US Treasury’s Evidence Iran and Russia Cooperating in Syria

The U.S. Treasury Department sanctioned nine targets last week related to an illicit oil network between Iran and Russia.

“We are acting against a complex scheme Iran and Russia have used to bolster the [Bashar] Assad regime and generate funds for Iranian malign activity,” said Treasury Secretary Steven Mnuchin. “Central Bank of Iran officials continue to exploit the international financial system, and in this case even used a company whose name suggests a trade in humanitarian goods as a tool to facilitate financial transfers supporting this oil scheme.

“The United States is committed to imposing a financial toll on Iran, Russia and others for their efforts to solidify Assad’s authoritarian rule, as well as disrupt the Iranian regime’s funding of terrorist organizations,” he added.

Experts said this move was crucial in combating the Iranian threat.

“The scheme uncovered by the Treasury Department shows just how closely Iran and Russia are cooperating to not only help prop up the Assad regime financially, but to help finance the leading players in Iran’s global terrorism,” Boris Zilberman of the Foundation for Defense of Democracies told JNS. “So when Russia talks about cooperating with the United States to counter-terrorism this is empty rhetoric plain and simple.”

“As this scheme shows, Russia works hand in hand with some of the very terror groups we seek to counter,” he continued. “Russia is not a partner in our counter-terrorism efforts, but is, in fact, an adversary.”

“There are already sanctions on Russian arms exporters, but the United States should continue to uncover and sanction schemes such as this,” added Zilberman. “The administration could also consider, in conjunction with Israel, striking destabilizing arms transfers by Hezbollah.

“It’s an important step, and highlights just how much [Russian President Vladimir] Putin has supported Iran, Hezbollah and Assad, and how committed he is, despite hopes that Putin’s partnership with Iran is skin-deep short-lived,” the Washington Institute for Near East Policy’s Anna Borshchevskaya told JNS.

“Hard to tell if this pressure will succeed without being incorporated into a broader strategy,” she continued. “It comes as no surprise that the Kremlin said earlier this month it will continue to help Iran trade oil. It’s possible to imagine Moscow setting up another intermediary to continue shipping oil to the Syrian regime, but nonetheless, this is an important step.”

The State Department joined Treasury in sending a message to the Islamic Republic.

Islamic State crisis: US hits IS oil targets in Syria ...

“The sanctions levied today directly target the Iranian regime’s exploitation of the international financial system to hide revenue streams it uses to fund terrorist activity, provide support for sectarian militias responsible for abuses against civilian populations and destabilize the region,” said the department in a statement. “The Iranian regime, Iranian-commanded forces inside Syria and the proxy terrorist groups it supports such as those targeted today continue to foment instability to extend their malign influence. These actions by the Iranian and Assad regimes undermine the legitimate processes to resolve the conflict in Syria.”

This development preceded Secretary of State Pompeo blasting Iranian President Hassan Rouhani on Monday for calling Israel a “cancerous tumor” and a “fake regime.”

“This is a dangerous and irresponsible step that will further deepen Iran’s isolation,” warned Pompeo.

“The Iranian regime is no friend of America or Israel when they repeatedly call for the death of millions, including Muslims,” he added. “The Iranian people know better and do not agree with their government, which has badly represented them to the world for 39 years. The people have suffered under this tyranny for far too long.”

*** It is quite right that Iran is no friend of the United States or Israel. That Obama/Kerry nuclear deal was supposed to lay the groundwork for Iran to be a good citizen of the world….read on…not so much.

***

Two Iranian Men Indicted for Deploying Ransomware to Extort Hospitals, Municipalities, and Public Institutions, Causing Over $30 Million in Losses

A federal grand jury returned an indictment unsealed today in Newark, New Jersey charging Faramarz Shahi Savandi, 34, and Mohammad Mehdi Shah Mansouri, 27, both of Iran, in a 34-month-long international computer hacking and extortion scheme involving the deployment of sophisticated ransomware, announced Deputy Attorney General Rod J. Rosenstein, Assistant Attorney General Brian A. Benczkowski of the Justice Department’s Criminal Division, U.S. Attorney Craig Carpenito for the District of New Jersey and Executive Assistant Director Amy S. Hess of the FBI.

