The Plotting Begins to Surface at FBI/DoJ

Primer:

(Washington, DC)Judicial Watch today released Justice Department records showing that FBI Deputy Director Andrew McCabe did not recuse himself from the investigation into former Secretary of State Hillary Clinton’s unsecure, non-government email server until Tuesday, November 1, 2016, one week prior to the presidential election. The Clinton email probe was codenamed “Midyear Exam.”

While working as Assistant Director in Charge of the Washington Field Office, McCabe controlled resources supporting the investigation into former Secretary of State Hillary Clinton’s email scandal. An October 2016 internal FBI memorandum labeled “Overview of Deputy Director McCabe’s Recusal Related To Dr. McCabe’s Campaign for Political Office,” details talking points about McCabe’s various potential conflicts of interest, including the FBI’s investigation of Clinton’s illicit server, which officially began in July 2015:

While at [Washington Field Office] did Mr. McCabe provide assistance to the Clinton investigation?

Related reading: Nunes blasts DOJ, FBI for ‘failure’ to produce records relating to anti-Trump dossier

After the referral was made, FBI Headquarters asked the Washington Field Office for personnel to conduct a special investigation. McCabe was serving as [Assistant Director] and provided personnel resources. However, he was not told what the investigation was about. In February 2016 McCabe became Deputy Director and began overseeing the Clinton investigation.

The Overview also shows if asked whether McCabe played any role in his wife’s campaign, the scripted response was: “No. Then-[Assistant Director] McCabe played no role, attended no events and did not participate in fundraising or support of any kind.” More here.

Related reading: Russia never stopped its cyberattacks on the United States

Wider context:

Why do heads seem to be rolling—or at least tilting—at the Department of Justice and FBI?

Eight high ranking Department of Justice and FBI officials have been removed, reassigned or are rumored to be leaving. They include the top FBI agents who worked on two of the agency’s most high-profile investigations in the past two years: the probe into Hillary Clinton’s mishandling of classified information as secretary of state, and the Trump-Russia collusion investigation.

There’s been a great deal of news coverage about allegations of collusion between President Trump and Russia; much of the reporting apparently accurate and some of it not.

Less attention has been given to concurrent investigations that seem to be claiming scalps even if indirectly.

The investigations into the investigators include Congressional inquiries and a multi-faceted probe launched by Department of Justice Inspector General Michael Horowitz surrounding the FBI decision not to prosecute Clinton. Specifically, Horowitz—who was appointed by President Obama—said he’s reviewing:

  • Allegations that FBI Deputy Director Andrew McCabe and Assistant Attorney General Peter Kadzik should have recused themselves.
  • Allegations of improper political contacts by Kadzik.
  • Allegations that Justice Department and FBI employees improperly disclosed non-public information and were influenced by improper considerations in releasing certain documents just before the 2016 election.

Below are some of the players. Their inclusion in this article does not imply any wrongdoing. None of those mentioned are formally accused of any improper activities. Their past or pending job status may not be related to the controversies discussed. To the extent that any have commented, they firmly deny any misconduct and are staunchly defended by supporters and colleagues.

Fired: Sally Yates, Deputy Attorney General

Sally Yates, former Deputy Attorney General

Alleged philosophical mutiny for failing to defend presidential order on immigration; alleged politically-motivated “unmaskings.”

Under questioning from Congress, Yates admitted that as Deputy Attorney General under Loretta Lynch, she engaged in the sensitive practice of unmasking and reviewing classified documents from “Trump, his associates or any member of Congress.” Later, as Acting Attorney General, Yates ordered Justice Department attorneys not to defend President Trump’s ban on certain Muslim visitors from entering the U.S.

Latest: President Trump fired Yates in January 2017. She was both praised and criticized for her stance on the travel ban. Since her firing, Yates has attacked President Trump in public referring to him as as “shamelessly unpatriotic,” saying he has “indifference to truth,” and claiming his “respect for the rule of law” is “in tatters.”

Departed: Peter Kadzik, Department of Justice liaison to Congress, Assistant Attorney General for Legislative Affairs.

Peter Kadzik, former Justice Dept. Asst. Attorney General

Alleged conflicts of interest with the Hillary Clinton campaign and alleged disclosure of nonpublic information for political reasons.

During the FBI investigation of Hillary Clinton, Kadzik appeared to tip off Clinton presidential campaign chairman John Podesta about two issues: an upcoming hearing where a Justice Department official would be asked about the Clinton emails, and the timing of the release of some Clinton emails. Kadzik previously worked for Podesta as an attorney. He denied any wrongdoing.

Latest: Kadzik left the Justice Department in January 2017 and works in private practice.

“Retiring”: Andrew McCabe, FBI Deputy Director

Failure to exclude himself from leading the Hillary Clinton email probe despite alleged conflicts of interest.

Appointed by James Comey, McCabe led the FBI investigation that determined Hillary Clinton should not be prosecuted for her mishandling of classified emails. McCabe’s wife had reportedly received $700,000 for her unsuccessful Virginia senate campaign from close Clinton ally Virginia Governor Terry McAuliffe. (McAuliffe was also said to be under FBI investigation regarding campaign contributions from a Chinese businessman. He has not been charged and has denied any wrongdoing.)

Latest: News reports say McCabe will retire in early March when he’s eligible for his full pension.

Andrew McCabe, FBI Deputy Director

“Reassigned”: James Baker, FBI General Counsel

James Baker, FBI General Counsel

Reportedly under IG investigation for allegedly improperly leaking information.

Baker also served as counsel for McCabe during Congressional questioning. Separately, Baker was allegedly in contact with a reporter who published the first story about an anti-Trump “dossier” alleging ties between Trump and Russia. (The reporter denies Baker was a source.) The dossier was presented shortly before the election as if it were an intelligence investigative file. But it turned out to be political opposition research funded by the Hillary Clinton campaign and the Democratic National Committee. Congress is investigating whether the FBI improperly used the dossier to convince a secret court to authorize wiretaps to surveil Trump associates. The FBI reportedly secretly offered to pay the author of the dossier to keep pursuing leads after the election, but the deal wasn’t ultimately consummated.

Latest: Baker has reportedly been reassigned. His supporters have told reporters the reassignment is unrelated to the investigations and that he did nothing wrong.

“Transferred”: Peter Strzok, the top FBI agent on Special Counsel Robert Mueller’s team

Peter Strzok, FBI official

Alleged anti-Trump political bias.

Strzok is identified as the FBI official who softened language and watered down key findings in the Clinton email probe. He was the top FBI agent on Special Counsel Robert Mueller’s team investigating alleged Trump-Russia collusion and number two in FBI Counterintelligence office during Hillary Clinton email investigation. Strzok oversaw FBI interviews with Trump National Security Adviser Lt. Gen. Michael Flynn (who plead guilty to lying to the FBI).

While Strzok worked on the Trump-Russia investigation, the Inspector General unearthed anti-Trump text messages Strzok had exchanged with FBI attorney Lisa Page, a fellow member of Mueller’s team with whom Strzok was reportedly having an illicit affair.

Latest: Strzok was ousted from Mueller’s team and transferred to human resources in August after the controversial anti-Trump text messages were discovered.

Shifted: Lisa Page, FBI lawyer and McCabe senior adviser

Alleged anti-Trump political bias. 

Page was on the FBI Mueller team investigating alleged Trump-Russia collusion. She had exchanged anti-Trump text messages with Strzok, the top FBI agent on Mueller’s team, with whom she was reportedly having an illicit affair.

Latest: Page left the Mueller team last summer. Reports say the move was unrelated to the controversy.

Excerpts from text exchanges between FBI couple Strzok and Page who served on the Mueller team investigating Trump:Page: “I cannot believe Donald Trump is likely to be an actual, serious candidate for president” and “God(,) Trump is a loathsome human.”

Page: “I just saw my first Bernie Sander [sic] bumper sticker. Made me want to key the car.”

Strzok: “He’s an idiot like Trump. Figure they cancel each other out.”

Strzok called Trump “awful” and “an idiot” and said Clinton should win “100,000,000-0.’’

Strzok on Election Day when he learned Trump could win: “f*****g terrifying.”

Strzok: “I want to believe the path you threw out for consideration in Andy’s [believed to refer to McCabe] office that there’s no way he gets elected — but I’m afraid we can’t take that risk. It’s like an insurance policy in the unlikely event you die before you’re 40.’’

Page texted that she hoped Republican House Speaker Paul Ryan “fails and crashes in a blaze of glory.” Strzok replied that Republicans need “to pull their head out of that *ss. Shows no sign of occurring any time soon.”

