Ex-Gitmo Detainee From Uruguay, to Brazil to Venezuela

Ex-Guantánamo detainee who vanished from Uruguay turns up in Venezuela

   

Abu Wa’el Dhiab, who had disappeared last month in Uruguay where he and six others were resettled in 2014, showed up at the Syrian consulate in Caracas

Guardian: A resettled former Guantánamo prisoner who disappeared last month in Uruguay, setting off alarm bells in neighboring countries and recriminations in Washington, has reappeared in Venezuela.

The Uruguayan foreign minister, Rodolfo Nin Novoa, told the Associated Press that Syrian native Abu Wa’el Dhiab showed up at his country’s consulate in Caracas. Consulate officials refused to provide information or entry to AP journalists gathered outside.

Dhiab reportedly had last been seen in mid-July in Chuy, a small city on the Uruguay-Brazil border that is home to a small Arab community.

He is one of six former Guantánamo prisoners who were resettled in Uruguay after being released by US authorities in 2014, invited by then president José Mujica as a humanitarian gesture.

The men had been detained in 2002 for suspected ties to al-Qaida. They were held without charge like hundreds of others at Guantánamo Bay before the US government cleared them for release. There are no charges against Dhiab or order for his arrest, and Uruguayan officials had said that as a refugee he has the right to leave the South American country.

But Dhiab’s disappearance raised concerns, as well as questions about how closely countries that resettle former Guantánamo inmates should watch them and for how long, as the US prepares to release more prisoners.

US lawmakers trying to block Barack Obama from closing the detention center recently scolded his administration for losing track of Dhiab. The US envoy in Montevideo also expressed concerns about the lack of information on his whereabouts. Ambassador Kelly Keiderling said it’s up to Uruguay to say whether Dhiab can travel, though she added that she would prefer he stay in Uruguay. When questioned at a news conference, she said Dhiab “could be, yes, theoretically” a threat.

Colombia-based Avianca Airlines recently issued an internal alert saying Dhiab could be using a fake passport trying to enter Brazil, the site of the Summer Olympics. The airline said the alert was issued based on information provided by Brazil’s federal police, which had been looking for Dhiab.

The Uruguayan government has provided social services and financial support to Dhiab and the five other former detainees – three others from Syria, a Tunisian and a Palestinian. But the men have struggled to adjust and have complained about not getting enough help from Uruguayan officials.

Dhiab has been the most vocal about his unhappiness. Last year, he visited neighboring Argentina. In an orange jumpsuit like those Guantánamo prisoners have worn, he told news media in Buenos Aires that he planned to seek asylum for himself and the other detainees still held at the US naval base in eastern Cuba.

In an interview with the Uruguayan magazine Búsqueda, Dhiab said he was never a terrorist, but sympathizes with al-Qaida because of the torture that he endured in Guantánamo. He also has accused Uruguay of breaking its commitment to bring his family.

Jon Eisenberg, a US lawyer who represented Dhiab while he was detained at Guantánamo, said he has not been in contact with the former prisoner since a phone call in June but has heard from a contact in Uruguay that the report of his being in Venezuela is accurate.

Eisenberg said Dhiab was very concerned about his wife and three children, who fled the Syrian civil war for Turkey but then had to return to their homeland for financial reasons. They were in a Syrian village that was bombed by government forces in November 2015.

The lawyer said that when he last spoke with the former prisoner, Dhiab was hopeful that his family might be brought to Uruguay.

“That’s why I thought he wouldn’t leave Uruguay,” Eisenberg said.

 

Euro Arms Pipeline to Middle East

Making a Killing: The 1.2 Billion Euro Arms Pipeline to Middle East

An unprecedented flow of weapons from Central and Eastern Europe is flooding the battlefields of the Middle East.

Lawrence Marzouk, Ivan Angelovski and Miranda Patrucic BIRN Belgrade, London, Sarajevo

BalkanInsight: As Belgrade slept on the night of November 28, 2015, the giant turbofan engines of a Belarusian Ruby Star Ilyushin II-76 cargo plane roared into life, its hull laden with arms destined for faraway conflicts.

Rising from the tarmac of Nikola Tesla airport, the hulking aircraft pierced the Serbian mist to head towards Jeddah, Saudi Arabia.

It was one of at least 68 flights that in just 13 months transported weapons and ammunition to Middle Eastern states and Turkey which, in turn, funnelled arms into brutal civil wars in Syria and Yemen, the Balkan Investigative Reporting Network, BIRN, and the Organized Crime and Corruption Reporting Project, OCCRP, has found. The flights form just a small part of €1.2 billion in arms deals between the countries since 2012, when parts of the Arab Spring turned into an armed conflict.


Belgrade Airport | BIRN

Meanwhile, over the past two years, as thousands of tonnes of weapons fly south, hundreds of thousands of refugees have fled north from the conflicts that have killed more than 400,000 people. But while Balkan and European countries have shut down the refugee route, the billion-euro pipeline sending arms by plane and ship to the Middle East remains open – and very lucrative.

It is a trade that is almost certainly illegal, according to arms and human rights experts.

“The evidence points towards systematic diversion of weapons to armed groups accused of committing serious human rights violations. If this is the case, the transfers are illegal under the ATT (United Nations’ Arms Trade Treaty) and other international law and should cease immediately,” said Patrick Wilcken, an arms-control researcher at Amnesty International who reviewed the evidence collected by reporters.

But with hundreds of millions of euros at stake and weapons factories working overtime, countries have a strong incentive to let the business flourish. Arms export licences, which are supposed to guarantee the final destination of the goods, have been granted despite ample evidence that weapons are being diverted to Syrian and other armed groups accused of widespread human rights abuses and atrocities.

