’s leaders understand they do not enjoy blanket impunity as the United States continues to live up to its commitments under the” nuclear agreement.

“Independent of the nuclear portfolio, and as President Rouhani starts his second presidential term, our broader policy towards Iran must be one that holds Tehran accountable for their destabilizing efforts in the region, illegal and dangerous missile technology development, and nefarious activities as the world’s leading sponsor of terrorism,” Menendez said. “As the administration continues to review its Iran policy, Congress must set out clear markers that impose real consequences to Iran’s illicit behavior that runs counter to our national security and that of our allies in the region.”

The legislation would impose mandatory sanctions on all individuals associated with Iran’s ballistic missile program, as well as those who perform transactions with them.

Sanctions also would be applied to those who support Iran’s terror operations, including the IRGC, which is not currently designated as a terror organization by the United States.

The legislation also requires President Trump to block the property of all individuals and entities involved in supplying, selling, and transferring prohibited arms and other weaponry to Iran.

A State Department official, speaking on background, told the Washington Free Beacon that the Trump administration is moving closer to finishing its comprehensive review of the Iran deal and dealing with Iran’s provocative actions in the region.

“As Secretary [Rex] Tillerson said, the Trump administration is currently conducting a comprehensive review of our Iran policy,” the official said. “Once we have finalized our conclusions, we will meet the challenges Iran poses with clarity and conviction.”

One veteran foreign policy adviser who is close to the White House told the Free Beacon that the Trump administration would not stand by as Iranian leaders mock and threaten the United States.

“The Obama administration treated the Iranians with kid gloves because that was to get the nuclear deal,” the source said. “That ended last January but the Iranians are still acting as if they have a friend in the White House. They threaten and mock the United States, our leaders, and our allies, and they expect us to roll with it. This president is not going to roll with it, and neither is Congress.”

Meanwhile, senior Iranian military leaders continue to criticize the Trump administration for its efforts to stop Iran’s missile program.

Iranian Armed Forces Brigadier General Massoud Jazzayeri offered harsh words for Secretary of State Tillerson following his call for Iran to cease its ballistic missile work.

“The U.S. secretary of state’s expectations of the Iranian president indicate the U.S. officials’ non-understanding of the Islamic Republic of Iran,” Jazzayeri was quoted as saying in the country’s state-controlled press.

Toronto Uni. Report on Russian Information Warfare

Image result for university of toronto citizen lab

Related reading: How The Citizen Lab polices the world’s digital spies

The Citizen Lab is an interdisciplinary laboratory based at the Munk School of Global Affairs, University of Toronto, Canada focusing on advanced research and development at the intersection of Information and Communication Technologies (ICTs), human rights, and global security. The Citizen Lab’s ongoing research network includes the Cyber Stewards Network, OpenNet Initiative, OpenNet Eurasia, Opennet.Asia. The Citizen Lab was a founding partner of the Information Warfare Monitor (2002-2012).

Russian spies may have backed email phishing campaign in effort to spread disinformation

218 email accounts across 39 countries targeted, report by University of Toronto’s Citizen Lab finds

New evidence of a global espionage campaign involving email phishing attacks and leaked falsified documents emerged on Thursday, with clues suggesting the Russian government might have been involved.

The targets spanned government, industry, military and civil society groups, each with ties to Russia or Russian interests, a report by the University of Toronto’s Citizen Lab suggests.

Although there is no definitive proof of Russia’s involvement in the attacks, there is “overlap” with previously reported Russian espionage activities — in particular, the work of a Russia-backed hacking group known as APT-28, or Fancy Bear.

Notably, Citizen Lab’s researchers say “an identical approach” to the phishing campaign described in their report was used in a March 2016 attack targeting Hillary Clinton’s presidential campaign and the Democratic National Committee.

“While we have no ‘smoking gun’ that provides definitive proof linking what we discovered to a particular government agency … our report nonetheless provides clear evidence of overlap with what has been publicly reported by numerous industry and government reports about Russian cyberespionage,” wrote Citizen Lab director Ron Deibert in a blog post.

U.S. reporter’s documents leaked, manipulated

The report focuses in part on what the authors have termed “tainted leaks,” leaks of stolen documents that are largely authentic but have been manipulated in certain parts to achieve a particular goal — in this case, a political one.

In the incident Citizen Lab examined, documents obtained through a phishing operation in October 2016 that targeted the email account of U.S. journalist David Satter were selectively modified in an apparent attempt to discredit Satter and his work and then posted online. Satter has reported on Russia for decades and was expelled from the country in December 2013.

In unpacking that particular leak, Citizen Lab then identified a further 218 unique email accounts spanning 39 countries that had been targeted using the same phishing method used to fool Satter.

The accounts belong to members of governments — including “a former Russian prime minister, members of cabinets from Europe and Eurasia, ambassadors, high-ranking military officers, CEOs of energy companies” — but also members of civil society organizations, such as academics, activists, journalists and employees with non-governmental organizations that have been critical of the Russian government or investigated its activities.

The scope of the targets, the report says, “suggests a well-resourced actor, such as a nation state.”

