More stories

  • in

    Biden to unveil Russia sanctions over SolarWinds hack and election meddling

    The US is set to announce new sanctions against Russia as soon as Thursday in retaliation for Moscow’s elections interference, alleged bounties on US soldiers in Afghanistan, and cyber-espionage campaigns such as the SolarWinds hack, according to reports in US and international media.Ten Russian diplomatic officials are to be expelled from the US and up to 30 entities will be blacklisted, officials said, in the largest sanctions action against Russia of Joe Biden’s presidency.Additionally, the White House may issue an executive order barring US financial institutions from purchasing rouble bonds issued by Russia’s government, targeting the country’s sovereign debt and its broader economy. That could begin as soon as June, according to some reports.Q&AWhat was the SolarWinds hack?ShowIn early 2020, malicious code was sneaked into updates to a popular piece of software called Orion, made in the US by the company SolarWinds, which monitors the computer networks of businesses and governments for outages.That malware gave hackers remote access to an organisation’s networks so they could steal information. Among the most high-profile users of the software were US government departments including the Centers for Disease Control and Prevention, the state department, and the justice department.Described by the Microsoft president, Brad Smith, as “the largest and most sophisticated attack the world has ever seen”, US intelligence agencies have accused Russia of launching the attack.SolarWinds, of Austin, Texas, provides network monitoring and other technical services to hundreds of thousands of organisations around the world, including most Fortune 500 companies and government agencies in North America, Europe, Asia and the Middle East.Its compromised product, Orion, is a centralised monitoring tool that looks for problems in an organisation’s computer network, which means that breaking in gave the attackers a “God view” of those networks.Neither SolarWinds nor US cybersecurity authorities have publicly identified which organisations were breached. Just because a company or agency uses SolarWinds as a vendor does not necessarily mean it was vulnerable to the hack.Kari Paul and Martin BelamUnnamed officials told the New York Times the new sanctions were meant to cut deeper than previous attempts to punish Moscow for its attacks on US institutions and allies. Some Russian officials have laughed off being added to the Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctions lists, comparing it to being elevated to an elite club. The threat of the ban on purchasing Russian debt has already depressed prices on the rouble and rouble-denominated OFZ treasury bonds.The sanctions will add tension to an already strained relationship between Russia and the US. Since last month, Moscow has been engaged in the largest troop buildup on its border with Ukraine since the 2014 annexation of Crimea, provoking fears of an invasion. Biden called Vladimir Putin on Tuesday to urge him to de-escalate tensions with Ukraine and proposed a summit in a third country. The Kremlin gave a frosty account of the telephone call, and did not say whether Putin had agreed to the meeting.Earlier this year, Biden had agreed with a reporter when asked if Putin was “a killer”. Those remarks were replayed widely on Russian television. Putin responded by wryly wishing Biden “good health”, which was seen as a nod to Biden’s age.The US president’s tough approach differs considerably from that of the Trump administration, which largely sought to avoid confronting Russia over a CIA assessment that Moscow had offered and paid bounties for foreign fighters to kill US troops in Afghanistan. Trump said he doubted the evidence behind the reports.He similarly sided with Putin over an FBI assessment that Russia had interfered in the 2016 elections during a summit in Helsinki two years later.The planned sanctions were said to be retaliation for Russian interference in the 2020 elections, during which US intelligence agencies concluded that the Kremlin had backed Trump over Biden.Sign up for the Guardian’s First Thing newsletterThe sanctions would also be a response to a massive and sophisticated cybersecurity breach against SolarWinds Corp that affected software used by US government agencies. The US has blamed Russia for the attack.Peskov this week said that “the hostility and unpredictability of America’s actions force us in general to be prepared for the worst scenarios”. More

