More stories

  • in

    Biden Administration Says Russian Intelligence Obtained Trump Campaign Data

    A Treasury Department document shed more light on links between the campaign and Russian spies.WASHINGTON — The Biden administration revealed on Thursday that a business associate of Trump campaign officials in 2016 provided campaign polling data to Russian intelligence services, the strongest evidence to date that Russian spies had penetrated the inner workings of the Trump campaign.The revelation, made public in a Treasury Department document announcing new sanctions against Russia, established for the first time that private meetings and communications between the campaign officials, Paul Manafort and Rick Gates, and their business associate were a direct pipeline from the campaign to Russian spies at a time when the Kremlin was engaged in a covert effort to sabotage the 2016 presidential election.Previous government investigations have identified the Trump aides’ associate, Konstantin V. Kilimnik, as a Russian intelligence operative, and Mr. Manafort’s decision to provide him with internal polling data was one of the mysteries that the special counsel, Robert S. Mueller III, sought to unravel during his two-year investigation into Russia’s election meddling.“During the 2016 U.S. presidential election campaign, Kilimnik provided the Russian Intelligence Services with sensitive information on polling and campaign strategy,” the Treasury Department said in a news release. “Additionally, Kilimnik sought to promote the narrative that Ukraine, not Russia, had interfered in the 2016 U.S. presidential election.”The Biden administration provided no supporting evidence to bolster the assessment that the Russian intelligence services obtained the polling data and campaign information. And the release shed no light on why Mr. Manafort and Mr. Gates gave polling data to Mr. Kilimnik, although previous government reports have indicated that Mr. Manafort thought Trump campaign strategy information could be a valuable commodity for future business deals with Kremlin-connected oligarchs.Having the polling data would have allowed Russia to better understand the Trump campaign strategy — including where the campaign was focusing resources — at a time when the Russian government was carrying out its own efforts to undermine Donald J. Trump’s opponent.Mr. Gates said in a statement on Thursday that the Treasury Department had failed to provide any evidence to back up its claim, adding that “the polling data passed periodically to Kilimnik at Paul Manafort’s direction was simplistic and outdated, never in real time.”“It was from both public and internal sources,” Mr. Gates said. “It was not massive binders full of demographics or deep research. It was ‘topline’ numbers and did not contain any strategic plans.”The new sanctions against Russia are in response to the Kremlin’s election interference, efforts to hack American government agencies and companies, and other acts of aggression against the United States.The sanctions now make it extremely difficult for Mr. Kilimnik, who was indicted by the Justice Department in 2018 on charges of obstruction of justice, to engage in financial transactions that may involve the United States.It is unclear how long American spy agencies have held the conclusion about Mr. Kilimnik. Senior Trump administration officials, fearing Mr. Trump’s wrath, repeatedly tried to keep from the public any information that seemed to show Mr. Trump’s affinity for Russia or its president, Vladimir V. Putin.Mr. Kilimnik had been a longtime business partner during Mr. Manafort’s time as a political consultant in Ukraine. In 2018, prosecutors for Mr. Mueller’s office announced that Mr. Kilimnik had “ties to Russian intelligence” and that Mr. Manafort had instructed Mr. Gates to pass the polling and campaign information to Mr. Kilimnik.The Senate Intelligence Committee went further last August in its bipartisan report that scrutinized the links between the Trump campaign and Russia — calling Mr. Kilimnik a “Russian intelligence officer.”The report contained several significant redactions that appeared related to Mr. Manafort and Mr. Kilimnik but said that Mr. Manafort’s willingness to share the information with him “represented a grave counterintelligence threat.”The report called the relationship between Mr. Manafort and Mr. Kilimnik “the single most direct tie between senior Trump campaign officials and the Russian intelligence services.”The Senate report portrayed a Trump campaign stacked with businessmen and other advisers who had little government experience and “presented attractive targets for foreign influence, creating notable counterintelligence vulnerabilities.”A New York Times article in 2017 said that there had been numerous interactions between the Trump campaign and Russian intelligence during the year before the election. F.B.I. officials had disputed the report, but both the Senate report and the Treasury Department document confirm the