Operation Blockbuster: Lazarus Group Hacks Again

Why should you care? There was a long investigation in separate yet concentrated efforts by both government and private/independent cyber corporations as it related to the hack of Sony. Enter the Lazarus Group, an applied name to hackers that have hit industries such as government, military, financial and entertainment. Few countries are really exempt, as their signature malware has also been found in Japan, India and China.

Image result for lazarus group cyber

Lazarus Group has been active since 2009 and to date cannot be attributed to any single actor or country.

For the comprehensive report, go here. Operation Blockbuster: Image result for operation blockbuster cyber

Recent malware attacks on Polish banks tied to wider hacking campaign

Hackers targeted more than 100 organizations in more than 30 countries

ComputerWorld: Malware attacks that recently put the Polish banking sector on alert were part of a larger campaign that targeted financial organizations from more than 30 countries.

Researchers from Symantec and BAE Systems linked the malware used in the recently discovered Polish attack to similar attacks that have taken place since October in other countries. There are also similarities to tools previously used by a group of attackers known in the security industry as Lazarus.

The hackers compromised websites that were of interest to their ultimate targets, a technique known as watering-hole attacks. They then injected code into the websites that redirected visitors to a custom exploit kit.

The exploit kit contained exploits for known vulnerabilities in Silverlight and Flash Player; the exploits only activated for visitors who had Internet Protocol addresses from specific ranges.

“These IP addresses belong to 104 different organizations located in 31 different countries,” researchers from Symantec said in a blog post Sunday. “The vast majority of these organizations are banks, with a small number of telecoms and internet firms also on the list.”

In the case of the targeted Polish banks, it’s suspected that the malicious code was hosted on the website of the Polish Financial Supervision Authority, the government watchdog for the banking sector. The BAE Systems researchers found evidence that similar code pointing to the custom exploit kit was present on the website of the National Banking and Stock Commission of Mexico in November. This is the Mexican equivalent to the Polish Financial Supervision Authority.

The same code was also found on the website of the Banco de la República Oriental del Uruguay, the largest state-owned bank in that South American country, according to BAE Systems.

Included in the list of targeted IP addresses were those of 19 organizations from Poland, 15 from the U.S., nine from Mexico, seven from the U.K., and six from Chile.

The payload of the exploits was a previously unknown malware downloader that Symantec now calls Downloader.Ratankba. Its purpose is to download another malicious program that can gather information from the compromised system. This second tool has code similarities to malware used in the past by the Lazarus group.

Lazarus has been operating since 2009, and has largely focused on targets from the U.S. and South Korea in the past, the Symantec researchers said. The group is also suspected of being involved in the theft of $81 million from the central bank of Bangladesh last year. In that attack, hackers used malware to manipulate the computers used by the bank to operate money transfers over the SWIFT network.

“The technical/forensic evidence to link the Lazarus group actors … to the watering-hole activity is unclear,” the BAE Systems researchers said in a blog post Sunday. “However, the choice of bank supervisor and state-bank websites would be apt, given their previous targeting of central banks for heists — even when it serves little operational benefit for infiltrating the wider banking sector.”

 

The Other NSA Thief Indicted, Worse than Snowden?

What is going on at the NSA? Or is it really the NSA contractor, Booz, Allen and Hamilton? Either way…this is beyond dangerous.

Bring in Harold Martin…..  Image result for harold martin nsa NBC

Read the full indictment here.

According to an indictment released Wednesday, the information stolen by Harold Martin, a former NSA contractor who was arrested in August of last year, may be far more damaging to the U.S. intelligence community than anything taken by Edward Snowden.

On October 5, the New York Times broke the story that the FBI had arrested an employee of the intelligence community over suspicions the worker had stolen highly classified computer code.

From that report:

“The contractor was identified as Harold T. Martin III of Glen Burnie, Md., according to a criminal complaint filed in late August and unsealed Wednesday. Mr. Martin, who at the time of his arrest was working as a contractor for the Defense Department after leaving the NSA, was charged with theft of government property and the unauthorized removal or retention of classified documents.”

According to the Times, a neighbor saw “two dozen FBI agents wearing military-style uniforms and armed with long guns” storm Martin’s home and later escort the man out in handcuffs.

At the time, there was speculation that Martin could be connected to stolen NSA code that found its way into the hands of a group called the Shadow Brokers — for a period, Martin worked for the elite NSA unit from which the data was taken — but even now, authorities can’t prove he actually passed on any information.

But the mere fact that he possessed such highly sensitive material is enough to put Martin away for the rest of his life, as the recently released indictment indicates.

“For more than two decades,” Business Insider wrote on Thursday, “Martin allegedly made off with highly-classified documents that were found in his home and car that included discussions of the US military’s capabilities and gaps in cyberspace, specific targets, and ‘extremely sensitive’ operations against terror groups, according to an indictment released Wednesday.”

The indictment gives the public a much clearer look at the type of data Martin allegedly stole. And next to Edward Snowden, whose security clearance limited the documents he took to mostly training materials, it appears Harold Martin’s reach went far further into the national intelligence community.

