Secret Service has Large Quiet Office in Hoover, Alabama

Posted on by

Primer: The U.S. Secret Service maintains Electronic Crimes Task Forces, which focus on identifying and locating international cyber criminals connected to cyber intrusions, bank fraud, data breaches, and other computer-related crimes. The Secret Service’s Cyber Intelligence Section has directly contributed to the arrest of transnational cyber criminals responsible for the theft of hundreds of millions of credit card numbers and the loss of approximately $600 million to financial and retail institutions. The Secret Service also runs the National Computer Forensic Institute, which provides law enforcement officers, prosecutors, and judges with cyber training and information to combat cyber crime.

HOOVER, Ala. — The classrooms, tucked above a municipal court here in the Birmingham suburbs, are a long way from the White House. But walk through a set of secured doors and into the futuristic-looking work space, and you will find an important wager by the agency best known for protecting presidents, the Secret Service.

Only it has almost nothing to do with earpiece-wearing agents or armored cars.

Though the Secret Service may be better known for keeping government executives safe, it also has a mandate to investigate and fight financial and other cybercrimes. And in an era of overworked protection details and nonstop cybercrime, it could use some help.

So here at the National Computer Forensics Institute, the pupils are hardened police officers, prosecutors and, occasionally, a judge. Instruction mimics what the agency teaches its own special agents. And tuition is not only free, but the Secret Service throws in travel, room, board and, for police officers, tens of thousands of dollars of technology to set up their own forensics labs back home.

Data is extracted from mobile phones for use in a class on prosecution in Hoover. Kevin D. Liles for The New York Times

In exchange, the Secret Service has quietly empowered a network of thousands of law enforcement officers across the country capable of processing digital evidence and indebted to the agency that taught them.

“The threat nature has increased in the world, and the threats are all more and more integrated with the digital world,” said Ben Bass, the special agent in charge of the institute. “So assimilating that into what we do is really important.”

The institute opened in 2008 as a partnership between the Secret Service and the state of Alabama, which contributed space and money for its construction. At the time, few state and local law enforcement agencies had the capability to process digital evidence found on computers and cellphones, even as it was exploding in volume and importance. That left agencies heavily reliant on the Secret Service and the F.B.I. for processing and created a years long backlog in many cases.

The Secret Service reasoned that it would be critical to the future of its mission — not to mention the effectiveness of local and state law enforcement — to try to change that. The program remains the only one of its kind and scale in the country.

Though its protective mission occupies the public’s attention, the Secret Service has been investigating crimes since 1865, when President Lincoln saw the need to create a small force of investigators within the Treasury Department to combat counterfeit currency that was undermining American markets. That mandate has changed and widened in the decades since, along with threats to the country’s financial systems, and the agency now investigates bank fraud, credit card fraud, identity theft, child exploitation as well as counterfeiting.

It does so with a reasonably small force. The majority of the Secret Service’s 3,300 agents work out of field offices. The F.B.I., by comparison, has more than 13,000. To amplify its effect, the agency relies on dozens of electronic and financial crimes task forces across the country, where local and state law officers and people in academia and businesses work alongside its own agents.

The help has arrived at the right time for the agency, where in recent years low morale, high attrition and more people to protect in more places have conspired to pinch resources. Because protection is a nonnegotiable task, investigations often take the hit.

The effect can be significant. In the 2016 fiscal year, the agency spent 65 percent of its time on protection and 35 percent on investigative work, according to calculations it shared with members of the House Oversight Committee. That was an election year, when protection demands are highest. But it appears the ratio for this fiscal year — which only included the last month or so of the campaign — has not changed much, with 60 percent of time going to protection through the end of May. Typically it would be about 40 percent for a post-campaign fiscal year.

Robert Novy, the deputy assistant director for investigations, said the task forces help ensure that cases continue to move forward regardless of protection demands. He also said that they have begun to free the Secret Service’s own staff to focus on larger-scale cyberthreats and high-dollar financial crimes.

“By elevating their capacities and capabilities, it allows us to focus on finding ways to counter more significant financial threats,” Mr. Novy said.

Still, building the program has proved challenging. A decade after it first opened its doors, the institute trains about 1,100 people a year. But it is running at between 30 percent and 40 percent of capacity because of a shortage of federal funds. For some programs, would-be enrollees can wait as long as three years.