article’s findings.The assertion that it was Ukraine, not Russia, that sought to disrupt the 2016 election has long been both a Kremlin talking point and a claim by Mr. Trump that foreign actors tried to help his opponent, Hillary Clinton, rather than him.Mr. Trump’s obsession over Ukraine’s supposed role in the election was the impetus for a 2019 phone call with the Ukrainian president that was central to the first impeachment proceedings against Mr. Trump.Mr. Manafort was brought into the Trump campaign in March 2016, at a time when Mr. Trump had largely sewn up the Republican presidential nomination.Mr. Manafort and his longtime business associate, Mr. Gates, joined the Trump campaign after years of doing political consulting work in Ukraine, where they met Mr. Kilimnik, a Russian Army-trained linguist.The two men met with Mr. Kilimnik several times after joining the campaign, and in June 2016, Mr. Manafort became the Trump campaign chairman.Details about Mr. Manafort’s relationship with Mr. Kilimnik were revealed in 2018 as the government prosecuted Mr. Manafort and charged Mr. Kilimnik with obstruction of justice for trying to coach potential witnesses in the investigation.Mr. Kilimnik never came to the United States to face charges. He is wanted by the F.B.I., and the bureau is offering $250,000 for information that could lead to his arrest. More

  • in

    Subpoenaing the Brookings Institution, Durham Focuses on Trump-Russia Dossier

    The special counsel scrutinizing the Russia inquiry, a Trump-era leftover, appears to be retreading ground that an inspector general explored in 2019.WASHINGTON — Exiled from Twitter, former President Donald J. Trump issued a sarcastic statement recently inquiring about the ongoing public silence from John H. Durham, the special counsel who has been investigating the Trump-Russia inquiry since May 2019.“Where’s Durham?” said Mr. Trump, who repeatedly predicted before last year’s election that Mr. Durham’s investigation would prove a deep-state conspiracy against him. “Is he a living, breathing human being? Will there ever be a Durham report?”Mr. Durham ignored the complaint publicly, and the scope of his inquiry remains opaque. But one aspect has come into focus recently, according to people familiar with the investigation: Mr. Durham has keyed in on the F.B.I.’s handling of a notorious dossier of political opposition research both before and after the bureau started using it to obtain court permission to wiretap a former Trump campaign adviser in 2016 and 2017 and questioned witnesses who may have insight into the matter.In particular, Mr. Durham has obtained documents from the Brookings Institution related to Igor Danchenko, a Russia researcher who worked there a decade ago and later helped gather rumors about Mr. Trump and Russia for that research, known as the Steele dossier, according to people familiar with the request.By asking about the dossier, Mr. Durham has come to focus at least in part on re-scrutinizing an aspect of the investigation that was already exposed as problematic by a 2019 Justice Department inspector general report and led to reforms by the F.B.I. and the Foreign Intelligence Surveillance Court.A spokesman for Mr. Durham declined to comment.Asked whether the special counsel had briefed his new supervisor — Attorney General Merrick B. Garland — a Justice Department spokesman would only point to a statement by Mr. Garland as a nominee. “If confirmed,” he said, “one of the first things I am going to do is speak with Mr. Durham and learn the status of his investigation.”In February, several weeks before the Senate confirmed Mr. Garland, Mr. Durham obtained old personnel files and other documents related to Mr. Danchenko from the Brookings Institution, a prominent Washington think tank, using a subpoena. Mr. Danchenko had worked there from 2005 until 2010.Mr. Danchenko traveled to Russia in 2016 and gathered rumors about Mr. Trump and his associates on behalf of Christopher Steele, who produced the dossier as a subcontractor for an investigative firm being indirectly paid by Democrats to look into any Trump-Russia ties.Michael Cavadel, the general counsel of Brookings, confirmed the subpoena for records and other materials about Mr. Danchenko, saying that it was received on Dec. 31 and that the think tank had taken until February to gather the files and turn them over to Mr. Durham’s team in part because its office is closed during the pandemic.“Consistent with its practices in such matters, Brookings provided the responsive documents, none of which contained information associated with the reports known as the Steele dossier,” Mr. Cavadel said.Last September, the attorney general at the time, William P. Barr, made public that from 2009 to 2011 Mr. Danchenko had been the subject of an F.B.I. counterintelligence investigation assessing his contacts with several suspected Russian intelligence officials, including at the Russian Embassy.