Robert Stephen Ford, US ambassador to Syria between 2011 and 2014, told BIRN and the OCCRP that the trade is coordinated by the US Central Intelligence Agency, CIA, Turkey and Gulf states through centres in Jordan and Turkey, although in practice weapon supplies often bypass this process.

BIRN and the OCCRP examined arms export data, UN reports, flight records, and weapons contracts during a year-long investigation that reveals how thousands of assault rifles, mortar shells, rocket launchers, anti-tank weapons, and heavy machine guns are pouring into the troubled region, originating from Bosnia and Herzegovina, Bulgaria, Croatia, the Czech Republic, Montenegro, Romania,  Serbia and Slovakia.

Read all the documents used in the investigation at BIRN’s online library BIRN Source.

Since the escalation of the Syrian conflict in 2012, these eight countries have approved the shipment of weapons and ammunition worth at least 1.2 billion euros to Saudi Arabia, Jordan, United Arab Emirates, and Turkey.

The figure is likely much higher. Data on arms export licences for four out of eight countries were not available for 2015 and seven out of eight countries for 2016. The four recipient countries are key arms suppliers to Syria and Yemen with little or no history of buying from Central and Eastern Europe prior to 2012. And the pace of the transfers is not slowing, with some of the biggest deals approved in 2015.

Eastern and Central European weapons and ammunition, identified in more than 50  videos and photos posted on social media, are now in use by Western-backed Free Syrian Army units, but also in the hands of fighters of Islamist groups such as Ansar al-Sham, Al Qaeda-affiliated Jabhat al-Nusra, the Islamic State of Iraq and the Levant, ISIS, in Syria, factions fighting for Syrian President Bashar-al Assad and Sunni forces in Yemen.

On April 7, 2016, twitter User @bm27_uragan, who monitors the spread of weapons in the Syrian conflict, posted a video apparently of Free Syrian Army rebel using Serbian made Coyote M02 heavy machine gun in Southern Aleppo in Syria. The Coyote M02 has been independently identified as a Coyote M02.

Markings on some of the weapons identifying the origin and date of production reveal significant quantities have come off production lines as recently as 2015.

Out of the 1.2 billion euros in weapons and ammunition approved for export, about 500 million euros have been delivered, according to UN trade information and national arms export reports.

The frequency and number of cargo flights – BIRN and the OCCRP identified at least 68 in just over one year – reveal a steady flow of weapons from Central and Eastern Europe airports to military bases in Middle East.

The most commonly used aircraft – the Ilyushin II-76 – can carry up to 50 tonnes of cargo or approximately 16,000 AK-47 Kalashnikov rifles or three million bullets. Others, including the Boeing 747, are capable of hauling at least twice that amount.

But arms and ammunitions are not only coming by air. Reporters also have identified at least three shipments made by the US military from Black Sea ports carrying an estimated 4,700 tonnes of weapons and ammunition to the Red Sea and Turkey since December 2015.

One Swedish member of the EU parliament calls the trade shameful.

“Maybe they –[Bulgaria, Slovakia and Croatia] – do not feel ashamed at all but I think they should,” said Bodil Valero, who also served as the rapporteur for the EU’s last arms report.“Countries selling arms to Saudi Arabia or the Middle East-North Africa region are not carrying out good risk assessments and, as a result, are in breach of EU and national law.”.

OCCRP and BIRN talked to government representatives in Croatia, Czech Republic, Montenegro, Serbia, and Slovakia who all responded similarly saying that they are meeting their international obligations. Some cited that Saudi Arabia is not on any international weapons black lists and other said their countries are not responsible if weapons have been diverted.

A question of legality

The global arms trade is regulated by three layers of interconnected legislation — national, European Union, EU, and international – but there are no formal mechanisms to punish those who break the law.

Beyond the blanket ban on exports to embargoed countries, each licence request is dealt with individually.

In the case of Syria, there are currently no sanctions on supplying weapons to the opposition.

As a result, the lawfulness of the export approval hinges on whether countries have carried out due diligence on a range of issues, including the likelihood of the arms being diverted and the impact the export will have on peace and stability.

Bosnia and Herzegovina, Bulgaria, Croatia, the Czech Republic, Montenegro, Romania, Serbia and Slovakia are signatories of the UN’s Arms Trade Treaty, which entered into force in December 2014, and lists measures to prevent the illicit trade and diversion of arms.

Member states of the EU are also governed by the legally-binding 2008 Common Position on arms exports, requiring each country to take into account eight criteria when accessing arms exports licence applications, including whether the country respects international human rights, the preservation of “regional peace, security and stability” and the risk of diversion.

As part of their efforts to join the EU, Bosnia and Herzegovina and Montenegro have already accepted the measures and have amended their national law. Serbia is in the process of doing so.

Weapons exports are initially assessed based on an end-user certificate, a key document issued by the government of the importing country which guarantees who will use the weapons and that the arms are not intended for re-export.

Authorities in Central and Eastern Europe told BIRN and the OCCRP that they also inserted a clause which requires the buyer to seek approval if they later want to export the goods.

Beyond these initial checks, countries are required to carry out a range of other risk assessments based on national and EU law and the ATT, although conversations with, and statements from, authorities revealed little evidence of that.

OCCRP and BIRN talked to government representatives in Croatia, Czech Republic, Montenegro, Serbia, and Slovakia who all responded similarly saying that they are meeting their international obligations. Some cited that Saudi Arabia is not on any international weapons black lists and other said their countries are not responsible if weapons have been diverted. The three other countries did not respond to requests for comment.

The Czech Foreign Ministry was the only public body to directly address concerns about human rights abuses and diversions, saying it took into account both when weighing up an export licence and had blocked transfers on that basis.