Its financial outlook remains uncertain. President Trump’s 2018 budget proposal zeroed out the program, though Randolph D. Alles, the agency’s new director, told lawmakers last month that he considered it “critical” to the agency and would move money from elsewhere in his budget to pay for it if need be. At the same time, lawmakers in the House and Senate have introduced legislation that could stabilize its funding.

A break room at the institute.
Kevin D. Liles for The New York Times

The institute’s finances appeared to be on few minds on a recent early summer day in Hoover, where a class of two dozen prosecutors sat in neat classroom rows, computers humming beside their feet, as data from the cellphone of a fictitious drug smuggler flashed onto their computer screens. The evidence was all there in ordered folders: call logs, texts, even compromising photographs of a would-be drug dealer, made visible by powerful software and a few patient instructors.

One room away and a few hours later, two dozen police officers packed into a wood-trimmed mock courtroom listened to another instructor hold forth from the witness stand on the ins and outs of being a good forensics witness. The key, he said, is balancing the use of technical details like “master boot records” and “disk partitions” with the bigger picture a less tech-savvy jury can more easily grasp.

“I need to be able to understand it so I can translate it when I go before a panel of 12 people,” said Jennifer Eugene, a prosecutor from New Jersey, describing her experience in front of a jury. “The law has not caught up with where the technology is.”

A five-week course for police on the basics of computer evidence recovery is the most popular, and graduates of the course leave here with $28,000 worth of technology and the ability to search seized computers for evidence of a crime. A similar course on mobile devices is growing in popularity. And more advanced courses cover network intrusion.

A classroom where a course on network intrusion is taught.
Kevin D. Liles for The New York Times

Prosecutors and judges can take shorter courses meant to familiarize them with digital evidence, which is still relatively new to many courtrooms.

But the mutual benefits of the program were on display, too. Frank Garibay, a detective with the San Antonio Police Department who had returned to the institute as a proctor after taking coursework himself, said his training here had transformed what his department could do.

It had also meant that when officials from the Texas Rangers and Homeland Security Investigations zeroed in on an illegal gambling ring in Texas, they could turn to the Secret Service’s San Antonio-based electronic crimes task force, including Mr. Garibay, for help.

The Secret Service paid for members of its task force to travel to the small South Texas town of Falfurrias for a weekend to set up a war room to process digital evidence.

The operation ended up taking down about a dozen illegal casinos, recovered almost $6 million, exposed drug and human trafficing rings, and ultimately public corruption.

 

July 27th the Next N. Korea Missile Launch?

Posted on by

US sees more signs North Korea is preparing another missile test

(CNN)North Korea appears to be preparing for another missile test, according to a US Defense official. The official said that transporter vehicles carrying ballistic missile launching equipment were seen arriving in Kusong, North Korea on Friday.

Infographic: Here's how missiles send deadly explosive payloads to targets around the world.
Source SPACE.com: All about our solar system, outer space and exploration

The official said that when such equipment is seen, a launch could occur within six days, which would coincide with the upcoming July 27 North Korean Holiday celebrating the armistice which ended the Korean War.
Last Wednesday, CNN reported that US intelligence indicated that North Korea is making preparations for another intercontinental ballistic missile (ICBM) or intermediate range missile test. Two administration officials familiar with the latest intelligence confirmed they’d seen indicators of test preparations. US satellites have detected new imagery and satellite-based radar emissions indicating that North Korea may be testing components and missile control facilities for another ICBM or intermediate launch, officials say.

(CNN)Hawaii is set to become the first state in the US to test an “attack- warning” system in the event of a North Korean nuclear missile strike.

