Assad has North Korean Troops in Syria

Posted on by

Primer for consideration:

North Korea’s Next Missile Test Could Kill

Chang/DailyBeast: Firing back with ‘unprecedented’ provocations against joint South Korean and American annual military exercises, Kim Jung Un could make a dangerously wrong move.

On Monday, North Korea fired five short-range missiles eastward. The projectiles fell into the Sea of Japan, what Koreans call the East Sea. The provocation followed Friday’s launch of two Nodong medium-range missiles, which can put a dent anywhere in South Korea and parts of Japan.

The Democratic People’s Republic of Korea has launched 15 projectiles on four separate occasions since early last month in apparent shows of anger.

Friday’s and Monday’s belligerent acts follow a series of threats to kill all the residents of Manhattan and launch “preemptive and offensive” nuclear strikes. The regime has also taken the unprecedented step of releasing photographs of leader Kim Jong Un standing next to what it implied is a thermonuclear device. Full article here.

North Korea troops fighting in Syrian civil war, delegate says
Asaad Al-Zoubi said “fatally dangerous” North Korean soldiers are fighting on behalf of President Bashar al-Assad.

GENEVA, Switzerland, March 22 (UPI) — Two North Korean military units are fighting on behalf of President Bashar al-Assad in the Syria conflict.

Asaad Al-Zoubi, the head of the Syrian opposition’s High Negotiations Committee delegation, told Russian news agency TASS that North Koreans have committed troops to the civil war.

According to Al-Zoubi, the two units are called Chalma-1 and Chalma-2.

The Syrian delegate provided the information as he attended Syria peace talks at the United Nations European headquarters in Geneva.

Al-Zoubi added there are fighters from Iran and Afghanistan fighting on behalf of Assad.

Russia’s Sputnik International also confirmed the Syrian representative’s statement on North Korean soldiers in the Middle East, and quoted Al-Zoubi as saying the “North Korean troops are fatally dangerous” during an explanation of the presence of foreign troops in the Syrian civil war.

The civil war has continued for five years, and the opposition and the Assad regime are at odds regarding the details of a peace negotiation.

But Pyongyang maintains friendly ties with the dictatorship in Damascus, and Russia has supported Assad’s rule.

North Korea’s presence in the Middle East conflict is unprecedented, but the two countries have cultivated military ties for many years.

North Korea has been a staunch ally of the Syrian government of Bashar al-Assad, opposed by the Islamic State, and Pyongyang helped Syria build a nuclear facility destroyed by an Israeli air raid in 2007.

Last September Syria dedicated a park to former North Korean leader Kim Il Sung.

****** 2013:

38North: When Kim Jong Un assumed power two years ago, foreign observers predicted North Korea would cut its losses short and disengage from Syria in the wake of the overthrow of friendly regimes in Algeria, Egypt and Libya. But this proved to be wishful thinking. On the contrary, Kim Jong Un got off the fence and has joined the Assad government to actively fight against the anti-government rebels in Syria, many of whom are affiliated with Al-Qaeda. Indeed, the DPRK says it is its duty to help a legitimate sovereign government in the fight against international terrorism in Syria.

Careful reading of the DPRK Foreign Ministry’s latest tepid and contorted denial[1] of the persistent rumors that Pyongyang supplies weapons to Syria or flies pilots in anti-rebel air raids suggests that North Korean arms and military advisors may indeed be engaged on the battlefields of the Syrian civil war but not necessarily in the exact manner alleged by the rebels and Western media. Pyongyang is known for its penchant to split hairs: it knows the facts, and even if the rumors come close to the reality, but do not exactly match it, Pyongyang will hit back hard. The fact that it hasn’t suggests that indeed there is fire where there is smoke.

Why Did Kim Jong Un Come to Assad’s Rescue?

In 2013, North Korea’s young leader stepped up military support for his country’s long-time strategic partner, the Assad regime, in the nationwide civil war against the radical Sunni rebels backed by the Western liberal democracies in alliance with conservative Gulf monarchies. Why is North Korea fighting for Assad?

The well-entrenched Kim family came to the rescue of the faltering Assad family, exporting its trademark anti-American “revolutionary spirit of the offensive,” for four reasons. First, birds of a feather flock together. Both countries are former Soviet client states that lost their patron after the collapse of the USSR in the early 1990s. The collapse resulted in the loss of the strategic support that the Soviets had provided them, forcing Pyongyang and Damascus to abandon the dream of “strategic parity” with Seoul and Tel Aviv, respectively, and to adopt a new formula of “strategic deterrence,” vis-a-vis the ROK and Israel, as well as their allies and like-minded countries. In that context, both face an acute security dilemma in their respective neighborhood since they are also divided countries fighting to force out foreign troops that occupy what they believe are their homelands, namely the U.S. forces in the southern half of the Korean peninsula and Israeli troops in the Golan Heights. Finally, both have also been branded as “rogue states” and are isolated in the international community. The United States considers them as “states sponsoring international terrorism” and engaged in “nuclear proliferation” and, therefore, has imposed broad-ranging political and economic sanctions on both countries.

In that context, Pyongyang and Damascus have similar worldviews as part of the anti-US, anti-imperialist united front. Supreme People’s Assembly (SPA) Chairman Choe Tae Bok once said: “The unity of our two peoples fighting in the same trench against the common enemy is everlasting, though Syria and Korea are geographically far away from each other. Our bilateral relations of friendship and cooperation will grow stronger and stronger.”[2] When the DPRK’s nominal head of state Kim Yong Nam met with the Syrian Prime Minister Wael Nader Al Halqi in Tehran in August 2013, the latter said that “Syria regards the DPRK as a military power with tremendous military force and a country of comrades-in-arms struggling against the common enemy.”[3]

This close political relationship is reflected in a number of ways. Neither country has been willing to normalize relations with the other’s enemies. The DPRK rejected Israeli overtures in the early 1990s[4] seeking to establish diplomatic relations,[5] despite Israeli promises to pay considerable compensation (up to USD 500 million) if Pyongyang were to abandon Syria and terminate its missile sales to the Middle East.[6] Similarly, Syria rejected past ROK attempts to normalize relations, unlike the former Soviet Union and China, despite its growing trade and investment links with Seoul.[7] Pyongyang and Damascus also support each other in the United Nations and other international organizations. For example, upon cues from Damascus, Pyongyang denounces US proposals for the Middle East peace process, Lebanon situation, Palestinian problem, and Arab-Israeli settlement.[8] In turn, Syria supports the DPRK’s positions in various talks on denuclearization of the Korean peninsula and inter-Korea reconciliation.[9]