Martin is charged with 20 counts of having unauthorized possession of classified material. The government alleges that over this long intelligence career, the 51-year-old took material from the NSA, the National Reconnaissance Office, U.S. Cyber Command, and even the CIA.

Some of the items allegedly taken, according to text from the indictment, include:

A 2008 CIA document containing information regarding foreign intelligence collection sources and methods, and relating to a foreign intelligence collection target.

A USCYBERCOM document, dated August 17, 2016, discussing capabilities and gaps in capabilities of the US military and details of specific operations.

A description of the technical architecture of an NSA communications system.

An outline of a classified exercise involving real-world NSA and US military resources to demonstrate existing cyber intelligence and operational capabilities.

Martin’s first court appearance is set for February 14. If found guilty, he faces up to 200 years in prison. More here.

***

Meanwhile, Putin is allegedly considering returning Edward Snowden to the United States as a goodwill gesture. If so, it is a double game as Putin would never do anything out of kindness without something attached. If Snowden does stand trial for treason/espionage or theft, the United States would then have to offer up classified material and reveal sources and methods which is likely what Russia wants. The Kremlin extended the visa for Snowden until 2020.

*** Image result for edward snowden

In part from NBC: Snowden’s ACLU lawyer, Ben Wizner, told NBC News they are unaware of any plans that would send him back to the United States.

“Team Snowden has received no such signals and has no new reason for concern,” Wizner said.

Snowden responded to NBC’s report on Twitter and said it shows that he did not work with the Russian government.

“Finally: irrefutable evidence that I never cooperated with Russian intel,” Snowden said. “No country trades away spies, as the rest would fear they’re next.”

Snowden’s Russian lawyer, Anatoly Kucherena, reacted to the report with dismay.

“There are no reasons to extradite Edward Snowden to the U.S.,” Kucherena said, according to TASS, the state-owned news agency. “This is some kind of speculation coming from so-called US special service sources. I think this topic was and remains on the political plane in the U.S., but it’s American special services that are puppeteering this story with sporadic information plants.”

“There is not the slightest reason to raise or discuss this topic in Russia,” Kucherena said.

Russia, he said, does not sell people. “The Snowden issue cannot be a bargaining chip on any level, neither political nor economic,” he said, according to the news agency.

Former deputy national security adviser Juan Zarate urged the Trump administration to be cautious in accepting any Snowden offer from Russian President Vladimir Putin.

“For Russia, this would be a win-win. They’ve already extracted what they needed from Edward Snowden in terms of information and they’ve certainly used him to beat the United States over the head in terms of its surveillance and cyber activity,” Zarate said.

 

Does DHS Secretary Kelly Know RAPS?

My friend Tom Del Beccaro explains in his summary at Forbes how the Federal government maintains primacy over the states for immigration law and item 8 U.S. Code Section 1182, which the liberal court chose never to previously challenge.

In spite of the 9th Circuit 3 judge panel ruling maintaining the stay on the Trump Executive Order for the travel restraining order, there is much work to do administratively as this continues to be challenged.

The data is private and protected:

Once the information is entered into the system, RAPS generates an appointment notice for the collection of fingerprints used to complete criminal and background checks and to create Employment Authorization Documents (EADs), as appropriate. The applicant will appear at a USCIS service center to provide fingerprints and confirm application information.

RAPS then automatically initiates several background security check processes: Federal Bureau of Investigation (FBI) Name Check, United States Visitor and Immigrant Status Indicator Technology (US-VISIT) and DHS’ Automated Biometric Identification System (IDENT), Customs and Border Protection (CBP) TECS, FBI Fingerprint, and the ENFORCE Alien Removal Module (EARM) (for a full discussion of the background check process, see Section 5.1). RAPS also stores the results of security checks.

Image result for USCIS Asylum Office Image result for USCIS Asylum Office

When a new application is entered into RAPS, it is forwarded to a USCIS Asylum Office for interview and adjudication.  Asylum Offices use RAPS to schedule an asylum interview to evaluate the claim of asylum status and to conduct various aspects of case maintenance such as address changes, updates of information pertaining to dependent claimants, to record preliminary and final decisions, and to generate decision documents. An individual who files for asylum may include in his or her application any spouse or child who is within the United States and appears for the asylum interview. This is because a grant received by the principal asylum applicant is conveyed to the spouse and children included in the family group if the spouse/child is in the U.S. and not otherwise barred from a grant of asylum.

RAPS is a comprehensive case management tool that enables USCIS to handle and process applications for asylum pursuant to Section 208 of the Immigration and Naturalization Act (INA) and applications for suspension of deportation or special rule cancellation of removal pursuant to NACARA § 203. DHS offices worldwide can access RAPS as a resource of current and historic immigration status information on more than one million applicants. DHS officials can use RAPS to verify the status of asylum applicants, asylees, and their dependents to assist with the verification of an individual’s immigration history in the course of a review of visa petitions and other benefit applications as well.