How legal are these arms sales to the Middle East? Find out more here

Saudi Arabia – The weapons king

The Central and Eastern European weapons supply line can be traced to the winter of 2012, when dozens of cargo planes, loaded with Saudi-purchased Yugoslav-era weapons and ammunition, began leaving Zagreb bound for Jordan. Soon after, the first footage of Croatian weapons in use emerged from the battleground of Syria.

According to a New York Times report from February 2013, a senior Croatian official offered the country’s stockpiles of old weapons for Syria during a visit to Washington in the summer of 2012. Zagreb was later put in touch with the Saudis, who bankrolled the purchases, while the CIA helped with logistics for an airlift that began late that year.

While Croatia’s government has consistently denied any role in shipping weapons to Syria, former US ambassador to Syria Ford confirmed to BIRN and the OCCRP the New York Times account from an anonymous source of how the deal was hatched. He said he was not at liberty to discuss it further.

This was just the beginning of an unprecedented flow of weapons from Central and Eastern Europe into the Middle East, as the pipeline expanded to include stocks from seven other countries. Local arms dealers sourced arms and ammunition from their home countries and brokered the sale of ammunition from Ukraine and Belarus, and even attempted to secure Soviet-made anti-tank systems bought from the UK, as a Europe-wide arms bazaar ensued.

Prior to the Arab Spring in 2011, the arms trade between Eastern Europe and Saudi Arabia, Jordan, the United Arab Emirates, UAE, and Turkey – four key supporters of Syria’s fractured opposition – was negligible to non-existent, according to analysis of export data.

But that changed in 2012. Between that year and 2016, eight Eastern European countries approved at least 806 million euros worth of weapons and ammunition exports to Saudi Arabia, according to national and EU arms export reports as well as government sources.

Jordan secured export licences worth 155 million euros starting in 2012, while the UAE netted 135 million euros and Turkey 87 million euros, bringing the total to 1.2 billion euros.

Qatar, another key supplier of equipment to the Syrian opposition, does not show up in export licences from Central and Eastern Europe.

Jeremy Binnie, Middle East arms expert for Jane’s Defence Weekly, a publication widely regarded as the most trusted source of defence and security information, said the bulk of the weapon exports from Eastern Europe would likely be destined for Syria and, to a lesser extent, Yemen and Libya.

“With a few exceptions, the militaries of Saudi Arabia, Jordan, the UAE and Turkey use Western infantry weapons and ammunition, rather than Soviet-designed counterparts,” said Binnie. “It consequently seems likely that large shipments of such materiel being acquired by – or sent to – those countries are destined for their allies in Syria, Yemen, and Libya.”

BIRN and the OCCRP obtained confidential documents from Serbia’s Ministry of Defence and minutes from a series of inter-ministerial meetings in 2013. The documents show the ministry raised concerns that deliveries to Saudi Arabia would be diverted to Syria, pointing out that the Saudis do not use Central and Eastern European stock and have a history of supplying the Syrian opposition. The Ministry turned down the Saudi request only to reverse course more than one year later and approve new arms shipments citing national interest. Saudi security forces, while mostly armed by Western producers, are known to use limited amounts of Central and Eastern European equipment. This includes Czech-produced military trucks and some Romanian-made assault rifles. But even arms exports destined for use by Saudi forces are proving controversial, given their involvement in the conflict in Yemen.

The Netherlands became the first EU country to halt arms exports to Saudi Arabia as a result of civilian deaths in Yemen’s civil war, and the European Parliament has called for an EU-wide arms embargo.

Supply Logistics: Cargo flights and airdrops

Weapons from Central and Eastern Europe are delivered to the Middle East by cargo flights and ships. By identifying the planes and ships delivering weapons, reporters were able to track the flow of arms in real time.

Detailed analysis of airport timetables, cargo carrier history, flight tracking data, and air traffic control sources helped pinpoint 68 flights that carried weapons to Middle Eastern conflicts in the past 13 months.  Belgrade, Sofia and Bratislava emerged as the main hubs for the airlift.

Most frequent were flights operated from Belgrade, the capital of Serbia. The flights were either confirmed as carrying weapons, were headed to military bases in Saudi Arabia or the UAE or were carried out by regular arms shippers.

The Middle East Airlift 

At least 68 cargo flights from Serbia, Slovakia, Bulgaria and the Czech Republic have carried thousands of tons of munitions in the past 13 months to Saudi Arabia, the United Arab Emirates, and Jordan, three key suppliers of the Syrian rebels.

These were identified through detailed analysis of airport timetables, cargo carrier history, flight tracking data, leaked arms contracts, end user certificates, and air traffic control sources.

Cargo flights from Central and Eastern Europe to the Middle East, and particularly military bases, were extremely uncommon before late 2012, when the upsurge in weapons and ammunition purchases began, according to EU flight data and interviews with plane-spotters.

The most commonly used aircraft – the Ilyushin II-76 – can carry up to 50 tonnes of cargo or approximately 16,000 AK-47 Kalashnikov rifles or three million bullets. Others, including the Boeing 747, are capable of hauling at least twice that amount.

