Reuters: A 72-hour truce in Yemen came under pressure on Thursday when missiles fired from Yemen injured civilians in southern Saudi Arabia, according to an Arab coalition which launched air strikes that Iran-allied Houthi fighters said killed three people.
Exclusive: Iran steps up weapons supply to Yemen’s Houthis via Oman – officials
Reuters: Iran has stepped up weapons transfers to the Houthis, the militia fighting the Saudi-backed government in Yemen, U.S., Western and Iranian officials tell Reuters, a development that threatens to prolong and intensify the 19-month-old war.
The increased pace of transfers in recent months, which officials said include missiles and small arms, could exacerbate a security headache for the United States, which last week struck Houthi targets with cruise missiles in retaliation for failed missile attacks on a U.S. Navy destroyer.
Much of the recent smuggling activity has been through Oman, which neighbors Yemen, including via overland routes that take advantage of porous borders between the two countries, the officials said.
That raises a further quandary for Washington, which views the tiny Gulf state as a strategic interlocutor and ally in the conflict-ridden region. A senior U.S. administration official said that Washington had informed Oman of its concerns, without specifying when.
“We have been concerned about the recent flow of weapons from Iran into Yemen and have conveyed those concerns to those who maintain relations with the Houthis, including the Omani government,” the official told Reuters.
Oman denies any weapons smuggling across its border, and its officials could not be reached for comment. Yemeni and senior regional officials say the Omanis are not actively involved with the transfers, but rather turning a blind eye and failing to aggressively crack down on the flow.
In an interview with Saudi newspaper Okaz last week, Omani Foreign Minister Yousef bin Alwi said:
“There is no truth to this. No weapons have crossed our border and we are ready to clarify any suspicions if they arise.”
The Iran-allied Houthis gained a trove of weapons when whole divisions allied to former Yemen President Ali Abdullah Saleh sided with them at the start of the war last year. But Saudi Arabia and Yemen’s exiled government say they also receive substantial amounts of weapons and ammunition from Iran. Tehran views the Houthis as the legitimate authority in Yemen, but denies it supplies them with weapons.
Some Western officials have been more skeptical of the view that the Houthis are receiving large-scale support from Iran.
The U.S. and Western officials who spoke to Reuters about the recent trend in arms transfers said it was based on intelligence they had seen but did not elaborate on its nature. They said the frequency of transfers on known overland smuggling routes had increased notably, though the scale of the shipments was unclear.
Even U.S. officials warning of Iran’s support for the Houthis acknowledge intelligence gaps in Yemen, where the U.S. posture has been sharply reduced since the start of the conflict. The sources all declined to be identified because of the sensitivity of the issue.
“We are aware of a recent increased frequency of weapons shipments supplied by Iran, which are reaching the Houthis via the Omani border,” a Western diplomat familiar with the conflict told Reuters.
Three U.S. officials confirmed that assertion.
One of those officials, who is familiar with Yemen, said that in the past few months there had been a noticeable increase in weapons-smuggling activity.
“What they’re bringing in via Oman are anti-ship missiles, explosives…, money and personnel,” the official said.
Another regional security source said the transfers included surface-to-surface short-range missiles and small arms.
A senior Iranian diplomat confirmed there had been a “sharp surge in Iran’s help to the Houthis in Yemen” since May, referring to weapons, training and money.
“The nuclear deal gave Iran an upper hand in its rivalry with Saudi Arabia, but it needs to be preserved,” the diplomat said.
Washington’s Gulf allies have warned that U.S. President Barack Obama’s rapprochement with Tehran through the landmark nuclear deal signed last year will only embolden Iran in conflicts in Syria, Lebanon, Yemen and elsewhere.
U.S. LOOKING INTO MISSILE ORIGIN
The increase in transfers comes as the civil war drags on and threatens to pull the United States deeper into a conflict that has killed 10,000 people and which pits two regional powers, Saudi Arabia and Iran, against each other. A U.N.-brokered 72-hour ceasefire went into effect on Wednesday.
Since the beginning of the war, the Houthis have used short-range Scud missiles, and the United Nations says they have also used surface-to-air missiles, improvised to operate as surface-to-surface rockets against Saudi Arabia.
But a suspected Houthi missile attack against a United Arab Emirates vessel in a strategic Red Sea shipping lane this month, as well as the attempted strikes against the U.S. warship, raise worries about the rebels’ capability to launch bolder attacks.
The Houthis have denied attacking the USS Mason.
BBC: The Saudi-led military coalition backing the government in the war in Yemen has accused Houthi rebels of repeatedly violating a ceasefire.
A statement said the rebels had breached it more than 40 times along the border with Saudi Arabia.