RAPS Typical Transaction

A typical transaction begins when an individual initiates the process to apply for asylum by completing and filing Form I-589, Application for Asylum and for Withholding of Removal, with a USCIS Service Center, or in certain circumstances directly with an asylum office. Service Center personnel receive the application in person or via mail and manually enter, most, but not all, of the information from a new application into RAPS.

As set forth in Section 451(b) of the Homeland Security Act of 2002, Public Law 107-296, Congress charged USCIS with the administration of the asylum program, which provides protection to qualified individuals in the United States who have suffered past persecution or have a well-founded fear of future persecution in their country of origin as outlined under INA § 208 and 8 CFR § 208. USCIS is also responsible for the adjudication of the benefit program established by Section 203 of the Nicaraguan Adjustment and Central American Relief Act (NACARA § 203) (discussed in more detail in Section B below), in accordance with 8 CFR § 240.60 and the maintenance and administration of the credible fear and reasonable fear screening processes, in accordance with 8 CFR §§ 208.30 and 208.31. USCIS developed RAPS and APSS in order to carry out its obligations in administering these benefit programs.

Functions

RAPS and APSS track case status and facilitate the scheduling of appointments and interviews and the issuance of notices (including receipt notices, appointment notices, and decision letters) at several stages of the adjudication process. USCIS Asylum Offices use RAPS and APSS to:

  • record decisions and to generate decision documents such as approval, dismissal, or rescission of an asylum or NACARA § 203 application,
  • denial of an asylum application,
  • administrative closure of an asylum application, or
  • referral of an asylum or NACARA § 203 application to Executive Office of Immigration Review (EOIR).

The systems also initiate, receive, and record responses for national security and background check screening and prevent the approval of any benefit prior to the review and completion of all security checks. Finally, the systems provide fully developed and flexible means for analyzing and managing program workflows and provide the Asylum Program with statistical reports to assist with oversight of production and processing goals.

Read more from the two DHS documents here and here.

Image result for DHS Secretary

***

GAO Raps DHS for Failure to Get Security Data from Visa Waiver Countries

One of the requirements for allowing visa-free entry of tourists from countries in the Visa Waiver Program (VWP) is that those governments share with us information on nationals with terrorism links and/or criminal histories. According to a report of the Government Accountability Office (GAO) issued in May 2016, the Department of Homeland Security (DHS) has obtained those agreements with most of the countries, but more than a third of  the agreements have not been implemented, and no data have been received from them.

In addition, Congress has required reports from DHS on implementation of the VWP with each of the participating countries, but GAO found that DHS has failed to provide many of those reports when due.

The recommendation of agency (GAO-16-498) is that, “DHS should (1) specify time frames for working with VWP countries on the requirement to implement information-sharing agreements and (2) take steps to improve its timeliness in reporting to Congress on whether VWP countries should continue in the program.”

FAIR has consistently pointed to the VWP as a national security threat and called for its termination. This GAO report underscores the security flaw and finds that it is exacerbated by cavalier implementation by DHS

 

Venezuela Gave Passports to Terrorists, Syria and Iraq?

Image result for venezuelan passport

Venezuela may have given passports to people with ties to terrorism

Toledo, Spain (CNN): The stunning postcard-perfect vista surrounding Misael Lopez in this town about one hour from Madrid belies his constant anxiety, even fear.

That’s because the former legal adviser to the Venezuelan Embassy in Iraq is revealing secrets he says his government doesn’t want disclosed.
“I’m concerned about my safety and my family’s safety everywhere I go,” Lopez said as he walked the cobble-stoned streets of Toledo.
Lopez, 41, says he reported what he says was a scheme to sell passports and visas for thousands of dollars out of the embassy and repeatedly turned down offers to get a cut of the money. But it was the response from his government — which has denied his allegations — that surprised him the most.
CNN and CNN en Español teamed up in a year-long joint investigation that uncovered serious irregularities in the issuing of Venezuelan passports and visas, including allegations that passports were given to people with ties to terrorism. The investigation involved reviewing thousands of documents, and conducting interviews in the U.S., Spain, Venezuela and the United Kingdom.
One confidential intelligence document obtained by CNN links Venezuela’s new Vice President Tareck El Aissami to 173 Venezuelan passports and ID’s that were issued to individuals from the Middle East, including people connected to the terrorist group Hezbollah.
The accusation that the country was issuing passports to people who are not Venezuelan first surfaced in the early 2000s when Hugo Chavez was the country’s president, interviews and records show.
A Venezuelan passport permits entry into more than 130 countries without a visa, including 26 countries in the European Union, according to a ranking by Henley and Partners. A visa is required to enter the United States.
Over the course of the CNN investigation, Lopez provided documents that show he repeatedly told Venezuelan officials about what he discovered. But he said instead of investigating his allegations, the government targeted him for disclosing confidential information. U.S. officials were also made aware of his findings.
“You cannot be a cop, and a thief at the same time,” Lopez said. “I decide to be a cop and do the right thing.”
Doing the right thing has cost him.