Starting in November, Hawaii’s disaster warning plan will include a new protocol in case of a nuclear attack, CNN affiliate KNHL reports. But some are concerned the announcement will scare off tourists from visiting the island.
A “guidance summary” from the Hawaii Emergency Management Agency says residents will be alerted of nuclear detonation through siren alarms and flashing white lights. An Emergency Alert System will broadcast over television and radio frequencies as well. More here.
Kusong has been the site of North Korean missile tests in the past, including a May test of a KN-17 intermediate range missile which traveled almost 500 miles before splashing down in the Sea of Japan/East Sea, hitting the water about 60 miles from Vladivostok in eastern Russia, according to US officials.
The last major North Korean missile test took place on July 4, when Pyongyang launched what the US assessed to be an intercontinental ballistic missile.
***
The US military has grown increasingly concerned about the increased pace of North Korean missile testing while simultaneously underscoring that the US is capable of defending itself and its allies from North Korean missiles.
“They’re clearly on a path to develop an intercontinental ballistic missile that can reach the reach the United States and to match that with a nuclear weapon,” the Chairman of the Joint Chiefs of Staff, Gen. Joseph Dunford, told an audience Saturday at the Aspen Security Forum.
“What the North Koreans are capable of today is limited missile attack and we are capable of defending against a limited missile attack for our forces in South Korea, our South Korean allies, our Japanese allies, our forces in Okinawa, our forces in Guam and the American homeland,” Dunford added.
On Thursday, CIA Director Mike Pompeo offered some of the most aggressive comments yet from the Trump administration with regard to North Korean dictator Kim Jong Un.
“It would be a great thing to denuclearize the peninsula, to get those weapons off of that, but the thing that is most dangerous about it is the character who holds the control over them today,” Pompeo said at the Aspen Security Forum.
“As for the regime, I am hopeful we will find a way to separate that regime from this system,” Pompeo said. “The North Korean people I’m sure are lovely people and would love to see him go.”

Kushner’s Testimony to Senate Senate Intel Committee Staffers

Posted on by

Jared Kushner tells Congress: “I did not collude”

Axios: Giving his version of his Russia contacts for the first time, Jared Kushner says in an 11-page statement to congressional committees that he had “hardly any” contacts with Russians during the campaign, and regarded the meeting with a Russian lawyer at Trump Tower as “a waste of our time.”

  • Key quote: “I did not collude, nor know of anyone else in the campaign who colluded, with any foreign government. I had no improper contacts. I have not relied on Russian funds to finance my business activities in the private sector. I have tried to be fully transparent with regard to the filing of my SF-86 [security clearance] form, above and beyond what is required.”
  • Why it matters: The stakes for the congressional interviews are high for Kushner because the Trump son-in-law is of acute interest to special counsel Bob Mueller, and prosecutors can be expected to pick apart today’s statement.
  • Kushner has a 10 a.m.appointment with staff of the Senate Intelligence Committee, and his meeting tomorrow with the House Intelligence Committee. Both sessions are behind closed doors.
Highlights 1018 words

The most colorful passage: “[I]n looking for a polite way to leave and get back to my work,” he says in the statement, “I actually emailed an assistant from the meeting after I had been there for ten or so minutes and wrote ‘Can u pls call me on my cell? Need excuse to get out of meeting.’ I had not met the attorney before the meeting nor spoken with her since. I thought nothing more of this short meeting until it came to my attention recently.”

Another highlight: “With respect to my contacts with Russia or Russian representatives during the campaign, there were hardly any. … [T]he day after the election, I could not even remember the name of the Russian Ambassador. … I sent an email asking [Dmitri Simes of the Center for the National Interest, which hosted a Trump foreign policy speech], ‘What is the name of the Russian ambassador?'”

Other key points:

  • “When it became apparent that my father-in-law was going to be the Republican nominee for President, as normally happens, a number of officials from foreign countries attempted to reach out to the campaign. My father-in-law asked me to be a point of contact with these foreign countries. … [O]ver the course of the campaign, I had incoming contacts with people from approximately 15 countries.”
  • “I called on a variety of people with deep experience, such as Dr. Henry Kissinger, for advice on policy for the candidate, which countries/representatives with which the campaign should engage, and what messaging would resonate.”
  • “The first [campaign contact] that I can recall was at the Mayflower Hotel in Washington, D.C. in April 2016. … [T]he host of the event, Dimitri Simes, … introduced me to several guests, among them four ambassadors, including Russian Ambassador Sergey Kislyak. With all the ambassadors, including Mr. Kislyak, we shook hands, exchanged brief pleasantries.”
  • “Reuters news service has reported that I had two calls with Ambassador Kislyak at some time between April and November of 2016. While I participated in thousands of calls during this period, I do not recall any such calls with the Russian Ambassador. We have reviewed the phone records available to us and have not been able to identify any calls to any number we know to be associated with Ambassador Kislyak and I am highly skeptical these calls took place.”
  • “I had no ongoing relationship with the Ambassador before the election, and had limited knowledge about him.”
  • “The only other Russian contact during the campaign is one I did not recall at all until I was reviewing documents and emails in response to congressional requests for information.”
  • That was the Trump Tower meeting, and he said the invitation from Donald Trump Jr. “was on top of a long [email] back and forth that I did not read at the time. … Documents confirm my memory that this was calendared as ‘Meeting: Don Jr.| Jared Kushner.’ No one else was mentioned.”
  • “There was one more possible contact that I will note. On October 30, 2016, I received a random email from the screenname ‘Guccifer400.’ This email, which I interpreted as a hoax, was an extortion attempt and threatened to reveal candidate Trump’s tax returns and demanded that we send him 52 bitcoins in exchange for not publishing that information. I brought the email to the attention of a U.S. Secret Service agent on the plane we were all travelling on and asked what he thought. He advised me to ignore it and not to reply — which is what I did. The sender never contacted me again.”
  • “On November 16, 2016, my assistant received a request for a meeting from the Russian Ambassador. … The [Dec. 1] meeting occurred in Trump Tower, where we had our transition office, and lasted twenty [to] thirty minutes. Lt. General Michael Flynn (Ret.), who became the President’s National Security Advisor, also attended.
  • “I believed developing a thoughtful approach on Syria was a very high priority given the ongoing humanitarian crisis, and I asked if they had an existing communications channel at his embassy we could use where they would be comfortable transmitting the information they wanted to relay to General Flynn. The Ambassador said that would not be possible and so we all agreed that we would receive this information after the Inauguration. Nothing else occurred. I did not suggest a ‘secret back channel.'”
  • “My assistant reported that the Ambassador had requested that I meet with a person named Sergey Gorkov who he said was a banker and someone with a direct line to the Russian President who could give insight into how Putin was viewing the new administration and best ways to work together. I agreed to meet Mr. Gorkov because the Ambassador has been so insistent, said he had a direct relationship with the President, and because Mr. Gorkov was only in New York for a couple days.”
  • “The [Dec. 13] meeting with Mr. Gorkov lasted twenty to twenty-five minutes. … At no time was there any discussion about my companies, business transactions, real estate projects, loans, banking arrangements or any private business of any kind.”
  • “There has been a good deal of misinformation reported about my SF-86 [security clearance] form. As my attorneys and I have previously explained, my SF-86 application was prematurely submitted due to a miscommunication and initially did not list any contacts (not just with Russians) with foreign government officials.”
  • “[P]eople at my New York office were helping me find the information, organize it, review it and put it into the electronic form. They sent an email to my assistant in Washington, communicating that the changes to one particular section were complete; my assistant interpreted that message as meaning that the entire form was completed.
  • “At that point, the form was a rough draft and still had many omissions including not listing any foreign government contacts and even omitted the address of my father-in-law (which was obviously well known). Because of this miscommunication, my assistant submitted the draft on January 18, 2017.”
  • “The very next day, January 19, 2017, we submitted supplemental information to the transition, which confirmed receipt and said they would immediately transmit it to the FBI.”

Trump Sidelines Tillerson on Iran Nuclear Deal

Posted on by

Trump Assigns White House Team to Target Iran Nuclear Deal, Sidelining State Department

Unhappy with Tillerson over Iran, the president is turning to trusted aides.

After a contentious meeting with Secretary of State Rex Tillerson this week, President Donald Trump instructed a group of trusted White House staffers to make the potential case for withholding certification of Iran at the next 90-day review of the nuclear deal. The goal was to give Trump what he felt the State Department had failed to do: the option to declare that Tehran was not in compliance with the contentious agreement.

“The president assigned White House staffers with the task of preparing for the possibility of decertification for the 90-day review period that ends in October — a task he had previously given to Secretary Tillerson and the State Department,” a source close to the White House told Foreign Policy.

The agreement, negotiated between Iran and world powers, placed strict limits on Tehran’s nuclear program in return for lifting an array of economic sanctions.

On Tuesday, Trump relayed this new assignment to a group of White House staffers now tasked with making sure there will not be a repeat at the next 90-day review. “This is the president telling the White House that he wants to be in a place to decertify 90 days from now and it’s their job to put him there,” the source said.