The UN-brokered truce, meant to last three days, began on Wednesday just before midnight.
Rebels, meanwhile, said an air strike on their territory had killed three civilians.
The UN had hoped that the truce might be extended and lead to renewed peace talks.
Rockets were fired by Houthi rebels at Jazan and Najran in Saudi Arabia, the coalition said in a statement.
“Forty-three violations were committed along the border… in which snipers and various weapons were used, including missiles,” it said.
The Houthis said a coalition air strike on Thursday killed three civilians in northern Saada province. They also said they had launched attacks across the border on Saudi military camps over the past two days.
The war has killed nearly 7,000 people, mostly civilians, the UN says.
The coalition, which backs Yemen’s exiled president, has been fighting the rebels and their allies since March 2015, when a Saudi-led air campaign began.
Five previous ceasefires have broken down within a short time.
The announcement of the ceasefire followed an international outcry over the deaths of 140 people in a Saudi air strike that hit a funeral gathering in Sanaa.
Saudi officials said they had targeted the wrong site by mistake due to “bad information”.
The conflict and a blockade imposed by the Saudi-led coalition have triggered a humanitarian disaster, leaving millions of people homeless and hungry and 80% of the population in need of aid.
Mediterranean Sea is Getting Crowded with Russian Navy
Russia possibly mapping underwater internet cables in Mediterranean
WT: Approximately one year ago, the Russian navy caused quite a stir by hanging around internet cables in the Atlantic for some period of time.
Steffan Watkins, an open-source intelligence analyst who monitors Russian ship movements, said the Russian navy sends vessels such as Yantar to the region to check on existing U.S. underwater sensors or cables that have been detected previously. The ships also search for new equipment on the sea floor that would reveal U.S. operations.
The accusation was the Russians were mapping the cables in order to be able to sever them in times of conflict.
The Russian fleet in the Mediterranean seems to be doing the same thing this week over cables off the Syrian coast.
News.com.au writes, “Author and military analyst H.I. Sutton is one of several observers who have noted the unusual activity of a suspected Russian survey ship, the Yantar, in waters between Cyprus, Syria, Lebanon and Turkey in recent weeks.
It’s reported positions have been coinciding with the tracks of three major undersea fibre-optic cables. Mr Sutton’s blog suggests the extremely slow speed and frequent stopping of the ship suggest it could be deploying a submersible to the sea floor.”
If internet cables were severed that were supporting Western information flow, this could cause great economic disruption and take a very long time to repair, especially in time of war.
It seems likely that Russia wants this capability to inflict great damage on the European and American economies if need be.
Another possibility is that the Russian navy could be deploying devices to monitor information through the cables for espionage reasons.
(Bloomberg) — U.K. warships are monitoring a Russian aircraft-carrier group sailing past Britain’s eastern coast to the Mediterranean Sea to supplement President Vladimir Putin’s forces in the region, as international condemnation mounts of Russia’s military campaign in Syria.
A photo taken from a Norwegian surveillance aircraft shows a group of Russian navy ships in international waters off the coast of Northern Norway on October 17, 2016. 333 Squadron, Norwegian Royal Airforce/NTB Scanpix/Handout via Reuters
The deployment signals Putin’s determination to assert Russian interests as U.S. and European leaders accuse him of war crimes and dangle the threat of sanctions in response to the bombing of Aleppo by Russian warplanes.
Putin floated a possible extension of a cease-fire for the besieged Syrian city during a late-night meeting in Berlin on Wednesday with French President Francois Hollande and German Chancellor Angela Merkel that she portrayed as testy. Merkel and Hollande will meet again in Brussels on Thursday for a two-day summit of the EU’s 28 leaders that will consider a common response to Russia’s actions in support of Syrian President Bashar Al-Assad.
“We must show a robust and united European stance in the face of Russian aggression,” U.K. Prime Minister Theresa May told reporters as she arrived for her first summit. While Britain is leaving the EU, until it does “it’s vital that we work together to continue to put pressure on Russia to stop its appalling atrocities, its sickening atrocities in Syria,” she said.
May’s comments hint at the growing outrage over the bombing by Russian and Syrian forces of Aleppo, where some 275,000 inhabitants remain trapped. Syria’s government opened two crossings for fighters who want to leave the rebel-held eastern part of the contested city, a day after announcing a three-day humanitarian pause to its offensive.
Northern Fleet
Russia’s Northern Fleet, based at Severomorsk near the Finnish border, said last week that a naval group had set out for the northeast Atlantic en route to the Mediterranean “to ensure naval presence in the important areas” of the seas, according to the TASS news agency. The ships include the Admiral Kuznetsov, Russia’s only aircraft carrier.