State-to-state and party-to-party ties are well developed and based on extensive institutional links and personal affinities. Since the beginning of this year alone, Kim Jong Un has exchanged personal letters with Bashar Al-Assad on ten different occasions—more than with any other foreign leader, including Chinese. Many senior DPRK leaders have either visited Syria over the past two decades or worked closely with its government.[10] For instance, Kim Yong Nam traveled to Syria as President of the SPA Presidium in July 2002 and June 2000, and as Foreign Minister in July 1992. Former KPA Chief of General Staff hardline general Kim Kyok Sik served as North Korea’s military liaison to Syria in the tumultuous 1970s, coordinating the North’s military assistance to the Assad regime during the October 1973 Arab-Israeli War and post-war rehabilitation of Syrian armed forces in the mid-1970s. He also managed North Korean military sales and military construction projects there for almost a decade. As a result, many North Korean leaders have some personal knowledge of Syria and its leaders, as well as a good understanding of Pyongyang’s stakes in its relationship with Damascus.

Second, in addition to being birds of a feather, geopolitical considerations also push Pyongyang to assist Damascus. As a strategic partner of both Syria and Iran, North Korea may have been contracted by Iran to defend their mutual ally in Damascus. It is also plausible that there may be some DPRK-Syria-Russia connections in the area of military-technical cooperation, probably, in the development of Syrian air defense capabilities. Pyongyang takes full advantage of all-out Russian and Iranian support for Damascus “to defend the frontline of the joint anti-American and anti-imperialist struggle” on the Syrian battlefield without fear of being depicted as a pariah or having to pay diplomatic or political price for its actions.

Third, North Korea’s intervention in Syria’s civil war is aimed at stopping the “hostile forces” and “colored revolutions” they export at the far-flung gates to ensure they will never reach North Korea’s shores. Kim Jong Un allegedly discussed how his government might be able to help the Assad regime fight back against the rebels with a visiting Syrian government delegation on July 24, 2013, when he was accompanied by party secretaries Kim Ki Nam (ideology) and Kim Yang Gon (South Korea), and first vice-foreign minister Kim Gye Gwan, the regime’s heavyweights known for their concern about the possible impact of the Arab Spring on the North.[11] The North’s official mouthpiece, Rodong Sinmun, often discusses “the reactionary ideology and culture of imperialists that can be as effective as military capability in realizing their hegemonic ambition,” stressing that “the youth is the main target of the imperialists’ offensive” because “young people played a large role in bringing about “Egyptian-style change,” “Libyan-style victory,” and “Syrian calamity.”

Kim Jong Un holds talks with the high-ranking visiting delegation of Syrian Arab Republic in Pyongyang, on July 24, 2013. (Photo: Rodong Sinmun, July 25, 2013)

Pyongyang may also seek to divert Washington’s attention and resources away from the Korean peninsula by waging a proxy war against the United States and its allies in Syria. The North Korean leadership is not ignorant or naive. It does understand that if the US gets sucked into another war in the Middle East during “sequestration,” not only will it undermine the short-to-mid-term credibility of its defense commitment to South Korea, but it will also buy time for Pyongyang to further build up its own nuclear arsenal and advance its war preparations against the South.

Fourth, while not a military alliance based on legally binding mutual defense obligations, North Korea and Syria have a long history of extensive bilateral military-to-military ties based on their close political relationship. These ties include:

  • Fraternal assistance in several Middle Eastern wars: Since Israel joined the UN coalition troops fighting in the Korean War, the DPRK government has never considered it inappropriate or unwise to send troops to aid the Syrian government in the Arab-Israeli wars in the Middle East. For instance, the DPRK sent 25 pilots to Syria to defend the air space over Damascus during the Arab-Israeli war of 1967.[12] In 1970, the DPRK dispatched 200 tank crewmen, 53 pilots, and 140 missile technicians to Syria. During the October 1973 Arab-Israeli War, the DPRK dispatched 30 pilots to Egypt and Syria, who provided training for Syrian pilots to fight against Israel.[13] Moreover, the North Korean Air Force pilots themselves flew the Soviet-made Egyptian and Syrian airplanes during some key air battles. In 1975 and 1976, Pyongyang sent 75 Air Force instructors and 40 MIG pilots to Damascus, respectively. In 1982, during the Lebanese civil war, the DPRK government dispatched SOF (special operations forces) servicemen to Syria to provide training for guerrilla operations, some killed by the Israeli military. In 1984-1986 and 1990, 50 and 30 North Korean military instructors were sent to Syria, respectively.
  • Military Education and Training: In the mid-1980s, Kim Jong Il approved the request of the Syrian government for its military officers’ to be educated and trained at DPRK military educational institutions at the expense of North Korea. Since then, the North Korean military has been training Syrian military officers at the Kim Il Sung Military University (an analogue of US National Defense University). Officers at the colonel rank usually participate in the one-year high-level officers’ course. Syrian officers at the captain rank are also admitted to the four-year course. They are taught military strategy, operational art, and military tactics, including guerrilla operations. Kim Jong Il is said to have followed with interest the successful careers of the Syrian general officers who graduated from the university.
  • Foreign military sales: Beginning in the late 1970s through the 1980s, the DPRK supplied Syria with various conventional weapons such as rifles, guns, mortars, ammunition, bombs, armored vehicles, anti-tank missiles, radars, and even military uniforms. In particular, in 1978, the DPRK sold 300 recoilless guns to Syria. In 1982, when the civil war broke out in Syria, the Syrian military killed 20,000 civilians by firing “BM-11, 122mm MLRS (Multiple Launch Rocket System),” the weapon system imported from the DPRK. The Israel military snatched the notorious “BM-11” from Syria during the Lebanon war in 1982, killing 25 KPA soldiers who serviced it. In 1992, Pyongyang shipped 20 tons of bombs to Damascus.
  • Weapons of Mass Destruction and Delivery Systems: There is evidence to suggest that North Korea provided technical assistance to Syria in acquiring key nuclear-related technologies in China and Europe as well as in constructing a covert nuclear reactor at Al Kibar that was bombed by the Israeli Air Force in 2007. On ballistic missiles, cooperation began in the late 1980s, with the North selling Scud-C transporter-erector-launchers (TELs) and cluster warheads to Syria, helping to construct two missile assembly plants in Hama and an electronic missile launch control facility near Aleppo and providing special training for Syrian missile technicians in North Korea. Aside from strengthening the self-defense potential of one of its anti-imperialist, anti-US allies, the North has earned good money doing it.[14] On chemical weapons, there is only limited evidence of cooperation, including the interception of DPRK ships heading for Syria carrying cargos that might be useful in defending against chemical attacks. There has also been speculation that the explosion on July 20, 2007, at a facility near the city of Halab was the result of an attempt by North Korean scientists working with Syrian officials to load a chemical warhead onto one of the North Korean missiles, likely the No-dong 1 model. On biological weapons, there is information about bilateral cooperation between the Ministries of Public Health, pharmaceutical companies, and university biotech research labs but little on weapons cooperation. Still, some observers have asserted that “Syria has a biological weapons research and development program, and it is seeking professional assistance from China and North Korea in this area.”[15]

