Tips from FBI on Cyber Security

Protecting Yourself Online in an Interconnected World

As hacks, data breaches, and other cyber-enabled crime become increasingly commonplace, this year’s National Cyber Security Awareness Month is an important reminder of the need to take steps to protect yourself and your family when using the Internet. Launched in 2004 by the Department of Homeland Security and the National Cyber Security Alliance, the annual campaign held every October is designed to help the public stay safe online and to increase national resiliency in the event of a cyber incident. We could all learn a little more about cyber security, which is why the Alpine Security cybersecurity blog is so valuable.

“Cyber risks can seem overwhelming in today’s hyper-connected world, but there are steps you can take to protect yourself and reduce your risk,” said Assistant Director Scott Smith of the FBI’s Cyber Division. “The FBI and our partners are working hard to stop these threats at the source, but everyone has to play a role. Use common sense; for example, don’t click on a link from an unsolicited e-mail, and remember that if an online deal seems too good to be true, it probably is. And overall, remain vigilant to keep yourself and your family safe in the online world, just as you do in the physical world.”

How can you protect yourself?

  • Learn about the IC3—and use it if you’re ever a victim. The Internet Crime Complaint Center (IC3) is a reliable and convenient reporting mechanism for the public to submit complaints about Internet crime and scams to the FBI. The IC3 uses the information from public complaints to refer cases to the appropriate law enforcement agencies and identify trends. The IC3 has received nearly 4 million complaints since it was created in 2000. Anyone who is a victim of an Internet enabled crime, such as an online scam, should file a complaint with IC3 to help the FBI stop hackers and other cyber criminals. Learn more about the lifecycle of a complaint submitted to the IC3.
  • Practice good cyber hygiene at work. When you’re at work, you’re a target. From personal data to financial information to company secrets, company networks are a gold mine for hackers and fraudsters. One common scam that victimizes companies is Business e-mail compromise, in which a hacker will gain access to a company official’s e-mail to defraud the company or access employees’ private information. Additionally, ransomware, in which hackers will place malware in digital files that demands ransom, is a serious threat to companies and other large organizations. If you are conserned about your business being vunerable online then you may need a comprehensive threat intelligence platform to protect you. Learn more about cyber hygiene to protect yourself and your employer.
  • Know the risks of the Internet of Things (IOT). Cyber security goes beyond your computer and phone. Many homes are now filled with Internet-connected devices, such as home security systems, connected baby monitors, smart appliances, and Internet-connected medical devices. All of these devices present opportunities for hackers to spy on you and get your personal information. Using strong passwords and purchasing IOT devices from companies with a good security track record are just a few of the things you can do to protect your family and home. Learn more about IOT devices.
  • Cyber savvy? Uncle Sam wants you. As the cyber threat continues to grow, the FBI is similarly ramping up its efforts to recruit cyber experts to work as special agents, intelligence analysts, computer scientists, and more. The FBI partners with universities and other educational institutions with a science, technology, engineering, and math (STEM) focus to encourage students to pursue an FBI career, whether as an agent investigating hackers, an analyst looking strategically at threats, or a scientist evaluating evidence. The FBI offers a rewarding career in thwarting cyber attacks and bringing hackers and other criminals to justice. Visit FBIjobs.gov to apply.
  • Learn how the FBI and partner agencies are protecting critical infrastructure. Terrorist groups and other adversaries view the U.S. critical infrastructure—ranging from the financial sector to hospitals to electricity grids—as high-value targets that would disrupt American life if attacked. The FBI plays a key role in thwarting these attacks by stopping plots against critical infrastructure and investigating cyber attacks. Protecting these targets is a team effort among federal, state, local, and private sector partners. Three of the key partnership organizations the FBI is a member of are InfraGard, the Domestic Security Alliance Council, and the National Cyber-Forensics and Training Alliance. These strategic relationships promote timely information sharing between the FBI and the private sector, which helps to keep critical infrastructure networks safe from hackers and terrorists. If you’re concerned about Cyber Security, check out managed cyber security, to help you.

Trump Decertifying and Re-tooling Iran Nuclear Deal

The Iran Deal (JCPOA) has taken an inordinate amount of attention away from all of the other ways Iran destabilizes and attempts to dominate the region. The Trump team will now take a holistic approach to Iran that uses all aspects of US power and engages our allies in the effort as well. The goal is to roll back Iranian use of their proxies in Iraq, Syria, Lebanon, Yemen and elsewhere to extend Iranian influence toward eventual hegemony. It will also address Iranian support of terrorism and violations of other international agreements such as US Security Council Resolutions.