  • in

    ‘The perfect target’: Russia cultivated Trump as asset for 40 years – ex-KGB spy

    Donald Trump was cultivated as a Russian asset over 40 years and proved so willing to parrot anti-western propaganda that there were celebrations in Moscow, a former KGB spy has told the Guardian.Yuri Shvets, posted to Washington by the Soviet Union in the 1980s, compares the former US president to “the Cambridge five”, the British spy ring that passed secrets to Moscow during the second world war and early cold war.Now 67, Shvets is a key source for American Kompromat, a new book by journalist Craig Unger, whose previous works include House of Trump, House of Putin. The book also explores the former president’s relationship with the disgraced financier Jeffrey Epstein.“This is an example where people were recruited when they were just students and then they rose to important positions; something like that was happening with Trump,” Shvets said by phone on Monday from his home in Virginia.Shvets, a KGB major, had a cover job as a correspondent in Washington for the Russian news agency Tass during the 1980s. He moved to the US permanently in 1993 and gained American citizenship. He works as a corporate security investigator and was a partner of Alexander Litvinenko, who was assassinated in London in 2006.Unger describes how Trump first appeared on the Russians’ radar in 1977 when he married his first wife, Ivana Zelnickova, a Czech model. Trump became the target of a spying operation overseen by Czechoslovakia’s intelligence service in cooperation with the KGB.Three years later Trump opened his first big property development, the Grand Hyatt New York hotel near Grand Central station. Trump bought 200 television sets for the hotel from Semyon Kislin, a Soviet émigré who co-owned Joy-Lud electronics on Fifth Avenue.According to Shvets, Joy-Lud was controlled by the KGB and Kislin worked as a so-called “spotter agent” who identified Trump, a young businessman on the rise, as a potential asset. Kislin denies that he had a relationship with the KGB.Then, in 1987, Trump and Ivana visited Moscow and St Petersburg for the first time. Shvets said he was fed by KGB talking points and flattered by KGB operatives who floated the idea that he should go into the politics.The ex-major recalled: “For the KGB, it was a charm offensive. They had collected a lot of information on his personality so they knew who he was personally. The feeling was that he was extremely vulnerable intellectually, and psychologically, and he was prone to flattery.“This is what they exploited. They played the game as if they were immensely impressed by his personality and believed this is the guy who should be the president of the United States one day: it is people like him who could change the world. They fed him these so-called active measures soundbites and it happened. So it was a big achievement for the KGB active measures at the time.”Soon after he returned to the US, Trump began exploring a run for the Republican nomination for president and even held a campaign rally in Portsmouth, New Hampshire. On 1 September, he took out a full-page advert in the New York Times, Washington Post and Boston Globe headlined: “There’s nothing wrong with America’s Foreign Defense Policy that a little backbone can’t cure.”The ad offered some highly unorthodox opinions in Ronald Reagan’s cold war America, accusing ally Japan of exploiting the US and expressing scepticism about US participation in Nato. It took the form of an open letter to the American people “on why America should stop paying to defend countries that can afford to defend themselves”.The bizarre intervention was cause for astonishment and jubilation in Russia. A few days later Shvets, who had returned home by now, was at the headquarters of the KGB’s first chief directorate in Yasenevo when he received a cable celebrating the ad as a successful “active measure” executed by a new KGB asset.“It was unprecedented. I am pretty well familiar with KGB active measures starting in the early 70s and 80s, and then afterwards with Russia active measures, and I haven’t heard anything like that or anything similar – until Trump became the president of this country – because it was just silly. It was hard to believe that somebody would publish it under his name and that it will impress real serious people in the west but it did and, finally, this guy became the president.”Trump’s election win in 2016 was again welcomed by Moscow. Special counsel Robert Mueller did not establish a conspiracy between members of the Trump campaign and the Russians. But the Moscow Project, an initiative of the Center for American Progress Action Fund, found the Trump campaign and transition team had at least 272 known contacts and at least 38 known meetings with Russia-linked operatives.Shvets, who has carried out his own investigation, said: “For me, the Mueller report was a big disappointment because people expected that it will be a thorough investigation of all ties between Trump and Moscow, when in fact what we got was an investigation of just crime-related issues. There were no counterintelligence aspects of the relationship between Trump and Moscow.”He added: “This is what basically we decided to correct. So I did my investigation and then got together with Craig. So we believe that his book will pick up where Mueller left off.”Unger, the author of seven books and a former contributing editor for Vanity Fair magazine, said of Trump: “He was an asset. It was not this grand, ingenious plan that we’re going to develop this guy and 40 years later he’ll be president. At the time it started, which was around 1980, the Russians were trying to recruit like crazy and going after dozens and dozens of people.”“Trump was the perfect target in a lot of ways: his vanity, narcissism made him a natural target to recruit. He was cultivated over a 40-year period, right up through his election.” More