The Syrian conflict provides the North Korean military with an opportunity to gain valuable “real world” experience. Reportedly, North Korean advisors provide technical assistance to Syria’s defense industry, especially factories southeast of Aleppo, in addition to engineering and construction assistance in repairing and rehabilitating destroyed military infrastructure. The KPA is also involved in operational planning and supervision of artillery warfare as demonstrated by the battle for Qusair.[16] The North Korean military advisors are probably involved in planning and execution of the air and air defense operations of the Syrian army as well as collecting battlefield intelligence on the combat use and performance of Western arms, especially those that can potentially be used in the Korean battlefield. Finally, the Syrian civil war offers the North Korean military planners the first-hand look at the combat tactics of anti-regime rebels trained and guided by the US and its allies. And for good measure, there is no doubt that North Korean military advisors are also tasked with erasing any traces of Pyongyang’s past assistance to Assad’s programs to build weapons of mass destruction just in case he does lose power.

The Bottom Line

Given the history of DPRK-Syrian relations, despite what the North might say in public, it would be surprising if the North had not dispatched a small contingent of military advisors and instructors to aid the brotherly Assad regime in its fight against the anti-government rebels. Although that assistance is probably limited and does not have the potential to fundamentally change the course of the civil war, North Korean military expertise can affect the outcomes of local tactical battles, adding to the winning momentum of the Assad forces. Moreover, North Korea’s involvement in Syria may be an indicator that the Kim regime discounts the likelihood of any possible breakthrough in relations with either Washington or Seoul in the near future and views the risk that its national policy goals will be adversely affected by increasing support for the Assad regime as manageable.

Pyongyang’s involvement in Syria characterizes Kim Jong Un more as a steady hand and traditional alliance manager than an erratic wanderer and opportunistic risk-taker. Although he is playing with fire in the shifting sands of far-flung lands like Syria, but he is simply staying the course set forth by his grandfather and upheld by his father, demonstrating continuity in North Korea’s foreign policy. Moreover, potential material and reputational rewards far outweigh possible security or diplomatic risks, especially if Kim’s bet on Assad’s eventual victory proves to be correct. The DPRK’s decision to cast its lot with Damascus may upset wealthy Gulf monarchies—like Kuwait and Qatar—sponsoring the anti-Assad rebel groups and cause them to rethink their employment of North Korean labor and services in construction and irrigation system development projects and their provision of low-interest funds for some of Pyongyang’s infrastructure projects.[17] On the other hand, it may help Pyongyang earn much greater financial or in-kind compensation from other states concerned, including Iran, Russia, and others, and develop new diplomatic clout in the Middle East if Assad eventually wins. Pyongyang’s support for Syria may provoke Jihadist elements to strike back, but it is more likely that the KPA will gain valuable combat experience against the new age enemy—irregular anti-government militia fighting in a suburban setting. Finally, North Korea’s support for Syria may provide new fodder for others to further demonize Pyongyang but it also offers the North a chance to stand by a long-time ally in need, to show its resolve to fight for state sovereignty and territorial integrity on the world stage, and to prove with deeds it is fighting against Al Qaeda and international terrorism, even when it might be more expedient to do otherwise.

 

 

ISIS Tradecraft and Expanding Ability

Posted on by

Everything will be fine and okay after June 20, 2016?

Brussels Bombings Reflect ISIS’ Growing ‘Attack Capability’

‘When you are dealing with terrorists, absolutely the best defense is a strong offense,’ says Michael Morell, a former Deputy Director of the CIA

Reuters/Christian Hartmann)

AtlanticCounci/NATO: The bombings in Brussels on March 22 are a reflection of the Islamic State of Iraq and al-Sham’s growing “attack capability” in Europe, according to Michael Morell, a former Deputy Director of the Central Intelligence Agency who serves on the Atlantic Council’s board of directors.

The Islamic State of Iraq and al-Sham (ISIS) claimed responsibility for the attacks that left dozens dead in Brussels on March 22.

“The big picture here to me is that ISIS has put together an attack capability in Europe that is enlarging by degree and very sophisticated,” said Morell. “What happened today is at its most base level a reflection of that capability and reflection of the fact that that capability has not been degraded.”  

Attack on Brussels

A US-led coalition has been conducting airstrikes on ISIS targets in Syria with a mission set by US President Barack Obama to degrade and ultimately destroy the terrorist group.

The challenge facing the United States and Europe is to gather enough information to thwart such attacks in the future, said Morell.

“If you are not inside these cells, if you don’t have the intelligence, if you don’t get to see their communications you don’t get to see the attack coming,” he said.

Michael Morell spoke in an interview with the New Atlanticist’sAshish Kumar Sen. Here are excerpts from our interview.

Q: French President François Hollande said that through the Brussels attack all of Europe has been hit. What are the implications of this attack for Europe?

Morell: The big picture here to me is that ISIS [the Islamic State of Iraq and al-Sham] has put together an attack capability in Europe that is enlarging by degree and very sophisticated. What happened today is at its most base level a reflection of that capability and reflection of the fact that that capability has not been degraded.

There are two implications. The first is that the Europeans have to do a much better job of defending themselves. What we saw today in the airport, for example, was an attack on the left side of security. They didn’t go through airport security, they conducted their attacks in the ticket area where people don’t have to go through security. The Europeans are going to have to adjust their security protocols to reflect what these guys are doing, which is attacking soft targets. They have to completely rethink their defensive posture here. With regard to that, they have to resource their police, intelligence, and security services to reflect the threat that they are facing.

The fact that different European security services are not able to track all the [suspects] that they know about because they simply don’t have the resources is a real problem. This has got to be addressed.

But the most important point I’d make regarding implication is that when you are dealing with terrorists, absolutely the best defense is a strong offense. You have got to take the fight to them. The only way attacks in Europe end—and by the way, these attacks are going to come [to the United States] at some point, no doubt about it—is to remove their leadership from the battlefield and take away their safe haven and their caliphate. There has got to be a serious rethinking in Europe, in Washington, and in the Middle East about how do we deal with the bigger problem here. [ISIS] is under pressure in Iraq and Syria, no doubt about it, but they still have their safe haven and their leadership is still protected.