(Skeptics of the Steele dossier have raised the prospect that Russian intelligence may have used Mr. Danchenko or his sources to seed it with disinformation, in order to further sow chaos. Mr. Danchenko was never charged and has denied ever being a Russian agent. He has also noted that during his time at Brookings he put forward analysis embarrassing to President Vladimir V. Putin of Russia: evidence that Mr. Putin plagiarized parts of his dissertation.)Igor Danchenko worked for the Brookings Institution from 2005 to 2010.Jonah M. Kessel/The New York TimesMr. Durham has also asked questions that suggested a focus on skepticism about how the F.B.I. approached issues that might have undermined the dossier’s credibility as a basis for wiretap applications, people familiar with the inquiry said.For example, Mr. Durham’s team is said to have asked why the F.B.I., after identifying Mr. Danchenko as a major source for the dossier and interviewing him in early 2017, did not tell the surveillance court that he had once been the subject of a counterintelligence investigation.Mr. Durham is also said to be interested in a meeting between the F.B.I. and Mr. Steele in Rome in early October 2016, shortly before the bureau submitted the first wiretap application that used information from his dossier.The previous month, Yahoo News had published an article that contained information that overlapped with claims in the dossier, and the F.B.I. later learned that Mr. Steele had been a source for it, prompting the bureau to sever its relationship with him. At the time, as the bureau told the court in its wiretap application, it assumed the source had been someone else who had received a copy of the dossier.Mr. Durham is said to have asked why F.B.I. officials at that October meeting apparently did not ask Mr. Steele whether he was the article’s source — before using his information to apply for permission to wiretap the former Trump adviser, Carter Page.The focus raised the possibility that Mr. Durham has been exploring whether F.B.I. officials knowingly misled the surveillance court. But if Mr. Durham has found credible evidence of such a crime — as opposed to sloppy investigative work — he has yet to file any such charges.Mr. Durham interviewed the former C.I.A. director John O. Brennan in August, but told him he was not the target of any criminal inquiry. But he has yet to interview former F.B.I. officials who held senior roles in 2016 and have been demonized by Trump supporters, including the former director James B. Comey; his former deputy Andrew G. McCabe; and a former senior counterintelligence agent, Peter Strzok, according to people familiar with the matter.To the extent any eventual Durham report focuses on criticizing the F.B.I.’s handling of issues related to the Steele dossier, it would risk largely retreading ground already covered by the 2019 report by the Justice Department’s inspector general, Michael E. Horowitz.Mr. Horowitz has already brought to light the fact that the F.B.I. botched its wiretap applications in numerous ways, including uncovering numerous material facts that law enforcement officials failed to tell the court and that might have undermined their case for receiving wiretap authorization or renewals — including about the dossier.Mr. Horowitz’s report also already unearthed the fact that Mr. Danchenko had been the subject of a counterintelligence investigation when he worked at Brookings, in a footnote that was initially classified before Mr. Barr decided to make it public.The report also already focused criticism on the F.B.I.’s failure to ask Mr. Steele in October 2016 whether he played a role in the Yahoo News article.And the misconduct by the only person Mr. Durham has charged to date — Kevin Clinesmith, a former F.B.I. lawyer who altered an email shown to a colleague during preparations to seek a renewal of the wiretap, preventing another problem from coming to light internally — was uncovered by Mr. Horowitz’s investigation. (Mr. Clinesmith, who pleaded guilty to falsifying the email but insisted that he did not deliberately mislead his colleague, was sentenced to probation.)Mr. Barr assigned Mr. Durham to hunt for any potential wrongdoing by the Trump-Russia investigators in spring 2019, at a time when Mr. Trump and his supporters were pushing the notion that the inquiry had been a “deep state” plot against him. While Mr. Durham’s work has been opaque, accounts by people familiar with his investigation have made clear that he has pursued various Trumpian conspiracy theories and grievances.In seeking to discredit the Russia investigation, Mr. Trump and his allies have frequently conflated it with the flawed Steele dossier. In fact, the Page wiretaps were a minor part of the overall effort, and Mr. Horowitz’s report showed that it played no role in the F.B.I. decision to open the counterintelligence investigation in July 2016.While uncovering numerous ways the F.B.I. had botched those wiretap applications, Mr. Horowitz’s report also concluded that it had lawfully opened the overall investigation on an adequate basis. When the inspector general delivered the report, Mr. Durham intervened with an unusual public statement saying he disagreed with Mr. Horowitz that the investigation’s opening was properly predicated.Mr. Durham provided no details, but Mr. Horowitz later told Congress that Mr. Durham had told him he thought that the F.B.I. should have opened the inquiry as a “preliminary” investigation rather than going straight to a “full” one. More

