Russia Posturing to Own Space, then China?

Posted on August 6, 2018August 6, 2018 by Denise Simon

Right now, miles above your head, there are fleets of robotic, weaponized satellites poised to do battle as the world’s superpowers await the opening salvo in a very real cosmic chess match.

When it comes to Russia, the real cause for concern surrounds a mysterious object known cryptically as 2014-28E. The object first appeared in space soon after the launch of three Russian military communication satellites. Initially, many believed 2014-28E was just another piece of debris left over from the launch. Not long afterward, however, this hunk of space junk began to swiftly change orbit, demonstrating an onboard propulsion system. What exactly 2014-28E is is still unknown, as the Russians have remained tight-lipped on the matter. Many experts fear that these actions signal that the Russians have revived their allegedly-defunct operation known as Istrebitel Sputnik (meaning “Satellite Fighter”), a covert Soviet-era ASAT program.

Russian and Chinese officials have continuously accused the United States of spying on the Chinese Space Station with a top-secret space toy known officially as X-37B. This craft is essentially an unmanned version of the Space Shuttle with a payload bay that’s roughly the size of a pickup truck bed. However, what exactly will be carried and what has been carried on its previous three missions is classified. So too is the entire X-37B budget. Many aeronautic experts dispute claims that the U.S. is using this craft to spy on the Chinese Space Station — but, the complete lack of transparency from U.S. officials hasn’t helped thaw frigid relations between the involved parties.

And the X-37B definitely isn’t the only trick the U.S. has up its proverbial sleeve. Some of America’s most sophisticated ASAT technology is in development as we speak. DARPA, the research and development wing of the U.S. Department of Defense, is now quickly moving along with its Phoenix initiative. The program is based around the concept of a series of robotic craft with the ability to repair damaged satellites from the scraps parts of other defunct satellites already in orbit. Again, from a foreign military perspective, if a satellite has the ability to build something, that satellite also has the intrinsic ability to dismantle something — say, an enemy satellite. More here from Digital Trends.

Russia Will Fight to Be World’s Top Space Power, Agency Chief Says

Russia is ready to do “serious battle” for the title of leading space power in the world, the head of the country’s state space agency has said.

Moscow’s Roscosmos has become the subject of some ridicule, following budget cuts and high-profile setbacks, including a recent botched launch that resulted in the loss of a multimillion dollar silo of satellites. The agency still regards itself as heir to Russia’s Soviet legacy of space exploration and Russian President Vladimir Putin has repeatedly urged officials to recapture that status in the world, telling agency employees last month that Roscosmos needed “breakthrough successes” to do so.

Roscosmos Director Dmitry Rogozin gave a defiant message on the agency’s ambitions.

“We are not looking to surrender leadership in space to anyone,” Rogozin said at the opening of a satellite equipment manufacturing plant in Yaroslavl region. The director, who served as Russia’s deputy prime minister until May, admitted that the agency had “fallen behind from the leading positions” in recent years.

Moscow Mayor Sergei Sobyanin (front left) gestures at Russian President Vladimir Putin (front center) and others as they visit a space exhibition in Moscow, on April 12. Maxim Shipenkov/AFP/Getty Images

Roscosmos unveiled a brand new spaceport in eastern Russia in 2016, although Putin reportedly reprimanded senior officials in private after the launching ceremony, which he had gone to watch, suffered a 24-hour delay. More here.

Just two years ago:

So why is there so much global interest in space at the moment, including in Australia, and what are countries around the world doing up there right now?

Space remains ‘hugely contested’ in 2018

Modern militaries rely on satellites that feed them vital intelligence.

As a result, “counterspace” weapons have become a rising area of interest, and earlier this year, US intelligence agencies warned that China and Russia were both working on “destructive counterspace weapons” for use in a future conflict.

The potential weapons US intelligence agencies were concerned about included both ground-launched missiles capable of taking out enemy satellites, as well as “directed-energy weapons” that could blind or damage the sensors on satellite instruments.

The US intelligence agencies said in their report that both China and Russia would probably have operational weapons within a few years.