  • in

    The Guardian view on Julian Assange's extradition ruling: relief, not victory | Editorial

    Donald Trump is using his last days in office to pardon those who do not deserve it. Among the most egregious recipients are the Blackwater security guards responsible for the Nisour Square massacre – the killing of unarmed civilians, including children, in Iraq. The president’s deplorable decision fits a pattern: just over a year ago, he pardoned a former army lieutenant found guilty of murder after ordering his men to fire at three Afghans, and a former US army commando facing trial over the killing of a suspected bombmaker.
    There has been no such mercy shown to a man whom the US is pursuing after he cast an unforgiving light on its abuses in Iraq and Afghanistan. Julian Assange’s future is dependent on the decisions of British courts. On Monday, district judge Vanessa Baraitser ruled that the WikiLeaks founder could not be extradited to the US, where he has been charged under the Espionage Act, including for publishing classified material.
    But she rejected defence arguments that the prosecution had misrepresented the facts and that he was being pursued for a political offence. She ruled against extradition only on the grounds that the risk of him killing himself was substantial, given his mental health and the conditions in which he was likely to be held – in isolation in a “supermax” high-security prison.
    This decision is a relief for Mr Assange and his family. But it is no cause for celebration for the defendant and his supporters, or for those concerned about press freedom more broadly. The American Civil Liberties Union has described charging him over publication as “a direct assault on the first amendment”. The ruling offers no protection to any journalist who might find themselves in Mr Assange’s position. It is no victory for the right to share material of clear public interest.
    Mr Assange’s lawyers will on Wednesday apply for bail on his behalf. Legal experts suggest that his chances are poor: he served a 50-week sentence for skipping bail after police removed him from the Ecuadorian embassy in London, where he had fled to avoid extradition to Sweden over a sexual assault investigation that was subsequently dropped. But his prospects of avoiding extradition now appear considerably brighter; he has a family to consider; and his mental health and the physical risks posed by Covid in Belmarsh prison, where he has been held since April 2019, make the case for bail more pressing.
    Legal proceedings are likely to drag on for years – unless the US chooses to scrap these charges rather than appeal. It should do so. There is a shameful contrast between this administration’s simultaneous pardoning of men for horrific offences and the pursuit of a man who exposed war crimes. When Joe Biden takes office on 20 January, he cannot undo the damage caused by undue and unjust lenience. But he can, and should, let Mr Assange walk free. More