“When these ships near our waters we will man-mark them every step of the way,” U.K. Defense Secretary Michael Fallon said in an e-mailed statement on Thursday. “We will be watching as part of our steadfast commitment to keep Britain safe.”
Russia said last month that its permanent naval group already stationed in the Mediterranean numbers about 10 warships and support vessels. Igor Konashenkov, a Defense Ministry spokesman in Moscow, declined to comment on the additional deployment.
Russian Responsibility
Speaking after the Berlin talks that stretched into early Thursday, Putin said Russia would halt its bombing of Aleppo as long as “terrorist forces” aren’t active. At a separate news conference alongside Merkel, Hollande said Putin didn’t specify how long such a cease-fire might last. “We hope it’s as long as possible” to allow for humanitarian aid to reach all parts of the city, he said.
European foreign ministers will work on getting aid to the area, which would “at least be a first step that we haven’t seen in a long time,” Merkel said. “It was right to use this blunt language” in the talks with Putin because “Russia bears a clear responsibility in Syria, including exerting influence over” Assad, the German leader said.
Merkel and Hollande kept the threat of sanctions against Russia on the table, while saying the focus had to be on helping civilians in Aleppo.
Hollande said that at best the European Union could target individuals, while Merkel limited herself to saying that “you can’t deny yourself the option.” Either way, any sanctions would require the approval of all 28 member states and the most ardent support for such an approach came from the U.K, which has voted to leave the bloc. Russia already is under EU and U.S. sanctions for its encroachment on Ukraine.
“The conclusion in the European Union is that we don’t believe in new sanctions at this phase because we already have sanctions and these run until the end of January,” Finnish Prime Minister Juha Sipila said in an interview in Helsinki on Wednesday. “In December or January we will have a discussion about the future of sanctions.’’
Minsk Accord
The Syria talks followed a discussion on Ukraine that was also attended by Ukrainian President Petro Poroshenko. Merkel and Poroshenko said the four leaders agreed to work on a “road map” of measures to advance last year’s Minsk accords for ending the conflict in eastern Ukraine between government forces and Russian-backed separatists.
In Brussels, Estonian Prime Minister Taavi Roivas, whose country borders Russia, said EU leaders must deliver “a very clear message to both the Syrian regime and its allies, mainly Russia.” He compared Aleppo with the Chechen capital, Grozny, that was reduced to rubble by Russian aerial bombing in the 1990s. “This is absolutely unacceptable,” Roivas said.
Operation to Liberate Mosul Takes the Life of a U.S. Servicemember
The special forces backed by attack helicopters fought their way into the town of Bartella, where IS militants unleashed at least nine suicide truck bombs. Lt. Gen. Talib Shaghati said the special forces retook Bartella, about 15 kilometers (nine miles) from the edge of Mosul. But Iraqi forces were facing stiff resistance inside the town shortly before he spoke.
The U.S. trained special forces are Iraq’s most highly trained and least sectarian fighters, and will lead the charge into Mosul.
Kurdish peshmerga forces also announced a “large-scale operation,” and peshmerga forces stationed on mountains northeast of Mosul descended from their positions and charged toward the front line. Military operations also appeared to be underway in the town of Bashiqa, northeast of Mosul, which was pounded by airstrikes and peshmerga mortars the day before. More here.
****
Stripes: WASHINGTON— A U.S. servicemember died Thursday after being wounded by an improvised explosive device in northern Iraq, according to a statement by the military’s Combined Joint Task Force Inherent Resolve.
A U.S. Army M109A6 Paladin conducts a fire mission at Qayyarah West, Iraq, in support of the Iraqi security forces’ push toward Mosul, Oct. 17, 2016. Christopher Brecht/U.S. Army
The command did not identify the servicemember or immediately provide any additional information about the death, which coincides with a joint U.S. operation to retake the city of Mosul from the Islamic State group. As many as 200 special operators were embedded with Iraqi and Kurdish units this week moving to the front lines of the battle, the Pentagon has said.
A total of about 4,800 troops are in Iraq assisting in the mission to liberate Mosul and its roughly 1 million inhabitants. The death announcement comes a day after two Americans – one a U.S. servicemember – were killed in Afghanistan in an apparent insider attack.
Earlier this week, the Pentagon said the embedded U.S. forces in northern Iraq were advancing to the last secure areas on the outskirts of Mosul as Iraqi and Kurdish forces wage a long-awaited offensive that could continue for weeks or months.
Iraq has about 18,000 troops moving on the city and the Kurdish peshmerga forces number about 10,000, according to Pentagon estimates.