Of the 68 flights identified, 50 were officially confirmed to have carried arms and ammunition:

  • Serbia’s Civil Aviation Directorate confirmed that 49 flights departing or passing through Serbia were carrying arms and ammunition from June 1, 2015 to July 4, 2016. The confirmation came following weeks of refusal to comment on grounds of confidentiality and after BIRN and the OCCRP presented its evidence, including photographs showing military boxes being loaded onto planes at Belgrade’s Nikola Tesla Airport on four different occasions.
  • An official at the Bulgarian National Customs Agency confirmed one flight, operated by Belarussian cargo carrier Ruby Star Airways, was carrying arms from the remote Bulgarian Gorna Oryahovitsa Airport to Brno–Turany Airport, the Czech Republic, and on to Aqaba, Jordan.
  • An additional 18 flights were identified as very likely to have been carrying arms and ammunition based on one of three variables: the air freight company’s history of weapons supplies; connections to earlier arms flights; or a destination of a military airport:
    • Ten flights were made to Prince Sultan Air Base in Al Kharj, Saudi Arabia and Al Dhafra Air Base in Abu Dhabi, United Arab Emirates, indicating the likely presence of weapons or ammunition. Additionally, 14 flights to Prince Sultan and Al Dhafra air bases are confirmed as having carried weapons during the same period by Serbia’s Civil Aviation Directorate.
    • Seven flights were operated from Slovakia and Bulgaria by Jordan International Air Cargo, part of the Royal Jordanian Air Force, which were revealed to have carried weapons and ammunition from Croatia to Jordan in the winter of 2012. Bulgarian retired colonel and counter-terrorism expert Slavcho Velkov, who maintains extensive contacts with the military, told BIRN and the OCCRP that the Sofia-Amman flights “were transporting weapons to Saudi Arabia, mostly for the Syrian conflict.” Additionally, one other flight operated by this airline is confirmed as having carried weapons during the same period by Serbia’s Civil Aviation Directorate.
    • One flight was operated by a Belarussian cargo carrier TransAVIAexport Airlines, which has a long history of transporting weapons.  In 2014, the airline was hired by Serbian arms dealer Slobodan Tesic to transport Serbian and Belarussian weapons and ammunition to air bases in Libya controlled by various militant groups. The United Nations, UN, Sanctions Committee investigated the case and found potential breaches of UN sanctions, according to a 2015 UN report. Additionally, five flights operated by this airline are confirmed as having carried weapons during the same period by Serbia’s Civil Aviation Directorate.

Many of these flights made an additional stop in Central and Eastern Europe – meaning they were likely picking up more weapons and ammunition – before flying to their final destination.

EU flight statistics provide further evidence of the scale of the operation. They reveal that planes flying from Bulgaria and Slovakia have delivered 2,268 tons of cargo – equal to 44 flights with the most commonly used aircraft – the Ilyushin II-76 – since the summer of 2014 to the same military bases in Saudi Arabia and UAE pinpointed by BIRN and OCCRP.

Distributing the weapons

Arms bought for Syria by the Saudis, Turks, Jordanians and the UAE are then routed through two secret command facilities – called Military Operation Centers (MOC) – in Jordan and Turkey, according to Ford, the former US ambassador to Syria.

These units – staffed by security and military officials from the Gulf, Turkey, Jordan and the US – coordinate the distribution of weapons to vetted Syrian opposition groups, according to information from the Atlanta-based Carter Center, a think tank that has a unit monitoring the conflict.

“Each of the countries involved in helping the armed opposition retained final decision-making authority about which groups in Syria received assistance,” Ford said.

A cache of leaked cargo carrier documents provides further clues to how the Saudi military supplies Syrian rebels.

According to the documents obtained by BIRN and the OCCRP, the Moldovan company AeroTransCargo made six flights in the summer of 2015 carrying at least 250 tonnes of ammunition between military bases in Saudi Arabia and Esenboga International Airport in Ankara, the capital of Turkey, reportedly an arrival point for weapons and ammunition for Syrian rebels.

Pieter Wezeman, of the Stockholm International Peace Research Institute, a leading organisation in tracking arms exports, said he suspects the flights are part of the logistical operation to supply ammunition to Syrian rebels.

From the MOCs, weapons are then transported by road to the Syrian border or airdropped by military planes.

A Free Syrian Army commander from Aleppo, who asked to remain anonymous to protect his safety, told BIRN and OCCRP that weapons from Central and Eastern Europe were distributed from centrally controlled headquarters in Syria. “We don’t care about the county of origin, we just know it is from Eastern Europe,” he said.

The Saudis and Turks also provided weapons directly to Islamist groups not supported by the US and who have sometimes ended up fighting MOC-backed factions, Ford added.

The Saudis are also known to have airdropped arms and equipment, including what appeared to be Serbian-made assault rifles to its allies in Yemen.

Ford said that while he was not personally involved in negotiations with Serbia, Bulgaria and Romania over the supply of weapons to Syria, he believes that the CIA is likely to have played a role.

“For operations of this type it would be difficult for me to imagine that there wasn’t some coordination between the intelligence services, but it may have been confined strictly to intelligence channels,” he said.

The US may not have just played a role in the logistics behind delivering Gulf-sponsored weapons from Eastern Europe to the Syrian rebels. Through its Department of Defense’s Special Operations Command (SOCOM), it has also bought and delivered vast quantities of military materiel from Eastern Europe for the Syrian opposition as part of a US$500 million train and equip programme.

Since December 2015, SOCOM has commissioned three cargo ships to transport 4,700 tons of arms and ammunition from ports of Constanta in Romania and Burgas in Bulgaria to the Middle East likely as part of the covert supply of weapons to Syria.

The shipments included heavy machine guns, rocket launchers and anti-tank weapons – as well as bullets, mortars, grenades, rockets and explosives, according to US procurement documents.

The origin of arms shipped by SOCOM is unknown and the material listed in transport documents is available from stockpiles across Central and Eastern Europe.

Not long after one of the deliveries, SOCOM supported Kurdish groups published an image on Twitter and Facebook showing a warehouse piled with US-brokered ammunition boxes in northern Syria SOCOM would not confirm or deny that the shipments were bound for Syria.

US procurement records also reveal that SOCOM secured from 2014 to 2016 at least 25 million euros (27 million dollars) worth of Bulgarian and 11 million euros (12 million dollars) in Serbian weapons and ammunition for covert operations and Syrian rebels..