FP spoke with three sources who were either invited to take part in the new process or were briefed on the president’s decision on certification. All described the new process as a way to work around the State Department, which the president felt pushed certification forward by giving him no other options.

All three sources said Trump specifically asked Tillerson at the previous review to lay the groundwork for decertification — which the sources said Tillerson failed to do.

Trump “is resolved to not recertify deal in 90 days,” said a second source with detailed knowledge of this week’s meeting and the aftermath.

The three sources said it’s too early to tell how this will play out, stressing that all that is certain is that the staffers have gotten a new assignment and there won’t be any more details until after the first meeting, tentatively scheduled for early next week.

Trump’s decision follows months of friction between the White House and State Department over how to handle the Iran nuclear agreement, which Trump denounced as a presidential candidate. The administration was mired in similar divisions in April, when it had to decide whether to certify that Iran was complying with the deal. Every 90 days, the United States has to declare whether Iran is abiding by the agreement and whether sanctions that were waived should remain lifted.

On Monday morning, work was on track for the administration to again certify that Iran was meeting the necessary conditions, but the president expressed second thoughts around midday. A meeting between Trump and Tillerson that afternoon quickly turned into a meltdown.

A third source with intimate knowledge of that meeting said Steve Bannon, the White House chief strategist, and Sebastian Gorka, deputy assistant to the president, were particularly vocal, repeatedly asking Tillerson to explain the U.S. national security benefits of certification. “They repeatedly questioned Rex about why recertifying would be good for U.S. national security, and Rex was unable to answer,” the source said.

“The president kept demanding why he should certify, and the answers Tillerson gave him infuriated him,” the source added.

Tillerson’s communications advisor, R.C. Hammond, disputed the account, denying that Tillerson failed to deliver what the president had asked for or that he would be sidelined. “That wouldn’t match up with the conversations the president and secretary had,” he said.

“Not everybody in the room agreed with what the secretary was saying,” Hammond added. “But the president is certainly appreciative that someone is giving him clear, coherent information.”

While Trump has spoken highly of Tillerson in the past, the source close to the White House said, the president was frustrated that the secretary failed to provide him the option not to certify.

“This is about the president asking Tillerson at the last certification meeting 90 days earlier to lay the groundwork so Trump could consider his options,” the first source said. “Tillerson did not do this, and Trump is infuriated. He can’t trust his secretary of state to do his job, so he is turning to the few White House staffers he trusts the most.”

Hammond dismissed this. “Fiction can be fun when you’re an anonymous source,” he said.

At the previous review in April, Trump had asked Tillerson for specific preparations, which included speaking with foreign allies and to make sure they were on board. “Literally Tillerson did none of this,” the source said. “Simply, [Trump] no longer trusts the State Department to do the work he orders them to do, in order to provide him the options he wants to have.”

The two other sources declined to go into specifics about what Tillerson did not do, only stressing that Trump no longer has faith in the secretary, who simply did not carry out an assignment from him.

But it was not only Tillerson who argued for certifying that Iran was living up to the deal. Defense Secretary James Mattis, National Security Advisor H.R. McMaster, and the chairman of the Joint Chiefs of Staff, Gen. Joseph Dunford, also backed the move.

One White House official acknowledged the president’s deep frustration at the options he was presented on the nuclear deal but argued that it was not fair to say Tillerson and the State Department were solely at fault. The White House National Security Council also bears responsibility for overseeing policymaking and preparing options for the president.

“I wouldn’t put all the blame on them,” the official said of the State Department.

Trump, however, was clearly upset that Tillerson told him he had no choice but to certify Iran was in compliance, according to the source, and asked White House staffers to take over. Withholding certification “wasn’t a real option available to me,” Trump reportedly told the staffers. “Make sure that’s not the case 90 days from now.”

Trump may still choose to certify Iran’s compliance at the next deadline, a source said, but he does not want to be in the position of where he was this week, when he was told that he had to certify because no other option was made available.

“He may not decertify, though I think he will,” the source said. “But he wants to make sure he never, ever, ever hears again that he can’t do it.”

The three sources told FP that, as of Friday, several NSC staffers are expected to be involved including top Middle East advisor Derek Harvey; Joel Rayburn, the director for Iraq, Iran, Lebanon, and Syria; Michael Anton, who handles strategic communications; and Victoria Coates, who works as Anton’s deputy on strategic communications. Bannon and Gorka, who are both regarded as Iran hawks, are also expected to take part.