Fired: James Comey, FBI Director under President Obama

Comey originally served under George W. Bush and briefly under President Trump. Once he was fired by Trump in May 2017, Comey secretly leaked a memo to the press to engineer the appointment of a special counsel to investigate alleged Trump-Russia collusion.

James Comey, former FBI Director

“Demoted”: Bruce Ohr, Associate Deputy Attorney General at the Department of Justice

Bruce Ohr, Justice Dept. official; Photo courtesy C-SPAN

Alleged improper political conflicts.

Bruce Ohr arranged to meet with the co-founder Fusion GPS, the political opposition research firm that compiled the anti-Trump “dossier,” according to court filings. Fusion GPS also hired Ohr’s wife, Nellie.

Latest: Ohr still works at the Justice Department, but was reportedly recently removed as associate deputy attorney general.

Investigator: Robert Mueller

Special Counsel investigating alleged Trump-Russia collusion in 2016 US election. Former FBI Director 2001-2013 under Bush and Obama. Mueller served as FBI Director under Comey when Comey was a top Bush Justice Department official.

Robert Mueller, former FBI Director, Special Counsel investigating alleged Trump-Russia collusion

Investigator: Michael Horowitz

Obama-appointed Department of Justice Inspector General investigating a wide range of alleged misconduct within FBI and Department of Justice.

Michael Horowitz, Department of Justice Inspector General

Romanians Hacked Surveillance Cameras in DC

Image result for washington dc surveillance cameras photo and more information here

Washington (CNN) Two Romanian hackers infiltrated nearly two-thirds of the outdoor surveillance cameras in Washington, DC, as part of an extortion scheme, according to federal court documents.

In a criminal complaint filed last week in the US District Court for the District of Columbia, the US government alleges that the two Romanian hackers operating outside the United States infiltrated 65% of the outdoor surveillance cameras operated by DC city police — that’s 123 cameras out of 187 in the city. The alleged hacking occurred during a four-day period in early January.
Side bar: Seems Mihai Alexandru Isvanca and Eveline Cismaru once had an operation in London. There is also an address where it seems lots of people lived.
The hacking suspects, Mihai Alexandru Isvanca and Eveline Cismaru, are also accused of using the computers behind the surveillance cameras to distribute ransomware through spam emails, according to an affidavit by Secret Service agent James Graham in support of the government’s criminal complaint. The affidavit alleges the hackers meant to use the malware to lock victims’ computers and then extort payments from them to regain access.
In the affidavit, the Romanians are accused of “intent to extort from persons money and other things of value, to transmit in interstate and foreign commerce communications containing threats to cause damage to protected computers.”
They were traced through their registered email addresses, one of which roughly translates into “selling souls” in Romanian, according to the affidavit.
*** But hold on, how bad was it? Don’t you love it when the matter is minimized or has lies attached?

WaPo: Hackers infected 70 percent of storage devices that record data from D.C. police surveillance cameras eight days before President Trump’s inauguration, forcing major citywide reinstallation efforts, according to the police and the city’s technology office.

City officials said ransomware left police cameras unable to record between Jan. 12 and Jan. 15. The cyberattack affected 123 of 187 network video recorders in a closed-circuit TV system for public spaces across the city, the officials said late Friday.

Brian Ebert, a Secret Service official, said the safety of the public or protectees was never jeopardized.

Archana Vemulapalli, the city’s Chief Technology Officer, said the city paid no ransom and resolved the problem by taking the devices offline, removing all software and restarting the system at each site.

An investigation into the source of the hack continues, said Vemulapalli, who said the intrusion was confined to the police CCTV cameras that monitor public areas and did not extend deeper into D.C. computer networks.

Ransomware is malware that is said to be proliferating. It infects computers, often when users click on a link or open an attachment in an email. It then encrypts files or otherwise locks users out until they pay.

The D.C. hack appeared to be an extortion effort that”was localized” and did not affect criminal investigations, city officials said.

On Jan. 12 D.C. police noticed four camera sites were not functioning properly and told OCTO. The technology office found two forms of ransomware in the four recording devices and launched a citywide sweep of the network where they found more infected sites, said Vemulapalli.

The network video recorders are connected to as many as four cameras at each site, she said.

“There was no access from these devices into our environment,” Vemulapalli said.

Interim Police Chief Peter Newsham said that police worked with OCTO but that the incident was limited to about 48 hours He said there was “no significant impact” overall.

City officials declined to say who they suspected in the attack.

Pakistani IT Congressional Case was a Spy Ring Tied to Hizbollah

Very little was advancing in this case that media was able to report. Now it seems the matter of the Pakistani IT personnel that worked for Debbie Wasserman Schultz and several other Democrat congressional members had a much more nefarious operation in Washington DC and in Falls Church, Virginia. Embarrassment is permeating through some key offices in Congress and if any of the people associated with this case were aware of any piece parts, well…draining the swamp could be in over drive soon…or should be.

Seems the FBI may have taken over the case from the Capitol police…..yikes

We have this doctor that appears to have fled the United States:

Ali A. al-Attar, born in Baghdad in 1963, a 1989 graduate of the American University of Beirut Faculty of Medicine. He subsequently emigrated to the United States and set up a practice in internal medicine in Greenbelt, Maryland, a suburb of Washington D.C. Al-Attar eventually expanded his business to include nine practices that he wholly or partly owned in Virginia and Maryland.

Al-Attar prospered and moved to upscale McLean, Virginia, but he soon found himself in trouble with both regulatory and tax authorities. In April 2009, his license to practice medicine was suspended by the Maryland State Board of Physicians due to “questionable billing practices.” Al-Attar refused to cooperate with the Board in subsequent investigations, which included inquiry into the level of care he was providing as well as his “unprofessional conduct” relating to sexual relationships with patients. His license to practice medicine was revoked in September 2011.

Al-Attar was also being investigated by the FBI for large scale health care fraud in 2008-9. He and his partner Dr. Abdul H. Fadul charged insurance companies more than $2.3 million for services their patients did not actually receive, with many of the false claims using names of diplomats and employees enrolled in a group plan at the Egyptian Embassy in Washington. In one case, the doctors claimed an embassy employee visited three of their clinics every 26 days between May 2007 and August 2008 to have the same testing done each time. The insurance company paid the doctors $55,000 for more than 400 nonexistent procedures for that one patient alone.

Al-Attar exploited the fact that he had a number practices in two states with separate billing and banking arrangements, including individual tax numbers, which enabled him to shift money around to fool his own accountants regarding his actual income. As in the case of the Egyptian Embassy, he was able to multiple-bill for the frequently fabricated services rendered once he obtained insurance information.

Al-Attar was indicted by the federal government acting on behalf of the IRS in March 2012 for having fraudulently prepared tax returns between 2004 and 2006. The IRS claimed that he and his business partner Fadul systematically diverted payments from the accounts of their several offices into their personal accounts, siphoning off more than $500,000. The government case involved the instances of fraud that were easiest to prove in court, but it was likely just the tip of an iceberg with millions more in additional money being diverted to offshore accounts in the Middle East and elsewhere.

Dr. Ali A. Al-Attar fled the United States after the indictment to avoid arrest and imprisonment. Late in 2012 he was observed in Beirut, Lebanon conversing with a Hezbollah official. It turns out that al-Attar is only a first generation Iraqi. He was born in Baghdad, but his parents were both from Iran. More here.

***

DC: The used car dealership known as CIA never seemed like an ordinary car dealership, with inventory, staff and expenses.

On its Facebook page, CIA’s “staff” were fake personalities such as “James Falls O’Brien,” whose photo was taken from a hairstyle model catalog, and “Jade Julia,” whose image came from a web page called “Beautiful Girls Wallpaper.”

If a customer showed up looking to buy a car from Cars International A, often referred to as CIA, Abid Awan — who was managing partner of the dealership while also earning $160,000 handling IT for House Democrats — would frequently simply go across the street to another dealership called AAA Motors and get one.

“If AAA borrows a car to Cars International and they have a customer, it was simply take the car across the street and sell it, and then later on give the profit back or not,” Nasir Khattak, who ran the longstanding AAA dealership, testified in a lawsuit. “There was no documentation… If you go and try to dissect, you will not be able to make any sense out of them because there were many, dozens and dozens, of cars transferred between the two dealerships and between other people.”

Khattak did not explain why he would ruin his existing business to help the Awans. “All of those transactions was to support Cars International A from AAA Motors,” he testified. “That’s why I did not make any money from my dealership because my resources were supporting Cars International A.”