Q: Do you think Belgium let down its guard after the Paris suspect was arrested last week?

Morell: I don’t think so. In fact, I think their guard was up. There is no doubt in my mind that the timing of this attack reflected that arrest. I think what happened here is that the cell in Brussels that Salah Abdeslam was working had attacks planned and this was one of them. When he was arrested on Friday the guys who were left decided to accelerate the attacks because they were concerned that he would talk to law enforcement authorities and that their attack would get disrupted. I truly think that, when they made the arrest on Friday, they knew of the security risks going forward and they actually raised their security level. But if you are not inside these cells, if you don’t have the intelligence, if you don’t get to see their communications you don’t get to see the attack coming. That’s why this is so dangerous and complicated.

Q: In light of the terrorist attacks in Europe—Paris and now Brussels—in what areas could security cooperation and intelligence sharing between the United States and Europe be expanded?

Morell: After Paris there were all sorts of comments by senior government officials that we should enhance information sharing. When I was Deputy Director of the Central Intelligence Agency, we shared everything we had with the relevant European authorities, and they shared what they had with us. So there is very good sharing. Information sharing is not the problem, getting enough information is the problem.

To disrupt individual attacks, you need very specific intelligence and that intelligence has got to come from discussions that you pick up in Iraq and Syria, or discussions that you pick up from the cell itself. You have to attack both of those from an intelligence and security perspective, and you have to do both at the same time so you can get the intelligence you need to disrupt the attacks. It is very difficult work. It takes resources and it takes time. There are a lot of things happening on the technology front that make it more difficult for us to disrupt these things. When these guys use apps with commercial encryption that no one can read they can stay under the radar screen.

Q: What lessons can Europe learn from the United States’ experience in preventing terrorist attacks on US soil?

Morell: You have got to take the fight to them. In an American football context, you can’t play prevent defense. You have to take the fight to Iraq and Syria. You have to take away their ability to operate security, you have got to take away their sense of invincibility, the sense that they are winning, their sense that time is on their side. The only way to do that is to take the fight to them. We are doing to that some extent, but clearly we are not doing enough.

Q: Why has Belgium become a hot bed for Islamic terrorism?

Morell: It is not just Belgium, it is also France, it is also, to some extent, London. It is anywhere that you have got a very large Muslim population and there are recent immigrants from Muslim countries who flop down in these largely Muslim neighborhoods and the countries do a horrible job of bringing them into their society. The kids don’t get the best education. They feel isolated. They are probably bullied in the schools they go to. They turn to look for a sense of community and a sense of belonging and look for something bigger and they find it in the ISIS and al Qaeda narrative. That’s why we see this in Paris and Brussels where there are a lot of these neighborhoods.

Everybody is focused on this particular event [the Brussels attacks] and how you stop these guys. We are not having enough of a conversation at all about how do you stop people from becoming terrorists in the first place? How do we deal with the social, economic, and religious issues that give rise to all this stuff in the first place? Our lack of attention to that is not surprising given that we tend to be focused on people who are trying to kill us now. But we are not really going to get our arms around this problem until we as the international community—the United States, Europe and every Muslim country in the world—gets together and figures out how do we deal with the bigger problem here? How do we stop the creation of these terrorists in the first place? I am not optimistic that we are going to do that, and that’s why I say to people that my kids’ generation and my grandkids’ generation are still going to be fighting this fight.

**** Meanwhile, enter the U.S. State Department:

Europe Travel Alert
LAST UPDATED: MARCH 22, 2016
The State Department alerts U.S. citizens to potential risks of travel to and throughout Europe following several terrorist attacks, including the March 22 attacks in Brussels claimed by ISIL.  Terrorist groups continue to plan near-term attacks throughout Europe, targeting sporting events, tourist sites, restaurants, and transportation.  This Travel Alert expires on June 20, 2016.

U.S. citizens should exercise vigilance when in public places or using mass transportation. Be aware of immediate surroundings and avoid crowded places. Exercise particular caution during religious holidays and at large festivals or events.

U.S. citizens should also:

Follow the instructions of local authorities, especially in an emergency.
Monitor media and local information sources and factor updated information into personal travel plans and activities.
Be prepared for additional security screening and unexpected disruptions.
Stay in touch with your family members and ensure they know how to reach you in the event of an emergency.
Register in our Smart Traveler Enrollment Program (STEP).
European governments continue to guard against terrorist attacks and conduct raids to disrupt plots. We work closely with our allies and will continue to share information with our European partners that will help identify and counter terrorist threats.

He is Back in the Fight and a Leader

Posted on by

Just a reminder:

Freed Guantánamo convict returns to the fight

Ibrahim al Qosi pleaded guilty to war crimes in exchange for certain release

U.S. Air Force delivered him to Khartoum in 2012; he’s in Yemen now

U.S. officials won’t confirm recidivist case, which comes as Pentagon weighs more Guantánamo releases

GUANTANAMO BAY NAVY BASE, Cuba

MiamiHerald: A former Guantánamo detainee who was released to Sudan after a war court guilty plea has emerged in a key position in Al-Qaida of the Arabian Peninsula, according to an expert on jihadist movements.

“He’s clearly a religious leader in the group,” said Aaron Zelin, senior fellow at the Washington Institute for Near East Policy who edits the Jihadology blog. He found Guantánamo 2002-12 detainee Ibrahim al Qosi — his photo and his biography — on the latest video release from the offshoot of Osama bin Laden’s organization, “Guardians of Shariah.”

Obama administration officials did not confirm or deny the apparent case of recidivism, which was first reported on the Long War Journal website Wednesday.

The video included Qosi’s biography and said he joined the jihad in Yemen in December 2014. It also said he was close to bin Laden “until he was imprisoned in Guantánamo in 2001.” Qosi, now 55, arrived at the detention center on Jan. 13, 2002, according to documents obtained by McClatchy Newspapers from the anti-secrecy group WikiLeaks. He pleaded guilty to foot soldier war crimes in 2010 in exchange for release in 2012.

Qosi’s former U.S. attorney, Paul Reichler, told the Miami Herald on Wednesday that he had not been in touch with the Sudanese man since Qosi left the U.S. Navy base prison for Sudan in July 2012.

“I was told by a Sudanese lawyer a year ago that al Qosi was working as a taxi driver in Khartoum,” Reichler said by email. “I have received no information about his activities since then, and I do not know what he has been doing, or where he is living.”