  • in

    Orion hack exposed vast number of targets – impact may not be known for a while

    If there is one silver lining to the months-long global cyber-espionage campaign discovered when a prominent cybersecurity firm learned it had been breached, it might be that the sheer numbers of potentially compromised entities offers them some protection.By compromising one piece of security software – a security tool called Orion developed by the Texan company SolarWinds – the attackers gained access to an extraordinary array of potential targets in the US alone: more than 425 of the Fortune 500 list of top companies; all of the top 10 telecommunications companies; all five branches of the military; and all of the top five accounting firms.But they are just a fraction of SolarWinds’ 300,000 global customers, which also include UK government agencies and private sector companies.For now, we only have only confirmation from investigators that the US Treasury and commerce departments were attacked. The hack, attributed to Russian state actors, took the form of a so-called supply chain attack. Rather than directly attacking the US government, the attackers succeeded in compromising the automatic update function built into Orion.That breach provided the foothold the attackers needed to begin monitoring internal emails at the departments. By hacking SolarWind and inserting weaknesses into the Orion software at source, the attackers simply had to wait until their targets downloaded and ran a fake software security update.Thankfully, even then, the full attack was a technically challenging manoeuvre. In order to stay below the radar of the US government’s own security teams, the update was programmed to sit silently for two weeks after it was installed, and then to only upload stolen data in small quantities so that it could be disguised as normal Orion traffic.That, investigators say, means it is unlikely that the perpetrators made the most of the widespread access they could have gained. Rather than exfiltrating untold gigabytes of stolen data to peruse at their leisure, the attackers had to operate in a much more labour-intensive fashion, navigating through the government network as quietly as possible, and only uploading data already presumed to be valuable.At the moment it is not clear how much information was taken, and what other departments and entities the hackers chose to enter.Nevertheless, the US Cybersecurity and Infrastructure Security Agency issued an emergency directive late on Sunday night advising all federal civilian agencies to “review their networks for indicators of compromise and disconnect or power down SolarWinds Orion products immediately”. The acting director, Brandon Wales, said the compromise “poses unacceptable risks” to the security of federal networks.The long-term impact of the hack is unlikely to be known for a while, if at all. Although journalists and the public think about the impact of attacks simply in terms of any striking secrets revealed, cyber-warfare tends to have multiple goals.As well as looking for ill-guarded secrets of individuals, this sort of attack can be used to map how organisations work and their structural vulnerabilities, with a view to potentially exploiting them at a later point..More broadly, cyber operations like this undermine confidence in existing security measures and hand a propaganda coup to the country directing the attack.Silently eavesdropping on high-value targets is a labour-intensive job – particularly if the attacker wants to stay hidden, and for now it appears that the temptation to eavesdrop on internal communications at the US treasury and commerce departments was the most compelling.If other customers of SolarWinds do not find evidence that they were under surveillance, they will take solace in the fact that the US government was too big a target to pass up. More

  • in

    Why Is the US Losing Against China in an Espionage War?

    Chinese espionage cases in the US have assumed alarming proportions. On July 7, Christopher Wray, the director of the Federal Bureau of Investigation, declared: “We’ve now reached the point where the FBI is opening a new China-related counterintelligence case about every 10 hours. Of the nearly 5,000 active FBI counterintelligence cases currently underway across the country, almost half are all related to China.”

    Does Beijing Prefer Biden or Trump?

    READ MORE

    Since the mid-1990s, evidence of Chinese espionage in the US had been mounting. However, it is only recently that the US began taking this issue seriously. Washington’s inability to recognize the threat from Beijing early on is due to its failure to understand Chinese espionage culture. This, in turn, is because the US lacks a strategic counterintelligence culture and focuses excessively on operations.

    Historical Roots of Chinese Espionage Culture

    Americans see the worsening of Sino-US relations from the prism of “betrayal” and “surprise.” This is because the US considers the 1972 US-China rapprochement as a watershed moment. Many in Washington believe the US was singularly responsible for the dramatic economic rise of China. Consequently, they had assumed that the Middle Kingdom would be grateful for American help and adopt Western norms over time. To their surprise, this did not happen. Beijing never really displayed gratitude and it has become increasingly defiant as it has become more powerful. The rising threat of espionage, both security and commercial, is just one of the many manifestations of this defiance.

    Embed from Getty Images

    A simple question arises: Why did the US fail to foresee the threat of espionage by China? The answer lies in the chronic inability of American intelligence and intelligentsia to pay adequate attention to the intelligence cultures of other countries. As early as the 1980s, this lacuna had been pointed out by some academics who understood the perils of neglecting foreign cultures. Their advice went unheeded, though.

    To understand Chinese intelligence culture, the operative date is not 1972 but the first recorded interaction between the Chinese and Western civilizations. In the 16th century, Italian-born Father Matteo Ricci led a team of Jesuit missionaries to the village of Shanghai. In a way, these missionaries were the first Western intelligence operatives in China. They came with the mission of converting the Chinese to Christianity. The Jesuits assumed that the lure of superior Western science and technology would convince the Chinese to embrace Christianity. This didn’t happen. By the end of the 19th century, the Jesuits concluded that their mission had been a “total failure.”