He said only Imran Awan knew what became of the money. “It was Imram, [Abid] Awan’s brother, who was running the business in full control,” he said.

Imran Awan and his family members were congressional IT aides who investigators said made unauthorized access to the House Democratic Caucus server thousands of times. At the same time as they worked for and could read all the emails of congressmen who sat on committees like Intelligence, Homeland Security and Foreign Affairs, they also ran a car dealership that took money from a Hezbollah-linked fugitive and whose financial books were indecipherable and business patterns bizarre, according to testimony in court records.

While Imran and Abid Awan ran their car dealership in Falls Church, Va. in the early part of the decade, Drug Enforcement Agency officials a few miles away in Chantilly were learning that the Iranian-linked terrorist group frequently deployed used car dealerships in the US to launder money and fund terrorism, according to an explosive new Politico expose.

The money that disappeared between the Awans’ dealership, some $7 million in congressional pay, the equipment suspected of disappearing from Congress under their watch, and their other side businesses — all while they displayed few signs of wealth and frequently haggled in court over small amounts of money — raise questions about whether the Awans might have been laundering money or sending it to a third party.

“Based on the modest way Awan was living, it is my opinion that he was sending most of his money to a group or criminal organization that could very well be connected with the Pakistani government,” said Wayne Black, a private investigator who served as law enforcement group supervisor in Janet Reno’s Miami public corruption unit. “My instincts tell me Awan was probably operating a foreign intelligence gathering operation on US soil.”

Officials told Politico that prosecutors refused to help them punish top Hezbollah operatives involved in its money laundering network because of political concerns, such as fears of jeopardizing the Obama administration’s deal with Iran. Similarly, the Awans, who had close relationships to House Democrats including Debbie Wasserman Schultz and Gregory Meeks, have not been charged with any crimes surrounding the dealership nor with their House activities. The disclosure of a House IT breach shortly before the election by Pakistani-born Democratic staffers would have had political fallout.

Shortly before the 2016 election, investigators found huge amounts of House equipment unaccounted for under the Awans’ stewardship, and when they looked into the family further, they found that they had logged in to members’ computers for whom they did not work. There were signs that the House Democratic Caucus’ server “is being used for nefarious purposes” by the Awans, according to a House investigation, and “steps are being taken to conceal their activity.”

Politico tells the story of Ali Fayad, a “Ukraine-based arms merchant suspected of being a Hezbollah operative moving large amounts of weapons to Syria

Lebanese arms dealer Ali Fayad Ali Fayad, a suspected top Hezbollah operative whom agents believed reported to Russian President Vladimir Putin as a key supplier of weapons to Syria and Iraq, was arrested in Prague in the spring of 2014. But for the nearly two years Fayad was in custody, top Obama administration officials declined to apply serious pressure on the Czech government to extradite him to the United States, even as Putin was lobbying aggressively against it.

Abid Awan is married to a Ukranian named Nataliia Sova, who was herself on the House payroll as an IT aide in 2010 and 2011 for Reps. Emmanuel Cleaver, Ted Deutch, and Gabby Giffords. Abid incorporated Cars International in 2008, and Cars International A in 2009, taking out loans from the Congressional credit union while omitting the dealership from House financial disclosures. It was not clear how he could have been working at both the dealership and a high-paid congressional job.

In 2010, the CIA dealership took a $100,000 loan from Dr. Ali Al-Attar, who is of Iranian heritage and was a minister in the Iraqi government, according to court records. Al-Attar is a fugitive wanted by the U.S. government. Philip Giraldi, a former CIA officer, wrote that Attar “was observed in Beirut, Lebanon conversing with a Hezbollah official” in 2012–shortly after the loan was made.

The money was moved from Ali Al-Attar through accounts intended for Fairfax County real estate. Both Imran Awan and Khattak — who also put up $200,000 in cash as an investor in CIA — had realtors licenses.

It’s not clear where the dealership’s money was going, because it was sued by at least five different people on all ends of a typical car business who said they were stiffed. CIA didn’t pay the security deposit, rent or taxes for its building, it didn’t pay wholesalers who provided cars, and it sold broken cars to people and then refused to honor the warranties, the lawsuits say.

“The consignment agreements state it clearly that either Mr. Awan sells the cars for the agreed price no less $62,200 or return my cars back. I need my cars back,” Issmail Alchaleh, one wholesaler, wrote in court documents. Some of the consignment agreements use the same VIN for multiple cars.

Abid declared bankruptcy in 2010 to discharge debts racked up by the car dealership. One person who was listed on bankruptcy documents as being owed money by the dealership, Rao Abbas, later appeared on the House payroll as an IT aide, even though his most recent job experience was working at McDonalds. Democrats have refused to explain why they hired him.

Abid kept ownership of two houses in the bankruptcy by saying he was separated or divorcing from Sova, but even this year, they were still together, and Sova used Abid’s residence when incorporating her own car companies. Sova established a mysterious company called Alain LLC in 2009, followed by Discover EZ Car Buying Co. in 2014 and Regional Car Center Inc. in 2015. Virginia incorporation documents list Abid’s home address as the businesses’ location, and a Google search did not reveal any evidence of the dealerships existing, which is incongruous for a line of work where basic revenue depends on making sure potential customers know where to find them.

Other opaque companies, such as New Dawn 2001 and Acg LLC, were also established in 2011 out of Imran’s house.

A relative of the Awans told TheDCNF that Abid sent huge quantities of iPads and iPhones to Pakistan and that Imran frequently talked about Russia. They also sent money to a Pakistani police officer. The brothers’ stepmother, Samina Gilani, said in court documents that when the family spends time in Pakistan, the brothers are escorted by a motorcade of Pakistani government agents. Rep. Yvette Clarke, a New York Democrat who employed Abid, filed paperwork saying that $120,000 in technology equipment went missing while Abid managed it for the office.

Despite brothers Imran, Abid and Jamal and Imran’s wife, Hina Alvi, all making chief-of-staff level salaries of $160,000 on Capitol Hill, they displayed few signs of wealth in the US, further raising questions about where all the money was going. Abid is in a lawsuit against his stepmother after Abid replaced her with himself on his father’s life insurance policy, and his attorney, Jim Bacon, told a judge he needed money. Imran’s lawyer said his children were living in squalor. They reported few holdings on their House ethics disclosures.

They bought houses will little money down, then rented them out, insisting that rent be paid in cash, tenants told TheDCNF. Sources said the FBI generated Suspicious Activity Reports hundreds of pages long based on large cash deposits and international wires.

Members of Congress have refused to acknowledge what is well-known among the House bureaucracy, that investigators found conclusive evidence that the Awans wantonly violated House IT regulations. “There’s no question about it: If I was accused of a tenth of what these guys are accused of, they’d take me out in handcuffs that same day,” a fellow House IT aide said. But fellow IT aides with knowledge pertinent to the case said the FBI hasn’t even interviewed them.

Politico’s money-laundering story echoed similar themes: “Right now, we have 50 FBI agents not doing anything because they know their Iran cases aren’t going anywhere,” including investigations into allegedly complicit used-car dealers, a prosecutor said.

 

The Post Obama Iran Report

 

Former Mossad Chief explains, it is all about the Iran threat. Clearly, the Obama administration including is National Security Council and both Secretaries of State focused more on Israel and accusatory ‘occupier’ status than on Iran.

*** Image result for iran kitten hacking photo

Behzad Mesri, the Iranian national the US has accused of hacking HBO this year, is part of an elite Iranian cyber-espionage unit known in infosec circles as Charming Kitten, according to a report released yesterday by Israeli firm ClearSky Cybersecurity.

Known as an APT (Advanced Persistent Threat), this group has been active since 2013 and is believed to be operating under the protection of the local Iranian government.

The group’s activities have been first exposed in March 2014, when US cyber-security firm FireEye published a report entitled “Operation Saffron Rose.”

Charming Kitten —also tracked under various codenames such as Newscaster, NewsBeef, Flying Kitten, and the Ajax Security Team— was one of the most active Iran-based cyber-espionage units at the time, but once the FireEye report went public, the group dismantled its infrastructure and went dormant.

Subsequent research published by Iran Threats and ClearSky show that parts of the old Charming Kitten infrastructure, such as malware and credential theft resources, have been reused by another Iranian cyber-espionage unit named Rocket Kittens, and possibly more.

Various experts have pointed out that most of these groups are most likely operating under the protection and guidance of Iranian military, hence the reason why some resources are used not by one or two, but multiple APTs.