Unwelcome surprise

It didn’t start out that way.
Lopez, a lawyer who worked as a police officer in Venezuela, said he thought becoming a diplomat was a great career opportunity, which would also allow him to serve his country. With that in mind, he moved to Baghdad to start his new life at the Venezuelan Embassy.
But, he recalled, he got an unwelcome surprise on his first day in July 2013.
His new boss, Venezuelan Ambassador Jonathan Velasco, gave him a special envelope, he said.
“He gave me an envelope full of visas and passports,” Lopez recalled. “He told me, ‘Get this, this is one million U.S. dollars.’ I thought it was like a joke. Then he told me here people pay a lot of money to get a visa or a passport to leave this country.”
About one month later, Lopez said he realized it was no joke.
An Iraqi employee of the embassy, who was hired to be an interpreter, told him she had made thousands of dollars selling Venezuelan passports and visas, he said. And he could make a lot of money, too.
But Lopez said he told her it was wrong and he refused.
The employee pressed the issue, telling him there were thousands of dollars to be made, he said, even discussing an offer to sell visas to 13 Syrians for $10,000 each.
And, Lopez, said, she told him he could get a cut of the money, too.
Again, he said he refused.
“I suspect it might be terrorists; that’s why I reject, of course, immediately,” Lopez said.
And he said it just got worse.

Lists of names

Lopez said he was stunned when he found a document inside the embassy. It was a list of 21 Arabic names with corresponding Venezuelan passport numbers and Venezuelan identification numbers. A Venezuelan immigration official told CNN that a cross-check of the passport numbers indicated that the passports are valid and match the names on the list Lopez found — meaning the people on the list could be able to travel using those passports.
But incredibly, a publicly available database in Venezuela examined by CNN shows 20 of the 21 identification numbers are registered to people with Hispanic names — not the Arabic names listed on the passports.
Lopez kept investigating what was going on inside the embassy. He said he even found the case of a convicted drug dealer with an Iraqi identification certificate that appears to show he was born in Iraq. But the man had a Venezuelan passport that said he was born in Venezuela.
He kept evidence and notes of what he found.
Concerned that the passport and visa scheme was continuing without his knowledge, Lopez investigated the embassy employee who he said had offered to sell passports. He took photos of her desk where he says he found the embassy’s official stamp, used to authenticate visas, as well as sheets of papers printed with the Venezuelan government seal.
He eventually fired the employee. Lopez did not have any other documents that would confirm the allegations against her.
The employee did not respond to repeated requests from CNN for comment.
In April 2014, only nine months after he started the job, he emailed a report to Ambassador Velasco about the alleged selling of passports and visas. By then, he said he was convinced that Velasco knew about what was going on inside the embassy.
“He’s been there since 2008,” Lopez said. “How could he (have) been there so long, couldn’t notice that?”
He said Velasco did nothing and even threatened to fire him.
By 2015, frustrated that no one would investigate, he took what he found to Delcy Rodriguez, Venezuela’s foreign minister. His emailed report said there was “fraudulent issuing of visas, birth certificates and Venezuelan documents.”
He said nothing happened.

Going to the FBI

Eventually, with nowhere else to turn, Lopez contacted an FBI official at the U.S. Embassy in Madrid. The two met at a restaurant across the street from the embassy, and the official sent Lopez’s information to FBI headquarters in Washington, D.C., a law enforcement source said. The FBI would not comment about what happened with the information.
For Lopez, it was his final attempt to get something done.
But it was too late.
By the end of 2015, the Venezuelan government accused Lopez of “abandoning his post” and removed him. A police official showed up at his home in Venezuela with a document that said he was under investigation for revealing “confidential documents or secrets.”

Looking for answers

In an email, Velasco strongly denied Lopez’s allegations.
“This embassy is ready open to be audit [sic] and investigated for any international organization and intelligent [sic] Services as well, I don’t have nothing to hide or fear. I be sure [sic] that under my duties this embassy don’t never [sic] and ever sell Venezuelan nationalities, this will be a joke for all the international security organization [sic] and we already cooperate with the (Iraqi) government and international intelligent [sic] service,” the email read in English.
In an attempt to get answers, a team from CNN en Español traveled to Caracas last June. In a letter, the government restricted CNN’s coverage to stories related to tourism, weather, alternative energy sources and relations among the different government institutions in Venezuela.
Rodriguez, the foreign minister, ignored reporter Rafael Romo when he tried to question her at a press event.
A government official told the CNN en Español team that any questions about the passport allegations would be grounds for expulsion from the country.
On a second visit to Caracas last August, a CNN en Español producer and videographer were forced to leave the country after Venezuelan authorities impounded CNN camera equipment at the airport.
Last September, Rodriguez represented Venezuela at the United Nations General Assembly. Inside the UN, she again ignored CNN’s attempt to ask her questions.
Finally, CNN was able to speak with her as she was walking with a small group on the sidewalk across from the UN. As she walked away from the crews, she said, “You’re going to hurt yourself for following the lies of a person who doesn’t know what he’s talking about.” She said allegations of selling passports and visas were “totally” false.
But it’s not the first time allegations about Venezuelan passports have been made public.

