Russia Arrests Kaspersky ‘Treason Probe’

Posted on January 26, 2017January 26, 2017 by Denise Simon

Russian President-elect Dmitry Medvedev, right, speaks with Yevgeny Kaspersky, head of the Kaspersky Lab company, at the 2008 Internet Forum outside Moscow, Thursday, April 3, 2008. (AP Photo/RIA-Novosti, Mikhail Klimentyev, Pool)

Forbes: One of Russia’s most successful cybercrime investigators and hacker hunter at one of the world’s biggest security companies, Kaspersky Lab, has been arrested by Russian law enforcement as part of a probe into possible treason, according to reports. Kaspersky has confirmed that its incident response chief Ruslan Stoyanov was at the center of an investigation, but could not offer more details.

“This case is not related to Kaspersky Lab. Ruslan Stoyanov is under investigation for a period predating his employment at Kaspersky Lab,” a Kaspersky spokesperson said in an emailed statement. “We do not possess details of the investigation. The work of Kaspersky Lab’s Computer Incidents Investigation Team is unaffected by these developments.”

Reports of the arrest landed today from national paper Kommersant, which said Stoyanov’s arrest may be tied to an investigation into Sergei Mikhailov, deputy head of the information security department of the FSB, Russia’s national security service. Both men were said to have been arrested in December. Kommersant cited sources who claimed the investigation was exploring the receipt of money from foreign companies by Stoyanov and his links to Mikhailov.

A Russia-based information security source told FORBES the details of the case were likely to remain private. The case has been filed under article 275 of Russia’s criminal code, the source said, meaning it should result in a secret military tribunal. Article 275 allows the government to prosecute when an individual provides assistance to a foreign state or organization regarding “hostile activities to the detriment of the external security of the Russian Federation” (translation from source). According to the source, this can be applied broadly. For instance, furnishing the FBI with information on a botnet may amount to treason.

The FBI consistently investigates Russian cybercrime operations, the best-known case being the alleged 2016 hacks of the U.S. election, following a breach at the Democratic National Committee.

Major player in fighting Russian cybercrime

In his role at Kaspersky, Stoyanov was in charge of incident response, the group that helped organizations investigate and recover from breaches or other security events. According to his LinkedIn profile, prior to his 2012 move to Kaspersky, he spent six years as a major in the Ministry of Interior’s cybercrime unit between 2000 and 2006 before moving into the private sector.

A source familiar with Stoyanov’s past work told FORBES that during his time chasing cybercriminals for the Russian government, he was the lead investigator into a hacker crew that was launching denial of service attacks on U.K. betting shops, extorting them for a total of $4 million. Three individuals were arrested and each sentenced in 2006 to eight years in prison.

In recent years, Stoyanov has assisted Russian authorities in some major investigations into cybercrime, including one that led to arrests of 50 individuals involved in the Lurk gang, which stole as much as $45 million from local banks.

“Stoyanov was involved in every big arrest of cybercriminals in Russia in past years,” the source added.

Kaspersky has repeatedly aroused suspicion in the U.S. for its ties to the Kremlin, thanks to articles alleging CEO Eugene Kaspersky’s ties with the state. The firm has denied any collusion with the government, however. The charismatic chief wrote in FORBES in 2015 that he had never worked for the FSB and his companies had no ties to Russia or any other government. He wrote: “A few reporters who seem to be openly hostile to Kaspersky Lab will no doubt be planning their next fictional installment.”

**** Was this because Kaspersky blew the whistle on the hack of the NSA which maybe had Russian fingerprints? Let’s see…

In part from Motherboard: A mysterious hacker or hackers going by the name “The Shadow Brokers” claims to have hacked a group linked to the NSA and dumped a bunch of its hacking tools. In a bizarre twist, the hackers are also asking for 1 million bitcoin (around $568 million) in an auction to release more files.

“Attention government sponsors of cyber warfare and those who profit from it!!!!” the hackers wrote in a manifesto posted on Pastebin, on GitHub, and on a dedicated Tumblr. “How much you pay for enemies cyber weapons? […] We find cyber weapons made by creators of stuxnet, duqu, flame.”