According to the official indictment, US officials said Mesri worked for the Iranian military, but that he also lived a separate life as a hacker. Evidence shows that Mesri defaced hundreds of websites and most likely carried out the HBO hack outside of his role in the Charming Kittens operations, most of which have targeted Iranian dissidents.

Mesri had connections to other Charming Kitten members

The 59-page ClearSky report released yesterday shows a web of connections between Mesri and other members of the Charming Kitten espionage unit, including connections to a hacktivist group known as the Turk Black Hat Security hacking group, where Mesri operated under the pseudonym of “Skote Vahshat,” together with other persons linked to Iranian APTs.

Besides Charming Kitten and the subsequent Rocket Kitten incarnation, Iran is home to other APT groups such as OilRig [1, 2], CopyKittens, and Magic Hound (Cobalt Gypsy, Timberworm), all very active.

In fact, Iranian actors are some of the most active groups around, albeit far from the most sophisticated. Their usual targets are businesses, human rights groups, individuals, and nearby governments of interest or at odds with the Iranian government — such as Saudi Arabian companies and government agencies, or Israeli military and government targets.

According to multiple reports, the Charming Kittens group of which Mesri is suspected of being a member, operated using mundane spear-phishing and watering hole attacks, and targeted individuals using made-up organizations and people, fake news sites, or by impersonating real companies.

The group was not sophisticated like US, Chinese, or Russian counterparts, but persisted with attacks until they got access to their targets’ email inbox and social media accounts, most likely to gather information on a person’s past or upcoming plans. More details here.

***

Image result for iran kitten hacking photo

Is Iran a cyber threat? Yes and gaining hacking abilities quickly.

Tehran poses an increasing cyber threat to the U.S., in light of the Trump administration’s allegations that Iran is violating United Nations Security Council resolutions tied to the nuclear agreement. Iran-sponsored hackers—dismissively referred to as “kittens” for their original lack of sophistication—are bolstering their cyber warfare capabilities as part of their rivalry with Saudi Arabia. But should President Donald Trump take further steps to scrap the nuclear deal, it could mean an uptick in Iranian state-sponsored cyber intrusions into American and allied systems, with the goals of espionage, subversion, sabotage and possibly coercion.

  • Since 2011, Iran has worked to establish itself as a prominent aggressor in cyberspace, alongside China, Russia and North Korea. Evolving from mere website defacement and crude censorship domestically in the early 2000s, Iran has become a player in sustained cyber espionage campaigns, disruptive denial of service (DDoS) attacks and the probing of networks for critical infrastructure facilities.
  • Iran wasn’t pursuing cyber capabilities with much urgency, experts say, until it was revealed  in 2010 that a joint Israeli-U.S. Stuxnet worm sabotaged nuclear centrifuges at Iran’s facility in Natanz. As the first-known instance of virtual intrusions resulting in physical effects, the operation demonstrated the potential effectiveness of such an attack and has informed much of Iranian cyber operations since.
  • Iran often has conducted disruptive cyber operations loosely in response to actions taken by others. It sees offensive cyber operations as an asymmetric but proportional tool for retaliation. For example, following the Stuxnet attack and the imposition of new sanctions on Iran’s oil and financial sectors in 2011, Tehran was suspected of retaliating in 2012 by releasing the Shamoon disk-wiping malware into the networks of Saudi oil giant Saudi Aramco and Qatar’s natural gas authority, RasGas. It also launched volleys of DDoS attacks against at least 46 major U.S. financial systems.
  • Iran commonly conducts its state-sponsored cyber operations behind a thin veil of hacktivism. From 2011 to 2013, a group calling itself the Qassam Cyber Fighters launched DDoS attacks that flooded the servers of U.S. banks with artificial traffic until they became inaccessible. In March 2016, the Justice Department unsealed indictments of seven individuals—employees of the Iran-based computer companies ITSecTeam and Mersad Company—for conducting the DDoS attacks — and intrusions into a small dam in upstate New York—on behalf of the Islamic Revolutionary Guard Corps (IRGC), the arm of Iran’s military formed in the aftermath of the 1979 Iranian revolution.

While much of Iran’s cyber operations have been attempts at asymmetric disruption against its Gulf rivals, Israel and the United States, it has recalculated since the 2015 negotiation of the Joint Comprehensive Plan of Action (JCPOA), the Iran nuclear deal.

  • Under scrutiny by the international community, Iran has largely reined in disruptive attacks against the U.S., with some operations still deployed against Saudi Arabia. In November 2016, a variant of the disk-wiping malware Shamoon was deployed against Saudi aviation and transportation authorities.

Rather than relying on disruptive attacks against the West, Iran has pursued cyber-enabled information warfare against its regional competitors, namely Saudi Arabia. By utilizing cyber proxies to access and weaponize privileged information, Iran has subtly sought to undermine Saudi Arabia’s political standing in the region and in the eyes of international allies. This kind of grey-zone offensive—an act short of war—is a page right out of the Russian intelligence playbook of active measures in Europe and the U.S.

  • In April 2015, the pro-Saudi newspaper Al Hayat was hacked by a group calling itself the Yemen Cyber Army, which experts say has loose ties to Iran. The attack replaced the media outlet’s front page with threatening messages aimed at dissuading the Saudis from getting involved in the civil unrest bubbling across their southern border. The hack was followed quickly by stories on Iran’s state-run FARS news agency and Russia’s RT network, citing the Yemen Cyber Army for breaching the Saudi foreign ministry and its threats to release personal information on Saudi officials and expose diplomatic correspondence that allegedly suggested Saudi support of Islamist groups in the region. One month later, WikiLeaks published material likely taken from the trove of stolen correspondence.
  • In another example, an Iran-linked Hezbollah hacktivist group known as the Islamic Cyber Resistance leaked sensitive material related to the Saudi army, the Saudi Binladin Group and the Israeli Defense Forces, following the December 2013 assassination of Hezbollah leader Hassan al-Laqis, according to Matthew McInniss, an AEI scholar now working on Iran in the Trump State Department. Ties also have been detected between Iran and the Syrian Electronic Army, the hacking wing of the regime of Bashar al-Assad, according to Cipher Brief expert and former CIA and NSA chief Michael Hayden.
  • The link between Iranian government support and the cyber proxy actors is difficult to prove. But it would follow the pattern of Iranian military assistance given to other types of proxy forces in Lebanon, Syria and Yemen.
  • The governmental structure in Iran that oversees cyber-related activities is the Supreme Council of Cyberspace, established by Ayatollah Ali Khamenei in March 2012. It consists of representatives from various Iranian intelligence and security services. However, the direct command-and-control structure for engaging in cyber operations remains a mystery, particularly when it comes to cyber proxies. While it could be the responsibility of Iran’s Quds Force, the external wing of the IRGC, the lack of a clear command-and-control system could be intentional. Similar to Iran’s “mosaic defense” military structure, cyber operations appear more decentralized and fluid than other countries with advanced cyber capabilities—Russia and China, for example—complicating the tracking and attribution of attacks.

The Iranian nuclear deal may have had some cyber-deterrent value, in that it reined in Iranian disruptive attacks against the West, but this could be short-lived. Rhetoric from the Trump administration is stoking the fire, including recent statements by U.S. Ambassador to the United Nations Nikki Haley that Iran is violating the nuclear agreement.

  • Iran, as a result, is likely to engage in broad-spectrum cyber espionage to alleviate that uncertainty. For example, Operation Cleaver in 2012-14 hit U.S. military targets, as well as systems in critical industries such as energy and utilities, oil and gas, chemicals, airlines and transportation hubs, global telecommunications, healthcare, aerospace, education and the defense industrial base. Earlier this month, reports surfaced of a new Iranian state-sponsored actor—referred to as APT 34—conducting reconnaissance of critical infrastructure in the Middle East.
  • While the probing of such essential systems is alarming, it is expected as a contingency plan, should relations with adversaries escalate. The New York Times reported that the U.S. had similar plans – known as Operation Nitro Zeus – to disrupt Iranian critical services should the nuclear negotiations have gone sideways during the Obama administration. It is likely the Trump administration is devising similar contingency plans. Learn more about the contributors here.

 

Hezbollah’s Billion-Dollar Criminal Enterprise , Obama Ignored

The secret backstory of how Obama let Hezbollah off the hook

Politico: An ambitious U.S. task force targeting Hezbollah’s billion-dollar criminal enterprise ran headlong into the White House’s desire for a nuclear deal with Iran.

Part I

A global threat emerges

How Hezbollah turned to trafficking cocaine and laundering money through used cars to finance its expansion.