  • in

    Putin Authorized Russian Interference in 2020 Election, Report Says

    The assessment was the intelligence community’s most comprehensive look at foreign efforts to interfere in the election.WASHINGTON — President Vladimir V. Putin of Russia authorized extensive efforts to hurt the candidacy of Joseph R. Biden Jr. during the election last year, including by mounting covert operations to influence people close to President Donald J. Trump, according to a declassified intelligence report released on Tuesday.The report did not name those people but seemed to refer to the work of Mr. Trump’s former personal lawyer Rudolph W. Giuliani, who relentlessly pushed accusations of corruption about Mr. Biden and his family involving Ukraine.“Russian state and proxy actors who all serve the Kremlin’s interests worked to affect U.S. public perceptions,” the report said.The declassified report represented the most comprehensive intelligence assessment of foreign efforts to influence the 2020 vote. Besides Russia, Iran and other countries also sought to sway the election, the report said. China considered its own efforts but ultimately concluded that they would fail and most likely backfire, intelligence officials concluded.A companion report by the Justice and Homeland Security Departments also rejected false accusations promoted by Mr. Trump’s allies in the weeks after the vote that Venezuela or other countries had defrauded the election.The reports, compiled by career officials, amounted to a repudiation of Mr. Trump, his allies and some of his top administration officials. They reaffirmed the intelligence agencies’ conclusions about Russia’s interference in 2016 on behalf of Mr. Trump and said that the Kremlin favored his re-election. And they categorically dismissed allegations of foreign-fed voter fraud, cast doubt on Republican accusations of Chinese intervention on behalf of Democrats and undermined claims that Mr. Trump and his allies had spread about the Biden family’s work in Ukraine.The report also found that neither Russia nor other countries tried to change ballots themselves. Efforts by Russian hackers to gain access to state and local networks were unrelated to efforts by Moscow to influence the presidential vote.The declassified report did not explain how the intelligence community had reached its conclusions about Russian operations during the 2020 election. But the officials said they had high confidence in their conclusions about Mr. Putin’s involvement, suggesting that the intelligence agencies have developed new ways of gathering information after the extraction of one of their best Kremlin sources in 2017.Foreign efforts to influence United States elections are likely to continue in coming years, American officials said. The public has become more aware of disinformation efforts, and social media companies act faster to take down fake accounts that spread falsehoods. But a large number of Americans remain open to conspiracy theories pushed by Russia and other adversaries, a circumstance that they will exploit, officials warned.“Foreign malign influence is an enduring challenge facing our country,” Avril D. Haines, the director of national intelligence, said in a statement. “These efforts by U.S. adversaries seek to exacerbate divisions and undermine confidence in our democratic institutions.”While it was declassified by the Biden administration, the report is based on work done during the Trump administration, according to intelligence officials, reflecting the vastly different views that officers had from their political overseers, who were appointed by Mr. Trump.The report rebutted yearslong efforts by Mr. Trump and his allies to sow doubts about the intelligence agency’s assessments that Russia not only wanted to sow chaos in the United States but also favored his re-election.