    The reason behind this failure is fairly straightforward. Hostility toward foreigners was deeply entrenched in the Chinese psyche. Any foreigner was categorized as “inferior” and “barbaric.” The missionaries were only welcome as long as they imparted knowledge in the scientific and technological realms. Beyond that, when they tried to propagate religion and philosophy, they were punished and sometimes executed. In essence, the Chinese saw the missionaries akin to a fat cow that was to be milked and then slaughtered. This episode offers important insights for understanding modern Chinese espionage culture.

    Today, China is again milking the West for advanced scientific and technical knowledge. This time, it has sent Chinese spies to infiltrate citadels of Western knowledge, especially in the US.

    Reassessing Chinese Espionage Operations

    Studies on Chinese intelligence have mostly focused on operational level analysis. Analysts have largely failed to place individual espionage operations within the cultural context. Few Americans understand that the principles guiding Chinese espionage operations are fundamentally at odds with western ones.  

    This difference could be spotted as early as the mid-20th century when the Chinese Communist Party (CCP) was building up its intelligence infrastructure with the help of the Soviet Union. Subsequently, the CCP intelligence apparatus cooperated closely with Soviet intelligence. Yet, despite tutelage and operational cooperation, the influence of Soviet intelligence practices on the Chinese remained minimal.

    Just as 16th century China had welcomed Western science and discarded Western philosophy, the CCP followed the same practice. Operationally, the CCP intelligence services were keen to learn the tricks of the trade from the Soviets. However, they stuck with their ancient philosophies on the subject. In particular, the Chinese stayed true to Sun Tzu, the famous military strategist of the 6thcentury BCE. There was “no imitation or even emulation” of Soviet intelligence practices, but only “customization and improvisation.”

    One such customization can be seen in how the Chinese have employed the Sun Tzuvian concept of “expendable spies,” which conflicts with the Western philosophy of “ethical spying.” Empirical studies on the British, American and Soviet experience in running human intelligence operations reveal a remarkable degree of concern for field agents. In particular, Western intelligence agencies have historically shown great regard for the lives and security of their informers. The Americans and the British treated Russian informers like Adolf Tolkachev and Oleg Gordievsky rather well. The Soviets also took good care of strategic informants like the Cambridge Five. Western handling officers often insist on “informant security.”

    The “expendable spies” doctrine, on the other hand, does not extend to the field agents the privileges that come with “ethical spying.” The arrest of Candace Claiborne, the State Department official, illustrates this point. Claiborne’s true identity was revealed when she unsuspectingly accepted a compliment from an undercover FBI operative that she was one of the “highest regarded” assets of the Ministry of State Security (MSS), the intelligence, security and secret police agency of China. This incident reveals that Chinese intelligence seems to have offered zero security training to an agent who enjoyed top-secret clearance. The CCP treats agents as “disposable” because it still follows Sun Tzu’s theory of “expendable spies.”    

    The expendable and ethical schools of intelligence lead to a qualitative versus quantitative dichotomy when it comes to informer networks. Western agencies look for a few reliable informers who can be secured. The Chinese employ a vacuum cleaner approach and prefer using a large number of intelligence collectors instead of a few trained professionals. This qualitative-quantitative distinction is certainly well known, but few Americans appreciate its historical origins that date back to the formative years of the CCP intelligence apparatus.

    Beijing has used the quantitative approach relentlessly when it comes to commercial espionage. In 2015, John Lewis of the Obama administration insisted to his Chinese counterpart that they discuss this thorny issue. After a few failed attempts at dodging it, the Chinese official made a rather candid observation. According to the official, the Chinese intelligence culture did not distinguish between espionage for national security and for economics. Such a dichotomy was solely a Western one. For the Chinese, it did not exist. Despite this clear confession, it took another five years for the American establishment to completely wake up to the reality of the Chinese threat.

    Fixing the American Culture of Counterintelligence

    The US can contain the Chinese threat by effective counterintelligence. However, the current state of play does not inspire much confidence. American misreading of Chinese espionage culture has given birth to an inadequate counterintelligence response. The US focuses too much on individual cases and not enough on developing a strategic counterintelligence doctrine.