In its determination to secure a nuclear deal with Iran, the Obama administration derailed an ambitious law enforcement campaign targeting drug trafficking by the Iranian-backed terrorist group Hezbollah, even as it was funneling cocaine into the United States, according to a POLITICO investigation.

The campaign, dubbed Project Cassandra, was launched in 2008 after the Drug Enforcement Administration amassed evidence that Hezbollah had transformed itself from a Middle East-focused military and political organization into an international crime syndicate that some investigators believed was collecting $1 billion a year from drug and weapons trafficking, money laundering and other criminal activities.

Over the next eight years, agents working out of a top-secret DEA facility in Chantilly, Virginia, used wiretaps, undercover operations and informants to map Hezbollah’s illicit networks, with the help of 30 U.S. and foreign security agencies.

They followed cocaine shipments, some from Latin America to West Africa and on to Europe and the Middle East, and others through Venezuela and Mexico to the United States. They tracked the river of dirty cash as it was laundered by, among other tactics, buying American used cars and shipping them to Africa. And with the help of some key cooperating witnesses, the agents traced the conspiracy, they believed, to the innermost circle of Hezbollah and its state sponsors in Iran.

They followed cocaine shipments, tracked a river of dirty cash, and traced what they believed to be the innermost circle of Hezbollah and its state sponsors in Iran.

But as Project Cassandra reached higher into the hierarchy of the conspiracy, Obama administration officials threw an increasingly insurmountable series of roadblocks in its way, according to interviews with dozens of participants who in many cases spoke for the first time about events shrouded in secrecy, and a review of government documents and court records. When Project Cassandra leaders sought approval for some significant investigations, prosecutions, arrests and financial sanctions, officials at the Justice and Treasury departments delayed, hindered or rejected their requests.

The Justice Department declined requests by Project Cassandra and other authorities to file criminal charges against major players such as Hezbollah’s high-profile envoy to Iran, a Lebanese bank that allegedly laundered billions in alleged drug profits, and a central player in a U.S.-based cell of the Iranian paramilitary Quds force. And the State Department rejected requests to lure high-value targets to countries where they could be arrested.

December 15, 2011

Hezbollah is linked to a $483,142,568 laundering scheme

The money, allegedly laundered through the Lebanese Canadian Bank and two exchange houses, involved approximately 30 U.S. car buyers.

Read the document

“This was a policy decision, it was a systematic decision,” said David AsherDavid AsherVeteran U.S. illicit finance expert sent from Pentagon to Project Cassandra to attack the alleged Hezbollah criminal enterprise., who helped establish and oversee Project Cassandra as a Defense Department illicit finance analyst. “They serially ripped apart this entire effort that was very well supported and resourced, and it was done from the top down.”

The untold story of Project Cassandra illustrates the immense difficulty in mapping and countering illicit networks in an age where global terrorism, drug trafficking and organized crime have merged, but also the extent to which competing agendas among government agencies — and shifting priorities at the highest levels — can set back years of progress.

And while the pursuit may be shadowed in secrecy, from Latin American luxury hotels to car parks in Africa to the banks and battlefields of the Middle East, the impact is not: In this case, multi-ton loads of cocaine entering the United States, and hundreds of millions of dollars going to a U.S.-designated terrorist organization with vast reach.

Obama had entered office in 2009 promising to improve relations with Iran as part of a broader rapprochement with the Muslim world. On the campaign trail, he had asserted repeatedly that the Bush administration’s policy of pressuring Iran to stop its illicit nuclear program wasn’t working, and that he would reach out to Tehran to reduce tensions.

The man who would become Obama’s top counterterrorism adviser and then CIA director, John BrennanJohn BrennanObama’s White House counterterrorism adviser, who became CIA director in 2013., went further. He recommended in a policy paper that “the next president has the opportunity to set a new course for relations between the two countries” through not only a direct dialogue, but “greater assimilation of Hezbollah into Lebanon’s political system.”

By May 2010, Brennan, then assistant to the president for homeland security and counterterrorism, confirmed in a speech that the administration was looking for ways to build up “moderate elements” within Hezbollah.

“Hezbollah is a very interesting organization,” Brennan told a Washington conference, saying it had evolved from “purely a terrorist organization” to a militia and, ultimately, a political party with representatives in the Lebanese Parliament and Cabinet, according to a Reuters report.

“There is certainly the elements of Hezbollah that are truly a concern to us what they’re doing,” Brennan said. “And what we need to do is to find ways to diminish their influence within the organization and to try to build up the more moderate elements.”

In practice, the administration’s willingness to envision a new role for Hezbollah in the Middle East, combined with its desire for a negotiated settlement to Iran’s nuclear program, translated into a reluctance to move aggressively against the top Hezbollah operatives, according to Project Cassandra members and others.

Lebanese arms dealer Ali FayadAli Fayad(aka Fayyad). Ukraine-based arms merchant suspected of being a Hezbollah operative moving large amounts of weapons to Syria. , a suspected top Hezbollah operative whom agents believed reported to Russian President Vladimir Putin as a key supplier of weapons to Syria and Iraq, was arrested in Prague in the spring of 2014. But for the nearly two years Fayad was in custody, top Obama administration officials declined to apply serious pressure on the Czech government to extradite him to the United States, even as Putin was lobbying aggressively against it.

Fayad, who had been indicted in U.S. courts on charges of planning the murders of U.S. government employees, attempting to provide material support to a terrorist organization and attempting to acquire, transfer and use anti-aircraft missiles, was ultimately sent to Beirut. He is now believed by U.S. officials to be back in business, and helping to arm militants in Syria and elsewhere with Russian heavy weapons.

March 26, 2014

Indictment of Ali Fayad

The indictment alleges Fayad, along with his co-conspirators, agreed to provide the FARC with weapons to kill U.S. and Colombian officials.

Project Cassandra members say administration officials also blocked or undermined their efforts to go after other top Hezbollah operatives including one nicknamed the ‘GhostThe GhostOne of the most mysterious alleged associates of Safieddine, secretly indicted by the U.S., linked to multi-ton U.S.-bound cocaine loads and weapons shipments to Middle East.,” allowing them to remain active despite being under sealed U.S. indictment for years. People familiar with his case say the Ghost has been one of the world’s biggest cocaine traffickers, including to the U.S., as well as a major supplier of conventional and chemical weapons for use by Syrian President Bashar Assad against his people.

And when Project Cassandra agents and other investigators sought repeatedly to investigate and prosecute Abdallah SafieddineAbdallah SafieddineHezbollah’s longtime envoy to Iran who allegedly oversaw the group’s “Business Affairs Component” involved in international drug trafficking., Hezbollah’s longtime envoy to Iran, whom they considered the linchpin of Hezbollah’s criminal network, the Justice Department refused, according to four former officials with direct knowledge of the cases.

The administration also rejected repeated efforts by Project Cassandra members to charge Hezbollah’s military wing as an ongoing criminal enterprise under a federal Mafia-style racketeering statute, task force members say. And they allege that administration officials declined to designate Hezbollah a “significant transnational criminal organization” and blocked other strategic initiatives that would have given the task force additional legal tools, money and manpower to fight it.

Former Obama administration officials declined to comment on individual cases, but noted that the State Department condemned the Czech decision not to hand over Fayad. Several of them, speaking on condition of anonymity, said they were guided by broader policy objectives, including de-escalating the conflict with Iran, curbing its nuclear weapons program and freeing at least four American prisoners held by Tehran, and that some law enforcement efforts were undoubtedly constrained by those concerns.

But the former officials denied that they derailed any actions against Hezbollah or its Iranian allies for political reasons.

“There has been a consistent pattern of actions taken against Hezbollah, both through tough sanctions and law enforcement actions before and after the Iran deal,” said Kevin Lewis, an Obama spokesman who worked at both the White House and Justice Department in the administration.

Lewis, speaking for the Obama administration, provided a list of eight arrests and prosecutions as proof. He made special note of a February 2016 operation in which European authorities arrested an undisclosed number of alleged members of a special Hezbollah business affairs unit that the DEA says oversees its drug trafficking and other criminal money-making enterprises.

Project Cassandra officials, however, noted that the European arrests occurred after the negotiations with Iran were over, and said the task force initiated the multinational partnerships on its own, after years of seeing their cases shot down by the Justice and State departments and other U.S. agencies.

The Justice Department, they pointed out, never filed corresponding U.S. criminal charges against the suspects arrested in Europe, including one prominent Lebanese businessman formally designated by the Treasury Department for using his “direct ties to Hezbollah commercial and terrorist elements” to launder bulk shipments of illicit cash for the organization throughout Asia, Europe and the Middle East.