Many U.S. troops were providing air support including nighttime raids by Apache helicopters, artillery bombardment, intelligence and forward air controllers who relay target information from Iraqi forces, according to the joint task force.
A Pentagon spokesman said troops were all operating behind the front lines of the conflict, which is the biggest offensive against the Islamic State group since it was defeated and pushed from Ramadi in western Iraq in December. The extremist group seized Mosul, which was Iraq’s second largest city, after a lightning assault from Syria in 2014.
Meanwhile, the Pentagon was looking into what could have been the first insider attack this year in Afghanistan.
On Wednesday, an assailant reportedly dressed in an Afghan National Army uniform killed an unidentified U.S. servicemember and an American civilian who were working on a NATO mission to train local forces at Camp Morehead in Kabul. Another servicemember and two civilians were also injured.
The assailant was killed during the attack.
Back to Baghdad and who is leading the fight to liberate Mosul:
Baghdad’s Finest: A look at Iraq’s vaunted special forces
WT/BAGHDAD (AP) – Iraq’s special forces, which barreled into a town east of Mosul on Thursday despite a wave of suicide attacks, are the country’s most professional and least sectarian fighting force.
A member of Iraq’s elite counterterrorism forces pauses as they advance towards the city of Mosul, Iraq, Thursday, Oct. 20, 2016. Iraq’s special forces, which barreled into a town east of Mosul on Thursday despite a wave of suicide attacks, are the country’s most professional and least sectarian fighting force. Officially known as the Counter Terrorism Service, the troops have played a key role in wresting back towns and cities from IS, and are expected to lead the charge in Mosul. (AP Photo/Khalid Mohammed)
Officially known as the Counter Terrorism Service, the U.S. trained troops have played a key role in wresting back towns and cities from IS, and are expected to lead the charge in Mosul, their toughest battle yet.
Here is a look at Iraq’s special forces:
MADE IN AMERICA
The CTS was established by the American military shortly after the 2003 invasion as an elite commando unit charged with hunting down top insurgents and carrying out complex raids. They were trained, armed and supplied by U.S. Special Forces, who fought alongside them at the height of the insurgency.
The force proved to be a more reliable partner to the Americans than the mainstream security forces, where corruption was rife and many units were tied to parties or militias. But many Iraqis saw the special forces as the shock troops of an occupying power, and took to referring to them as the “Dirty Division.”
A PRAETORIAN GUARD?
The force grew in size over the years and expanded beyond its commando roots, with some taking part in conventional battles and even mundane tasks like manning checkpoints. Today they number around 12,000 men, including administrators, and up to 2,600 are taking part in the Mosul operation.
The unit was never incorporated into the Defense Ministry and answers directly to the prime minister. In the latter years of Prime Minister Nouri al-Maliki’s rule, many feared the special forces had become a praetorian guard that would cement his grip on power, but those fears were laid to rest when al-Maliki peacefully stepped down in 2014.
FROM “DIRTY” TO “GOLDEN”
When the Islamic State group swept across northern and central Iraq in 2014, Iraq’s security forces crumbled. Officers fled and their soldiers beat a humiliating retreat, many stripping off their uniforms and leaving their weapons and Humvees behind.
But not the special forces, who held their ground and became a source of national pride.
The CTS “retained its organizational cohesion and structure in 2014 when many other units of the Iraqi army fell apart,” said David M. Witty, a retired U.S. Army Special Forces colonel and former adviser to the CTS. “The key leaders of CTS have become central figures in the Iraqi public’s perception of the campaign to destroy IS.”
“Dirty” no more, the 1st Brigade is now widely known as the “Golden Division.”
A NON-SECTARIAN FORCE
The CTS was designed to be a non-sectarian force, with Shiite, Sunni and Kurdish members who were strictly vetted to ensure they had no ties to political factions or militias. In the early years, the force mainly battled Sunni insurgents, but it also played a lead role in a 2008 offensive against Shiite militias. Maj. Gen. Fadhil al-Barwari, who leads the Golden Brigade, is a Kurd.
The force also has a better human rights record than most of the other participants in the Mosul Offensive. An Amnesty International report released this week documenting abuses in Anbar mainly focused on state-sanctioned Shiite militias, and included only passing mention of the CTS.
LEADING THE CHARGE INTO MOSUL
The special forces launched their first assault in the Mosul operation early Thursday, pushing into the town of Bartella with the aid of attack helicopters despite stiff resistance from IS, which unleashed nine suicide truck bombs, one of which struck an armored Humvee. The rest were destroyed before hitting their targets.
“We will lead the charge into Mosul as we are specialized in the battles in urban areas and guerrilla war,” said special forces Brig. Gen. Haider Fadhil. “We are trained to break into towns and cities with fewer casualties.”