A Booming Business

Arms control researcher Wilcken said Central and Eastern Europe had been well positioned to cash in on the huge surge in demand for weapons following the Arab Spring.

“Geographical proximity and lax export controls have put some Balkan states in pole position to profit from this trade, in some instances with covert US assistance,” he added. “Eastern Europe is rehabilitating Cold War arms industries which are expanding and becoming profitable again.”

Serbian Prime Minister Aleksandar Vucic boasted recently that his country could produce five times the amount of arms it currently makes and still not meet the demand.

“Unfortunately in some parts of the world they are at war more than ever and everything you produce, on any side of the world you can sell it,” he said.

Arms manufacturers from Bosnia and Herzegovina and Serbia are running at full capacity with some adding extra shifts and others not taking new orders.

Saudi Arabia’s top officials – more used to negotiating multi-billion-dollar fighter-jet deals with Western defence giants – have been forced to deal with a handful of small-time arms brokers operating in Eastern Europe who have access to weapons such as AK-47s and rocket launchers

Middlemen such as Serbia’s CPR Impex and Slovakia’s Eldon have played a critical role in supplying weapons and ammunition to the Middle East

The inventory of each delivery is usually unknown due to the secrecy surrounding arms deals but two end-user certificates and one export licence, obtained by BIRN and the OCCRP, reveal the extraordinary scope of the buy-up for Syrian beneficiaries.

For example, the Saudi Ministry of Defence expressed its interest in buying from Serbian arms dealer CPR Impex a number of weapons including hundreds of aging T-55 and T-72 tanks, millions of rounds of ammunition, multi-launch missile systems and rocket launchers. Weapons and ammunition listed were produced in the former Yugoslavia, Belarus, Ukraine, and the Czech Republic.

An export licence issued to a little-known Slovakian company called Eldon in January 2015 granted the firm the right to transport thousands of Eastern European rocket-propelled grenade launchers, heavy machine guns and almost a million bullets worth nearly 32 million euros to Saudi Arabia.

BIRN and OCCRP’s analysis of social media shows weapons that originated from the former states of Czechoslovakia and Yugoslavia, and Serbia, Croatia and Bulgaria are now present on the battlefields of Syria and Yemen.

While experts believe the countries continue to shirk their responsibility, the weapons pipeline adds more and more fuel to a white hot conflict that leads to more and more misery.

“Proliferation of arms to the region has caused untold human suffering; huge numbers of people have been displaced and parties to the conflict have committed serious human rights violations including   abductions, executions, enforced disappearances, torture and rape,” said Amnesty’s Wilcken.

Additional reporting by Atanas Tchobanov, Dusica Tomovic, Jelena Cosic, Jelena Svircic, Lindita Cela, RISE Moldova and Pavla Holcova.

This investigation is produced by BIRN as a part of Paper Trail to Better Governance project.

 

bin Ladin Just Recorded an Audio Message, What?

Message from Bin Laden’s son exposes ‘Iran’s revival of al-Qaeda’

al-Arabiya: An audio message released recently by Osama Bin Laden’s son Hamza has signaled the “continuation of Iranian sponsorship” of terrorism within al-Qaeda, a report by a US-based think tank has found.

 It is also important to note, Hamza has brothers.

In the message released on May 9 and titled “Jerusalem is but a bride, and her dowry is blood,” Hamza called on all Syrian militant groups to unite and “liberate Palestine.”

According to a report released this week by SAPRAC, the Saudi American Public Relations Affairs Committee, “Al-Qaeda observers believe the new message released by Hamza Bin Laden signals the continuation of Iranian sponsorship of Bin Laden’s son, which started after the tragic events of 9 / 11.

“Blatantly defying world powers, Tehran hosted Hamza Bin Laden and provided him with necessary security, according to many intelligence agencies across the world.”

Believed to be 24 or 25 years old, Hamza is expected by experts to potentially become the next al-Qaeda leader

The SAPRAC report added that on March 16, before the release of the audio message,” American intelligence declassified 113 hand written messages by Osama Bin Laden. These included instructions on how Al-Qaeda should deal with Iran.”

The messages also revealed that Bin Laden said Iran is ‘the chief pathway for our money, men, communiqué, and hostages”.

Bin Laden also urged his men “not to start a front against Iran.”

According to SAPRAC, “this confirms the strong and warming ties between Al-Qaeda and the Islamic Republic of Iran.”

Infographic: Who is Hamza Bin Laden. (Al Arabiya English)

Three senior al-Qaeda members linked to Iran

The United States recently imposed sanctions on three senior al-Qaeda members living in Iran, shining a brighter spotlight on Tehran’s involvement in violent extremism in the region.

The US Treasury department specifically designated Faisal Jassim Mohammed Al-Amri Al-Khalidi, Yisra Muhammad Ibrahim Bayumi, and Abu Bakr Muhammad Muhammad Ghumayn as “Specially Designated Global Terrorists,” according to their findings published last week.

“Today’s action sanctions senior al-Qaeda operatives responsible for moving money and weapons across the Middle East,” Adam J. Szubin, Acting Under Secretary for Terrorism and Financial Intelligence, said in a statement.

Related reading: But John Kerry, Iran Does Support al Qaeda

“The Treasury remains committed to targeting al-Qaeda’s terrorist activity and denying al-Qaeda and its critical support networks access to the international financial system.”

Infographic: Extremists with a presence in Iran. (Al Arabiya English)

Al-Khalidi is a senior al-Qaeda official who was an emir of a brigade and part of a new generation of al-Qaida operatives, according to the US Treasury report. In May 2015, as al-Qaeda Military Commission Chief, he participated in an annual council meeting with other al-Qaeda commanders to discuss weapons acquisition.