Links to terror

U.S. lawmakers heard reports about Venezuelan passport fraud during congressional hearings as far back as 2006. In fact, a congressional report warned, “Venezuela is providing support, including identity documents that could prove useful to radical Islamic groups.”
And a state department report at the time also concluded that “Venezuelan travel and identification documents are extremely easy to obtain by persons not entitled to them.”
Roger Noriega, the former US ambassador to the Organization of American States and former assistant secretary of state for Western Hemisphere affairs, said in prepared remarks before a congressional in 2012 that “Venezuela has provided thousands of phony IDs, passports and visas to persons of Middle Eastern origin.”
Noreiga, who is now managing director of Vision Americas and works for a conservative think tank, told CNN that evidence began to emerge in 2003 in Venezuela that passports were being issued to non-Venezuelans.
“I absolutely believe, and I state it so publicly, that if we do not get our arms around this problem, people are going to die, either our allies or our own personnel or facilities are going to be attacked by networks abetted by the Venezuelans,” Noriega said.
The U.S. State Department declined CNN’s request late last year for an interview, instead emailing a link to its 2015 country terrorism overview. That report concluded, “There were credible reports that Venezuela maintained a permissive environment that allowed for support of activities that benefited known terrorist groups.”
A 2013 confidential intelligence report from a group of Latin American countries obtained by CNN says that from 2008 to 2012, 173 individuals from the Middle East were issued Venezuelan passports and IDs. Among them were people connected to the terrorist group Hezbollah.
The official who ordered the issuing of the passports, the report said, is Tareck El Aissami, who was appointed vice president of Venezuela in January. He is the former minister in charge of immigration as well as a governor.
El Aissami “took charge of issuing, granting visas and nationalizing citizens from different countries, especially Syrians, Lebanese, Jordanians, Iranians and Iraqis,” the report said.
He did not respond to multiple requests for comment.
Ghazi Nasr Al-Din

Another high-profile Venezuelan linked to terrorism is Ghazi Nasr Al-Din, a former Venezuelan diplomat who worked in the country’s embassy in Syria. He is “wanted for questioning” by the FBI for “his fundraising efforts” with Hezbollah contributors, according to a notice on the FBI website. The bureau confirmed that the information was still active, but would not comment further.
U.S. officials say he has “facilitated the travel” of Hezbollah members to and from Venezuela, according to a 2008 press release from the U.S. Treasury Department.

Leaks in the process

What allegedly happened in Iraq is no surprise to General Marco Ferreira, who was in charge of Venezuela’s immigration office in 2002.
Today, Ferreira is living in Miami after being granted political asylum after he supported a 2002 failed coup against Venezuela’s then-President Hugo Chavez. He told CNN that he personally witnessed corrupt senior officials ordering passports for people who were not citizens when he was running the department. He added anyone could get a passport at a local office because each worked independently.
He said it was “very easy” to assume someone else’s identity.
“One of the problems was the corrupted people that was working in that place,” Ferreira said. “The second one was the fragility of the system because everything was very old and they have a lot of leaks in the process.”
He said it was “very, very easy to go and be Venezuelan, or pretend being born in Venezuela.”
Asked about what Misael Lopez described as the alleged passport and visa-selling operation at the Venezuelan Embassy in Iraq, he said he was not surprised.
As for Misael Lopez, he’s living modestly in Spain, where he also has citizenship; he knows he can’t go back to Venezuela.
With his safety always an issue, he still says he had to tell his story. And going public, he hopes, will help protect him and his family.
“I did the right thing and I’m proud it,” he said. “No regrets at all.”

Gulen Paid for Congressional Members’ Travel to Turkey

The Trump administration successfully saw Betsy DeVos confirmed as Secretary of Education. Perhaps she will take on these charter school immediately?

Atlantic/2014: FBI raid last month on the headquarters of over 19 Gülen-operated Horizon Science Academies in Midwest. According to search warrants obtained by the Chicago Sun-Times, federal authorities were interested in gathering general financial documents and records of communication. The warrant specifically mentions something called the E-rate program—a federal program that, according to the Sun-Times, “pays for schools to expand telecommunications and Internet access.” A handful of the Gülen-affiliated contractors assisting the schools were receiving money from this federal fund. It’s difficult speculate what this could all mean, as all documents pertaining to the investigation, save the warrants themselves, have been sealed from the public. A must read of the full article here.  

Image result for fethullah gulen

***

Hillary Clinton has been the biggest recipient of Gulenist donations of any presidential candidate this cycle, federal election records show.

Besides his massive Clinton Foundation donation, Recep Ozkan, who is listed on various campaign finance disclosures as an executive at JIG Corp., Everglobe Partners, and Baharu Inc., gave $25,000 to the pro-Clinton Ready PAC in 2014. He contributed an additional $5,400 to her campaign this year.

As president of the Turkish Cultural Center, Ozkan hosted Clinton at Ramadan celebration dinners in 2006 and 2007 when she was in the Senate. More details here from the Daily Caller.