At the time of Qosi’s return to Sudan, Reichler said he looked forward to being reunited with his wife and family, including two daughters, “and live among them in peace, quiet and freedom.” His wife at the time was the daughter of a former chief bodyguard to bin Laden.

On the AQAP tape, Qosi opines in Arabic on the evolving globalization of jihad. His comments were translated for the Herald by a journalist who is fluent in Arabic.

“As the U.S. has waged war on us remotely as a solution to minimize its casualties, we have fought it remotely, as well by individual jihad,” he is heard saying. “And as the U.S. has killed our men, we have killed its people. But it is not the same. Our dead are in heaven and theirs are in the hellfire, and the war is not over yet.”

Qosi, an accountant, kept the books for a bin Laden business in Khartoum in the early ’90s, according to Pentagon documents made public by WikiLeaks. He then followed bin Laden to Afghanistan in 1996. Because the timeline for war crimes only covers the era in Afghanistan, Qosi pleaded guilty to foot-soldier crimes — sometimes driving for bin Laden, working at al-Qaida’s Star of Jihad compound in Jalalabad, and fleeing the post-Sept. 11 U.S. invasion to Tora Bora, armed with an AK-47 rifle.

The AQAP video biography mirrors much of that noting, “he participated in the famous battle of Tora Bora” with bin Laden “until the withdrawal.”

Qosi was also one of the first at Guantánamo to formally allege torture — the use of strobe lights, sleep deprivation, sexual humiliation, being wrapped in the Israeli flag — in an unlawful detention petition his Air Force attorney filed in federal court in 2004. It was never heard. Instead, he withdrew the habeas corpus suit as part of his 2010 plea agreement.

The disclosure comes at a complicated time: As Secretary of Defense Ash Carter is considering the release to repatriation or resettlement of as many as 17 detainees who have been cleared for transfer. Qosi got out on the war court guilty plea that saw him spend his last two years at the prison Convict’s Corridor separated from the majority of the detainee population.

Pentagon statement

“We take any incidence of re-engagement very seriously, but we don’t comment on specific cases. More than 90 percent of the detainees transferred under this Administration are neither confirmed nor suspected by the Intelligence Community of re-engagement. We work in close coordination through military, intelligence, law enforcement, and diplomatic channels to mitigate re-engagement and to take follow-on action when necessary.” — Navy Cmdr. Gary Ross

Additional reading

Click this, to read about the captive’s 2012 release from Guantánamo.

 

 

ISIS Terror Attacks on the West

Posted on by

ISIS in America

From Retweets to Raqqa

The report, ISIS in America: From Retweets to Raqqa consists of two parts. The first examines all cases of U.S. persons arrested, indicted, or convicted in the United States for ISIS-related activities. A wide array of legal documents related to these cases provides empirical evidence for identifying several demographic factors related to the arrested individuals. This section also looks at the cases of other Americans who, while not in the legal system, are known to have engaged in ISIS-inspired behavior.

The second part of the report examines various aspects of the ISIS-related mobilization in America. Here the report analyzes the individual motivations of ISIS supporters; the role of the Internet and, in particular, social media, in their radicalization and recruitment processes; whether their radicalization took place in isolation or with other, like-minded individuals; and the degree of their tangible links to ISIS.  It concludes with recommendations to combat ISIS recruitment.

Full Report 

Brussels Is Latest Target in Islamic State’s Assault on West

By KAREN YOURISH, DEREK WATKINS and TOM GIRATIKANON

NYT: The Islamic State claimed responsibility for the explosions in Brussels on Tuesday that killed dozens of people at the main airport and a subway station. “We are promising the Crusader nations which have aligned themselves against the Islamic State that dark days are coming,” the militants said in their announcement.

For more charts and dates go here.

The Brussels explosions are the latest attacks to demonstrate a significant leap in the Islamic State’s ability to coordinate operations against the West. In October, the Islamic State downed a Russian passenger jet, killing all 224 people on board. Two weeks later, an assault across Paris killed more than 100 people.

The Islamic State has also inspired people to carry out attacks. In December, a woman in San Bernardino, Calif., posted her “bayat,” or oath of allegiance, to the Islamic State on a Facebook page moments before she and her husband opened fire in a conference room, killing 14 people.

The couple did not appear to have been directed by the Islamic State, but seemed to have been inspired by the group’s instructions for supporters to attack Western targets.

Whether inspired or coordinated, these attacks have drawn attention to the growing number of civilian deaths caused by the group outside of Iraq and Syria. The Islamic State has a history of attacking mosques, hotels, busy city streets and other civilian targets in mostly non-Western countries. The civilian death toll outside Iraq and Syria has risen to more than 1,000 since January 2015.

Major events: Attacks directed by/linked to ISIS Attacks inspired by ISIS

The Islamic State has been expanding beyond its base in Iraq and Syria since it declared a caliphate, or Islamic state, in June 2014. The group is focused on three parallel tracks, according to Harleen Gambhir, an analyst at the Institute for the Study of War:

* inciting regional conflict with attacks in Iraq and Syria;

* building relationships with jihadist groups that can carry out military operations across the Middle East and North Africa;

* and inspiring, and sometimes helping, ISIS sympathizers to conduct attacks in the West.

ISIS Declares Provinces Across the Region

Countries where ISIS has declared provinces

“The goal,” Ms. Gambhir said, “is that through these regional affiliates and through efforts to create chaos in the wider world, the organization will be able to expand, and perhaps incite a global apocalyptic war.”

Major ISIS Attacks

Attacks directed by/linked to ISIS Attacks inspired by ISIS
AustraliaAlgeriaCanadaUnited StatesSaudi ArabiaFranceTurkeyLibyaBosnia and HerzegovinaLebanonEgyptDenmarkTunisiaYemenAfghanistanKuwaitGermanyBangladeshIndonesiaBelgiumOct.Jan.AprilJulyOct.Jan.20152016