China last month launched a communications satellite named Magpie Bridge that is currently sitting in a special orbit near the moon, giving it a view of both the Earth and the so-far-unexplored dark side of the Moon.

That feat was praised in official Chinese state media Xinhua as a “world first”.

The plan is for the satellite to beam continuous images of the dark side of the moon, with China looking set to become the first country to land a rover there later this year.

China is also planning on setting up a permanent robotic base on the lunar surface in the next 10 years, and is hoping for a manned mission in the 2030s.

Eligible Receiver 97, Red Team Being Applied Today for Cyber Hacks?

Posted on August 2, 2018August 2, 2018 by Denise Simon

An early classified Defense Department cybersecurity exercise named “Eligible Receiver 97” (ER97) featured a previously unpublicized series of mock terror attacks, hostage seizures, and special operations raids that went well beyond pure cyber activities in order to demonstrate the potential scope of threats to U.S. national security posed by attacks in the cyber domain, according to recently declassified documents and a National Security Agency (NSA) video posted today by the nongovernmental National Security Archive at The George Washington University.

“Joint Exercise Eligible Receiver 97”, run during the Clinton presidency, is frequently pointed to as a critical event in the United States’ appreciation of threats in cyber space. The exercise led directly to the formation of what would eventually become United States Cyber Command (USCYBERCOM) and informed key studies such as the formative Marsh Report on critical infrastructure protection. Despite the significance of ER97, however, very little is publicly known about the exercise itself.

ER97 involved an NSA Red Team playing the role of North Korean, Iranian and Cuban hostile forces whose putative aim was to attack critical infrastructure as well as military command-and-control capabilities to pressure the U.S. government into changing its policies toward those states. An interagency Blue Team was required to provide recommendations to personnel enacting defensive responses. Until now, only two phases out of three (infrastructure and command-and-control) had been publicly known. The video and documents posted today provide new details about the third phase involving kinetic attacks in the physical domain – i.e. more traditional terrorist assaults on civilian targets – which were built upon intelligence gathered through the Red Team’s successes. Read more here on the declassified files.

*** With all the cyber terror going on today in the United States, are we doing more ‘red team’ exercises? Perhaps some of those tactics are paying off many years later.

3 Carbanak (FIN7) Hackers Charged With Stealing 15 Million ...

Three Members of Notorious International Cybercrime Group “Fin7” in Custody for Role in Attacking Over 100 U.S. Companies

Victim Companies in 47 U.S. States; Used Front Company ‘Combi Security’ to Recruit Hackers to Criminal Enterprise

SEATTLE – Three high-ranking members of a sophisticated international cybercrime group operating out of Eastern Europe have been arrested and are currently in custody facing charges filed in U.S. District Court in Seattle, announced U.S. Attorney Annette L. Hayes, Assistant Attorney General Brian A. Benczkowski of the Justice Department’s Criminal Division and Special Agent in Charge Jay S. Tabb Jr. of the FBI’s Seattle Field Office.

According to three federal indictments unsealed today, Ukrainian nationals Dmytro Fedorov, 44, Fedir Hladyr, 33, and Andrii Kolpakov, 30, are members of a prolific hacking group widely known as FIN7 (also referred to as the Carbanak Group and the Navigator Group, among other names). Since at least 2015, FIN7 members engaged in a highly sophisticated malware campaign to attack more than 100 U.S. companies, predominantly in the restaurant, gaming, and hospitality industries. As set forth in the indictments, FIN7 hacked into thousands of computer systems and stole millions of customer credit and debit card numbers which were used or sold for profit.

In the United States alone, FIN7 successfully breached the computer networks of businesses in 47 states and the District of Columbia, stealing more than 15 million customer card records from over 6,500 individual point-of-sale terminals at more than 3,600 separate business locations. Additional intrusions occurred abroad, including in the United Kingdom, Australia, and France. Companies that have publicly disclosed hacks attributable to FIN7 include such familiar chains as Chipotle Mexican Grill, Chili’s, Arby’s, Red Robin and Jason’s Deli. Additionally here in Western Washington FIN7 targeted the Emerald Queen Casino (EQC) and other local businesses. The Emerald Queen Casino was able to stop the intrusion and no customer data was stolen.