The six-count indictment alleges that Savandi and Mansouri, acting from inside Iran, authored malware, known as “SamSam Ransomware,” capable of forcibly encrypting data on the computers of victims.  According to the indictment, beginning in December 2015, Savandi and Mansouri would then allegedly access the computers of victim entities without authorization through security vulnerabilities, and install and execute the SamSam Ransomware on the computers, resulting in the encryption of data on the victims’ computers.  These more than 200 victims included hospitals, municipalities, and public institutions, according to the indictment, including the City of Atlanta, Georgia; the City of Newark, New Jersey; the Port of San Diego, California; the Colorado Department of Transportation; the University of Calgary in Calgary, Alberta, Canada; and six health care-related entities: Hollywood Presbyterian Medical Center in Los Angeles, California; Kansas Heart Hospital in Wichita, Kansas; Laboratory Corporation of America Holdings, more commonly known as LabCorp, headquartered in Burlington, North Carolina; MedStar Health, headquartered in Columbia, Maryland; Nebraska Orthopedic Hospital now known as OrthoNebraska Hospital, in Omaha, Nebraska and Allscripts Healthcare Solutions Inc., headquartered in Chicago, Illinois.

According to the indictment, Savandi and Mansouri would then extort victim entities by demanding a ransom paid in the virtual currency Bitcoin in exchange for decryption keys for the encrypted data, collecting ransom payments from victim entities that paid the ransom, and exchanging the Bitcoin proceeds into Iranian rial using Iran-based Bitcoin exchangers.  The indictment alleges that, as a result of their conduct, Savandi and Mansouri have collected over $6 million USD in ransom payments to date, and caused over $30 million USD in losses to victims.

“The Iranian defendants allegedly used hacking and malware to cause more than $30 million in losses to more than 200 victims,” said Deputy Attorney General Rosenstein.  “According to the indictment, the hackers infiltrated computer systems in 10 states and Canada and then demanded payment. The criminal activity harmed state agencies, city governments, hospitals, and countless innocent victims.”

“The allegations in the indictment unsealed today—the first of its kind—outline an Iran-based international computer hacking and extortion scheme that engaged in 21st-century digital blackmail,” said Assistant Attorney General Benczkowski.  “These defendants allegedly used ransomware to infect the computer networks of municipalities, hospitals, and other key public institutions, locking out the computer owners, and then demanded millions of dollars in payments from them. As today’s charges demonstrate, the Criminal Division and its law enforcement partners will relentlessly pursue cybercriminals who harm American citizens, businesses, and institutions, regardless of where those criminals may reside.”

“The defendants in this case developed and deployed the SamSam Ransomware in order to hold public and private entities hostage and then extort money from them,” said U.S. Attorney Carpenito.  “As the indictment in this case details, they started with a business in Mercer County and then moved on to major public entities, like the City of Newark, and healthcare providers, like the Hollywood Presbyterian Medical Center in Los Angeles and the Kansas Heart Hospital in Wichita—cravenly taking advantage of the fact that these victims depend on their computer networks to serve the public, the sick, and the injured without interruption.  The charges announced today show that the U.S. Attorney’s Office for the District of New Jersey will continue to act to disrupt such criminal acts, and identify those who are responsible for them, no matter where in the world they may seek to hide.”

“This indictment demonstrates the FBI’s continuous commitment to unmasking malicious actors behind the world’s most egregious cyberattacks,” said Executive Assistant Director Hess.  “By calling out those who threaten American systems, we expose criminals who hide behind their computer and launch attacks that threaten our public safety and national security.  The actions highlighted today, which represent a continuing trend of cyber criminal activity emanating from Iran, were particularly threatening, as they targeted public safety institutions, including U.S. hospital systems and governmental entities.  The FBI, with the assistance of our private sector and U.S. government partners, are sending a strong message that we will work together to investigate and hold all criminals accountable.”