“They were disingenuous in downplaying Russia’s influence operations on behalf of the former president,” Representative Adam B. Schiff, Democrat of California, who leads the House Intelligence Committee, said in an interview. “It was a disservice not to level with the public and to try to fudge the intelligence in the way they did.”Some of the report’s details were released in the months leading up to the election, reflecting an effort by the intelligence community to disclose more information about foreign operations during the campaign after its reluctance to do so in 2016 helped misinformation spread.During the 2020 campaign, intelligence officials outlined how Russia was spreading damaging information about Mr. Biden’s son, Hunter Biden, in an attempt to bolster Mr. Trump’s re-election chances. It also outlined efforts by Iran in the final days before the election to aid Mr. Biden by spreading letters falsely purporting to be from the Proud Boys, a far-right group.Accusations of election interference have been some of the most politically divisive in recent years. The intelligence report is akin to a declassified assessment in early 2017 that laid out the conclusions about Russia’s efforts in Mr. Trump’s electoral victory, further entrenched the partisan debate over his relationship with Moscow and cemented his enmity toward intelligence and law enforcement officials.With Mr. Trump out of office and the new report’s conclusions largely made public in releases during the campaign, the findings were not expected to prompt as much partisan fury. But elements of the report are likely to be the subject of political fights.Its assessment that China sat on the sidelines is at odds with what some Republican officials have said. In private briefings on Capitol Hill, John Ratcliffe, Mr. Trump’s last director of national intelligence, said Chinese interference was a greater threat in 2020 than Russian operations.The declassified documents released on Tuesday included a dissenting minority view from the national intelligence officer for cyber that suggested that the consensus of the intelligence community was underplaying the threat from China.In a letter in January, Mr. Ratcliffe wrote in support of that minority view and said that the report’s main conclusions about China “fell well short of the mark.” He said the minority conclusion was more than one analyst’s view and argued that some intelligence officials were hesitant to label Chinese actions as influence or interference. Privately, some officials defended the consensus view, saying their reading of the intelligence supported the conclusions that China sought some level of influence but avoided any direct efforts to interfere in the vote.The most detailed material in the assessment was about Russia, which sought to influence how the American public saw the two major candidates “as well as advance Moscow’s longstanding goals of undermining confidence in U.S. election processes.”Moscow used Andriy Derkach, a pro-Russian member of Ukraine’s Parliament, to undermine Mr. Biden, the report confirmed. Mr. Derkach released leaked phone calls four times to undermine Mr. Biden and link him to Ukrainian corruption. The report said Mr. Putin “had purview” over the actions of Mr. Derkach, who had ties to Russian intelligence.Citing in one instance a meeting between Mr. Derkach and Mr. Giuliani, intelligence officials warned Mr. Trump in 2019 that Russian intelligence officers were using his personal lawyer as a conduit for misinformation.Mr. Giuliani also provided materials from Ukraine to American investigators to push for federal inquiries into Mr. Biden’s family, a type of operation that the report mentioned as an example of Russia’s covert efforts without providing names or other identifying details.The report also named Konstantin V. Kilimnik, a former colleague of Mr. Trump’s onetime campaign manager Paul Manafort, as a Russian influence agent. Mr. Kilimnik took steps throughout the 2020 election cycle to hurt Mr. Biden and his candidacy, the report said, helping pushed a false narrative that Ukraine, not Russia, was responsible for interfering in American politics.During the 2016 campaign, Mr. Manafort shared inside information about the presidential race with Mr. Kilimnik and the Russian and Ukrainian oligarchs whom he served, according to a bipartisan report last year by the Senate Intelligence Committee.“Kilimnik was back at it again, along with others like Derkach,” Mr. Schiff said. “And they had other conduits for their laundered misinformation, including people like Rudy Giuliani.”Neither Mr. Giuliani nor his representatives returned a request for comment.Collecting intelligence to feed to Mr. Trump’s allies and use against Mr. Biden was a priority for Russian intelligence. Moscow’s military intelligence unit, the G.R.U., conducted a hacking campaign against a Ukrainian energy firm, Burisma, in what was most likely an attempt to gather information about Mr. Biden’s family and their work for the company, the report confirmed.In the closing weeks of the campaign, intelligence officials also said that Russian hackers had broken into state and local computer networks. But the new report said those efforts were not aimed at changing votes.Unmentioned in this report was the wide-ranging hacking of federal computer systems using a vulnerability in software made by SolarWinds. The absence of a concerted effort by Russia to change votes suggests that Moscow had refocused its intelligence service on a broader effort to attack the U.S. government.Earlier in 2020, American officials thought Iran was likely to stay on the sidelines of the presidential contest. But Iranian hackers did try a last-minute effort to change the vote in Florida and other states. Iranian hackers sent “threatening, spoofed emails” to Democratic voters that purported to be from the Proud Boys, the report said. The group demanded that the recipients change their party affiliation and vote for Mr. Trump. They also pushed a video that supposedly demonstrated voter fraud.The Iranian effort essentially employed reverse psychology. Officials said Iranian operatives hoped the emails would have the opposite effect of the message’s warning, rallying people to vote for Mr. Biden by thinking Mr. Trump’s supporters were playing dirty campaign tricks. Ayatollah Ali Khamenei, Iran’s supreme leader, authorized the campaign, the report said. More