This will take many forms, one of which is the President declining to certify that the JCPOA as it currently exists is in the national interest. It most certainly is not and it’s time to either fix it or forget it. The entire reason to do a deal was to ensure Iran never got nuclear weapons, the JCPOA actually paved Iran a path to them with “sunset clauses” that remove all prohibitions after no more than 15 years.

Iran’s ballistic missile program was specifically excluded from the JCPOA in a stunning case of national security malfeasance. There is no use for these other than to deliver a nuclear warhead and allowing Iran to continue their development cannot be tolerated. This will be another area where the US will focus all elements of our influence on ensuring Iran will be unable to deliver any payload to our shores.

It remains to be seen if a better deal can be made, but we need to make the effort. That will require some leverage and another piece of the plan will be designating all of Iran’s Islamic Revolutionary Guards Corps as a terrorist organization. They are and recognizing this will make it much tougher for them to use the many businesses and front groups they have developed to conduct and support terror operations worldwide.

There will also be actions to rein in the Iranian-led militias operating across Iraq and Syria. While they may be mostly made up of Iraqi citizens, too many have loyalty to the Mullahs in Tehran. These Shia militias now control large swaths of territory in the Sunni areas of Iraq that were just liberated from ISIS. They conducted amounts of massive sectarian slaughter during the counter-ISIS operations and it is still going on. They must be moved out.

Hezbollah is another Iranian proxy which has sent tens of thousands of fighters into Syria. They are flush with some of the hundreds of millions of dollars Iran has given them out of the cash bonanza from the Iran Deal. They have been receiving US funds which were given to the Lebanese Armed Forces and then funneled to Hezbollah. This will come to a stop under the new plan. More here.

  photo

Related reading: JCPOA as published by the John Kerry State Department

(Reuters) – President Donald Trump is likely to take a major step against the international nuclear deal with Iran on Friday, laying out a more aggressive approach to Iranian activities in the Middle East that risks upsetting U.S. relations with European allies.

“It is time for the entire world to join us in demanding that Iran’s government end its pursuit of death and destruction,” Trump said in a White House statement that flagged key elements of the strategy.

He is to present his plan in a 12:45 p.m. EDT (1645 GMT)speech at the White House, the product of weeks of internal discussions between him and his national security team.

U.S. officials said Trump was expected to announce that he will not certify the 2015 nuclear accord between Iran and six world powers, one he has called the “worst deal ever” as it was not, in his view, in the U.S. national interest.

Trump found himself under immense pressure as he considered de-certifying the deal, a move that would ignore warnings from inside and outside his administration that to do so would risk undermining U.S. credibility abroad.

He had formally reaffirmed it twice before but aides said he was reluctant to do so a third time.

De-certification would not pull the United States out of the deal but would give the Congress 60 days to decide whether to reimpose sanctions on Tehran that were suspended under the pact, negotiated during the administration of President Barack Obama.

U.S. House of Representatives Homeland Security Committee Chairman Michael McCaul told Reuters he thinks Trump “is likely to not completely pull out of the deal, but decertify compliance.”

IRANIAN WARNING

If Washington quits the deal, that will be the end of it and global chaos could ensue, Iran’s influential parliament speaker, Ali Larijani, was quoted by the Russian news agency TASS as saying during a visit to St Petersburg on Friday.

U.N. nuclear inspectors say Iran is in compliance with the accord, which limited the scope of Iran’s nuclear program to help ensure it could not be put to developing bombs in exchange for a lifting of international sanctions on Tehran.

Trump says Tehran is in violation of the spirit of the agreement and has done nothing to rein in its ballistic missile program or its financial and military support for the Lebanese Shi‘ite movement Hezbollah and other militant groups.

White House Chief of Staff John Kelly said on Thursday the U.S. approach toward Iran is to work with allies in the Middle East to contain Tehran’s activities.

“We have footprints on the ground, naval and Air Force is there to just demonstrate our resolve, our friendship, and try to deter anything that any country out there may do,” Kelly told reporters.

European allies warn of a split with the United States over the nuclear agreement, in part because they are benefiting economically from a relaxation of sanctions.