    In such a strategy, the US would employ offensive operations to disrupt enemy intelligence goals. Instead, the FBI currently deploys a defensive strategy that involves the prosecution and conviction of foreign agents. This has two obvious flaws.

    Embed from Getty Images

    First, prosecution takes up scarce time, energy and money. It has an opportunity cost. It fails to exploit a compromised spy who could be used as a double agent. Prosecution also alerts enemy intelligence agencies who can then cover up their tracks.

    Second, convictions are hard to obtain in intelligence matters. Evidence is often insufficient, critical details of operations cannot be revealed and the gray matters of espionage do not translate as easily to the cut and dried approach of the court of law. This makes convictions difficult to secure. In fact, the shrinking arrest-to-conviction ratio feeds into the Chinese intelligence offensive, which feeds on accusations of racism and witch-hunting by the Americans. Every person accused by the FBI who walks away free adds to China’s psychological operations (PSYOP).

    In theory, PSYOP is shaped and targeted at a particular set of audiences to achieve a well-defined set of objectives. By accusing Americans of racism, the CCP aims to appeal to the sentiments of the American people in order to turn them against the FBI. In this regard, Beijing seems successful as American academic and scientific institutions have repeatedly resisted the FBI’s requests to monitor Chinese students. These institutions fear accusations of racism and perhaps a drying up of Chinese money. China has cleverly created rifts between American security agencies and its intellectual institutions to further its own purposes.

    To extricate American counterintelligence from this imbroglio, the US will have to embrace a strategic counterintelligence doctrine. It will have to use PSYOP effectively too. In particular, it could focus on China’s violations of human rights such as the brutal “traitor weeding” program followed by its intelligence agencies. Already, educated Americans are turning against Chinese actions in Xinjiang, Hong Kong and Tibet.

    Therefore, the need of the hour is for Americans to embrace the famed Sun Tzuvian dictum: “[K]now thyself and know thy enemy; a thousand battles, a thousand victories.”

    *[Atul Singh provided guidance for this article.]

    The views expressed in this article are the author’s own and do not necessarily reflect Fair Observer’s editorial policy. More

  • in

    As election nears, Trump builds the very 'deep state' he railed against

    Two months before the presidential election, the US intelligence agencies are under increasing pressure from the Trump administration to provide only the information it wants to hear.After installing loyalist John Ratcliffe at the pinnacle of the intelligence community, the administration is seeking to limit congressional oversight, and has removed a veteran official from a sensitive national security role in the justice departmentOne former senior intelligence officer has suggested Donald Trump is seeking to create the very thing he was repeatedly complained about: a “deep state”. Another official has compared it to the intelligence fiasco that preceded the 2003 Iraq invasion.The intense focus of the current struggle is the covert Russian role in the election campaign. The intelligence community has assessed that Moscow is taking an active role, as it did in 2016, to damage Joe Biden and boost Trump, largely through spreading disinformation. But administration officials have sought to stop public discussion of such interference.ABC News reported this week that an aide to the homeland security secretary, Chad Wolf, blocked a bulletin in July warning about Russian efforts to create doubts about Joe Biden’s mental health. More

  • in

    Coups, lies, dirty tricks: The Police's Stewart Copeland on his CIA agent father

    In 1986, a 69-year-old Miles Axe Copeland Jr gave a memorable interview to Rolling Stone magazine. His three sons were all music industry powerhouses – Stewart played drums in the Police, Miles III was their manager and Ian their booking agent – and Miles himself had been a jazz trumpet-player in his youth. But the interview wasn’t about music. The subject was his days as the CIA’s man in the Middle East between 1947 and 1957, during which time he dined with President Nasser of Egypt, partied with the Soviet spy Kim Philby and, as a pioneer of “dirty tricks”, played a part in removing the leaders of Syria and Iran. Inconveniently for his youngest son, he concluded the interview by implying that the Police were a psy-ops outfit who played shows to “70,000 young minds open to whatever the Police decide to put into them”.“You know it got old Sting on a bad day,” Stewart says, tickled by the memory. “He knew my father very well, and he regrets it now but he took adversely the suggestion that he was a CIA pawn.” More