  • in

    Preparing for Retaliation Against Russia, U.S. Confronts Hacking by China

    AdvertisementContinue reading the main storySupported byContinue reading the main storyPreparing for Retaliation Against Russia, U.S. Confronts Hacking by ChinaThe proliferation of cyberattacks by rivals is presenting a challenge to the Biden administration as it seeks to deter intrusions on government and corporate systems.Jake Sullivan, President Biden’s national security adviser, last month. He said on Thursday that the White House was “closely tracking” reports that the vulnerabilities exploited in the Microsoft hacking were being used in “potential compromises of U.S. think tanks and defense industrial base entities.”Credit…Stefani Reynolds for The New York TimesDavid E. Sanger, Julian E. Barnes and March 7, 2021Updated 9:42 p.m. ETWASHINGTON — Just as it plans to begin retaliating against Russia for the large-scale hacking of American government agencies and corporations discovered late last year, the Biden administration faces a new cyberattack that raises the question of whether it will have to strike back at another major adversary: China.Taken together, the responses will start to define how President Biden fashions his new administration’s response to escalating cyberconflict and whether he can find a way to impose a steeper penalty on rivals who regularly exploit vulnerabilities in government and corporate defenses to spy, steal information and potentially damage critical components of the nation’s infrastructure.The first major move is expected over the next three weeks, officials said, with a series of clandestine actions across Russian networks that are intended to be evident to President Vladimir V. Putin and his intelligence services and military but not to the wider world.The officials said the actions would be combined with some kind of economic sanctions — though there are few truly effective sanctions left to impose — and an executive order from Mr. Biden to accelerate the hardening of federal government networks after the Russian hacking, which went undetected for months until it was discovered by a private cybersecurity firm.The issue has taken on added urgency at the White House, the Pentagon and the intelligence agencies in recent days after the public exposure of a major breach in Microsoft email systems used by small businesses, local governments and, by some accounts, key military contractors.Microsoft identified the intruders as a state-sponsored Chinese group and moved quickly to issue a patch to allow users of its software to close off the vulnerability.But that touched off a race between those responsible for patching the systems and a raft of new attackers — including multiple other Chinese hacking groups, according to Microsoft — who started using the same exploit this week.The United States government has not made public any formal determination of who was responsible for the hacking, but at the White House and on Microsoft’s campus in Redmond, Wash., the fear is that espionage and theft may be a prelude to far more destructive activity, such as changing data or wiping it out.The White House underscored the seriousness of the situation in a statement on Sunday from the National Security Council.“The White House is undertaking a whole of government response to assess and address the impact” of the Microsoft intrusion, the statement said. It said the response was being led by Anne Neuberger, a former senior National Security Agency official who is the first occupant of a newly created post: deputy national security adviser for cyber and emerging technologies.The statement said that national security officials were working throughout the weekend to address the hacking and that “this is an active threat still developing, and we urge network operators to take it very seriously.”Jake Sullivan, Mr. Biden’s national security adviser, said on Twitter on Thursday that the White House was “closely tracking” the reports that the vulnerabilities in Microsoft Exchange were being used in “potential compromises of U.S. think tanks and defense industrial base entities.”The discovery came as Mr. Biden’s national security team, led by Mr. Sullivan and Ms. Neuberger, has moved to the top of its agenda an effort to deter attacks, whether their intent is theft, altering data or shutting down networks entirely. For the president, who promised that the Russian attack would not “go unanswered,” the administration’s reactions in the coming weeks will be a test of his ability to assert American power in an often unseen but increasingly high-stakes battle among major powers in cyberspace.A mix of public sanctions and private actions is the most likely combination to force a “broad strategic discussion with the Russians,” Mr. Sullivan said in an interview on Thursday, before the scope of the Chinese attack was clear.