A variety of European allies, including the leaders of Britain and France, have personally appealed to Trump to re-certify the nuclear accord for the sake of allied unity.

Germany’s government pledged on Friday to work for continued unity if Trump de-certified the deal as Berlin remain convinced the agreement was an important tool to prevent Iran developing nuclear weapons.

Foreign Minister Sigmar Gabriel underscored German views in a telephone call with U.S. Secretary of State Rex Tillerson late on Thursday, his spokeswoman Maria Adebahr told reporters.

Gabriel said on Thursday U.S. behavior was driving a wedge between Europe and its close ally United States and bringing Europeans closer to Russia and China. “It’s imperative that Europe sticks together on this issue,” said Gabriel.

Russian President Vladimir Putin’s spokesman, Dmitry Peskov, said on Friday that if the United States withdrew from the deal, “this will damage the atmosphere of predictability, security, stability and non-proliferation in the entire world”.

U.S. MOVE AGAINST REVOLUTIONARY GUARDS

McCaul said he expected Trump also to announce some kind of action against the Iranian Revolutionary Guard Corps, the country’s most powerful security force. Trump is under a legal mandate to impose U.S. economic sanctions on the Revolutionary Guards as a whole by Oct. 31 or waive them.

U.S. sanctions could seriously hurt the IRGC as it controls large swaths of Iran’s economy. The Guards’ foreign paramilitary and espionage wing, the Quds Force, is under U.S. sanctions, as is the Quds Force commander, other officials and associated individuals and entities.

The 2015 nuclear agreement, signed by the United States, Britain, France, Germany, Russia, China, the European Union and Iran, has been denounced by Trump as “an embarrassment” and “the worst deal ever.”

Facebook Scrubbed Data, Possible Obstruction of Investigation

Related reading: Facebook COO Sheryl Sandberg meets with lawmakers investigating Russia-linked Facebook ads

Blame ‘crowdtangle’ among others. As noted on their site: ‘the easiest way to keep track of what’s happening of social media. Other sites such as meltwater broadcasts that they are ‘influencers’ and then leaderboards are created such that real or hoax operations become a trending topic.

Lots of fake news gets blamed on bloggers posing as official media outlets while quoting unnamed sources and rightly so. Some of those blogs are concoctions of Moscow while others websites repeated fake stories stoking issues and divisions within the United States from Russia media outlets such as Sputnik News and RT.

Facebook is the location of choice for millions to park links and fake items resulting in Facebook often being referred to as Fakebook.

Moscow, along with out social media tech software in the United States created algorithms that counted ‘likes and ‘shares’ which then manifested unreliable stories and questionable sources. These analytic tools have become the norm across the world and consequentially having credibility and reliance on issues or stories has fallen.

It all boils down to communication, collaboration, branding, feedback and scoring results. You are the sheep, money is made from your activity on social media with every keystroke and you don’t get paid a dime….secret financial extortion, meaning without your knowledge unless you read ALL the mice type. Facebook is a master and frankly a player where you are being punked.

This is yet another form of cyber-warfare….

Facebook scrubbed potentially damning Russia data before researchers could analyze it further

  • Facebook scrubbed thousands of posts shared during the 2016 campaign by accounts linked to Russia.
  • The removals came as a Columbia University researcher was examining their reach.
  • Facebook says the posts were removed to fix a glitch.

BI: Facebook removed thousands of posts shared during the 2016 election by accounts linked to Russia after a Columbia University social media researcher, Jonathan Albright, used the company’s data analytics tool to examine the reach of the Russian accounts.

Albright, who discovered the content had reached a far broader audience than Facebook initially acknowledged, told The Washington Post on Wednesday that the data had allowed him “to at least reconstruct some of the pieces of the puzzle” of Russia’s election interference.

“Not everything, but it allowed us to make sense of some of this thing,” he said.

Facebook confirmed that the posts had been removed, but said it was because the company had fixed a glitch in the analytics tool — called CrowdTangle — that Albright had used.

“We identified and fixed a bug in CrowdTangle that allowed users to see cached information from inactive Facebook Pages,” said Andy Stone, a Facebook spokesman.

Facebook’s decision to remove the posts from public view raised questions about whether the company could be held liable for suppressing potential evidence, given its role in the wide-ranging investigation of Russia’s election interference.