“Protecting consumers and companies who use the internet to conduct business – both large chains and small ‘mom and pop’ stores — is a top priority for all of us in the Department of Justice,” said U.S. Attorney Annette L. Hayes. “Cyber criminals who believe that they can hide in faraway countries and operate from behind keyboards without getting caught are just plain wrong. We will continue our longstanding work with partners around the world to ensure cyber criminals are identified and held to account for the harm that they do – both to our pocketbooks and our ability to rely on the cyber networks we use.”

“The three Ukrainian nationals indicted today allegedly were part of a prolific hacking group that targeted American companies and citizens by stealing valuable consumer data, including personal credit card information, that they then sold on the Darknet,” said Assistant Attorney General Benczkowski. “Because hackers are committed to finding new ways to harm the American public and our economy, the Department of Justice remains steadfast in its commitment to working with our law enforcement partners to identify, interdict, and prosecute those responsible for these threats.”

“The naming of these FIN7 leaders marks a major step towards dismantling this sophisticated criminal enterprise,” said Special Agent in Charge Jay S. Tabb Jr., of the FBI’s Seattle Field Office. “As the lead federal agency for cyber-attack investigations, the FBI will continue to work with its law enforcement partners worldwide to pursue the members of this devious group, and hold them accountable for stealing from American businesses and individuals.”

Each of the three FIN7 conspirators is charged with 26 felony counts alleging conspiracy, wire fraud, computer hacking, access device fraud, and aggravated identity theft.

In January 2018, at the request of U.S. officials, foreign authorities separately arrested Ukrainian Fedir Hladyr and a second FIN7 member, Dmytro Fedorov. Hladyr was arrested in Dresden, Germany, and is currently detained in Seattle pending trial. Hladyr allegedly served as FIN7’s systems administrator who, among other things, maintained servers and communication channels used by the organization and held a managerial role by delegating tasks and by providing instruction to other members of the scheme. Hladyr’s trial is currently scheduled for October 22, 2018.

Fedorov, a high-level hacker and manager who allegedly supervised other hackers tasked with breaching the security of victims’ computer systems, was arrested in Bielsko-Biala, Poland. Fedorov remains detained in Poland pending his extradition to the United States.

In late June 2018, foreign authorities arrested a third FIN7 member, Ukrainian Andrii Kolpakov in Lepe, Spain. Kolpakov, also is alleged to be a supervisor of a group of hackers, remains detained in Spain pending the United States’ request for extradition.

According to the indictments, FIN7, through its dozens of members, launched numerous waves of malicious cyberattacks on numerous businesses operating in the United States and abroad. FIN7 carefully crafted email messages that would appear legitimate to a business’ employee, and accompanied emails with telephone calls intended to further legitimize the email. Once an attached file was opened and activated, FIN7 would use an adapted version of the notorious Carbanak malware in addition to an arsenal of other tools to ultimately access and steal payment card data for the business’ customers. Since 2015, many of the stolen payment card numbers have been offered for sale through online underground marketplaces. (Supplemental document “How FIN7 Attacked and Stole Data” explains the scheme in greater detail.)

FIN7 used a front company, Combi Security, purportedly headquartered in Russia and Israel, to provide a guise of legitimacy and to recruit hackers to join the criminal enterprise. Combi Security’s website indicated that it provided a number of security services such as penetration testing. Ironically, the sham company’s website listed multiple U.S. victims among its purported clients.

The charges in the indictments are merely allegations, and the defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law.

The indictments are the result of an investigation conducted by the Seattle Cyber Task Force of the FBI and the U.S. Attorney’s Office for the Western District of Washington, with the assistance of the Justice Department’s Computer Crime and Intellectual Property Section and Office of International Affairs, the National Cyber-Forensics and Training Alliance, numerous computer security firms and financial institutions, FBI offices across the nation and globe, as well as numerous international agencies. Arrests overseas were executed in Poland by the “Shadow Hunters” from CBŚP (Polish Central Bureau of Investigation); in Germany by LKA Sachsen – Dezernat 33, (German State Criminal Police Office) and the Polizeidirektion Dresden (Dresden Police); and in Spain by the Grupo de Seguridad Logica within the Unidad de Investigación Technologica of the Cuerpo Nacional de Policía (Spanish National Police).