The hackers referred to their victims as the Equation Group, a codename for a government hacking group widely believed to be the NSA.

”We find cyber weapons made by creators of stuxnet, duqu, flame.”

The security firm Kaspersky Lab unmasked Equation Group in 2015, billing it as the most advanced hacking group Kaspersky researchers had ever seen. While Kaspersky Lab stopped short of saying it’s the NSA, its researchers laid out extensive evidence pointing to the American spy agency, including a long series of codenames used by the Equation Group and found in top secret NSA documents released by Edward Snowden. The Equation Group, according to Kaspersky Lab, targeted the same victims as the group behind Stuxnet, which is widely believed to have been a joint US-Israeli operation targeting Iran’s nuclear program, and also used two of the same zero-day exploits.

The Shadow Brokers claimed to have hacked the Equation Group and stolen some of its hacking tools. They publicized the dump on Saturday, tweeting a link to the manifesto to a series of media companies.

The dumped files mostly contain installation scripts, configurations for command and control servers, and exploits targeted to specific routers and firewalls. The names of some of the tools correspond with names used in Snowden documents, such as “BANANAGLEE” or “EPICBANANA.” Read more here from Motherboard.

Cruz and Poe Introduce Legislation for States to Reject Refugees

Posted on January 24, 2017January 24, 2017 by Denise Simon

There is some additional help coming from the Trump administration as President Trump is likely to issue and sign executive order on immigration that will impact visa holders from Iraq, Iran, Libya, Somalia, Sudan, Syria and Yemen. These are worn torn countries where hostilities continue with terror organizations. An issue that still remains however that Trump has not addressed is the asylum seekers.

S. 2363 (114^th): State Refugee Security Act of 2015

A bill to amend the Immigration and Nationality Act to permit the Governor of a State to reject the resettlement of a refugee in that State unless there is adequate assurance that the alien does not present a security risk and for other purposes. The 2 page text is here.

New bill from Cruz, Poe would let states reject refugees

WT: Republicans in the House and Senate have introduced legislation that would give governors the power to reject federal efforts to resettle refugees in their states.

The bill from Sen. Ted Cruz and Rep. Ted Poe, both of Texas, is a reaction to years of growing GOP frustration with the Obama administration’s aggressive effort to take in refugees and resettle them across the country. Republicans continue to have doubts that refugees can be vetted to ensure they aren’t Islamic State terrorists.

The State Refugee Security Act would require the federal government to notify states at least 21 days before they seek to settle a refugee. Under the bill, if a state governor certifies that the federal government hasn’t offered enough assurances that the refugee does not pose a security risk, the state can block the resettlement effort.

Poe said the Obama administration’s “open door policy” has forced states to take on refugees without these guarantees, and said states need a way to opt out.

“Until the federal government can conduct thorough security screenings and confirm that there are no security risks, Congress should empower states to be able to protect their citizens by refusing to participate in this program,” he said.

Cruz said the first obligation of the president is to keep Americans safe, and said the bill would be a step in that direction.

“I am encouraged that, unlike the previous administration, one of President Trump‘s top priorities is to defeat radical Islamic terrorism,” he said. “To augment the efforts of the new administration, this legislation I have introduced will reinforce the authority of the states and governors to keep their citizens safe.”

****

The Trump White House also has not addressed the issue of criminal deportation of foreign nationals. Each foreign inmate is known to cost the taxpayer an estimated $21,000 per year. Enforcement and removal operations of those illegal foreign nationals now falls to the newly confirmed DHS Secretary Kelly.

FY 2015 ICE Immigration Removals

In addition to its criminal investigative responsibilities, ICE shares responsibility for enforcing the nation’s civil immigration laws with U.S. Customs and Border Protection (CBP) and U.S. Citizenship and Immigration Services (USCIS). ICE’s role in the immigration enforcement system is focused on two primary missions: (1) the identification and apprehension of criminal aliens and other removable individuals located in the United States; and (2) the detention and removal of those individuals apprehended in the interior of the U.S., as well as those apprehended by CBP officers and agents patrolling our nation’s borders.