Albright told Business Insider that “because this is clearly a legal and imminent justice-related matter, I can’t provide much critical insight at this stage.

“I feel like my 10 rounds with the $500 billion dollar tech juggernaut are over,” he said.

Legal experts and scholars on the subject say scrubbing the data Albright used for his research is Facebook’s prerogative as long as it isn’t knowingly removing content sought under a court order or by government request.

“If Facebook has no reason to think that it should retain the data (subpoena, court order), then it can make choices about what appears on its platform,” said Danielle Citron, a professor of law at the University of Maryland, where she teaches and writes about information privacy.

Citron said Facebook and other private tech companies have in the past argued, successfully, that they have free speech interests and enjoy immunity from liability for the content posted by their users — immunity that extends to their ability to remove it if it violates their terms of service.

Albert Gidari, the director of privacy at the Stanford Center for Internet and Society, said it’s likely that Facebook has kept copies of “anything at issue as part of its preservation obligation” in light of special counsel Robert Mueller’s search warrant and the House and Senate Intelligence Committee subpoenas.

Gidari said that because there hasn’t been any allegation against Facebook itself, the company has no obligation, absent a court order, to maintain information “that later may be evidence.”

But the question becomes more complicated when considering the ethical obligations of a company whose tools were exploited by a foreign adversary to try to influence a US election.

Gidari, for his part, said he doesn’t think “any platform has an independent or ethical obligation to run a research playground for third-party data analysts.”

But Tom Rubin, a lecturer at Stanford Law School, said that Facebook’s “credibility as a global social platform and its responsibility as an internet giant require it to fully embrace an independent, urgent and public review of the facts.”

“Facebook’s Russia predicament is of its own doing — it controls the platform, runs the ads, and profits mightily,” said Rubin, who previously served as the assistant US Attorney in New York heading investigations and prosecutions of computer crimes.

“The investigation here is as serious as it gets: illegal and hostile foreign influence on the US presidential election,” Rubin said. “The issue confronting Facebook is the extent to which it should commit to complete transparency, and the answer to that is straightforward.”

Citron agreed.

“For transparency’s sake and for our broader interest in our democracy, people should know the extent to which they have been played by the Russians and how a hostile state actor has interfered with, manipulated, and generally hacked our political process,” she said.

That is what Albright said was his mission when he downloaded the last 500 posts shared by six accounts that Facebook has confirmed were operating out of Russia. Those accounts — Blacktivists, Being Patriotic, Secured Borders,  Heart of Texas, LGBT United, and Muslims of America — were among the 470 pages Facebook shut down in September as part of its purge of “inauthentic accounts” linked to Russia’s Internet Research Agency.

The data Albright obtained using CrowdTangle showed that the Russians’ reach far exceeded the number of Facebook users they were able to access with advertisements alone — content including memes, links, and other miscellaneous postings was shared over 340 million times between the six accounts.

The other 464 accounts closed by Facebook have not yet been made public. If they are, an analysis of their combined posts would likely reveal that their content was shared an estimated billions of times during the election.

FBI Deployed Again to Puerto Rico over Corrupt Officials

FBI in Puerto Rico investigating if corrupt local officials are ‘withholding’ or ‘mishandling’ crucial supplies

FNC: FBI agents in Puerto Rico have been receiving calls from “across the island” with residents complaining local officials are “withholding” or “mishandling” critical FEMA supplies — with one island official even accused of stuffing his own car full of goods meant for the suffering populace.

The accusations come in the aftermath of deadly Hurricane Maria, which devastated the U.S. territory last month.

“The complaints we’re hearing is that mayors of local municipalities, or people associated with their offices, are giving their political supporters special treatment, goods they’re not giving to other people who need them,” FBI Special Agent Carlos Osorio told Fox News.

Osorio, an agent with the FBI in San Juan, said the bureau was investigating the allegations.

“The U.S. attorney has made it clear if anyone is caught mishandling FEMA supplies, they will be prosecuted and could end up facing anywhere from five to 20 years in prison,” Osorio said.

Some of the claims have come by phone and others have poured in over social media, but the allegations stretch across the island.

Osorio told of one allegation where a party official is accused of pulling his own car around the back of a government building and driving off after loading it full of FEMA supplies.

“We’re going out and investigating these claims,” Osorio said. “We don’t know yet if they’re accurate or not…but yes we have received many similar allegations from people in many different parts of the island.”