Savandi and Mansouri are charged with one count of conspiracy to commit wire fraud, one count of conspiracy to commit fraud and related activity in connection with computers, two substantive counts of intentional damage to a protected computer and two substantive counts of transmitting a demand in relation to damaging a protected computer.

According to the indictment, Savandi and Mansouri created the first version of the SamSam Ransomware in December 2015, and created further refined versions in June and October 2017.  In addition to employing Iran-based Bitcoin exchangers, the indictment alleges that the defendants also utilized overseas computer infrastructure to commit their attacks.   Savandi and Mansouri would also use sophisticated online reconnaissance techniques (such as scanning for computer network vulnerabilities) and conduct online research in order to select and target potential victims, according to the indictment.  According to the indictment, the defendants would also disguise their attacks to appear like legitimate network activity.

To carry out their scheme, the indictment alleges that the defendants also employed the use of Tor, a computer network designed to facilitate anonymous communication over the internet.  According to the indictment, the defendants maximized the damage caused to victims by launching attacks outside regular business hours, when a victim would find it more difficult to mitigate the attack, and by encrypting backups of the victims’ computers.  This was intended to—and often did—cripple the regular business operations of the victims, according to the indictment.  The most recent ransomware attack against a victim alleged in the indictment took place on Sept. 25, 2018.

This case was investigated by the FBI’s Newark Field Office.  Senior Counsel William A. Hall Jr. of the Criminal Division’s Computer Crime and Intellectual Property Section (CCIPS) and Assistant U.S. Attorney and Chief of the Cybercrimes Unit Justin S. Herring of the District of New Jersey are prosecuting the case.  The Department thanks its law enforcement colleagues at the National Crime Agency (UK), West Yorkshire Police (UK), Calgary Police Service (Canada), and the Royal Canadian Mounted Police.  Significant assistance was provided by the Justice Department’s National Security Division and the Criminal Division’s Office of International Affairs.

Salafi Jihadists, More Today than Ever

Despite the Islamic State’s loss of territory in Iraq and Syria, an increasingly diffuse Salafi-jihadist movement is far from defeated.

This report constructs a data set of groups and fighters from 1980 to 2018, including from the Islamic State and al-Qaeda. It finds that the number of Salafi-jihadists in 2018 declined somewhat from a high in 2016, but is still at near-peak levels since 1980.

What Is Religious Fundamentalism? - WorldAtlas.com

The regions with the largest number of fighters are Syria (between 43,650 and 70,550 fighters), Afghanistan (between 27,000 and 64,060), Paki­stan (between 17,900 and 39,540), Iraq (between 10,000 and 15,000), Nigeria (between 3,450 and 6,900), and Somalia (between 3,095 and 7,240). Attack data indicates that there are still high lev­els of violence in Syria and Iraq from Salafi-jihad­ist groups, along with significant violence in such countries and regions as Yemen, the Sahel, Nigeria, Afghan­istan, and So­malia.

These findings suggest that there is a large pool of Salafi-jihadist and allied fighters willing and able to use violence to achieve their goals. Every U.S. president since 9/11 has tried to move away from counterterrorism in some capacity, and it is no different today. Balancing national secu­rity priorities in today’s world needs to happen grad­ually.

For the United States, the challenge is not that U.S. officials are devoting attention and resources to dealing with state adversaries like Russia, China, Iran, and North Korea. These countries present legitimate threats to the United States at home and abroad. Rath­er, the mistake would be declaring victory over ter­rorism too quickly and, as a result, shifting too many resources and too much attention away from terrorist groups when the threat remains significant.

Click here to read report.