*** Image result for gulen charter schools

H1B visas abuse is a large part of the immigration abuse and Gulen has exploited the system.

Turkey’s authoritarian’s ruler is Recep Erdogan; he is at loggerheads with his former ally, Fethullah Gulen, the self-exiled leader of an Islamic cult that is devoted to undoing the reforms of modern Turkey’s George Washington, Kamal Ataturk. Gulen’s followers in the U.S. have created a series of charter schools which use public school moneys, via staff extortions, to support the cult’s activities. The Gulen schools, which have also used political contributions to shore up their position, are charters, and, as such, are sheltered by conservatives promoting charters generally. Erdogan has said that he wants Gulen extradited from Pennsylvania to Turkey because of his alleged ties to the failed coup in Turkey.

Why is this of any interest to immigration policy types?

In spite of the presence of tens, perhaps hundreds, of thousands of unemployed U.S.-trained teachers, Gulen’s schools continue to use local tax funds to secure H-1B visas for, and to provide wages for, teachers from Turkey, including in a few cases English teachers, as we have reported previously.

CIS: Why are the Gulen schools so interested in recruiting Turkish teachers (and often paying them more than U.S. teachers in the same schools)? To some extent it is a Tammany Hall sort of nepotism – let’s use public funds to help our landsmen – but there is another apparent motive. According to a long, detailed, and stinging report by LA Weekly, there is a highly organized, systematic shake-down of Turkish teachers to benefit Gulen cult organizations. The name of one of Gulen’s collectors in one of his school systems, the amounts raised, and their transportation, in cash, to cult meetings are all spelled out in detail. More details here.

Image result for gulen home in pa NBC, Gulen’s home in Saylorsburg, PA.

Deeper dive:

Scores of state lawmakers took trips subsidized by controversial Turkish opposition movement

Gulen groups are connected to U.S. charter school network overseen by legislators

In part from Public Integrity: Just why exactly would 151 state legislators from places like Idaho and Texas accept subsidized junkets from a Turkish opposition group now blamed by that country’s government for an attempted coup last summer?

It’s puzzling that state legislators who rarely get involved in foreign policy matters have been courted with international trips.

It’s especially surprising for the invitations to come from a powerful religious movement that until recently ran media outlets and a bank before falling out with the government in Turkey, a pivotal U.S. ally that serves as the gateway to the Middle East. Though followers of the movement deny having supported the failed coup, Turkey has asked the United States to extradite its leader, Fethullah Gulen, a reclusive Islamic cleric who lives in a compound not in Ankara or Istanbul but in the woods of Pennsylvania.

The Center for Public Integrity documented the extent of the trips and found that some state lawmakers who attended them later introduced resolutions supporting Gulen’s controversial Hizmet movement. And some have even supported charter schools that are part of a network from Washington, D.C., to California of roughly 160 taxpayer-funded schools run by friends of the movement.

While some familiar with the lawmakers’ trips frame them as innocuous learning experiences, the trips are meant to transform American community leaders into Gulen sympathizers, according to Joshua Hendrick, a sociologist at Loyola University and a leading expert on the movement.

“It most certainly has the impact of cultivating influence,” Hendrick said. “It is a political effort but it is framed as a grassroots mobilization of dialogue.”

‘Sympathetic to the cause’

The long parade of state legislators who have accepted the heavily subsidized trips from the Gulen movement includes some influential figures. The man known as Illinois’ most powerful state politician, Democratic Speaker of the House Mike Madigan, traveled four times to Turkey on trips sponsored by nonprofit groups associated with Gulen’s Hizmet — or “service” — movement.

In 2011, at least a tenth of Idaho’s state legislators toured the land of the Ottomans on the movement’s dime.

At least four Texas lawmakers who have served on legislative education committees went on the sponsored trips. The Lone Star state is home to the most Gulen-linked charter schools.

California has about a dozen of the schools, as do Florida and Ohio. Arizona, Illinois and Missouri are among the states that have them, as well.

The Center for Public Integrity used lawmakers’ annual disclosures and news reports to identify 151 state legislators from 29 states who toured Turkey between 2006 and 2015 thanks to more than two dozen nonprofits associated with the Gulen movement.

Among those who went on the trips were lawmakers who had rarely traveled overseas. Many had little knowledge of Gulen or Turkish politics. Few of their states have trade connections to Turkey.

But state legislators represent the political farm team of leaders who may someday play in the big leagues of Congress or beyond. Thom Tillis, for one, was first elected to the North Carolina statehouse in 2006 and went on a trip to Turkey with a Gulen movement group in 2011. Fast forward: The Republican is now a U.S. senator serving on the powerful Armed Services Committee, which oversees members of the U.S. military stationed in Turkey.

State lawmakers also shape education policy and hold the purse strings on state budgets, which fund charter schools.

“It’s effective public relations,” said William Martin, a Rice University sociologist who went on two sponsored trips. “That can affect their schools, it can affect the things they would like to do.”