This case is being prosecuted by Assistant U.S. Attorneys Francis Franze-Nakamura and Steven Masada of the Western District of Washington, and Trial Attorney Anthony Teelucksingh of the Justice Department’s Computer Crime and Intellectual Property Section.

how_fin7_attacked_and_stole_data.pdf

55 Remains from N Korea, Identification Underway

Posted on July 31, 2018July 31, 2018 by Denise Simon

The Defense POW/MIA Accounting Agency (DPAA) stated on its Korean War website that “on several occasions in the past, [North Korean] officials have indicated they possess as many as 200 sets of remains they had recovered over the years. The commitment established within the Joint Statement between President Trump and Chairman Kim would repatriate these.”

WASHINGTON — All Americans welcome the return of remains from the Korean War.

United Nations Command returned 55 cases of remains from North Korea to Osan Air Base, South Korea, July 27, 2018. Members of the command and the Osan community were on hand at the arrival ceremony. Army photo by Sgt. Quince Lanford

The July 27 honorable carry ceremony at Osan Air Base, South Korea, transferred 55 boxes of remains covered by the United Nations flag. Now the work of identification begins.

These remains are presumed to be American, but many other nations fought in the Korean War, and it’s possible the remains may come from one of those nations.

The 1950-1953 Korean War was incredibly violent, with 36,940 Americans killed and another 92,134 wounded. Some 7,699 American service members are listed as unaccounted-for from the conflict.

Remains Examination

The remains will be examined at the Defense POW/MIA Accounting Agency, and experts there will be responsible for identifying the remains. The agency is relatively new — coming into existence in 2015 after the merger of the Joint POW/MIA Accounting Command and the Defense Prisoner of War/Missing Personnel Office.

Many of the fallen service members died in North Korea and were buried by their comrades where they fell. Other U.S. service members were captured and placed in prisoner-of-war camps, where many succumbed to starvation, exposure and torture. Outside those camps are graves of Americans.

The DPAA Laboratory at Hickam Air Force Base, Hawaii, is the first U.S. stop for the recently returned remains. The lab is the largest and most diverse skeletal identification laboratory in the world and is staffed by more than 30 anthropologists, archaeologists and forensic odonatologists, United Nations Command release.

Those experts will sort and examine the remains. In the past, North Korea turned over commingled remains.

The lab experts are painstaking in their examination. The age of the remains — at least 65 years old — will complicate the process. The North Koreans collected the remains, and U.S. investigators will have to do the examination without the forensic information they normally would have, such as the approximate place of the burial and the conditions around it.

All US Accounted-For

All US Unaccounted-For

Korean War Air Loss Database – By Date

Korean War Air Loss Database – By Name

Related reading: Profiles of America’s Unaccounted For Personnel

Examination of dental charts and mitochondrial DNA will be key technologies used to identifying the remains, and the process may take years to complete, DoD officials said.

Iran’s Actions in the Middle East, Where’s the Money?

Posted on July 30, 2018July 30, 2018 by Denise Simon

Obama admin secretly used the Federal Reserve Bank to move $8.6 million to Iran for nuclear-related material. Then they circled back and tried to use the Fed to move several billion dollars more for Iran. Note from State Dept meeting with Oman bank:

It is getting more nefarious since the Kerry/Obama team are gone and left lots of unfinished business behind, or just ignored it.

Iran’s Revolutionary Guard Corps are employing German companies to disguise their illicit funding of the war against the pro-US government in Yemen.

Time Magazine reported on Thursday: “For several years, Iran’s elite Islamic Revolutionary Guard Corps (IRGC) had been using German front companies to buy advanced printing machinery, watermarked paper and specialty inks in violation of European export controls.”

According to interviews with US Treasury Department officials, Time added: “The IRGC had then printed counterfeit Yemeni banknotes potentially worth hundreds of millions of dollars and used the bogus rials to fund its proxy war against the beleaguered pro-US government in the capital of Sanaa. German companies were being used as a cover by the Iranians to finance the world’s worst humanitarian conflict.”