Descriptions of the Major Attacks

Date Location Details
Mar. 22, 2016
Belgium		 Belgium A series of deadly terrorist attacks struck Brussels, with two explosions at the city’s main international airport and a third in a subway station at the heart of the city, near the headquarters complex of the European Union. More »
Mar. 19, 2016
Turkey		 Turkey A suicide bombing on Istanbul’s busiest thoroughfare killed three Israeli citizens and an Iranian. Two of the Israelis held dual Israeli-American citizenship. More »
Mar. 4, 2016
Yemen		 Yemen Gunmen killed 18 people at a nursing home founded by Mother Teresa and run by Christian nuns. More »
Jan. 29, 2016
Yemen		 Yemen A bomb-packed car driven by a suicide attacker exploded at a checkpoint near the presidential palace in the southern city of Aden, killing at least eight people. More »
Jan. 14, 2016
Indonesia		 Indonesia ISIS claimed responsibility for explosions and gunfire that rocked central Jakarta, killing at least two civilians. More »
Jan. 12, 2016
Turkey		 Turkey A Syrian suicide bomber set off an explosion in the historic central districtof Istanbul, killing 10 people and wounding at least 15 others, in an attack the Turkish government attributed to ISIS. More »
Jan. 11, 2016
France		 France A teenager attacked a Jewish teacher with a machete in Marseille, and afterward told the police that he had carried out the attack in the name of God and the Islamic State.
Jan. 8, 2016
Egypt		 Egypt Gunmen reportedly carrying an ISIS flag opened fire at a Red Sea resort, injuring at least two tourists. More »
Jan. 7, 2016
Egypt		 Egypt ISIS claimed responsibility for an attack on a hotel in Cairo near the Giza Pyramids. No one was hurt. More »
Jan. 7, 2016
Pennsylvania		 Pennsylvania A man shot and wounded a Philadelphia police officer sitting in a patrol car in the name of Islam and the Islamic State, police said. More »
Jan. 4, 2016
Libya		 Libya Islamic State militants attempted to capture an oil port along Libya’s coast, in fighting that left at least seven people dead.
Dec. 7, 2015
Yemen		 Yemen The Islamic State claimed responsibility for a car bomb that killed a provincial governor and eight of his body guards. More »
Dec. 2, 2015
California		 California A married couple shot and killed 14 people in San Bernardino, Calif. The FBI is investigating the shooting as an act of terrorism inspired by ISIS. More »
Nov. 26, 2015
Bangladesh		 Bangladesh ISIS claimed responsiblity for an attack on a Shiite mosque during evening prayer in which gunmen opened fire on worshipers with machine guns, killing one man and injuring three others. More »
Nov. 24, 2015
Egypt		 Egypt ISIS militants attacked a hotel in the northern Sinai Peninsula, killing at least seven people.
Nov. 18, 2015
France		 France A teacher at a Jewish school in Marseille was stabbed by three people who appeared to profess support for ISIS. More »
Nov. 13, 2015
France		 France President François Hollande blamed the Islamic State for terrorist attacks across Paris that killed more than 100 people. The Islamic State claimed responsiblity. More »
Nov. 12, 2015
Lebanon		 Lebanon ISIS claimed responsiblity for a double suicide bombing that ripped through a busy shopping district at rush hour, killing at least 43 people. More »
Nov. 4, 2015
Egypt		 Egypt ISIS’s Sinai affiliate claimed responsiblity for a suicide bombing that killed at least four police officers. More »
Nov. 4, 2015
Bangladesh		 Bangladesh ISIS claimed responsibility for a stabbing and shooting that left one police officer dead and another wounded. More »
Oct. 31, 2015
Egypt		 Egypt An ISIS affiliate in Sinai claimed responsiblity for the downing of a Russian passenger jet that killed all 224 people on board. More »
Oct. 30
Turkey		 Turkey ISIS militants killed two Syrian anti-ISIS activists.
Oct. 24, 2015
Bangladesh		 Bangladesh ISIS claimed responsiblity for bombings that killed one person and wounded dozens more during a procession commemorating a Shiite Muslim holiday. More »
Oct. 10, 2015
Turkey		 Turkey Two explosions killed more than 100 people who had gathered for a peace rally in Turkey’s capital. Turkish officials believe ISIS is responsible. More »
Oct. 6, 2015
Yemen		 Yemen A series of bombings in Yemen’s two largest cities killed at least 25 people. More »
Oct. 3, 2015
Bangladesh		 Bangladesh ISIS claimed responsibilty for the shooting death of a Japanese man riding a rickshaw. More »
Sep. 28, 2015
Bangladesh		 Bangladesh ISIS claimed responsiblity for the shooting death of an Italian aid worker. More »
Sep. 24, 2015
Yemen		 Yemen At least 25 people were killed when two bombs went off outside a mosque during prayers to commemorate Eid al-Adha, a major Muslim holiday. More »
Sep. 18, 2015
Libya		 Libya Militants loyal to the Islamic State attacked a prison inside a Tripoli air base. More »
Sep. 17, 2015
Germany		 Germany An Iraqi man was shot dead after he stabbed a policewoman in Berlin.
Sep. 2, 2015
Yemen		 Yemen Yemen’s ISIS affiliate claimed responsibility for two bombings at a mosque that killed at least 20 people. More »
Aug. 26, 2015
Egypt		 Egypt The Sinai Province of the Islamic State group claimed responsibility for three gunmen who shot and killed two police officers.
Aug. 21, 2015
France		 France A gunman opened fire aboard a packed high-speed train traveling from Amsterdam to Paris, wounding several passengers before he was tackled and subdued by three Americans.
Aug. 20, 2015
Egypt		 Egypt An ISIS affiliate claimed responsibility for bombing a branch of the Egyptian security agency. More »
Aug. 12, 2015
Egypt		 Egypt An ISIS affiliate said it had beheaded a Croatian expatriate worker because of Croatia’s “participation in the war against the Islamic State.” More »
Aug. 7, 2015
Saudi Arabia		 Saudi Arabia ISIS claimed responsibility for a suicide bombing at a mosque that killed at least 15 people, including 12 members of a Saudi police force. More »
Jul. 20, 2015
Turkey		 Turkey A Turkish citizen believed to have had ties to ISIS killed at least 32 people at a cultural center. More »
Jul. 16, 2015
Egypt		 Egypt In what appeared to be the first attack on a naval vessel claimed by Sinai Province, the ISIS affiliate said it destroyed an Egyptian naval vessel and posted photographs on social media of a missile exploding in a ball of fire as it slammed into the vessel. More »
Jul. 11, 2015
Egypt		 Egypt ISIS claimed responsibility for an explosion outside the Italian Consulate’s compound in downtown Cairo that killed one person. More »
Jul. 1, 2015
Egypt		 Egypt Militants affiliated with the Islamic State killed dozens of soldiers in simultaneous attacks on Egyptian Army checkpoints and other security installations in Egypt’s northern Sinai Peninsula. More »
Jun. 26, 2015
Tunisia		 Tunisia At least one gunman disguised as a vacationer attacked a Mediterranean resort, killing at least 38 people at a beachfront hotel — most of them British tourists — before he was shot to death by the security forces. More »