Fancy Bear

U.S. intelligence officials believe Russian-backed groups conducted a series of cyberespionage campaigns throughout 2015 and 2016 in an attempt to interfere with and potentially sway the outcome of last year’s presidential election.

One group in particular was mentioned frequently in coverage of the attacks: APT-28, sometimes referred to by the nickname Fancy Bear. It is believed that the group is backed by a nation state, if not a nation state itself — namelyRussia.

While Citizen Lab’s researchers could not make a “conclusive technical link” between their findings and Fancy Bear, they identified a number of similarities with the group’s prior attacks.

For example, some of the domain names used in the campaign Citizen Lab studied bear a striking similarity to a Fancy Bear linked phishing operation identified by the cybersecurity research firm Mandiant last year. There are also similarities with the methods used to break into the email account of Clinton’s campaign chairman, John Podesta — suggesting, at the  very least, two separate actors are sharing the same code.

Tainted Leaks

Civil society groups are particularly rich targets for cyberespionage campaigns, as they tend to lack the resources of larger or better funded organizations to deal with digital attacks. Of note, the researchers say that 21 per cent of those targeted in the campaign they studied were activists, academics, journalists, and NGOs — the second-largest set after government targets.

“Many of the civil society targets seem to have been singled out for the perception that their actions could pose a threat to the Putin regime,” the report said.

In Satter’s case, leaked documents were selectively modified in such a way that the majority remained authentic, but misinformation was seeded throughout, in an attempt to lend legitimacy to otherwise false information. The researchers compared Satter’s case with that of a prior attack on the grant-making organization Open Society Foundations (OSF).

For example, one document was modified “to make Satter appear to be paying Russian journalists and anti-corruption activists to write stories critical of the Russian government,” the report said.

In the OSF case, modifications were made to documents detailing a budget and funding strategies to make it appear as if the U.S.-based group was sponsoring Russian opposition leader Alexei Navalny’s Foundation for Fighting Corruption.

Earlier this month, falsified documents appeared in a trove of documents taken from staff on French President Emmanuel Macron’s election campaign.

Described as “fakes in a forest of facts,” the report concludes that such tainted leaks “test the limits of how media, citizen journalism, and social media users handle fact checking and the amplification of enticing but questionable information.”

However, University of Toronto political science professor Seva Gunitsky says the practice of tainting leaks with false information could ultimately backfire.

“If they actually discover something politically damaging in a future phishing attack, it will be hard to credibly claim it was a real find,” he said. “Of course, if the overall goal is just to sow informational chaos, tainted leaks are a good way of doing that.”

Brits Stop Sharing Intelligence with U.S. Due to Leaks

Didsbury Mosque, where the Abedi family worshiped. Credit – Associated Press.

“And other loose ends reported from the investigation include German magazine, Focus, which “reported that British police informed their German counterparts that Abedi had received paramilitary training in Syria,” AP writes. “It also said he passed through Duesseldorf airport four days before the concert attack. Citing unnamed federal security sources, Focus reported that Salman Abedi twice flew from a German airport in recent years and wasn’t on any international watch list…Focus reported that German authorities are now trying to determine whether Abedi had contact with Islamic extremists in Germany before flying to Manchester last week. It says he previously flew from Frankfurt to Britain in 2015.”

(Another item of note in the text below, the Didsbury mosque, is part of the global network of the Muslim Brotherhood)

The British government operated an “open door” policy that allowed Libyan exiles and British-Libyan citizens to join the 2011 uprising that toppled Muammar Gaddafi even though some had been subject to counter-terrorism control orders, Middle East Eye can reveal.

Several former rebel fighters now back in the UK told MEE that they had been able to travel to Libya with “no questions asked” as authorities continued to investigate the background of a British-Libyan suicide bomber who killed 22 people in Monday’s attack in Manchester. More here.

Image result for manchester search for terrorists

 

UK police find ‘significant’ evidence; May slams US on leaks

MANCHESTER, England (AP) — Home searches across Manchester and beyond have uncovered important items in a fast-moving investigation into the concert bombing that left 22 people dead, Manchester’s police chief said Thursday as a diplomatic spat escalated over U.S. leaks about the investigation to the media.

Greater Manchester Police Chief Constable Ian Hopkins told reporters the eight suspects detained so far are “significant” arrests, and “initial searches of premises have revealed items that we believe are very important to the investigation.”

A retired intelligence officer says any move by the United Kingdom to stop intelligence information sharing with the United States would be “suicidal.” Bob Ayers tells the AP the UK receives more information from the US than it provides. (May 25)

He did not elaborate, but those arrests around the northwestern English city include Ismail Abedi, the brother of 22-year-old Manchester Arena bomber Salman Abedi. The bomber’s father Ramadan Abedi and another brother Hashim have been detained in Libya.

As police raced to uncover the network that may have helped Abedi attack an Ariana Grande concert on Monday night, furious British officials blamed U.S. authorities Thursday for leaking details of the investigation to the media.

One British official told The Associated Press that police in Manchester have stopped sharing information about their bombing investigation with the U.S. until they get a guarantee that there will be no more leaks to the media. The official spoke on condition of anonymity because he was not authorized to speak publicly.