A former senior national security official of the Obama administration, who played a role in the Iran nuclear negotiations, suggested that Project Cassandra members were merely speculating that their cases were being blocked for political reasons. Other factors, including a lack of evidence or concerns about interfering with intelligence operations could have been in play.

“What if the CIA or the Mossad had an intelligence operation ongoing inside Hezbollah and they were trying to pursue someone . . . against whom we had impeccable [intelligence] collection and the DEA is not going to know that?” the official said. “I get the feeling people who don’t know what’s going on in the broader universe are grasping at straws.”

The official added: “The world is a lot more complicated than viewed through the narrow lens of drug trafficking. So you’re not going to let CIA rule the roost, but you’re also certainly not going to let DEA do it either. Your approach to anything as complicated as Hezbollah is going to have to involve the interagency [process], because the State Department has a piece of the pie, the intelligence community does, Treasury does, DOD does.”

Nonetheless, other sources independent of Project Cassandra confirmed many of the allegations in interviews with POLITICO, and in some cases, in public comments.

One Obama-era Treasury official, Katherine Bauer, in little-noticed written testimony presented last February to the House Committee on Foreign Affairs, acknowledged that “under the Obama administration … these [Hezbollah-related] investigations were tamped down for fear of rocking the boat with Iran and jeopardizing the nuclear deal.”

February 16, 2017

Katherine Bauer testimony to the House Committee on Foreign Affairs

Former Treasury official criticizes the Obama administration.

Read the document

As a result, some Hezbollah operatives were not pursued via arrests, indictments, or Treasury designations that would have blocked their access to U.S. financial markets, according to Bauer, a career Treasury official, who served briefly in its Office of Terrorist Financing as a senior policy adviser for Iran before leaving in late 2015. And other “Hezbollah facilitators” arrested in France, Colombia, Lithuania have not been extradited — or indicted — in the U.S., she wrote.

Bauer, in an interview, declined to elaborate on her testimony.

AsherDavid AsherVeteran U.S. illicit finance expert sent from Pentagon to Project Cassandra to attack the alleged Hezbollah criminal enterprise., for one, said Obama administration officials expressed concerns to him about alienating Tehran before, during and after the Iran nuclear deal negotiations. This was, he said, part of an effort to “defang, defund and undermine the investigations that were involving Iran and Hezbollah,” he said.

“The closer we got to the [Iran deal], the more these activities went away,” Asher said. “So much of the capability, whether it was special operations, whether it was law enforcement, whether it was [Treasury] designations — even the capacity, the personnel assigned to this mission — it was assiduously drained, almost to the last drop, by the end of the Obama administration.”

With much fanfare, Obama announced the final agreement on implementation of the Iran deal on Jan. 17, 2016, in which Tehran promised to shelve efforts to build a nuclear weapons program in exchange for being released from crippling international economic sanctions.

Within months, task force officials said, Project Cassandra was all but dead. Some of its most senior officials, including Jack KellyJohn “Jack” KellyDEA agent overseeing Hezbollah cases at Special Operations Division, who named task force Project Cassandra after clashes with other U.S. agencies about Hezbollah drug-terror links., the veteran DEA supervisory agent who created and led the task force, were transferred to other assignments. And Asher himself left the task force long before that, after the Defense Department said his contract would not be renewed.

As a result, the U.S. government lost insight into not only drug trafficking and other criminal activity worldwide, but also into Hezbollah’s illicit conspiracies with top officials in the Iranian, Syrian, Venezuelan and Russian governments — all the way up to presidents Nicolas Maduro, Assad and Putin, according to former task force members and other current and former U.S. officials.

The derailment of Project Cassandra also has undermined U.S. efforts to determine how much cocaine from the various Hezbollah-affiliated networks is coming into the United States, especially from Venezuela, where dozens of top civilian and military officials have been under investigation for more than a decade. Recently, the Trump administration designated the country’s vice president, a close ally of Hezbollah and of Lebanese-Syrian descent, as a global narcotics kingpin.

Meanwhile, Hezbollah — in league with Iran — continues to undermine U.S. interests in Iraq, Syria and throughout wide swaths of Latin America and Africa, including providing weapons and training to anti-American Shiite militias. And Safieddine, the Ghost and other associates continue to play central roles in the trafficking of drugs and weapons, current and former U.S. officials believe.

“They were a paramilitary organization with strategic importance in the Middle East, and we watched them become an international criminal conglomerate generating billions of dollars for the world’s most dangerous activities, including chemical and nuclear weapons programs and armies that believe America is their sworn enemy,” said Kelly, the supervisory DEA agent and lead coordinator of its Hezbollah cases.

“If they are violating U.S. statutes,” he asked, “why can’t we bring them to justice?”

May, 31, 2017

Indictment of Samer El Debek

From roughly 2008 to 2015, Debek allegedly received military training from training in surveillance, explosives and firearms.

Kelly and Asher are among the officials involved in Project Cassandra who have been quietly contacted by the Trump administration and congressional Republicans, who said a special POLITICO report April 24 on Barack Obama’s hidden Iran deal concessions raised urgent questions about the need to resurrect key law enforcement programs to counter Iran.

That won’t be easy, according to former Project Cassandra members, even with President Donald Trump’s recent vow to crack down on Iran and Hezbollah. They said they tried to keep the project on life support, in hopes that it would be revived by the next administration, but the loss of key personnel, budget cuts and dropped investigations are only a few of many challenges made worse by the passage of nearly a year since Trump took office.

“You can’t let these things disintegrate,” said Kelly. “Sources evaporate. Who knows if we can find all of the people willing to testify?”

Derek MaltzDerek MaltzSenior DEA official who as head of Special Operations Division lobbied for support for Project Cassandra and its investigations., who oversaw Project Cassandra as the head of the DEA’s Special Operations Division for nine years ending in July 2014, put it this way: “Certainly there are targets that people feel that could have been indicted and weren’t. There is certainly an argument to be made that if tomorrow all the agencies were ordered to come together and sit in a room and put all the evidence on the table against all these bad guys, that there could be a hell of a lot of indictments.”

But Maltz said the damage wrought by years of political interference will be hard to repair.

“There’s no doubt in my mind now that the focus was this Iran deal and our initiative was kind of like a fly in the soup,” Maltz said. “We were the train that went off the tracks.”

Project Cassandra had its origins in a series of investigations launched in the years after the 9/11 attacks which all led, via their own twisted paths, to Hezbollah as a suspected global criminal enterprise.

Operation TitanOperation TitanA joint investigation with Colombian authorities into a global money-laundering and drug-trafficking alliance between Latin American traffickers and Lebanese operatives., in which the DEA worked with Colombian authorities to explore a global alliance between Lebanese money launderers and Colombian drug trafficking conglomerates, was one. Operation Perseus, targeting Venezuelan syndicates, was another. At the same time, DEA agents in West Africa were investigating the suspicious flow of thousands of used cars from U.S. dealerships to car parks in Benin.

Meanwhile, in Iraq, the U.S. military was probing the role of Iran in outfitting Shiite militias with high-tech improvised explosive devices known as Explosively Formed Penetrators, or EFPs, that had already killed hundreds of U.S. soldiers.

All of these paths eventually converged on Hezbollah.

This wasn’t entirely a surprise, agents say. For decades, Hezbollah — in close cooperation with Iranian intelligence and Revolutionary Guard — had worked with supporters in Lebanese communities around the world to create a web of businesses that were long suspected of being fronts for black-market trading. Along the same routes that carried frozen chicken and consumer electronics, these businesses moved weapons, laundered money and even procured parts for Iran’s illicit nuclear and ballistic missile programs.

As they pursued their investigations, the DEA agents found that Hezbollah was redoubling all of these efforts, working urgently to raise cash, and lots of it, to rebuild its south Lebanon stronghold after a 2006 war with Israel had reduced it to rubble.

Dating back to its inception in the early 1980s, Hezbollah, which translates to “Party of God,” had also engaged in “narcoterrorism,” collecting a tariff from drug dealers and other black-market suppliers who operated in territory it controlled in Lebanon and elsewhere. Now, based on the DEA’s extensive network of informants, undercover operatives and wiretaps, it looked like Hezbollah had shifted tactics, and gotten directly involved in the global cocaine trade, according to interviews and documents, including a confidential DEA assessment.

“It was like they flipped a switch,” Kelly told POLITICO. “All of a sudden, they reversed the flow of all of the black-market activity they had been taxing for years, and took control of the operation.”

Operating like an organized crime family, Hezbollah operatives would identify businesses that might be profitable and useful as covers for cocaine trafficking and buy financial stakes in them, Kelly and others said. “And if the business was successful and suited their current needs,” Kelly said, “they went from partial owners to majority owners to full partnership or takeover.”