Anton, who serves as the NSC spokesman, declined to comment.

Career diplomats at the State Department, who were involved in the negotiations and the initial implementation of the deal under former President Barack Obama, have argued that the agreement is vital as it blocks Iran’s path to a nuclear weapon. And they say the benefits outweigh the risks and uncertainties of entering into a confrontation with Tehran over the issue while also avoiding a rupture with European allies that are committed to the deal and that will oppose reimposing sanctions lifted under the accord.

Although most of Trump’s deputies endorsed certifying that Iran was abiding by the deal, one senior figure has emerged in favor of a more aggressive approach — CIA Director Mike Pompeo. At White House deliberations, the former lawmaker opposed certifying Iran while suggesting Congress weigh in on the issue, officials and sources close to the administration said. As a congressman, Pompeo was a fierce critic of the deal.

The CIA declined to comment about Pompeo’s stance on certifying Iran.

The move to sideline Foggy Bottom will likely confirm the worst fears of State Department officials, who expected some form of backlash from the White House given Trump’s stance during the 2016 campaign and the appointment of those seen as Iran hawks.

Tillerson is “trying to be a counterweight against the hard-liners, trying to save the [nuclear deal], but how long can that last?” one senior State Department official told FP, speaking on condition of anonymity. “The White House, they see the State Department as ‘the swamp.’”

Now 10 Dead in Smuggled Truck

Posted on by

Statement from ICE Acting Director Thomas Homan on Human Smuggling

“By any standard, the horrific crime uncovered last night ranks as a stark reminder of why human smuggling networks must be pursued, caught and punished.  U.S. Immigration and Customs Enforcement’s Homeland Security Investigations works year-round to identify, dismantle, and disrupt the transnational criminal networks that smuggle people into and throughout the United States. These networks have repeatedly shown a reckless disregard for those they smuggle, as today’s case demonstrates. I personally worked on a tragic tractor trailer case in Victoria, Texas in 2003 in which 19 people were killed as a result of the smugglers’ total indifference to the safety of those smuggled and to the law.

“The men and women of ICE are proud to stand alongside our law enforcement partners, including locally and at the U.S. Department of Justice, to combat these smuggling networks and protect the public and those who would fall victim to their dangerous practices that focus solely on their illicit profits.  So long as I lead ICE, there will be an unwavering commitment to use law enforcement assets to put an end to these practices.”

The Federal complaint is found here.

*** Texas Public Radio

FNC: A suspect arrested in connection with the deaths of at least 10 people packed into a sweltering tractor-trailer is due in court Monday over his alleged role in the immigrant-smuggling attempt gone wrong.

Federal prosecutors said they planned to bring charges against James Mathew Bradley Jr., 60, of Clearwater, Florida, who is due to appear in federal court at 11 a.m. local time.

U.S. Attorney Richard Durbin Jr. did not say whether Bradley was the driver of the truck, although investigators said earlier that the driver was in custody.

Authorities initially discovered eight bodies Sunday inside the crowded 18-wheeler parked outside a Walmart in the summer heat. Two additional victims later died at the hospital.

Officials feared the death toll could still rise, because nearly 20 others rescued from the truck were in dire condition, many suffering from extreme dehydration and heatstroke, officials told the Associated Press.

Based on initial interviews with survivors of the San Antonio tragedy, more than 100 people may have been packed into the back of the 18-wheeler at one point in its journey, ICE acting Director Thomas Homan said. Officials said 39 people were inside when rescuers arrived, and the rest were believed to have escaped or hitched rides to their next destination.

Four of the survivors appeared to be between 10 and 17 years old, Homan said. Investigators gave no details on where the rig began its journey or where it was headed.

Mexican nationals were among both the survivors and the dead, Mexican Consul General in San Antonio Reyna Torres said, without giving a specific number. Torres said the consulate has been in contact with relatives both in Mexico and in the U.S.

Guatemala’s foreign ministry, meanwhile, said at least two Guatemalans were on the abandoned rig. The two male survivors told Guatemalan consulate officials that they crossed the border by foot at Laredo and boarded the tractor-trailer, according to Tekandi Paniagua, communications director for the foreign ministry. The pair told officials their final destination was Houston, Paniagua added. More here.