Developing national security is more an art than a science, especially when trying to prioritize among a range of important issues. A high school student experimenting with weights on a scale finds that taking off mass from one side too quickly—or adding too
much mass to the other side—will cause the scale to lose its balance. Indeed, balancing U.S. national security priorities in today’s world needs to happen gradu-
ally. The challenge is not that U.S. officials are devoting attention to deal with state adversaries like Russia, China, Iran, and North Korea. These countries present
legitimate threats to the United States at home and abroad. Rather, the mistake would be declaring victory too quickly against terrorism—and then shifting too many resources and too much attention away when the threat remains significant. A significant withdrawal of U.S. special operations forces, intelligence operatives, intelligence resources, and development and diplomatic experts for counterterrorism in key areas of Africa, the Middle East, and South Asia would be unnecessarily risky.

400 Left the Caravan and Arrive in Tijuana

Defense Secretary Mattis will spend Wednesday visiting the border. Customs and Border Patrol said it will close lanes at the San Ysidron and Otay Mesa crossing to allow the Department of Defense to install barbed wire and position barricades and fencing in the Tijuana region of Baja, California.

The lead or first caravan is expected to arrive in an estimated two weeks with at least three other caravans are making progress heading north in Mexico. More details here.

Meanwhile, Ami Horowitz who is an onsite investigative journalist is traveling with and reporting on the real facts of the caravan. Horowitz has a vast resume of these kinds of investigations on his resume that include corruption at the United Nations and he also travel by boat with Syrian refugees arriving in Greece.

During this adventure by Ami Horowitz he found the following facts:

90-95% are males in the caravan.

There is a substantial logistical transportation operation aiding the migrants with trucks and buses.

Food, water, shelter, medicine, mobile hospitals, doctors and nurses are at each base camp along the way.

Mexican police are often found escorting the caravan.

Mexico is actively working with the United Nations High Commission for Refugees and with UNICEF per the UN contact named Maria Rudi.

It is admitted there are violent and gang member people within the caravan. It takes work to keep them separated from the other members of the caravan daily.

The largest support comes from Pueblo sin Fronteras. This organization has hundreds of volunteers traveling with the caravan as noted in the video. The volunteers hold countless learning sessions with the migrants to teach them about applying for asylum, what a refugees and what their rights are according to U.S. law. United Nations workers are also traveling with the caravan and they along with the Pueblo Sin Fronteras wear vests noting who they are and some also wear badges.

Pueblo sin Fronteras has been reaching out to immigrants and migrants for more than 15 years aiding them to the United States demanding their human rights.On their website they even have a graphic that reads Otay Mesa Detention Resistance for Los Angeles and San Diego.

The leader of Pueblo sin Fronteras is Irineo Mujico. From Phoenix, Mujico was arrested in southern Mexico in October in Cuidad Hidalgo. He was there not as a leader but more as a coordinator of humanitarian assistance. He has been released but he did forfeit documents under the demand of the Mexican police. Mujico is a dual citizen of the United States and Mexico.

This the Reason N Korea Cancelled the Meeting?

The excuses both sides explain scheduling conflicts. C’mon, lil Kim is not exactly that busy to take a meeting with America, right? As North and South Korea have begin to dismantle 20 guard posts along the DMZ. South Korea has 60 such positions while North Korea has an estimated 160. Allegedly, all firearms have been already removed from the guard posts. Personnel is still there but it is said they are unarmed.

Back to that cancelled meeting….

 A satellite image of a secret North Korean ballistic missile base. The North has offered to dismantle a different major missile launching site while continuing to make improvements at more than a dozen others.CreditCreditCSIS/Beyond Parallel, via DigitalGlobe 2018

More detail is explained here.

What is the reason then? Missile sites….hummm

North Korea are still operating undeclared missile bases and even improving some of their missile sites instead of shutting them down.

The latest report from the Center for Strategic and International Studies in Washington said it had identified 13 of an estimated 20 secret missile operating bases inside North Korea.