The allegations of misconduct come amid a pitched back-and-forth between island officials and President Trump over the federal response to Maria.

San Juan Mayor Carmen Yulin Cruz, a frequent Trump foil, reportedly accused Trump on Thursday of “genocide” for not doing more to aid in the relief efforts.

Cruz sent the accusation in a text message to Rep. Luis V. Gutirrez, D-Ill., who is of Puerto Rican heritage, The Washington Times reported.

Trump on Twitter has accused Cruz of poor management.

“…Such poor leadership ability by the Mayor of San Juan, and others in Puerto Rico, who are not able to get their workers to help…” Trump wrote.

The president raised eyebrows Thursday morning by tweeting that federal agencies, military officials and first responders couldn’t stay “in P.R. forever!”

Earlier Thursday, the Daily Caller reported the FBI was aware of misappropriation allegations in six of Puerto Rico’s 78 municipalities.

Rosa Emilia Rodriguez, a U.S. federal prosecutor on the island, told a local Puerto Rican radio station Monday she was investigating officials in the government — including mayors — regarding the misappropriation of supplies. Rodriguez, however, declined to name the government officials being looked at.

“Anybody that engaged in that kind of action whether civilian or representative should be looked at seriously because that’s unforgivable,” Rep. Adriano Espillat, D-N.Y., a member of the Congressional Hispanic Caucus, told The Daily Caller.

***

It is not the first time the FBI has been dispatched to the island. Just last year:

SAN JUAN – The Federal Bureau of Investigations (FBI) has allegedly requested documents from investment firms as part of a probe into the $3.5 billion general-obligation bond issue of 2014 and a $600 million bond issue by the Puerto Rico Electric Power Authority (Prepa) in 2013, according to sources with links to Wall Street.

The sources alleged investigators subpoenaed documents from Barclays PLC, Morgan Stanley and RBC Capital Markets regarding the two bond issues.

Barclays, Morgan Stanley and RBC Capital Markets served as joint lead managers for the $3.5 billion bond offering in March 2014, with Barclays acting as lead book-running manager, according to the Government Development Bank (GDB). The bonds will mature in 2035 and were issued at an 8% coupon and an 8.727% yield.

The power company of Puerto Rico is state owned and has been bankrupt for years and due to money issues, the stability of power is questionable at best. Brown-outs were common and lasted days. Then also in 2016:

The NYT’s reported in part:

The Federal Bureau of Investigation has identified possible suspects in its long-running investigation into the murder of a banker in Puerto Rico, but it is now asking the public for help in solving the 2011 killing.

Five years ago this week, Maurice Spagnoletti, a top executive at Doral Financial, the holding company that owned a Puerto Rico bank, was gunned down on his way home from work in San Juan.

In 2010: In the biggest crackdown on police corruption in the FBI’s 102-year history, authorities charged a total of 133 individuals in Puerto Rico Wednesday as the result of a probe into whether police provided protection for drug dealers.

photo

Wonder what the 17,000 U.S. military personnel on the island providing humanitarian aid including medical, power and food will have to report when their job is complete….

Linking Iran Including Marine Barracks Bombing

photo

This is hardly a complete snapshot, however with President Trump considering the decertification of the JCPOA with Iran, adding the IRGC to the terror list and now seeking the arrest of two Hezbollah leaders from the 1983 Marine barracks bombing…the case against Iran is building. Iran is watching closely as it too has threatened a response which includes U.S. military bases as targets.

Iran, as rightly noted by Trump has exported terror for decades and the previous administration dismissed all that terror history for the sake of a deal with Iran. It also cannot be overlooked that Hezbollah took attacks into our hemisphere with two in Argentina. Noted here and here.

Talal Hamiyah is a top military leader of Hezbollah in charge of orchestrating its operations abroad. Hamiyah heads Hezbollah’s External Security Organization (ESO).* The ESO is responsible for planning and executing Hezbollah’s terrorist activities outside of Lebanon.*

Hamiyah is suspected of involvement in the 1994 Hezbollah attacks in Argentina.* Security officials recorded Hamiyah praising “our project in Argentina” in a conversation with his predecessor, Imad Mugniyah.* Hamiyah replaced Mughniyeh after the latter was killed in 2008.*

There have not been any attacks specifically attributed to the ESO since 1994.* Israeli intelligence officials believe Hamiyah is recruiting Hezbollah cells around the world, primarily in South America, Western Europe, and Africa.* Sympathetic Shiite communities offer Hamiyah opportunities for recruitment and fundraising.* Israeli intelligence has accused Hamiyah of coordinating with Moqtada Sadir’s Mahdi Army and other Shiite militias in Iraq following the U.S. invasion.* Hamiyah’s cells reportedly rely on Iranian embassies to help transfer weapons.