The special forces are expected to help drive IS out of Mosul in the coming weeks or months. But they can’t police the country, and will eventually have to hand things off to Iraq’s army and police, as well as Shiite militias and Sunni tribal fighters. It will be left to them to ensure that IS, which has recovered from past defeats, does not return.
___
Associated Press writer Qassim Abdul-Zahra in Bartella, Iraq contributed to this report.
Czech Police Arrest Russian Hacker of U.S.
Czech police arrest Russian with alleged connections to hacking in U.S.
WashingtonPost: A Russian man thought to have connections to hacking in the United States has been arrested in the Czech Republic, authorities there said Tuesday.
Czech police worked with the FBI to detain the man at a hotel in Prague, according to a statement published online Tuesday evening.
The arrest is not related to the Russian hacks of the Democratic National Committee and other political organizations or the ongoing probe of Russian interference in the U.S. election, federal law enforcement officials said.
“As cyber crime can originate anywhere in the world, international cooperation is crucial to successfully defeat cyber adversaries,” the FBI said in a press statement Wednesday. The arrest, the bureau noted, was made pursuant to an INTERPOL red notice, highlighting the collaboration between U.S. law enforcement and international partners.
Immediately after his arrest, authorities said, the man collapsed. He was provided first aid and was later hospitalized.
Czech courts will decide whether to extradite the man to the United States.
It was unclear what hacking attacks the man was suspected of participating in. A police spokesman declined to provide Reuters with additional information about the arrest. In Moscow, a Russian Foreign Ministry official said the Kremlin opposed the extradition.
Konstantin Dolgov, whose group monitors legal and rights issues at the Foreign Ministry, called the plans to move the suspect to the United States an “unacceptability,” according to the Interfax news agency.
Dolgov said Russian officials were monitoring the case and ready to provide the suspect with assistance, including legal help. “We expect that his procedural rights won’t be violated,” Dolgov was quoted as saying.
Although there are no apparent links between the arrest and hacking of U.S. political groups, the case is certain to draw closer attention to data infiltration tactics with suspected Russian fingerprints.
Nearly two weeks ago, the Obama administration officially accused Russia of attempting to interfere with the 2016 U.S. election, a claim that had been reported widely for months but not formally alleged by the federal government.The alleged hacks have included digital intrusions into systems at the Democratic National Committee this summer that was followed by a major leak of emails that, in turn, led to the resignation of the committee’s chairwoman, Rep. Debbie Wasserman Schultz (Fla.). Russia has also been blamed for hacking and, later, leaking emails of the Democratic Congressional Campaign Committee. In the October statement officially accusing Russia of the hacking attacks, the federal government said an online persona calling himself Guccifer 2.0 had claimed responsibility for the intrusions and said that it thinks only top Russian officials could have authorized them.
“This is some sort of nonsense,” Dmitry Peskov, press secretary for Russian President
Vladimir Putin, told The Washington Post earlier this month. “Every day, Putin’s site gets attacked by tens of thousands of hackers. Many of these attacks can be traced to U.S. territory. It’s not as though we accuse the White House or Langley of doing it each time it happens.”
****
Russian National Charged in Largest Known Data Breach Prosecution Extradited to United States
Defendant Brought From Netherlands
After Fighting Extradition for Over Two Years
****
Russian Hackers of DNC Said to Nab Secrets From NATO, Soros
Bloomberg: Weeks before the Democratic convention was upended by 20,000 leaked e-mails released through WikiLeaks, another little-known website began posting the secrets of a top NATO general, billionaire George Soros’ philanthropy and a Chicago-based Clinton campaign volunteer.
Security experts now say that site, DCLeaks.com, with its spiffy capitol-dome logo, shows the marks of the same Russian intelligence outfit that targeted the Democratic political organizations.
The e-mails and documents posted to the DCLeaks site in early June suggest that the hackers may have a broader agenda than influencing the U.S. presidential election, one that ranges from the Obama administration’s policy toward Russia to disclosures about the hidden levers of political power in Washington.
It also means the hackers may have much left in their grab bag to distribute at will. The subjects of the DCLeaks site include a former ranking intelligence official who now works for a major defense contractor and a retired Army officer whose wife serves on the USS Nimitz, the nuclear-powered aircraft carrier. Some of the e-mails go back years.
Open Society Foundations, the Soros group, reported the breach to the Federal Bureau of Investigation in June, said spokeswoman Laura Silber, who added that an investigation by a security firm found the intrusion was limited to an intranet system used by board members, staff and foundation partners.