They could be used to house ballistic missiles of various ranges, with the largest believed to be capable of striking anywhere in the United States.

The report, written by researcher Joseph Bermudez, said maintenance and minor infrastructure improvements have been observed at some of the sites.

The sites identified in the report are scattered in remote, mountainous areas across North Korea.

It even identified improvements being made to its Sakkanmol site, close to the border with South Korea.

President Trump is still hoping to persuade Pyongyang to give up its nuclear weapons and long-range missiles.

The North Korean leader Kim Jong Un and U.S. President Donald Trump pledged to work towards ‘denuclearization’ at their landmark June summit in Singapore.

Shortly after the summit, Trump tweeted that there was no longer a nuclear threat from North Korea.

North Korea declared its nuclear force ‘complete’ and halted missile and nuclear bomb testing earlier this year.

North Korea has said it has closed its Punggye-ri nuclear testing site and the Sohae missile engine test facility.

It also raised the possibility of shuttering more sites and allowing international inspections if Washington took ‘corresponding measures’.

Last week, North Korea called off a meeting with U.S. Secretary of State Mike Pompeo in New York.

The country’s state media said on Monday the resumption of some small-scale military drills by South Korea and the United States violated a recent agreement aimed at lowering tensions on the Korean peninsula.

‘Missile operating bases are not launch facilities,’ Bermudez wrote.

‘While missiles could be launched from within them in an emergency, Korean People’s Army (KPA) operational procedures call for missile launchers to disperse from the bases to pre-surveyed or semi-prepared launch sites for operations.’

None of the missile bases have been acknowledged by North Korea, and analysts say an accurate disclosure of nuclear weapons and missile capabilities would be an important part of any denuclearization deal.

 

A Few More Details on Khashoggi vs. KSA

MURDERED journalist Jamal Khashoggi was about to disclose details of Saudi Arabia’s use of chemical weapons in Yemen, sources close to him said last night. The revelations come as separate intelligence sources disclosed that Britain had first been made aware of a plot a full three weeks before he walked into the Saudi consulate in Istanbul.

Intercepts by GCHQ of internal communications by the kingdom’s General Intelligence Directorate revealed orders by a “member of the royal circle” to abduct the troublesome journalist and take him back to Saudi Arabia.

The orders, intelligence sources say, did not emanate directly from de facto ruler Crown Prince Mohammad bin Salman, and it is not known if he was aware of them.

Though they commanded that Khashoggi should be abducted and taken back to Riyadh, they “left the door open” for other actions should the journalist prove to be troublesome, sources said.

Last week Saudi Arabia’s Attorney General confirmed that the murder had been premeditated – – in contrast to initial official explanations that Khashoggi had been killed after a fight broke out.

“The suspects in the incident had committed their act with a premeditated intention,” he said.

“The Public Prosecution continues its investigations with the accused in the light of what it has received and the results of its investigations to reach facts and complete the course of justice.”

Those suspects are within a 15-strong hit squad sent to Turkey, and include serving members of GID.

Speaking last night the intelligence source told the Sunday Express: “We were initially made aware that something was going in the first week of September, around three weeks before Mr Khashoggi walked into the consulate on October 2, though it took more time for other details to emerge.

“These details included primary orders to capture Mr Khashoggi and bring him back to Saudi Arabia for questioning. However, the door seemed to be left open for alternative remedies to what was seen as a big problem.

“We know the orders came from a member of the royal circle but have no direct information to link them to Crown Prince Mohammad bin Salman.

“Whether this meant he was not the original issuer we cannot say.”

Crucially, the highly-placed source confirms that MI6 had warned his Saudi Arabian counterparts to cancel the mission – though this request as ignored.

“On October 1 we became aware of the movement of a group, which included members of Ri’āsat Al-Istikhbārāt Al-‘Āmah (GID) to Istanbul, and it was pretty clear what their aim was.