State Department offers rewards for 2 Hezbollah leaders

The State Department announced today that it is offering millions of dollars as rewards for information concerning the whereabouts of two senior Hezbollah leaders. The two Lebanese men are Hezbollah veterans with well-established terrorist credentials. One of the two allegedly “played a central role” in the 1983 Marine Barracks bombing in Beirut, Lebanon. That suicide bombing helped inspire a generation of Shiite and Sunni jihadists.

State is offering a $7 million bounty for Talal Hamiyah, the head of Hezbollah’s External Security Organization (ESO). The ESO “maintains organized cells worldwide” and is “responsible for the planning, coordination, and execution of terrorist attacks outside of Lebanon.” The ESO “primarily” targets “Israelis and Americans.”

The US designated Hezbollah as a terrorist organization in 1997, but State modified the designation in June, adding some of the group’s aliases. Foggy Bottom noted that both the Foreign Relations Department (FRD) and the ESO are “key components” of Hezbollah.

The ESO is “also known as the Islamic Jihad Organization” (IJO) and “was established by” Imad Mughniyah, a notorious Hezbollah leader who was killed in 2008. Mughniyah is widely credited with orchestrating some of Hezbollah’s most notorious acts of terror against the US.

After Mughniyah’s death, Hamiyah assumed leadership of the ESO/IJO. Hamiyah was added to the US government’s list of specially designated global terrorists in Sept. 2012.

Hamiyah’s wing of Hezbollah has been operational since the early 1980s, when it carried out a series of attacks against American and Western interests inside Lebanon and elsewhere. The ESO/IJO has continued to plot around the globe in the decades since.

In June, the Department of Justice announced the arrests of two alleged Hezbollah operatives who worked for the ESO/IJO. The men are accused of performing surveillance on prospective American and Israeli targets in Panama and New York City, as well as other acts. [For more on the arrests and the history of the ESO/IJO, see FDD’s Long War Journal report, Analysis: 2 US cases provide unique window into Iran’s global terror network.]

State also announced a reward of $5 million for information on Fuad Shukr, “a longtime senior advisor on military affairs.” Both Hamiyah and Shukr answer to Hezbollah’s Secretary General, Hasan Nasrallah.

Shukr is “a senior Hezbollah operative” and a “military commander” in charge of the group’s forces in southern Lebanon. He “serves on Hezbollah’s highest military body, the Jihad Council,” according to Foggy Bottom.

Shukr’s dossier of “activities” stretches back “over 30 years,” according to State. He “was a close associate of” Mugniyah.

The US government says Shukr “played a central role in the planning and execution of the Oct. 23, 1983 US Marine Corps Barracks Bombing in Beirut, Lebanon, which killed 241 US service personnel.”

The 1983 attack was a seminal event in the history of modern jihadism. Hezbollah conducted near simultaneous suicide bombings on the barracks for Marines and French service members. Both America and France had contributed military personnel to a multinational peacekeeping force in Lebanon. While France retaliated by bombing Iran’s Islamic Revolutionary Guard Corps, which is intertwined with Hezbollah, America failed to respond with force. The bombing at the Marine Barracks contributed to the Reagan administration’s decision to withdraw from Lebanon.

Iranian-backed terrorists weren’t the only jihadists emboldened by the American withdrawal from Lebanon. So were Sunni jihadists, including a young Osama bin Laden.

Al Qaeda modeled 1998 US Embassy bombings on Hezbollah’s 1983 attacks

The 1983 bombings on the Marine and French barracks served as a model for al Qaeda’s most devastating attack prior to the 9/11 hijackings: the Aug. 7, 1998 US Embassy bombings in Kenya and Tanzania. The twin attacks left 224 people dead.