Jun. 26, 2015
Kuwait		 Kuwait A suicide bomber detonated explosives at one of the largest Shiite mosques in Kuwait City during Friday Prayer. More »
Jun. 17, 2015
Yemen		 Yemen An ISIS branch claimed responsibilty for a series of car bombings in Sana, the capital, that killed at least 30 people. More »
Jun. 9, 2015
Egypt		 Egypt ISIS’s Sinai province claimed responsibility for firing rockets toward an air base used by an international peacekeeping force.
Jun. 5, 2015
Turkey		 Turkey An explosion at a political rally in the predominantly Kurdish city of Diyarbakir killed two people and wounded more than 100. Turkish officials have said ISIS was behind the attack. More »
Jun. 5, 2015
Turkey		 Turkey Two bombs killed three people at a rally for the pro-Kurdish Peoples’ Democratic Party, or H.D.P.
Jun. 3, 2015
Afghanistan		 Afghanistan ISIS is suspected of beheading 10 members of the Taliban. More »
May. 31, 2015
Libya		 Libya A suicide bomber from an ISIS affiliate killed at least four Libyan fighters at a checkpoint. More »
May. 29, 2015
Saudi Arabia		 Saudi Arabia One week after a similar attack in the same region, a suicide bomber dressed in women’s clothing detonated an explosive belt near the entrance to a Shiite mosque, killing three people. More »
May. 22, 2015
Yemen		 Yemen ISIS claimed responsibility for a bomb attack on a Shiite mosque that injured at least 13 worshipers.
May. 22, 2015
Saudi Arabia		 Saudi Arabia In what appeared to be ISIS’s first official claim of an attack in Saudi Arabia, a suicide bomber detonated an explosive at a Shiite mosque during midday prayer, killing at least 21 and injuring 120. More »
May 18
Turkey		 Turkey A bomb detonated at the pro-Kurdish Peoples’ Democratic Party, or H.D.P.
May. 18, 2015
Turkey		 Turkey Militants detonated a bomb at office of the pro-Kurdish Peoples’ Democratic Party, or H.D.P.
May. 3, 2015
Texas		 Texas Two men who reportedly supported ISIS and were later acknowledged by ISIS as “soldiers of the caliphate” opened fire in a Dallas suburb outside a Prophet Muhammad cartoon contest. More »
Apr. 30, 2015
Yemen		 Yemen One of ISIS’s Yemen affiliates released a video showing the killing of 15 Yemeni soldiers.
Apr. 27, 2015
Bosnia and Herzegovina		 Bosnia and Herzegovina A gunman attacked a police station.
Apr. 19, 2015
Libya		 Libya ISIS released a video of militants from two of its Libya affiliates killing dozens of Ethiopian Christians, some by beheading and others by shooting.
Apr. 12, 2015
Libya		 Libya ISIS’s Tripoli affiliate claimed credit for a bomb that exploded outside the Moroccan Embassy.
Apr. 12, 2015
Egypt		 Egypt ISIS militants killed at least 12 people in three separate attacks on Egyptian security forces. More »
Apr. 12, 2015
Libya		 Libya ISIS’s Tripoli affiliate claimed responsibility for an attack on the South Korean Embassy that killed two local police officers. More »
Apr. 8, 2015
Saudi Arabia		 Saudi Arabia Gunmen opened fire on a police patrol, killing two officers.
Apr. 5, 2015
Libya		 Libya ISIS killed at least four people in an attack on a security checkpoint.
Apr. 4, 2015
Afghanistan		 Afghanistan The Afghan vice president accused ISIS of kidnapping 31 civilians in February.
Apr. 2, 2015
Egypt		 Egypt Sinai’s ISIS affiliate killed 13 people with simultaneous car bombs at military checkpoints. More »
Apr. 1, 2015
Turkey		 Turkey Militants killed a Syrian teacher in Turkey.
Mar. 20, 2015
Yemen		 Yemen An ISIS affiliate claimed responsibility for coordinated suicide strikes on Zaydi Shiite mosques that killed more than 130 people during Friday Prayer. More »
Mar. 18, 2015
Tunisia		 Tunisia ISIS claimed responsibility for an attack on a museum that killed 22 people, almost all European tourists. More »
Feb. 20, 2015
Libya		 Libya ISIS’s Derna affiliate claimed responsibility for three car bombs that killed at least 40 people. More »
Feb. 15, 2015
Libya		 Libya ISIS released a video that appeared to show its militants in Libya beheading a group of Egyptian Christians who had been kidnapped in January. More »
Feb. 15, 2015
Denmark		 Denmark A Danish-born gunman who was inspired by ISIS went on a violent rampage in Copenhagen, killing two strangers and wounding five police officers. More »
Feb. 3, 2015
Libya		 Libya ISIS militants were suspected of killing 12 people, including four foreigners, in an attack on an oil field. More »
Jan. 29, 2015
Egypt		 Egypt ISIS’s Sinai affiliate claimed responsibility for coordinated bombings that killed 24 soldiers, six police officers and 14 civilians. More »
Jan. 27, 2015
Libya		 Libya ISIS’s Tripoli affiliate claimed credit for an armed assault on a luxury hotel that killed at least eight people. It was the deadliest attack on Western interests in Libya since the assault on the American diplomatic mission in Benghazi. More »
Jan. 23, 2015
Lebanon		 Lebanon ISIS attacked an outpost of the Lebanese Armed Forces.
Jan. 16, 2015
Bosnia and Herzegovina		 Bosnia and Herzegovina An attacker killed an imam at a mosque.
Jan. 12, 2015
Libya		 Libya ISIS’s Tripoli affiliate said they were holding 21 Egyptian Christians captive. More »
Jan. 11, 2015
France		 France A video surfaced of Amedy Coulibaly, one of three gunmen who attacked the newspaper Charlie Hebdo, declaring allegiance to ISIS. More »
Jan. 6, 2015
Turkey		 Turkey Suicide bomber injured two people at a police station.
Dec. 22, 2014
France		 France A van plowed into an outdoor Christmas market in Nantes. More »
Dec. 21, 2014
France		 France A French citizen of Algerian and Moroccan descent drove into pedestrians in Dijon, wounding 13 people. More »
Dec. 15, 2014
Australia		 Australia A gunman who said he was acting on ISIS’s behalf seized 17 hostages in a Sydney cafe. More »
Nov. 22, 2014
Saudi Arabia		 Saudi Arabia A Danish executive was shot in his car. A group of ISIS supporters later claimed responsibility.
Oct. 23, 2014
New York		 New York A hatchet-wielding man charged at four police officers in Queens. ISIS said the attack was the “direct result” of its September call to action. More »
Oct. 22, 2014
Canada		 Canada An Islamic convert shot and killed a soldier who was guarding the National War Memorial in Ottawa, stormed Canada’s parliament and fired multiple times before being shot and killed. More »
Oct. 20, 2014
Canada		 Canada A 25-year-old man who had recently adopted radical Islam ran over two soldiers near Montreal, killing one. More »
Sep. 24, 2014
Algeria		 Algeria Militants kidnapped and beheaded a French tourist shortly after the Islamic State called on supporters around the world to harm Europeans in retaliation for airstrikes in Iraq and Syria. More »
Sep. 23, 2014
Australia		 Australia An 18-year-old ISIS sympathizer was shot dead after stabbing two counterterrorism officers outside a Melbourne police station. More »