In executing these responsibilities, ICE has prioritized its limited resources on the identification and removal of criminal aliens and those apprehended at the border while attempting to unlawfully enter the United States. This report provides an overview of ICE Fiscal Year (FY) 2015 civil immigration enforcement and removal operations. See FY 2015 ICE Immigration Removals Statistics

Expectations of a quick solution and immediate movement to address the immigration matter are misplaced as this will be a long slog of an operation and will take the coordination of several agencies including the U.S. State Department which is presently operating without a Secretary until Rex Tillerson is confirmed and sworn in. The fallout will include a diplomatic challenge which is many cases does need to occur, however other nations such as China and Russia will step in to intrude on the process including those at the United Nations level, falling into the lap of the newly confirmed U.S. Ambassador to the United Nations, Nikki Haley.

The U.S. is out of TPP, NAFTA is under Discussion, Gas Protests

Posted on January 23, 2017January 23, 2017 by Denise Simon

Getting the United States out of the Transpacific Partnership Pact was merely symbolic. The United States was a member of the pact but the treaty never advanced in legislative action. NAFTA is a matter of discussion and meetings still to come.

Trump signs order withdrawing from TPP, reinstate ‘Mexico City policy’ on abortion

President Donald Trump on Monday will start to unravel the behemoth trade deal he inherited from his predecessor, as he signed an executive action to withdraw from the negotiating process of the Trans-Pacific Partnership.

That executive action sends signals to Democrats and leaders in foreign capitals around the world that Trump’s rhetoric on trade during the campaign is turning into action. Trump vowed during the campaign to withdraw the US from the Pacific trade deal, commonly known as TPP, which he argued was harmful to American workers and manufacturing.

The TPP was negotiated under former President Barack Obama, but never ratified by Congress, so withdrawing from it will not have an immediate, real effect on US economic policies, although it does signal a new and very different US outlook on trade under Trump.

The other executive actions signed Monday included reinstating the Mexico City abortion rules and instituting a hiring freeze for federal agencies. More here from CNN.

****

Washington (AFP) – US President Donald Trump pledged Sunday to begin renegotiating the North American Free Trade Agreement in upcoming talks with the leaders of Mexico and Canada.

“We’re meeting with the prime minister of Canada and we will be meeting with the president of Mexico, who I know, and we’re going to start some negotiations having to do with NAFTA,” Trump said while addressing White House staff on his second full day in office.

Trump will receive his Mexican counterpart Enrique Pena Nieto on January 31. No date has been given for a meeting with Canada’s Justin Trudeau, but it is expected “soon,” according to a readout from a call between the two leaders on Saturday.

Trump praised the Mexican leader, saying: “The president has been really very amazing and I think we are going to have a very good result for Mexico, for the United States, for everybody involved. It’s very important.”

*** There is another major issue that has surfaced.

Mexico gas protests create havoc at US border crossing

TIJUANA, Mexico – Protesters took control of vehicle lanes at one of the busiest crossings on the U.S. border Sunday to oppose Mexican gasoline price hikes, waving through motorists into Mexico after Mexican authorities abandoned their posts.

Motorists headed to Mexico zipped by about 50 demonstrators at the Otay Mesa port of entry connecting San Diego and Tijuana, many of them honking to show support. The demonstrators waved signs to protest gas hikes and air other grievances against the government of Mexican President Enrique Pena Nieto.

Other protests closed southbound traffic for hours at the San Diego-Tijuana San Ysidro port of entry, the busiest crossing along the 2,000-mile border, and halted southbound traffic at one of two crossings in Nogales, Arizona. U.S. Customs and Border Protection and California Highway Patrol officers closed southbound Interstate 5 to block access to the San Ysidro crossing, diverting traffic several miles east to the Otay Mesa port of entry.

Inspections were normal for all travelers entering the U.S. from Mexico. CBP officials didn’t immediately respond to a request seeking more information about the impact of the protests.