As of 2011, al-Khalidi was responsible for liaising between al-Qaeda associates and al-Qaeda Central Shura members and leaders within the US-designated terrorist group Tehrik-e Taliban Pakistan.

The US also designated Bayumi for acting for or on behalf of al-Qaeda. He is a veteran al-Qaeda member who has been located in Iran since 2014 and a member of al-Qaeda since at least 2006.

Related reading: The PR and Resurgence of al Qaeda

As of mid-2015, Bayumi was reportedly involved in freeing al-Qaeda members in Iran. As of early 2015, he served as a mediator with Iranian authorities.

The third named operative, Ghumayn, is a senior leader who has served in several financial, communications, and logistical roles for the group. As of 2015, Ghumayn assumed control of the financing and organization of al-Qaeda members located in Iran.

On Tuesday, Iran denied the claims by Washington that the three senior al-Qaeda figures are based in the country, the official IRNA news agency reported.

Related reading: Palestinian Terrorism: No Different Than ISIS and Al Qaeda

Foreign Ministry spokesman Bahram Ghasemi was quoted as saying that Iran doesn’t have “any information about their presence on its soil.”

Revealing more Iran links

The recent sanctions come on the heels of documents leaked in March that reveal the level of ties between al-Qaeda and Iran, particularly on the situation in Iraq where the two sides allegedly sought to reach a deal.

One of those leaked documents was a letter written by an al-Qaeda operative in which he tells a fellow operative named Taqfik that he had met with someone in Tehran and that the Iranians wanted to build contacts with someone representing the “mayor,” a codename for former al-Qaeda Chief Osama bin Laden.

The trove of letters also revealed Bin Laden ordered his al-Qaeda deputies not to attack Iran, which he called a “main artery” for his organization’s operations.

The order was part of a collection of 112 letters taken from bin Laden’s compound by US special ops forces after he was killed in 2011.

Those documents also revealed further names of operatives with links to Iran:

Abu Hafs the Mauritanian

Status: Returned to Mauritania in 2012

He was Bin Laden’s religious adviser and al-Qaeda in Iran’s expert on Islamic law. His official name is Mahfouz Ould al-Walid.

Abu al-Kayr al-Masri

Status: Presumed to have at one point been in Iran. Released in prisoner exchange with al-Qaeda in 2015. Whereabouts unknown

He was the Chairman of al-Qaeda’s Management Council and former chief of foreign relations for al-Qaeda, including liaison to the Taliban. He is reported to have long-standing ties to current al-Qaeda leader Ayman al-Zawahiri.

Saif al-Adel

Status: Presumed to have at one point been in Iran. Released in prisoner exchange with al-Qaeda in 2015. Whereabouts unknown

He was a member of al-Qaeda’s Management Council and was involved in planning operations and directing al-Qaeda propaganda efforts. He was a former chief of military operations and worked closely with Abu Muhammad al-Masri. There is currently a $5mln reward for information leading to his capture.

Abu Muhammad al-Masri

Status: Presumed to be in Iran. Released in prisoner exchange with al-Qaeda in 2015. Whereabouts unknown

He was a member of al-Qaeda’s Management Council and is considered the “most experienced and capable operational planner” not in US or allied custody. He is former chief of training and worked closely with Saif al-Adel. $5 million reward for information leading to his capture.

Sulaiman Abu Ghaith

Status: He was captured and tried in US federal court in New York. Sentenced to life in prison.

He was a member of al-Qaeda’s Management Council and official spokesman for al-Qaeda before detention

Abu Dahhak, aka Ali Saleh Husain al-Tabuki

Status: Presumed to have at one point been in Iran

He is an al-Qaeda facilitator and former representative of Chechen mujahideen in Afghanistan

Abu Layth al-Libi, aka Ali Ammar Ashur al-Rufayi’l

Status: Killed in US drone strike

He was a paramilitary commander and active in Eastern Afghanistan and Pakistan-Afghanistan border region. He is said to exercise significant autonomy and enjoys long-standing ties to senior managers.

Abd al-Aziz al-Masri, aka Ali Sayed Muhammad Mustafa Al-Bakri

Status: Presumed to have at one point been in Iran

Al-Qaeda associate; senior poisons and explosives expert; involved in nuclear research since late 1990s; had close relationships with Saif al-Adel and Khalid Sheik Muhammad.

Abu Dujana al-Masri

Status: Presumed to have at one point been in Iran

Explosives instructor before detention. He was a member of Egyptian Islamic Jihad and is Zawahiri’s son-in-law

Muhammad Ahmad Shawqi al-Islambuli, aka Muhammad Ahmad Shawqi Islambouli

Status: Presumed to have at one point been in Iran

He was an al-Qaeda facilitator and senior member of Egyptian Al-Gamaat Al-Islamiyah. Has former ties to Iranian Ministry of Intelligence and is the brother of Anwar Sadat assassin Khalid al Islambuli.

Thirwat Shihata

Status: Has left Iran. Believed to have traveled to Libya

He is a former Zawahiri deputy and experienced operational planner. Considered as a respected among al-Qaeda rank and file with previous ties to Zarqawi.

Khalid al-Sudani

Status: Presumed to be in Pakistan, Jordan or Iran

Member of the al-Qaeda Shura Council.

Qassim al-Suri aka Yasin Baqush

Status: Presumed to have at one point been in Iran

Provides communications link between al-Qaeda leaders in Waziristan, Pakistan, and Iraq. Planning, coordinating attack plots in Europe with several al-Qaeda and al-Qaeda-affiliated cells. There is a $10mln reward for information leading to his capture

Ali Mujahid Tekushir

Status: Presumed to have at one point been in Iran

Provides explosives, computer and Internet training to al-Qaeda recruits. Facilitates movement of senior-level extremists from Iran into Iraq. Reports link him to plots against the New York subway system in December 2005.