U.S. Govt Cyber Attacks in 2015 Spike

Posted on by

In his annual budget request, President Barack Obama asked for $19bn for cyber security funding, $5bn more than last year.

Last year, a study from Juniper Research, ‘The Future of Cybercrime & Security: Financial and Corporate Threats and Mitigation’, estimated that by 2019 the cost of data breaches will reach $2.1 trillion – four times the total expected for 2015. The average cost of a data breach is expected to exceed $150 million by 2020 as more business infrastructure is connected.

Number of U.S. government ‘cyber incidents’ jumps in 2015

Reuters: The U.S. government was hit by more than 77,000 “cyber incidents” like data thefts or other security breaches in fiscal year 2015, a 10 percent increase over the previous year, according to a White House audit.

Part of the uptick stems from federal agencies improving their ability to identify and detect incidents, the annual performance review from the Office and Management and Budget said.

The report, released on Friday, defines cyber incidents broadly as “a violation or imminent threat of violation of computer security policies, acceptable use policies, or standard computer security practices.” Only a small number of the incidents would be considered as significant data breaches.

National security and intelligence officials have long warned that cyber attacks are among the most serious threats facing the United States. President Barack Obama asked Congress last month for $19 billion for cyber security funding across the government in his annual budget request, an increase of $5 billion over the previous year.

The government’s Office of Personnel Management was victim of a massive hack that began in 2014 and was detected last year. Some 22 million current and former federal employees and contractors in addition to family members had their Social Security numbers, birthdays, addresses and other personal data pilfered in the breach.

That event prompted the government to launch a 30-day “cyber security sprint” to boost cyber security within each federal agency by encouraging adoption of multiple-factor authentication and addressing other vulnerabilities.

“Despite unprecedented improvements in securing federal information resources … malicious actors continue to gain unauthorized access to, and compromise, federal networks, information systems, and data,” the report said.

***** Depth of hacking illustration:

U.S. Charges 3 As It Chases Syrian Electronic Army — $100,000 Bounties On Hackers’ Heads

Firas Dardar Syrian Electronic Army FBI Most Wanted

Firas Dardar, now on the FBI’s Cyber Most Wanted list for his part in the Syrian Electronic Army. He is also accused of extorting targets.

Forbes: Syrian Electronic Army has caused all sorts of trouble since its emergence at the turn of this decade (including an attack on FORBES, amongst many other major publications). Having largely operated under the radar, the U.S. today filed official charges against three individuals it believes were key in perpetrating SEA’s attacks. Two of the three men – Ahmad Umar Agha (commonly known as Th3 Pr0) and Firas Dardar (also known as The Shadow) – have also been placed on the FBI’s Cyber Most Wanted list with $100,000 rewards on offer for anyone who helps catch them. The third suspect is German-based Peter Romar.

The three have been charged with a range of offences, from hacking, to engaging in a hoax regarding a terrorist attack, to attempting to cause a mutiny within the U.S. armed forces. Throughout the last five years, the SEA were proficient in tricking organization – often media bodies such as the BBC, the Guardian, CNN and FORBES – into handing over login details to Facebook FB +0.38% and Twitter TWTR -0.18% accounts. They would then use that access to send out messages in support of Bashar al-Assad, who remains the Syrian president, despite the chaos of civil war that has engulfed the country.

Its most effective attack came after a compromise of the Associated Press Twitter account. After a tweet that claimed a bomb had exploded at the White House and injured President Obama, $90 billion was wiped off the U.S. stock market. In other successful campaign, the hackers defaced a recruiting website for the U.S. Marine Corps, using the site to urge marines to “refuse [their] orders.”

Ahmed Al charged Syrian Electronic Army hacker

Accused Syrian Electronic Army hacker Ahmad Umar Agha.

According to one of two complaints released today, other victims included Harvard University, the Washington Post, the White House, Reuters, Human Rights Watch, NPR, CNN, The Onion, NBC Universal, USA Today, the New York Post, NASA (which assisted on the investigation), and Microsoft. FORBES was not named as one of the victims of the trio’s attacks.

All three alleged SEA operatives were using Google Gmail and Facebook to coordinate and pass around stolen data. U.S. law enforcement were able to track their activity after acquiring court orders to search their online accounts.

Nation state hackers demanding ransom

According to the Department of Justice, Dardar and Romar (also known as Pierre Romar) have also been accused of typical cybercrime, hacking into target’s machines and demanding a ransom be paid, threatening to delete data or sell personal information. Dardar was thought to be operating out of Homs, Syria, Romar from Waltershausen, Germany. The ransoms would then be handed to SEA members in Syria, a complaint read. Dardar demanded in total more than $500,000 from 14 victims, though the filings did not specify how much they actually received.

“While some of the activity sought to harm the economic and national security of the United States in the name of Syria, these detailed allegations reveal that the members also used extortion to try to line their own pockets at the expense of law-abiding people all over the world,” said Assistant Attorney General John Carlin. “The allegations in the complaint demonstrate that the line between ordinary criminal hackers and potential national security threats is increasingly blurry.”

If the complaints released by the U.S. are accurate, Dardar and Romar are two of a handful of hackers known to be working for their government and carrying out extortion. Suspicions of governments using ransomware – malware that locks users’ files by encrypting them, only decrypting when the victim hands the hackers money – have proven unfounded. But researchers from security firm FireEye told FORBES they have seen a handful of examples where nation states have perpetrated extortion campaigns like the SEA suspects. But, the researchers said, it’s unlikely they ever want funds.

“We don’t believe that their intention was to get a ransom,” said Charles Carmakal, managing director of Mandiant, a FireEye-owned firm, speaking with FORBES last week. “I can say we’ve seen it but our case load isn’t that high.”

The hack of Sony Pictures, which the U.S. accused the North Korean government of sponsoring, included such a ransom demand once hackers had broken in. Sony didn’t pay and the hackers wiped the film studio’s machines before publishing vast tranches of company emails and files for all and sundry to pick through.