NATO Commander
The biggest revelation on DCLeaks involves U.S. Gen. Philip Breedlove, who retired in May and was formerly the top military commander of the North Atlantic Treaty Organization. E-mails from Breedlove’s personal account show him complaining that the Obama administration wasn’t paying enough attention to European security. (“I do not see this WH really ’engaged’,” he writes at one point, later wondering “how to work this personally with the POTUS.”) The Intercept subsequently wrote a story about the e-mails, picked up by some cable news channels, inflaming tensions between the U.S. and its European allies.
Breedlove told CNN in July that the e-mails were stolen as part of a state-sponsored intelligence operation and didn’t respond to a request for comment this week.
The leaks highlight the effectiveness of some of the hackers’ tricks, including the targeting of private e-mail accounts to gather sensitive military and political intelligence. DCLeaks also offers some insight for investigators on what appears to be the hackers’ early missteps and ad hoc approach.
Harried Schedule
A cache of hacked Google e-mails from a Clinton volunteer, for example, doesn’t add up to much: They purport to be from the account of Sarah Hamilton, who works for a public relations firm in Chicago and volunteers for Hillary for America, and show little but the harried schedule of the campaign staff. Hamilton didn’t respond to a request for comment.
Similarly, a trove of “redacted” documents from the William J. Clinton Library were declassified and have been publicly available on the library’s website for several years, a spokeswoman for the library said.
“It really looks like the hackers tried a couple of things that just weren’t really working before they hit on using WikiLeaks,” said John Hultquist, the manager of cyberespionage intelligence at FireEye Inc. “With this earlier stuff, it looks like they were experimenting.”
Describing itself as the work of American hacktivists, DCLeaks.com was registered in April, and many of the documents were posted in early June. A DCLeaks administrator, who identified himself by e-mail as Steve Wanders, didn’t respond to written questions, including why much of the material focuses on Russia or Russian foreign-policy interests.
Voracious Appetites
The site seems designed to cater to the U.S. media’s voracious appetites for leaks. It has related Twitter and Facebook accounts that push out nuggets from purloined documents and that suggest angles journalists might pursue.
The Russian government has dismissed the idea that it was involved in the hack of the Democratic National Committee, and WikiLeaks founder Julian Assange said there’s “no proof whatsoever” that Moscow was involved.
Security experts see links to a larger Russian information operation. That’s in part, according to two people familiar with the probe, because the e-mail addresses of Breedlove and Hamilton were among thousands targeted in a several-month campaign that began last fall by a Russian hacking group that cybersecurity firms have referred to by monikers including Fancy Bear, APT28 and the Sofacy Group.
Cyberintelligence firms have linked that hacking group to the GRU, Russia’s military intelligence service, whose Moscow headquarters is nicknamed the Aquarium. Three private security groups have linked the DNC incursion to that group and another Russian hacking group associated with the FSB, the country’s civilian intelligence agency. U.S. intelligence agencies have told officials they believe the DNC hack was orchestrated by the Russian government.
Guccifer 2.0
A hacker calling himself Guccifer 2.0 and purporting to be Romanian initially took credit for the DNC hack. That claim was viewed skeptically, in part because the hacker didn’t appear to speak Romanian. Guccifer 2.0 provided the Smoking Gun with leaked e-mails from Sarah Hamilton’s account, according to a story posted on that site on June 28. FireEye believes Guccifer 2.0 is a cover identity for APT28, Hultquist said.
In the case of Soros’s Open Society, hackers stole a trove of documents after accessing the foundation’s internal intranet, a system called Karl, according to a person familiar with its internal investigation. On August 3, the DCLeaks.com Twitter account tweeted “Check George Soros’s OSF plans to counter Russian policy and traditional values,” attaching a screenshot of a $500,000 budget request for an Open Society program designed to counter Russian influence among European democracies.
The hackers may have had access the foundations’ network for nearly a year, according to another person familiar with the investigation. Although Open Society has about 800 full-time staff, as many as 7,000 people have access to Karl, which is used to circulate draft program proposals, budgets and other internal documents.
DCLeaks.com provides a possible outline of the successful tactics used by the suspected Russian hackers, like targeting personal e-mail accounts to scoop up sensitive information.
The hackers were apparently reading Breedlove’s personal e-mails that went back to at least 2012, a period when he was among the highest-ranking U.S. military officers and was commander of the U.S. European Command and NATO Allied Command Operations.
Among Breedlove’s correspondents, according to DCLeaks.com, were former Secretary of the Air Force James Roche, former presidential candidate Wesley Clark and former Secretary of State Colin Powell. Efforts to contact Clark and Powell weren’t immediately successful.