Abu Talha Hamza al-Baluchi

Status: Presumed to have at one point been in Iran

Iran-based al-Qaeda facilitator

Jafar al Uzbeki, aka Jafar the Uzbek

Status: Presumed to have at one point been in Iran

Representative of al-Qaeda senior leadership working to negotiate the release of al-Qaeda members held by Iran

Anas al Liby, aka Abu Anas al-Libi

Status: Captured by US commandos in Libya but died of liver cancer before he was able to stand trial in federal court in New York

Believed to have been involved in the 1998 East Africa bombings; senior member of al-Qaeda; member of Libyan Islamic Fighting Group security committee

The Games of Russia and the IRGC, that Kidnapped our Sailors

Seems the importance of NATO becomes more important, right? Read on for more convincing detail.

The tournament is set to begin on August 1 in several cities in Russia and Kazakhstan and will run through August 14.

رزمایش بیت المقدس در اصفهان

 

 

 

 

 

 

 

 

 

 

 

Last year’s competitors included Russia, Angola, Armenia, Belarus, China, Egypt, India, Kuwait, Kyrgyzstan, Mongolia, Nicaragua, Pakistan, Serbia, Tajikistan and Venezuela.

According to the rules of the games, each team has the use of four tanks and must employ military tactics and navigation to outmaneuver teams from the other nations. The racing course is usually about 20 kilometers long and is provided with obstacles, including fire, and gunnery exercises. More here.

Iran‘s Army and forces attending International Army Games in .
Iran sends 7 teams to Russia for intl. military tournament

TEHRAN, Jul. 23 (MNA) – Seven military teams from Iran’s Armed Forces have been dispatched to Russia to participate in the annual World Tank Biathlon in Moscow in August.

The seven teams which include tank biathlon, airborne and seaborne attack, as well as shooting and diving, comprises 204 highly qualified military forces from the Army, IRGC, Law Enforcement and Basij.

The International Army Games is welcoming 17 nations to participate in 7 categories in Russia and Kazakhstan.

The tournament is set to begin on August 1 in several cities in Russia and Kazakhstan and will run through August 14.

Last year’s competitors included Russia, Angola, Armenia, Belarus, China, Egypt, India, Kuwait, Kyrgyzstan, Mongolia, Nicaragua, Pakistan, Serbia, Tajikistan and Venezuela.

According to the rules of the games, each team has the use of four tanks and must employ military tactics and navigation to outmaneuver teams from the other nations. The racing course is usually about 20 kilometers long and is provided with obstacles, including fire, and gunnery exercises.  ****

Representatives of Azerbaijan’s armed forces will attend the International Army Games 2016 to be held in the Russian Federation from July 30 to August 13, Azertac writes.

The Azerbaijani servicemen will take part in the “Caspian Sea Cup-2016” and “Tank biathlon – 2016” events.

More photos here.

Back in April, the IRGC was quite busy as well.

IRGC Ground Force Airborne Unit Takes Lead in War Game

بالگرد ارتش

TEHRAN (Tasnim) – The Islamic Revolution Guards Corps (IRGC) Ground Force Airborne Unit, which has been founded recently, took an active role in the first day of massive military exercises in southeast Iran.

The Airborne Unit flew its Mil Mi-17 and Bell-208 helicopters in a heliborne operation to deploy combat forces to the rear of the hypothetical enemy’s front. The Cobra choppers also hit targets with rockets.

Codenamed Payambar-e Azam (The Great Prophet), the war game will last for three days in the regions of Saravan, Mirjaveh and Zahedan, in Sistan and Balouchestan province.

The IRGC Special Forces have also taken part in the drill.

Forces attending the war game also practiced hostage rescue operation on Tuesday morning, with the ground troops using T-72 tanks and BMP-2 personnel carriers to launch an attack against the mock enemy.

While the 23-mm cannons have been utilized for air defense, the homegrown drones ‘Sadeq’ and ‘Shahed-129’ were also flown over the drill zone for reconnaissance and aerial operations.

 

According to IRGC Ground Force Commander Brigadier General Mohammad Pakpour, the purpose of the drill is maintaining preparedness for battle, displaying the power of forces and ensuring security in the region with reliance on the local residents.

Lying in a deserted region, the province of Sistan and Balouchestan borders Afghanistan and Pakistan.

Since a couple of years ago, the IRGC has employed a strategy to get advantage of the local forces to ensure regional security in the face of narcotics trafficking or the entry of terrorists and outlaws.

 

 

Hey FBI, the Investigation into the DNC Hacking is Over Here

Anyone ever see that Jack Ryan movie ‘Shadow Recruit’? It is playing out in a more nefarious form in real time.

May 2016: Director of National Intelligence James Clapper said today that presidential campaigns are a target for cyber intruders and that this political season has already seen some attempted hacks.

“We have already had some indications of that,” he said in response to a question about campaign website hacking, after speaking at the Center for Bipartisan Policy in Washington, D.C.

“I anticipate as the campaigns intensify, we will probably have more of it,” he added. He did not provide specifics about any attacks, but it has been reported that some hacking groups, such as Anonymous, have threatened to launch “total war” against Donald Trump‘s presidential campaign. Read more from ABC here.

Related reading: Clinton Foundation Said to Be Breached by Russian Hackers 

**** So –>> Director of National Intelligence James Clapper says the FBI is helping campaigns tighten up to protect against the threat and how has that worked out so far?