The schools have denied connections to Gulen, but experts and even some friends of the movement call the links obvious. The charter schools are often founded and run by individuals with long ties to the Gulen movement, and they frequently hire Turkish teachers, sponsor their visas and move them between schools.  Many were set up with the help of nonprofits tied to the movement.

Gulen supporters say the trips for lawmakers promoted intercultural dialogue, a key component of Gulen’s teaching. The former imam preaches a unique brand of Islamic mysticism paired with Turkish nationalism and respect for modern science.

“We wanted to act as a kind of a bridge”between Americans and Turks, said Atilla Kahveci, vice president of the California-based Pacifica Institute, a Gulen-movement group that has organized lawmaker trips. “We didn’t have any kind of, from our point of view, ulterior agenda, no matter how it seems from outside.”

But other experts think the trips have political motivations.

“It’s like any other lobbying or political operation,” said James Jeffrey, who served as ambassador to Turkey under President George W. Bush and is now a fellow at the Washington Institute for Near East Policy, a think tank. “They’re doing this to advance their cause.”

American sympathizers have stuck up for Gulen and his followers. Since 2011, state lawmakers in 23 states have introduced at least 54 resolutions honoring Turkey or Turkish Americans, some of which specifically praised Gulen or Gulen-movement organizations, according to a Center for Public Integrity analysis of data from Quorum, a legislative tracking service.

For example, the Illinois House of Representatives passed a resolution in 2011 recognizing Gulen for his “inspirational contributions to the promotion of global peace and understanding.” A Gulen-movement group sponsored at least 32 trips to Turkey for Illinois state lawmakers between 2008 and 2012, according to the Chicago Sun-Times.

In Kansas, former state Rep. Tom Moxley, a Republican who went on a subsidized trip to Turkey in 2011, sponsored a resolution the following year that praised Turkey’s diversity and called for the creation of a Kansan-Turkish Friendship Network.

“I’m more sympathetic to the cause, the belief system of this group of Muslims, versus the ones that are in power in Turkey today,” he said. “We’re watching a dictator take over at a time when the American government can least afford to lose them as a friend.”

A movement centered in the Poconos

Fethullah Gulen, Turkey’s most wanted man, lives tucked in the green mountains of the Poconos, a Pennsylvania tourism spot better known for its honeymoon suites with heart-shaped tubs than as an incubator for international insurrection.

Gulen, now in his 70s, began preaching in Turkey by the early 1960s and quickly drew followers to his messages of devotion to Islam paired with success in the modern world.

He moved to the United States in 1999, ostensibly for medical treatment, though he left just before the secularist regime ruling at the time accused him of threatening to overthrow the government. Gulen later obtained a U.S. green card, on the grounds that he had special abilities in the field of education.

Gulen’s movement in Turkey continued to grow, aligning itself with the conservative AKP party that now rules the country.

His followers established dormitories and schools in Turkey and elsewhere, as well as a network of nonprofit groups and foundations, including those in the United States that sponsor lawmakers’ trips, such as the Pacifica Institute and the American Turkish Friendship Association.

The nonprofits frequently share open allegiance to Gulen’s Hizmet movement, staff or other ties, according to Hendrick, the Loyola sociologist who mapped the connections between the groups in his research. Hendrick calls their informal connections to each other and Gulen part of the movement’s “strategic ambiguity,” which makes it more difficult for outsiders to assess the movement’s size and power.

But tensions in Turkey flared in 2013, and the AKP blamed its former political allies for the attempted coup in July 2016.

Though Gulen and his followers have denied responsibility for the recent coup attempt, the Turkish government led by President Recep Tayyip Erdogan has cracked down on the Gulen movement, arresting 40,000 people and firing more than 100,000 soldiers, teachers and civil servants. Erdogan has also moved to silence dissenters and has jailed more than 100 journalists.

Today, Turkish leaders call Gulen a terrorist.

Turkey has also hired Amsterdam and Partners LLP, an international law firm that specializes in “political advocacy and cross-border disputes,” to pursue investigations into U.S. schools connected to the movement. The Turkish embassy did not return requests for comment.

Gulen was not available for an interview, according to the Alliance for Shared Values, a Gulen-movement umbrella group based in New York that handles his media requests.

“We hope that Americans see that he is a peaceful man who has been wrongly accused by an autocratic Turkish president,” said Mustafa Akpinar, CEO of the Rumi Forum, a Gulen-movement nonprofit based in Washington, D.C. “We are confident in the rule of law in the United States and expect due process for Turkey’s misguided extradition request.”

All this has put the United States in a tricky position. U.S. officials have offered to help Turkey investigate the attempted coup, while simultaneously warning its ally to live up to “democratic principles” in dealing with suspects.

Though the U.S. has not formally said who was to blame for the coup, two U.S. ambassadors to the country, including current ambassador John Bass, have made the connection to Gulen. Bass in a television interview last August referenced “the apparent involvement of a large number” of Gulen’s followers in the attempted takeover.

Experts say even if this is true, it remains possible that Gulen himself and his American followers were not directly involved in the failed takeover.