Roche, in an e-mail, said Breedlove is a thoughtful officer who has worked hard for the betterment of the Air Force and his country. Of the Russians, Roche added: “I hope they learned that there are many dedicated officers who are thinking of the best ways to ensure that our country’s leaders can’t be bullied by Mr. Putin and his associates.”
Mastermind of Europe’s Terror Attacks Identified
U.S. Identifies Key Player in ISIS Attacks on Europe
Frontline: Almost a year after Islamic State terrorists killed 130 people in Paris, U.S. intelligence agencies have identified one of the suspected masterminds of that plot and a follow-up attack in Brussels.
U.S. counter-terror officials said the man, who goes by the name Abu Sulaiyman al Fransi (Abu Sulaiyman, the Frenchman) is a 26-year old Moroccan who once served in Afghanistan as a soldier in the French Foreign Legion. He did prison time for drug running before going to Syria in 2014 and joining ISIS, according to U.S. officials and French court documents. His real name is Abdelilah Himich, according to U.S. counter-terror officials.
Despite his relative youth, Himich’s military experience and knowledge of France have made him a key figure in the Islamic State’s external operations unit, which has led a terror campaign against Europe, officials said. He is thought to be in Syria.
“We believe he is one of the top guys involved in spearheading the Paris attack and the Brussels attacks,” a U.S. counter-terror official said. “He was involved in creating that infrastructure” of the external operations unit.
U.S. and European counter-terror officials were interviewed for this story as part of a report by ProPublica and FRONTLINE about terrorism in Europe.
Officials acknowledged that they have struggled to pin down details about the identities and activities of the ISIS planners. U.S. and European counter-terror officials note that several Islamic State fighters have used the nom de guerre Abu Sulaiyman al Fransi. (The nickname is spelled in a number of ways, U.S. officials say.) In the past, he has variously been described by European officials and media reports as a blond convert and a former physical education teacher.
But U.S. officials said there was strong evidence indicating that the senior French fighter in question is Himich. They said French intelligence has been informed of that assessment and agrees with it.
Click here to see the full documentary.
European counter-terror officials interviewed by ProPublica earlier this year said they also suspect that a militant known as Abu Sulaiyman the Frenchman helped to plan the Paris and Brussels attacks. But they did not disclose his full identity.
Officials said that months of investigations and intelligence work in Europe and the Middle East have begun to shed light on the command structure of what the Islamic State calls external operations. The predominantly Arab leaders of ISIS have given senior and mid-level European fighters considerable autonomy to select targets and decide details of plots in their home turf, according to Western counter-terror officials.
Nonetheless, the ISIS unit that plots attacks overseas is also quite bureaucratized, according to U.S. intelligence officials. The unit exerted increasingly direct control over plots in Europe starting in 2015, according to Western counter-terror officials, and is part of an ISIS intelligence structure known as the Enmi.
“ISIS-directed plots in Europe have usually involved several planners and organizers who might change for each project,” said Jean-Charles Brisard, the chairman of the Center for the Analysis of Terrorism in Paris, who has been studying the unit. “It’s more a team process than a single mastermind’s plan.”
Abu Mohamed al-Adnani, a Syrian who served as a spokesman for the Islamic State, was a top figure overseeing external operations, counter-terror officials say. A U.S. drone strike killed Adnani in August.
There is hard evidence that another ISIS militant in Syria, a man known as Abu Ahmad, played a hands-on role in the Paris and Brussels cases, according to European counter-terror officials. A laptop computer recovered by Belgian police after the Brussels bombings in March contained encrypted communications detailing Abu Ahmad’s direct role in the plot.
During the four months after the Paris attacks, Abu Ahmad discussed targets, strategy and bomb-making techniques from Syria via encrypted channels with survivors of the terrorist cell who were hiding in Brussels. The fugitive suspects referred to Abu Ahmad as their “emir,” or leader, according to Belgian counter-terror officials.
The communications in the laptop indicate that the original plan was to hit France again, European officials say. When Belgian police closed in, however, Abu Ahmad told the fugitives to strike in Brussels instead, officials said. The suicide bombings killed 32 people at the airport and a subway station on March 22.
Abu Ahmad was described by two captured ISIS fighters as a lead planner of the Paris massacre as well. The suspects, an Algerian and a Pakistani, told interrogators that Abu Ahmad chose and prepared them for the plot last fall, and sent them to Europe posing as Syrian refugees, according to European counter-terror officials.
When the two landed in Greece in October, however, Greek border guards discovered they were not Syrian, and held them for a few weeks, according to European and U.S. counter-terror officials. After being released, the duo communicated with Abu Ahmad, who sent them money and instructions not to join the rest of the attackers, according to officials. The two suspects were arrested in Austria in December.