“Through channels we warned that this was not a good idea. Subsequent events show that our warning was ignored.”

Asked why MI6 had not alerted its Five Eye intelligence partner, the US (Khashoggi was a US citizen) the source said only: “A decision was taken that we’d done what we could.”

However analysts offered one possible explanation for this.

“The misleading image that has been created of Jamal Khashoggi covers up more than it reveals. As an insider to the Saudi regime, Khashoggi had also been close to the former head of the intelligence agency.He was an Islamist, a member of the Muslim Brotherhood, and someone who befriended Osama Bin Laden and had been sympathetic to his Jihad in Afghanistan,” said Tom Wilson, of the Henry Jackson Society think-tank.

“All of these connections are being hidden by a simplistic narrative that Jamal Khashoggi was just a progressive freedom fighting journalist. It isn’t plausible that he was murdered simply for being a journalist critical of the regime. The truth is much more complicated.”

Last night a close friend of Mr Khashoggi revealed that he was about to obtain “documentary evidence” proving clams that Saudi Arabia had used chemical weapons in its proxy war in Yemen.

“I met him a week before his death. He was unhappy and he was worried,“ said the middle eastern academic, who did not wish to be named.

“When I asked him why he was worried, he didn’t really want to reply, but eventually he told me he was getting proof that Saudi Arabia had used chemical weapons. He said he hoped he be getting documentary evidence.

All I can tell you is that the next thing I heard, he was missing.”

While there have been recent unsubstantiated claims in Iran that Saudi Arabia has been supplying ingredients that can be used to produce the nerve agent Sarin in Yemen, it is more likely that Mr Khashoggi was referring to phospherous..

Last month it was claimed that Saudi Arabia had been using US-supplied white phosphorous munitions against troops and even civilians in Yemen,

Though regulations state the chemical may be used to provide smokescreens, if used illegally it can it burn to the bone.

Chemical warfare expert Col Hamish de Bretton-Gordon said: “We have already seen in Syria that nothing is as effective as chemical, weapons in clearing urban areas of troops and civilians – Assad has used phosphorous for this very reason.

“If Khashoggi did, in fact, have proof that Saudi Arabia was deliberately misusing phosphorous for this purpose, it would be highly embarrassing for the regime and provides the nearest motive yet as to why Riyadh may have acted when they did against him.”

***

Lawrence Wright, author of The Looming Tower: Al-Qaeda and the Road to 9/11, couldn’t have imagined one of the other characters in his book was going to be at the centre of a huge political and diplomatic controversy, no less than the book’s central character, namely Osama Bin Laden.

The book was adapted for television as a series with the same title and tells the story of Al-Qaeda’s infamous attacks on New York and Washington. In one paragraph, Wright mentions a close friend of Bin Laden’s who shared the latter’s ambition to “establish an Islamic state anywhere.” That friend was Jamal Khashoggi. Both Bin Laden and Khashoggi were at the time active members of the Muslim Brotherhood and later Bin Laden would split from the Brotherhood to form with Abdullah Azzam Al-Qaeda, the most dangerous organisation in the world. Khashoggi, Bin Laden, and Azzam, were all the merry companions of the same extremist group.

Today, the world is busy keeping up with the news of the disappearance of Jamal Khashoggi, journalist and Human Rights activist in Saudi Arabia, but very few know the man’s past and his affiliation with Al-Qaeda during the war in Afghanistan. He promoted Saudi Mujahedeen focusing on his friendship with Bin Laden.

Photos show Khashoggi wearing Afghani garb and shouldering a RBG rocket launcher

On May 4, 1988, the Saudi daily Arab News published a report by Jamal Khashoggi about his tour in Afghanistan in the company of Al-Qaeda operatives. Even though Khashoggi was just a journalist doing a report, the photos published with the article show him wearing Afghani garb and shouldering a RBG rocket launcher. More here.