Hezbollah even created a special financial unit that, translated into English, means “Business Affairs Component,” to oversee the sprawling criminal operation, and it was run by the world’s most wanted terrorist after Osama bin Laden, a notoriously vicious Hezbollah military commander named Imad MughniyehImad MughniyehA Hezbollah mastermind who oversaw its international operations and, the DEA says, its drug trafficking, as head of its military wing, the Islamic Jihad Organization., according to DEA interviews and documents.

Mughniyeh had for decades been the public face of terrorism for Americans, orchestrating the infamous attack that killed 241 U.S. Marines in 1983 in their barracks in Lebanon, and dozens more Americans in attacks on the U.S. Embassy in Beirut that year and an annex the year after. When President Ronald Reagan responded to the attacks by withdrawing peacekeeping troops from Lebanon, Hezbollah claimed a major victory and vaulted to the forefront of the Islamist resistance movement against the West.

Over the next 25 years, Iran’s financial and military support for Hezbollah enabled it to amass an army with tens of thousands of foot soldiers, more heavy armaments than most nation-states and approximately 120,000 rockets and ballistic missiles that could strike Israel and U.S. interests in the region with devastating precision.

Hezbollah became an expert in soft power, as well. It provided food, medical care and other social services for starving refugees in war-torn Lebanon, winning credibility on the ground. It then evolved further into a powerful political party, casting itself as the defender of poor, mostly Shiite Lebanese against Christian and Sunni Muslim elites. But even as Hezbollah was moving into the mainstream of Lebanese politics, Mughniyeh was overseeing a secret expansion of its terrorist wing, the Islamic Jihad Organization. Working with Iranian intelligence agents, Islamic Jihad continued to attack Western, Israeli and Jewish targets around the world, and to conduct surveillance on others — including in the United States — in preparation for future attacks.

Hezbollah mostly left the United States alone, in what was clearly a strategic decision to avoid U.S. retaliation. But by 2008, the Bush administration came to believe that Islamic Jihad was the most dangerous terrorist organization in the world, capable of launching instantaneous attacks, possibly with chemical, biological or low-grade nuclear weapons, that would dwarf those on 9/11.

By funding terrorism and military operations through global drug trafficking and organized crime, Mughniyeh’s business affairs unit within Islamic Jihad had become the embodiment of the kind of threat the United States was struggling to address in the post-9/11 world.

The DEA believed that it was the logical U.S. national security agency to lead the interagency effort to go after Mughniyeh’s drug trafficking networks. But within the multipronged U.S. national security apparatus, this was both a questionable and problematic assertion.

Established by President Richard Nixon in 1973 to bring together the various anti-drug programs under the Department of Justice, the DEA was among the youngest of the U.S. national security agencies.

And while the DEA had quickly proven itself adept at working on the global stage — especially in partnerships with drug-infested countries desperate for U.S. help like Colombia — few people within the U.S. government thought of it as a legitimate counterterrorism force.

In the final years of the Bush administration, though, the DEA had won the support of top officials for taking down two major international arms dealers, a Syrian named Monzer al-Kassar and the Russian “Lord of War,” Viktor BoutViktor Anatolyevich BoutVladimir Putin’s arms dealer, known as the “Lord of War.” Convicted of conspiracy to sell millions of dollars worth of weapons to Colombian narcoterrorists.. And thanks to supportive Republicans in Congress, it had become the beneficiary of a new federal law that empowered its globe-trotting cadre of assault-weapon-toting Special Operations agents.

The statute allowed DEA agents to operate virtually anywhere, without permission required from other U.S. agencies. All they needed to do was connect drug suspects to terrorism, and they could arrest them, haul them back to the United States and flip them in an effort to penetrate “the highest levels of the world’s most significant and notorious criminal organizations,” as then-Special Operations chief MaltzDerek MaltzSenior DEA official who as head of Special Operations Division lobbied for support for Project Cassandra and its investigations. told Congress in November 2011.

As they crunched the massive amounts of intel streaming into the DEA’s Counter Narco-Terrorism Operations Center in Chantilly, Virginia, the agents on Operation TitanOperation TitanA joint investigation with Colombian authorities into a global money-laundering and drug-trafficking alliance between Latin American traffickers and Lebanese operatives., Perseus and the other cases began to connect the dots and map the contours of one overarching criminal enterprise.

Part II

Everywhere and Nowhere

From its headquarters in the Middle East, Hezbollah extends its criminal reach to Latin America, Africa and the United States.

On Feb. 12, 2008, CIA and Israeli intelligence detonated a bomb in MughniyehImad MughniyehA Hezbollah mastermind who oversaw its international operations and, the DEA says, its drug trafficking, as head of its military wing, the Islamic Jihad Organization.’s car as he was leaving a celebration of the 29th anniversary of the Iranian revolution in Damascus, Syria. He was killed instantly. It was a major blow to Hezbollah, but soon after, wiretapped phone lines and other U.S. evidence showed that his criminal operation was busier than ever, and overseen by two trusted associates, according to interviews with former Project Cassandra officials and DEA documents.

One was financier Adham TabajaAdham TabajaLebanese businessman, alleged co-leader of Hezbollah Business Affairs Component and key figure directly tying Hezbollah’s commercial and terrorist activities.. The other, the interviews and documents reveal, was Safieddine, the key link between Hezbollah — which was run by his cousin, Hassan Nasrallah and his own brother Hashem — and Iran, Hezbollah’s state sponsor, which saw the group as its strategic ally in defending Shiite Muslims in the largely Sunni Muslim states that surrounded it.

Investigators were also homing in on several dozen key players underneath them who acted as “superfacilitators” for the various criminal operations benefitting Hezbollah, Iran and, at times, their allies in Iraq, Syria, Venezuela and Russia.

But it was Safieddine, a low-key, bespectacled man with a diplomatic bearing, who was their key point of connection from his base in Tehran, investigators believed.

The Colombia and Venezuela investigations linked him to numerous international drug smuggling and money laundering networks, and especially to one of the biggest the DEA had ever seen, led by Medellin-based Lebanese businessman Ayman JoumaaAyman Saied JoumaaAccused drug kingpin and financier whose vast network allegedly smuggled tons of cocaine into the U.S. with Mexico’s Zetas cartel and laundered money..

JoumaaAyman Saied JoumaaAccused drug kingpin and financier whose vast network allegedly smuggled tons of cocaine into the U.S. with Mexico’s Zetas cartel and laundered money.’s network rang alarm bells in Washington when agents discovered he was working with Mexico’s brutal Los Zetas cartel to move multi-ton loads of cocaine directly into the United States, and washing $200 million a month in criminal proceeds with the help of 300 or so used car dealerships. The network would funnel huge amounts of money to the dealerships to purchase used cars, which would then be shipped to Benin, on Africa’s west coast.

Arctic Ocean

U.S.

Mexico

Drugs from Colombia and Venezuela shipped to U.S. via Mexico

Freshly laundered money is returned to U.S. to buy used cars

Pro-Hezbollah money, houses and banks, Beirut Drugs flow to Europe, Benin

Used cars bought in U.S., shipped to West Africa for resale

Used car proceeds couriered to Lebanon Indian Ocean

Drugs are sent from Colombia and Venezuela to Europe via West Africa Antarctica

As the task force investigators intensified their focus on Safieddine, they were contacted out of the blue by AsherDavid AsherVeteran U.S. illicit finance expert sent from Pentagon to Project Cassandra to attack the alleged Hezbollah criminal enterprise., the Defense Department official, who was at Special Operations Command tracking the money used to provide ragtag Iraqi Shiite militias with sophisticated weapons for use against U.S. troops, including the new and lethal IED known as the “Explosively Formed Penetrator.” The armor-piercing charges were so powerful that they were ripping M1 Abrams tanks in half.

“Nobody had seen weapons like these,” Asher told POLITICO. “They could blow the side off a building.”

Asher’s curiosity had been piqued by evidence linking the IED network to phone numbers intercepted in the Colombia investigation. Before long, he traced the unusual alliance to a number allegedly used by Safieddine in Iran.

“I had no clue who he was,” Asher recalled. “But this guy was sending money into Iraq, to kill American soldiers.”

“I had no clue who he was. But this guy was sending money into Iraq, to kill American soldiers.”

— David Asher on Abdallah Safieddine.

Thanks to that chance connection, the Pentagon’s then-head of counternarcotics, William Wechsler, lent Asher and a few other Defense Department experts in tracking illicit money to the DEA to see what they might find.