In September, after Turkey asked the U.S. to extradite Gulen back to Turkey, the Obama administration promised to consider it but did not move quickly.

Experts are uncertain where the new administration stands. Former Lt. Gen. Michael Flynn, President Trump’s national security adviser, has called Gulen “shady” and his schools a “scam.”

State Department spokeswoman Pooja Jhunjhunwala said the agency had no update on the issue.

Meanwhile, the Turkey trips for state legislators have dried up amid the current political upheaval.

Fact-finding mission or junket?

Some lawmakers are bewildered that the groups that paid for their trips are now swept up in Turkey’s current political turmoil.

“I can’t imagine what they would have wanted out of the North Dakota state Legislature,” said former North Dakota state Rep. Ben Hanson, a Democrat who went on a trip sponsored by a Gulen group in 2013 with six other lawmakers from his state. North Dakota does not currently allow charter schools and has few ties to the Middle East.

“It seemed like their group was trying to educate people and trying to bridge relations, and that seemed like a positive thing in and of itself,” he added.

The Center for Public Integrity attempted to contact the legislators it identified as having gone on the trips. Of the 34 lawmakers willing to comment, most spoke of their trips positively. Many said their trips were packed with educational information and meetings with Turkish businessmen or officials and were not pleasure tours. While some, like Moxley in Kansas, defended Gulen’s followers, others said they didn’t know what to make of recent events in Turkey.

“That’s above my pay grade,” said Roger Katz, a Republican in the Maine Senate who traveled to Turkey.

Some said they had no idea the sponsors of the trips were even part of the Gulen movement. To be sure, many of the trips occurred before the movement became an enemy of the Turkish state.

“The people I was associated with were devout Muslims and, I thought, the nicest people,” said Harry Kennedy, a former Democratic state senator in Missouri who went to Turkey in 2008. “But we really didn’t talk much about international politics.”

Lawmakers who have gone on the trips also have praised the experience as a way to dispel myths about Muslims in a post-9/11 world. But not every trip participant walked away with the same conclusions. New Mexico state Sen. George Munoz said he left his trip early.

“I thought it was interesting to see another culture and government, but there were some things that were deeply wrong,” the Democrat said. “There’s a reason our country chose Christianity.”

Gulen-movement groups are not the only ones paying for foreign travel by state lawmakers who have no power over foreign affairs. The government of Taiwan has sponsored trips for state lawmakers, and various Jewish nonprofits have taken state legislators to Israel.

But the Gulen movement’s efforts are extensive. For years, Gulen’s followers have been making friends in the United States by offering receptions, awards dinners and the subsidized trips — and not just for state lawmakers.

A 2015 USA Today investigation found the Gulen movement organized 200 trips for members of Congress and their staff.

One Gulen movement member estimated that more than 7,000 Gulen-movement-sponsored trips for North Americans occurred between 2003 and 2010, at an estimated cost of $17.5 million. The trips included mayors, university professors, journalists and other community leaders from across the United States.

The Center for Public Integrity’s review of lawmakers’ disclosures show that the Gulen-movement groups shelled out between $1,000 and $7,047 per trip.

Some lawmakers’ spouses also came along for the subsidized journeys, which often included visits to major Turkish historical sites such as the Hagia Sophia, a cruise on the Bosphorus Strait, shopping, as well as tours of Gulen-linked institutions such as Zaman, a daily newspaper, or private schools run by the movement.

Though some lawmakers paid for the cost of their flights to the country, expenses such as hotels, meals and tours were frequently covered by Gulen-movement nonprofits, which run on generous donations from Gulen’s followers, experts said. In addition, local Turkish followers of Gulen often donated funds specifically for the trips and then hosted the travelers in their homes for dinners or joined them for tours.

While federal lawmakers’ trips are governed by strict rules and must be disclosed, state regulations and their interpretations vary. Many states that regulate lawmaker gifts and travel include exceptions for educational trips, and none ban subsidized travel for legislators outright, according to Ethan Wilson, an ethics expert at the National Conference of State Legislatures.

For example, Colorado bans gifts for lawmakers above $50, but the state’s ethics commission ruled that the Turkey trips fall under the definition of “fact-finding missions,” which are allowed.

And though some Kansas legislators reported their trips in financial disclosures, at least two did not. They told the Center for Public Integrity that the state ethics commission told them it wasn’t required, though the director of the commission said hotel stays worth more than $500 should be disclosed.

North Dakota does not have any rules barring such trips, nor does it even require them to be disclosed.

Still, lawmakers should scrutinize perks offered to them carefully, said Mike Palmer, an ethics consultant who has worked on ethics codes for municipalities and government agencies. Certain groups like federal contracting officers have strict bans on gifts for good reason, he said.

“There’s a balance there between receiving education and being lobbied,” Palmer said. “What one would ask is: ‘Why are they providing this? Why is this person taking me to lunch? What’s in it for them?’” Must read the full summary here from Public Integrity. (List of lawmakers that were paid to travel is included.)