*****

Via ThreatConnect: In our initial Guccifer 2.0 analysis, ThreatConnect highlighted technical and non-technical inconsistencies in the purported DNC hacker’s story as well as a curious theme of French “connections” surrounding various Guccifer 2.0 interactions with the media. We called out these connections as they overlapped, albeit minimally, with FANCY BEAR infrastructure identified in CrowdStrike’s DNC report.

Now, after further investigation, we can confirm that Guccifer 2.0 is using the Russia-based Elite VPN service to communicate and leak documents directly with the media. We reached this conclusion by analyzing the infrastructure associated with an email exchange with Guccifer 2.0 shared with ThreatConnect by Vocativ’s Senior Privacy and Security reporter Kevin Collier. This discovery strengthens our ongoing assessment that Guccifer 2.0 is a Russian propaganda effort and not an independent actor.

Analyzing the Headers from Guccifer 2.0 Emails

On June 21, 2016, TheSmokingGun reported they communicated with Guccifer 2.0 via a French AOL account. We examined the French language settings observed in Guccifer 2.0’s Twitter metadata as well as a pattern of Twitter follows that suggested Guccifer 2.0’s account was created from a French IP address. We hypothesized at the time that Guccifer 2.0 might be using French infrastructure to interact with the media.

During the Email Import process ThreatConnect analyzes an email message header and highlights indicators of interest with a color code that reveals if the indicators already exist within the platform. This helps overburdened eyes or greenhorn analysts quickly understand what they are seeing. At the same time ThreatConnect excludes legitimate or benign details that are not of value to our investigation.

ThreatConnect Research Guccifer 2.0: All Roads Lead to Russia 1

As we can see here within ThreatConnect, Guccifer 2.0’s AOL email message reveals the originating IP address as 95.130.15[.]34 (DigiCube SaS – France). This is the IP address of the host which authenticated into AOL’s web user interface and sent the email. We can also tell this IP was not spoofed because the metadata was added by AOL when sent from within their infrastructure with appropriate DomainKeys Identified Mail (DKIM) configurations.

The fact that Guccifer 2.0 is indeed leveraging a French AOL account stands out from a technical perspective. Very few hackers with Guccifer 2.0’s self-acclaimed skills would use a free webmail service that would give away a useful indicator like the originating IP address. Most seasoned security professionals will be familiar with email providers that are more likely to cooperate with law enforcement and how much metadata a provider might reveal about their users. Taken together with inconsistencies in Guccifer 2.0’s remarks that make his technical claims sound implausible, this detail makes us think the individual(s) operating the AOL account are not really hackers or even that technically savvy. Instead, propagandist or public relations individuals who are interacting with journalists.

Drilling into Guccifer 2.0 Infrastructure: Picture of a VPN Starts to Emerge

As we focused in on IP Address 95.130.15[.]34 we queried public sources such as Shodan as well as Censys to discover what services might be enabled on this host. The goal of this was to better understand if this infrastructure is owned and operated, leased or co-opted by Guccifer 2.0 and how the infrastructure might be used to create space between an originating “source” network and investigators, or curious journalists.

ThreatConnect Research Guccifer 2.0: All Roads Lead to Russia 2According to Shodan, OpenSSH (TCP/22), DNS (UDP/53) and Point-to-Point Tunneling Protocol (PPTP) (TCP/1723) services have been enabled on this host. Secure shell (SSH) and point-to-point tunneling protocol services strongly suggest a VPN and/or a proxy, both of which would allow the Guccifer 2.0 persona to put distance between his originating network and those with whom he is communicating.

The SSH fingerprint can be used as an identifier, linking other IP addresses that use the same SSH encryption key. The SSH fingerprint for 95.130.15[.]34 (DigiCube SaS – France) is Fingerprint: 80:19:eb:c8:80:a1:c6:ea:ea:37:ba:c0:26:c6:7f:61. Searching for other servers that share this fingerprint at the time of writing, we discovered six additional IP Addresses over the course of our research (95.130.9[.]198; 95.130.15[.]36; 95.130.15[.]37; 95.130.15[.]38; 95.130.15[.]40;  95.130.15[.]41).

Each IP address falls within the 95.130.8.0/21 network range. This range is assigned to Digicube SAS, a French hosting provider which is assigned the Autonomous System AS196689. An IP address is analogous to the apartment numbers in an apartment building. The entire building is owned and operated by AS196689, but certain IP addresses may be let out to other companies and organizations.

ThreatConnect Research Guccifer 2.0: All Roads Lead to Russia fingerprint

The fact that Guccifer 2.0 would use a proxy service is not surprising, and our first stop was to check with various TOR proxy registration sites. None of these seven IP addresses are part of reported TOR infrastructure from what we were able to uncover. Read the full comprehensive detailed cyber investigation as published here by ThreatConnect.

*****

Meanwhile: FAS: The headquarters complex of the Foreign Intelligence Service (SVR) of the Russian Federation has expanded dramatically over the past decade, a review of open source imagery reveals.

Since 2007, several large new buildings have been added to SVR headquarters, increasing its floor space by a factor of two or more. Nearby parking capacity appears to have quadrupled, more or less.

The compilation of open source imagery was prepared by Allen Thomson. See Expansion of Russian Foreign Intelligence Service HQ (SVR; Former KGB First Main Directorate) Between 2007 and 2016, as of July 11, 2016.

Whether the expansion of SVR headquarters corresponds to changes in the Service’s mission, organizational structure or budget could not immediately be learned.

Russian journalist and author Andrei Soldatov, who runs the Agentura.ru website on Russian security services, noted that the expansion “coincides with the appointment of the current SVR director, Mikhail Fradkov, in 2007.” He recalled that when President Putin introduced Fradkov to Service personnel, he said that the SVR should endeavor to help Russian corporations abroad, perhaps indicating a new mission emphasis.

Russian intel buildings Russian intel from airPhotos courtesy of FAS