The report said that US officials, who uncovered the Iranian counterfeiting operation, met with their German counterparts at the Federal Ministry of Finance in Berlin last April.

The Jerusalem Post reviewed intelligence agency reports from German states covering Iran. The reports document Iran’s strategy of using front companies to engage in illicit procurement of nuclear and missile technology in Germany during 2017.

According to Time: “The evidence, uncovered by US illicit-finance investigators, was meant to sway the Germans, but not just in hopes of countering Iran’s moves on the southern tip of the Arabian Peninsula” but also “to convince Berlin that Tehran cannot be trusted and that the Germans should join the Trump Administration in imposing economy-crippling sanctions on Iran.”

US President Donald Trump issued an executive order in 2017 extending the designation of the IRGC as a terrorist organization. But Germany has declined to outlaw the IRGC as a terrorist entity. The mass circulation Bild reported on Thursday that Germany will permit former IRGC member Hadi Mofateh to run the Iranian regime-controlled Islamic Center of Hamburg.

Time wrote that weeks after the initial meeting in the German finance ministry, “American officials presented their hosts with one last set of documents: detailed blueprints on how the Trump Administration was preparing to unleash financial warfare on the Iranian economy.”

Germany is widely considered the least cooperative of the US’s European allies in confronting Iran’s bellicose activities, according to two sources familiar with US-German talks on the Iran nuclear deal. German exports to the Islamic Republic of Iran climbed to €3.5 billion in 2017, up from €2.6b. in 2016.

A German intelligence report from the city-state of Hamburg in July said Iran’s regime is continuing to seek weapons of mass destruction.

The Post reviewed the 211 page document that says: “some of the crisis countries… are still making an effort to obtain products for the manufacture of atomic, biological and chemical weapons of mass destruction (proliferation) and the corresponding missile carrier technology (rocket technology).”

The Hamburg report added: “The current main focus points of countries in the area of relevant proliferation activities are: Iran, Syria, Pakistan and North Korea.”

***

The Trump administration said in December that it believed 80 percent of the manpower supporting the Syrian regime was made up of “Iranian proxies,” including foreign Shiite fighters. Israel has accused Iran of sending as many as 80,000 fighters to Syria.

It is impossible to know the exact number of Afghan recruits in Syria, because many slip back and forth between Iran and Afghanistan, do not tell their families where they are, and hide their military service for fear of being sent to prison in Afghanistan for fighting on behalf of another country. Yet for some, especially those from the long-persecuted Hazara minority, it seems to be a secret badge of honor.

“Nobody forced us to go fight, but it gives you a kind of pride,” said Hussain, 26, a muscular Hazara man in Herat with scars on his face and hands from old shrapnel wounds. He has served in four deployments in Syria since 2014, earning upward of $600 a month, and returned again two months ago from the front. He said he originally decided to enlist while he was working as a carpenter in Iran and saw a video of Islamic State fighters chopping off victims’ heads. More details here.

Asia Pivot/Latin America Failure, China Owns L.A.

Posted on July 29, 2018July 29, 2018 by Denise Simon

Remember when just a few weeks ago when President Trump announced a new ‘space command‘?

The House Armed Services Committee has a fiscal item in the 2018 NDAA for something called ‘Management and Organization of Space Programs’. The Air Force is not too happy. Redundancy maybe or no?

US Air Force Sees Multidomain Command and Control As Critical photo

Air Force Space Command, activated Sept. 1, 1982, is a major command with headquarters at Peterson Air Force Base, Colorado. AFSPC provides military focused space capabilities with a global perspective to the joint warfighting team.

Mission

AFSPC’s mission is to provide resilient, defendable and affordable space capabilities for the Air Force, Joint Force and the Nation.

Vision

Innovate, Accelerate, Domininate

Priorities

1. Build Combat Readiness

2. Innovate and Accelerate to Win

3. Develop Joint Warfighters

4. Organize for Sustained Success

People

More than 30,000 space professionals worldwide.

Organization

Fourteenth Air Force is located at Vandenberg AFB, California, and provides space capabilities for the joint fight through the operational missions of spacelift; position, navigation and timing; satellite communications; missile warning and space control.