The 9/11 Commission documented this key link in its final report. Discussions between al Qaeda and Iran in the early 1990s were brokered by Hassan al-Turabi, who was then a prominent Islamist in Sudan’s government. Al Qaeda was based in Sudan at the time and Turabi’s country housed various bad actors looking to cut deals with one another. Turabi advocated big tent jihadism when it came to confronting the US and the West. Turabi was even nicknamed the “Pope of Terrorism” for his ecumenical approach. Consistent with his vision of a grand anti-Western alliance, Turabi “sought to persuade Shiites and Sunnis to put aside their divisions and join against the common enemy,” according to the 9/11 Commission.

The discussions between “al Qaeda and Iranian operatives led to an informal agreement to cooperate in providing support – even if only training – for actions carried out primarily against Israel and the United States,” the 9/11 Commission found. “Not long afterward, senior al Qaeda operatives and trainers traveled to Iran to receive training in explosives.” During the “fall of 1993, another such delegation went to the Bekaa Valley in Lebanon for further training in explosives as well as in intelligence and security.” The Bekaa Valley has long been a Hezbollah stronghold.

The training taught al Qaeda operatives how to carry out suicide bombings such as those orchestrated by Shukr and Mughniyah in Lebanon. The 9/11 Commission wrote that Bin Laden “reportedly showed particular interest in learning how to use truck bombs such as the one that had killed 241 US Marines in Lebanon in 1983.”

Federal prosecutors in the Clinton administration discovered Iran’s and Hezbollah’s training of al Qaeda operatives. They included the relationship in their indictment of al Qaeda in 1998, noting that bin Laden and his men had “forged alliances” with the Sudanese regime, as well as “the government of Iran and its associated terrorist group Hezbollah for the purpose of working together against their perceived common enemies in the West, particularly the United States.”

More details concerning Iran’s and Hezbollah’s assistance came to light during the trial of some of the al Qaeda operatives responsible for the 1998 US Embassy bombings.

In his plea hearing before a New York court in 2000, Ali Mohamed – an al Qaeda operative who was responsible for performing surveillance used in the bombings – testified that he had set up the security for a meeting between bin Laden and Mugniyah. “I arranged security for a meeting in the Sudan between Mugniyah, Hezbollah’s chief, and bin Laden,” Mohamed told the court.

Mohamed also confirmed that Hezbollah and Iran had provided explosives training to al Qaeda. “Hezbollah provided explosives training for al Qaeda and [Egyptian Islamic] Jihad,” Mohamed explained. “Iran supplied Egyptian Jihad with weapons.” Mohamed was originally a member of Egyptian Islamic Jihad, an organization that merged with bin Laden’s enterprise and closely cooperated with the al Qaeda founder’s men well before the formal merger.

Mohamed explained al Qaeda’s rationale for seeking assistance from Iran and Hezbollah:

And the objective of all this, just to attack any Western target in the Middle East, to force the government of the Western countries just to pull out from the Middle East…Based on the Marine explosion in Beirut in 1984 [sic: 1983] and the American pull-out from Beirut, they will be the same method, to force the United States to pull out from Saudi Arabia.

Jamal al Fadl, an operative who was privy to some of al Qaeda’s most sensitive secrets, conversed with his fellow al Qaeda members about Iran’s and Hezbollah’s explosives training, which included take-home videotapes so that al Qaeda’s terrorists would not forget what they learned. “I saw one of the tapes, and he [another al Qaeda operative] tell me they train about how to explosives big buildings,” Al Fadl told federal prosecutors.

One of the al Qaeda leaders who attended the training was Saif al Adel, who has long been wanted for his role in the embassy bombings. Al Adel fled to Iran after the 9/11 hijackings and was tied to operations elsewhere, including inside Saudi Arabia. His status was murky for years, but the Iranians reportedly freed him from some form of detention in 2015. Some reports have placed him in Syria, but al Adel’s current location has not been confirmed.

Although many assume that Iran and al Qaeda couldn’t cooperate because of their ideological differences, the 9/11 Commission concluded “that Sunni-Shia divisions did not necessarily pose an insurmountable barrier to cooperation in terrorist operations.” The 9/11 Commission (pp. 240-241) also found intelligence connecting Mugniyah’s men to some of the flights taken by al Qaeda’s hijackers and called for the US government to investigate further.

In more recent years, the Iranian government has allowed al Qaeda to operate a “core facilitation pipeline” on Iranian soil. According to the US government, this facilitation network exists despite the fact that the two sides are on opposite sides of the wars in Syria and Yemen.