British Prime Minister Theresa May said she would discuss the leaks with President Donald Trump at a NATO summit. Upon her arrival in Brussels, May said the U.S.-British defense and security partnership is built on trust.

But she said “part of that trust is knowing that intelligence can be shared confidently.”

British officials are particularly angry that photos detailing evidence about the bomb were published in The New York Times, although it’s not clear that the paper obtained the photos from U.S. officials.

British security services are also upset that Abedi’s name was apparently leaked by U.S. officials while British police were withholding it — and while raids were underway in Manchester and in Libya, where the bomber’s father lives.

Hopkins, the Manchester police chief, said the leaks had “caused much distress for families that are already suffering terribly with their loss.”

Trump on Thursday pledged to “get to the bottom” of leaks of sensitive information, calling the leaks “deeply troubling.” He said he is asking the Justice Department and other agencies to “launch a complete review of this matter.”

The New York Times defended its publication of crime-scene photographs, saying its coverage had been “both comprehensive and responsible.”

“The images and information presented were neither graphic nor disrespectful of victims, and consistent with the common line of reporting on weapons used in horrific crimes,” the paper said.

May said the national threat level from terrorism remains at critical — the highest level, meaning that another attack may be imminent. Hun dreds of soldiers have replaced police protecting high-profile sites including Buckingham Palace and the Houses of Parliament in London.

“The public should remain vigilant,” May said.

Around the country, many people fell silent and bowed their heads at 11 a.m. for a minute in tribute to the bombing victims.

In Manchester’s St. Ann’s Square, where a sea of floral tributes grows by the hour, a crowd sang “Don’t Look Back in Anger” — a song by the Manchester band Oasis.

Queen Elizabeth II visited Royal Manchester Children’s Hospital on Thursday to talk to some of the victims, their families and medical staff.

“It’s dreadful. Very wicked, to target that sort of thing,” the 91-year-old monarch told 14-year-old Evie Mills and her parents.

Fifteen-year-old Millie Robson, wearing an Ariana Grande T-shirt, told the queen she had won VIP tickets to the pop star’s concert. She was leaving concert when the blast struck, remembering an intense ringing but not entirely aware that she was bleeding badly from her legs.

She credited her dad’s quick action in picking her up and tying off her wounds to stem the bleeding.

“I have a few like holes in my legs and stuff and I have a bit of a cut, and my arm and just a bit here, but compared to other people I’m quite lucky really,” she said.

In addition to those killed, 116 people received medical treatment at Manchester hospitals for wounds from the blast. The National Health Service said 75 people had been hospitalized.

In Berlin, former U.S. President Barack Obama and German Chancellor Angela Merkel sent a message of solidarity to the Manchester bombing victims.

“(This is) a reminder that there is great danger and terrorism and people who would do great harm to others just because they’re different,” Obama said.

Investigators are chasing Abedi’s potential links with jihadi militants in Manchester, Europe, North Africa and the Middle East. The bomber himself died in the attack.

France’s interior minister says Abedi was believed to have travelled to Syria, and U.S. Rep. Mike McCaul, chairman of the House Homeland Security Committee, said he was part of “a cell of ISIS-inspired terrorists.”

Investigators are trying to find whether Abedi knew several Manchester-based jihadis, including Libyan man Abdalraouf Abdallah, who was jailed in the U.K. for terror offenses, and Raphael Hostey, an IS recruiter killed in Syria.

Investigators are also looking into the Abedi family’s ties in Libya. Abedi’s father Ramadan was allegedly a member of the al-Qaida-backed Libyan Isl amic Fighting group in the 1990s — a claim he denies.

Manchester is home to one of Britain’s largest Libyan communities. Mohammed Fadl, a community leader, said the Abedi family is well known, but Salman did not attend many gatherings.

“Very few people in the community here were close to him and therefore Salman’s fanaticism wasn’t something the community was aware of,” he told the AP.

He said he had heard that Salman’s father took his son’s passport away amid concerns about his close ties to alleged extre mists and criminals.

Authorities are investigating whether Abedi could have been stopped, after Libyan community members in Manchester reported concerns about his views.

Akram Ramadan said Salman Abedi had been banned from Manchester’s Didsbury Mosque, one of the largest in the city.

“There was a sermon about anti-Daesh (IS) and he stood up and started calling the Imam — ’You are talking bollocks,’” Ramadan said. “And he gave a good stare, a threatening stare into the Imam’s eyes … he was banned.”

Fadl, the community leader, disputed that account and the bomber’s father insisted Wednesday in an interview with the AP that Salman had no links to militants, saying “we don’t believe in killing innocents.”

Abedi had been in Libya in the weeks before the attack, and German magazine Focus, citing unnamed federal security source, reported that he passed through Duesseldorf airport four days before the bombing.

A German security official told the AP on Thursday the report was accurate, speaking on condition of a nonymity because the information hadn’t been cleared for public release.

On the artistic front, Grande cancelled concerts that were to take place Thursday and Friday in London, and in several other sites in Europe. Next week’s premiere of the film “The Mummy” in London was also canceled.