The Space and Missile Systems Center at Los Angeles AFB, California, designs and acquires all Air Force and most Department of Defense space systems. It oversees launches, completes on-orbit checkouts and then turns systems over to user agencies. It supports the Program Executive Office for Space on the Global Positioning, Defense Satellite Communications and MILSTAR systems. SMC also supports the Evolved Expendable Launch Vehicle, Defense Meteorological Satellite and Defense Support programs and the Space-Based Infrared System.

AFSPC major installations include: Schriever, Peterson and Buckley Air Force bases in Colorado; Los Angeles and Vandenberg Air Force bases in California; and Patrick AFB in Florida. Major AFSPC units also reside on bases managed by other commands in New Mexico, Virginia and Georgia. AFSPC manages many smaller installations and geographically separated units in North Dakota, Alaska, Hawaii and across the globe.

Space Capabilities

Spacelift operations at the East and West Coast launch bases provide services, facilities and range safety control for the conduct of DOD, NASA and commercial launches. Through the command and control of all DOD satellites, satellite operators provide force-multiplying effects — continuous global coverage, low vulnerability and autonomous operations. Satellites provide essential in-theater secure communications, weather and navigational data for ground, air and fleet operations and threat warning.

Ground-based radar, Space-Based Infrared System and Defense Support Program satellites monitor ballistic missile launches around the world to guard against a surprise missile attack on North America. Space surveillance radars provide vital information on the location of satellites and space debris for the nation and the world. Maintaining space superiority is an emerging capability required to protect U.S. space assets.

Remember when VP Pence visited several countries in Latin America a few months ago?

Lots of back story items going on here. China landed in Latin America, the world knew it and did nothing. Obama? Yep…nothing and Trump is working to catch up and applying some counter-measures? This trade war thing is beginning to make some sense with China….

No Need for New ‘Imperial Powers’

Latin America experts in the Obama White House watched China’s rise in the region warily. But the administration raised little fuss publicly, sharing its concerns with leaders mostly in private.

Besides, former officials say, Washington did not have much of a counteroffer.

“I wished the whole time I was working in Latin America that any administration had as well thought-out, resourced and planned a policy as the pivot to Asia for Latin America,” said John Feeley, who recently resigned as the American ambassador to Panama after a nearly three-decade career. “Since the end of the 1980s, there really has never been a comprehensive hemispheric long-term strategy.”

While President Barack Obama was widely hailed in the region for restoring diplomatic relations with Cuba in late 2014, Washington’s agenda never ceased being dominated by two issues that have long generated resentment in Latin America: the war on drugs and illegal immigration.

***

Meanwhile, Patagonia has a Chinese military base, for 50 years, for free.

The 450-ton device, with its hulking dish embracing the open skies, is the centerpiece of a $50 million satellite and space mission control station built by the Chinese military.

The isolated base is one of the most striking symbols of Beijing’s long push to transform Latin America and shape its future for generations to come — often in ways that directly undermine the United States’ political, economic and strategic power in the region.

The antenna is the centerpiece of a $50 million station built by the Chinese military.CreditMauricio Lima for The New York Times

The station began operating in March, playing a pivotal role in China’s audacious expedition to the far side of the moon — an endeavor that Argentine officials say they are elated to support.

But the way the base was negotiated — in secret, at a time when Argentina desperately needed investment — and concerns that it could enhance China’s intelligence gathering capabilities in the hemisphere have set off a debate in Argentina about the risks and benefits of being pulled into China’s orbit.

“Beijing has transformed the dynamics of the region, from the agendas of its leaders and businessmen to the structure of its economies, the content of its politics and even its security dynamics,” said R. Evan Ellis, a professor of Latin American studies at the United States Army War College.

Just weeks after the space station began operating in Patagonia, the United States made an announcement that raised eyebrows here in Argentina.

The Pentagon is funding a $1.3 million emergency response center in Neuquén — the same province where the Chinese base is, and the first such American project in all of Argentina. Local officials and residents wondered whether the move was a tit-for-tat response to China’s new presence in this remote part of the country. Read the full article here from the NYT’s, great work.