The men described Abu Ahmad as a Syrian, according to European counter-terror officials. But the recovered clandestine communications with the plotters in Europe indicate clearly that he speaks French, raising questions about his true nationality, the officials said.
“He has to be French, or speak French well,” a European counter-terror official said. “They use French slang.”
The investigation shows that Abu Ahmad worked with the senior fighter known as Abu Sulaiyman al Fransi, according to European and U.S. counter-terror officials. During the massacre at the Bataclan concert hall in Paris, witnesses overheard gunmen talk to each other about calling a person named Abu Sulaiyman, according to European and U.S. officials.
Himich, the man identified by U.S. intelligence as Abu Sulaiyman, has an unusual story. He was born in Rabat, Morocco, in 1989, according to U.S. counter-terror officials and French court documents. His family emigrated when he was an adolescent to Lunel, a southern French town about 20 miles from Montpellier, officials say.
Lunel has a population of about 25,000 and a rich history as a Jewish cultural center in medieval times. The town has a large population of Muslim descent as the result of immigration from North Africa beginning in the 1960s.
In 2006, Himich’s name appeared in a Lunel high school newspaper as the author of an article about teenage drinking. Although he went to school in France, he remains a Moroccan citizen, according to officials and court documents. In 2008, he joined the French Foreign Legion, a legendary and hard-nosed force whose soldiers come from all over the world.
Himich “distinguished himself during various missions in Afghanistan,” according to the court documents. In 2010, however, he deserted, according to the officials and documents.
“Wanting to attend the burial of his father, he left his post without authorization,” the documents say. “After his return to France, he did vocational training to work in the security field and also considered becoming a nurse.”
A year later, he got in trouble with the law. French customs police intercepted him arriving on a train from Amsterdam at the Gare du Nord station in Paris on Dec. 13, 2011, according to court documents. Police discovered he was carrying a backpack containing 2.6 pounds of cocaine with a street value of about $55,000. He also tested positive for cocaine and marijuana.
Himich testified that he had met a Senegalese man at a hookah bar in Paris, and told him he needed money because he had left the Foreign Legion. Himich said the man hired him to bring a package from Rotterdam, offering to pay $1,600. Himich, whom the documents describe as “adopting an arrogant attitude” during a court hearing, denied knowing that the package contained drugs.
Himich spent five months in jail. He was convicted in April 2013, and sentenced to three years in prison with a year suspended, according to the documents, though it appears he did not spend much more time behind bars. It was his first criminal conviction. He appears to have followed a classic trajectory from crime into radicalization.
Despite its picturesque setting, Lunel has made headlines as a hub of extremism. By 2015, at least two dozen young people — of North African descent as well as Muslim converts — had left Lunel to fight in Syria, where at least six of them died.
Himich joined that exodus in early 2014, according to U.S. counter-terror officials. He rented a car and drove via Italy, Greece and Turkey to Syria, according to Brisard. That route is popular with Syria-bound jihadis who travel with their families, according to Italian police. Himich has a wife and two children, officials said.
In Syria, Himich first fought in an Al Qaeda-linked group, officials say. Then, like many extremists in Syria, he moved to the increasingly powerful Islamic State. He soon became a battlefield commander, according to U.S. officials and Brisard, the French counter-terror expert.
“He was quickly promoted by ISIS to lead one of its fighting brigades in the first half of 2014,” Brisard said. “His rapid rise within ISIS could be explained by his military service in the French Foreign Legion.”
France and Interpol have issued warrants for Himich’s arrest on suspicion of terrorist activity, according to U.S. officials.
Investigators believe Himich is among a group of ISIS militants in their 20s and 30s, predominantly Francophones, who plot against Europe. The group also includes two Muslim convert brothers from Toulouse, Fabien and Jean-Michel Clain, according to counter-terror officials. Fabien Clain is believed to be the Frenchman who read the official statement in which the Islamic State claimed responsibility for the Paris attacks, officials say.
The Clain brothers surfaced in an investigation in 2009 of a French-Belgian extremist network. Suspects in that case had been investigated for a bombing in Cairo and, according to investigators, told Egyptian interrogators they had discussed a potential attack on the Bataclan, the nightclub that was hit in 2015. The suspects allegedly saw the Paris concert hall as a Jewish target because the owners were Jewish and the venue had hosted pro-Israel events.
Given his military experience, Himich’s stature is likely to grow after the recent deaths of Islamic State leaders in U.S. air strikes, officials said.
“He’s probably one of the most important Frenchmen in ISIS, especially after the death of Adnani,” the U.S. counter-terror official said.