It was a fruitful partnership. Asher was accustomed to toiling in the financial shadows. During his 20-plus years of U.S. government work, his core expertise was in exposing money laundering and schemes to avoid financial sanctions by rogue nation states, terrorist groups, organized-crime cartels and weapons proliferation networks.

Usually, his work was strictly classified. For Project Cassandra, however, he got special dispensation from the Pentagon to build networks of unclassified information so it could be used in criminal prosecutions.

Asher and his team quickly integrated cutting-edge financial intelligence tools into the various DEA investigations. With the U.S. military’s help, agents translated thousands of hours of intercepted phone conversations from Colombia in Arabic that no one had considered relevant until the Hezbollah links appeared.

When the translations were complete, investigators said, they painted a picture of SafieddineAbdallah SafieddineHezbollah’s longtime envoy to Iran who allegedly oversaw the group’s “Business Affairs Component” involved in international drug trafficking. as a human hub of a criminal enterprise with spokes emanating from Tehran outward into Latin America, Africa, Europe and the United States via hundreds of legitimate businesses and front companies.

Safieddine did not respond to requests for comment through various intermediaries including Hezbollah’s media arm. A Hezbollah official, however, denied that the organization was involved in drug dealing.

“Sheik Nasrallah has confirmed lots of times that it is not permitted religiously for Hezbollah members to be trafficking drugs,” the official said. “It is something that is preventable, in that we in Islam have things like halal [permitted] and haram [prohibited]. For us, this is haram. So in no way is it possible to be done.”

The accusation that Hezbollah is involved in drug trafficking, the representative said, “is part of the campaign to distort the image of Hezbollah as a resistance movement against the Israelis. Of course, it is possible to have Lebanese people involved in drugs, but it is not possible for them to be members of Hezbollah. This is absolutely not possible.”

Asked about Safieddine’s role in the organization, the official said, “We don’t usually expose the roles everyone plays because it is a jihadi organization. So it is a little bit secret.”

Safieddine’s cousin Nasrallah, the Hezbollah leader, has publicly rejected the idea that Hezbollah needs to raise money at all, through drugs or any other criminal activity, because Iran provides whatever funds it needs.

Safieddine himself, however, suggested otherwise in 2005, when he defiantly refuted the Bush administration’s accusations that Iran and Syria supplied Hezbollah with weapons. Those countries provided “political and moral” support only, he told Agence France-Presse. “We don’t need to arm ourselves from Tehran. Why bring weapons from Iran via Syria when we can procure them anywhere in the world?”

“We don’t need to arm ourselves from Tehran. Why bring weapons from Iran via Syria when we can procure them anywhere in the world?”

— Abdallah Safieddine to Agence France-Presse in 2005.

Safieddine may have been right. Agents found evidence that weapons were flowing to Hezbollah from many channels, including networks that trafficked in both drugs and weapons. And using the same trafficking networks that hummed with drugs, cash and commercial products, agents concluded, Safieddine was overseeing Hezbollah efforts to help Iran procure parts and technology for its clandestine nuclear and ballistic missile programs.

“Hezbollah operates like the Gambino crime family on steroids, and he is its John Gotti,” said Kelly, referring to the infamous “Teflon Don” crime boss who for decades eluded justice. “Whatever Iran needs, Safieddine is in charge of getting it for them.”

“Hezbollah operates like the Gambino crime family on steroids, and he is its John Gotti.”

— Jack Kelly on Abdallah Safieddine.

The Bush administration had made disrupting the networks through which Iran obtained parts for its weapons of mass destruction programs a top priority, with then-Deputy National Security Adviser Juan Zarate personally overseeing an interagency effort to map out the procurement channels. A former Justice Department prosecutor, Zarate understood the value of international law enforcement operations, and put DEA’s Special Operations Division at the center of it.

But even then, other agencies were chafing at the DEA’s role.

A Series of Roadblocks

Much of the early turbulence stemmed from an escalating turf battle between federal law enforcement and intelligence agencies over which ones had primacy in the global war on terrorism, especially over a so-called hybrid target like Hezbollah, which was both a criminal enterprise and a national security threat.

The “cops” from the FBI and DEA wanted to build criminal cases, throw Hezbollah operatives in prison and get them to turn on each other. That stoked resentment among the “spooks” at the CIA and National Security Agency, who for 25 years had gathered intelligence, sometimes through the painstaking process of having agents infiltrate Hezbollah, and then occasionally launching assassinations and cyberattacks to block imminent threats.

Further complicating the picture was the role of the State Department, which often wanted to quash both law-enforcement actions and covert operations due to the political backlash they created. Hezbollah, after all, was a leading political force in Lebanon and a provider of human services, with a sincere grass-roots following that wasn’t necessarily aware of its unsavory actions. Nowhere was the tension between law enforcement and diplomacy more acute than in dealings with Hezbollah, which was fast becoming a key part of the Lebanese government.

Distrust among U.S. agencies exploded after two incidents brought the cops-spooks divide into clear relief.

In the waning days of the Bush administration, a DEA agent’s cover was blown just as he was about to become a Colombian cartel’s main cocaine supplier to the Middle East — and to Hezbollah operatives.

A year later, under Obama, the State Department blocked an FBI-led Joint Terrorism Task Force from luring a key eyewitness from Beirut to Philadelphia so he could be arrested and turned against SafieddineAbdallah SafieddineHezbollah’s longtime envoy to Iran who allegedly oversaw the group’s “Business Affairs Component” involved in international drug trafficking. and other Hezbollah operatives in a scheme to procure 1,200 Colt M4 military-grade assault rifles.

In both cases, law enforcement agents suspected that Middle East-based spies in the CIA had torpedoed their investigations to protect their politically sensitive and complicated relationship with Hezbollah.

The CIA declined to comment on the allegation that it intentionally blew the cover of a DEA agent or any other aspect of its relationship with Project Cassandra. The Obama State Department and Justice Department also declined to comment in response to detailed requests about their dealings with Hezbollah.

But the tensions between those agencies and the DEA were no secret. Some current and former diplomats and CIA officers, speaking on condition of anonymity, portrayed DEA Special Operations agents as undisciplined and overly aggressive cowboys with little regard for the larger geopolitical picture. “They’d come in hot to places like Beirut, want to slap handcuffs on people and disrupt operations we’d been cultivating for years,” one former CIA case officer said.

“They’d come in hot to places like Beirut, want to slap handcuffs on people and disrupt operations we’d been cultivating for years.”

— Former CIA case officer on how the DEA operated.

KellyJohn “Jack” KellyDEA agent overseeing Hezbollah cases at Special Operations Division, who named task force Project Cassandra after clashes with other U.S. agencies about Hezbollah drug-terror links. and other agents embraced their swashbuckling reputation, claiming that more aggressive tactics were needed because the CIA had long turned a blind eye to Hezbollah’s criminal networks, and even cultivated informants within them, in a misguided and myopic focus on preventing terrorist attacks.

The unyielding posture of Kelly, AsherDavid AsherVeteran U.S. illicit finance expert sent from Pentagon to Project Cassandra to attack the alleged Hezbollah criminal enterprise. and their team also rankled some of their fellow law-enforcement agents within the FBI, the Justice Department and even the DEA itself. The more Kelly and Asher insisted that everyone else was missing the drug-crime-terror nexus, the more others accused them — and their team out at Chantilly — of inflating those connections to expand the task force’s portfolio, get more funding and establish its importance.

After a few years of working together on the Hezbollah cases, Kelly and Asher had become a familiar sight in the never-ending circuit of meetings and briefings in what is known as the “interagency process,” a euphemism for the U.S. national security community’s efforts to bring all elements of power to bear on a particular problem.

From outward appearances, the two made an unusual pair.

Kelly, now 51, was a streetwise agent from small-town New Jersey who cut his teeth investigating the Mafia and drug kingpins. He spent his infrequent downtime lifting weights, watching college football and chilling in cargo shorts.

Asher, 49, speaks fluent Japanese, earned his Ph.D. in international relations from Oxford University and has the pallor of a senior government official who has spent the past three decades in policy meetings, classified military war rooms and diplomatic summits.

Both were described by supporters and detractors alike as having a similarly formidable combination of investigative and analytical skills, and the self-confidence to match it. At times, and especially on Project Cassandra, their intensity worked to the detriment of their careers.

“It got to the point where a lot of people didn’t want to have meetings with them,” said one FBI terrorism task force supervisor who worked often with the two. “They refused to accept no for an answer. And they were often given no for an answer. Even though they were usually right.”