The demonstrations, which are unrelated to the election of U.S. President Donald Trump, have disrupted Mexican border crossings for weeks. Earlier this month, police in the Mexican state of Sonora fought a pitched three-hour battle to free a border rail crossing at Nogales that had been blocked by people protesting the 20 percent nationwide hike in gasoline prices that took effect on New Year’s Day.

Only a small percentage of motorists entering Mexico from the U.S. are stopped for inspection under normal circumstances, but Sunday’s demonstration gave them an open invitation. Guns and cash from drug sales in the U.S. are often introduced to Mexico by car.

Protesters said Mexican customs officials retreated within minutes after they arrived at the Otay Mesa crossing. About two hours later, a Mexican soldier stood by, but there were few other signs of government presence.

“We’re exercising our right to free speech,” said Brenda Cortez, a 22-year-old college student from Tijuana. “It’s to make sure we are noticed.”

Hey Trump Meet America Under Siege 2017

Posted on January 19, 2017January 19, 2017 by Denise Simon

Add outgoing Secretary of State John Kerry who will not be attending and not providing a reason. Further, in Barack Obama’s last White House press briefing, he refused to comment on his thoughts as to those in his party that will not be attending.

****

In his final press conference as president on Wednesday, Barack Obama declined to comment on the growing list of Democrats who are refusing to attend President-elect Donald Trump’s inauguration on Friday

FOX News’ Kevin Corke asked the 44th president if he supports the dozens of Democratic lawmakers who have vowed to boycott Trump’s inauguration.

“With respect to the inauguration, I’m not going to comment on those issues,” Obama responded. “All I know is I’m going to be there, so is Michelle.”

First lady Michelle Obama seemed to indicate her support for Rep. John Lewis, who is one of the most prominent lawmakers boycotting the inauguration, when she sent a tweet calling him a “great leader” on Monday. More here.

Protesters host ‘Queer Dance Party’ in front of Mike Pence’s DC home

For Reference: Bradley Manning’s Charge Sheet, Then Swap

Posted on January 18, 2017January 18, 2017 by Denise Simon

Obama says he granted Manning clemency ‘in the pursuit of justice’

USAToday: President Obama defended his decision to release Army Private Chelsea Manning from prison early, telling reporters at his last press conference as president Wednesday that “I feel very comfortable that justice has been served.”

Obama said the commutation of Manning balanced national security interests with Manning’s remorse and her long sentence.

“First of all, let’s be clear, Chelsea Manning has served a tough prison sentence,” he said. “Given she went to trial and due process was carried out, that she took responsibility for her crime, that the sentence that she received was very disproportionate relative to what other leakers had received — and that she had served a significant amount of time — it made sense to commute a part of her sentence.”

It must be mentioned here too that while Obama’s pen is busy on felons in U.S. jails and transferring those in Guantanamo, what about that Iranian prisoner swap? We were only told about getting back the Americans held in detention in Iran, but Obama freed and included in the swap 21 Iranians held in prison in the United States.

But many in the group were assisting Iran’s military, spy services and nuclear program, providing what one U.S. attorney called a threat to national security. At least two suspects reportedly lent logistical support to what the United States considers a terrorist group.

Seven of the 21 were pardoned or had their sentences commuted as part of the trade for four Americans imprisoned in Iran. The other 14 were fugitives, believed to be overseas, and arrest warrants were dropped against them.

Among the 14 were Hamid Arabnejad and Gholamreza Mahmoudi, senior executives with Iran’s Mahan airline. U.S. officials say the airline ran supplies to Hezbollah, the Lebanese-based Islamic organization that the U.S. considers a terrorist group.

The airline also is accused of providing logistics support, including covert travel, to the Quds Force, the elite overseas unit of the hard-line Revolutionary Guard. The U.S. has designated the Quds Force a supporter of terrorism since 2007. Arabnejad was separately accused of using Mahan to smuggle weapons to Syrian President Bashar Assad for the “regime’s violent crackdown against its own citizens,” according to a 3-year-old Department of Treasury designation that imposes sanctions. More here from LATimes.

*** Now back to Manning’s charge sheet.