“I actually believe that a set of measures that are understood by the Russians, but may not be visible to the broader world, are actually likely to be the most effective measures in terms of clarifying what the United States believes are in bounds and out of bounds, and what we are prepared to do in response,” he added.From the first day of the new administration, Mr. Sullivan has been reorganizing the White House to fashion such responses. The same order he issued on Jan. 20, requiring the military to advise the White House before conducting drone strikes outside war zones, contained a paragraph with separate instructions for dealing with major cyberoperations that risk escalating conflict.The order left in place, however, a still secret document signed by President Donald J. Trump in August 2018 giving the United States Cyber Command broader authorities than it had during the Obama administration to conduct day-to-day, short-of-war skirmishes in cyberspace, often without explicit presidential authorization.Under the new order, Cyber Command will have to bring operations of significant size and scope to the White House and allow the National Security Council to review or adjust those operations, according to officials briefed on the memo. The forthcoming operation against Russia, and any potential response to China, is likely to fall in this category.The hacking that Microsoft has attributed to China poses many of the same challenges as the SolarWinds attack by the Russians that was discovered late last year.Credit…Swayne B. Hall/Associated PressAmerican officials continue to try to better understand the scope and damage done by the Chinese attack, but every day since its revelation has suggested that it is bigger, and potentially more harmful, than first thought.“This is a crazy huge hack,” Christopher C. Krebs, the former director of the Cybersecurity and Infrastructure Security Agency, wrote on Twitter on Friday.The initial estimates were that 30,000 or so systems were affected, mostly those operated by businesses or government agencies that use Microsoft software and run their email systems in-house. (Email and others systems run on Microsoft’s cloud were not affected.)But the breadth of the intrusion and the identities of the victims are still unclear. And while the Chinese deployed the attack widely, they might have sought only to take information from a narrow group of targets in which they have the highest interest.There is little doubt that the scope of the attack has American officials considering whether they will have to retaliate against China as well. That would put them in the position of engaging in a potentially escalating conflict with two countries that are also its biggest nuclear-armed adversaries.It has become increasingly clear in recent days that the hacking that Microsoft has attributed to Beijing poses many of the same challenges as the SolarWinds attack conducted by the Russians, although the targets and the methodology are significantly different.Like the Russians, the Chinese attackers initiated their campaign against Microsoft from computer servers — essentially cloud services — that they rented under assumed identities in the United States. Both countries know that American law prohibits intelligence agencies from looking in systems based in the United States, and they are exploiting that legal restriction.“The Chinese actor apparently spent the time to research the legal authorities and recognized that if they could operate from inside the United States, it takes some of the government’s best threat-hunters off the field,” Tom Burt, the Microsoft executive overseeing the investigation, said on Friday.The result was that in both the SolarWinds and the more recent Chinese hacking, American intelligence agencies appeared to have missed the evidence of what was happening until a private company saw it and alerted the authorities.The debate preoccupying the White House is how to respond. Mr. Sullivan served as Mr. Biden’s national security adviser while he was vice president, as the Obama administration struggled to respond to a series of attacks.Those included the Chinese effort that stole 22.5 million security-clearance records from the Office of Personnel Management in 2014 and the Russian attack on the 2016 presidential election.In writings and talks over the past four years, Mr. Sullivan has made clear that he believes traditional sanctions alone do not sufficiently raise the cost to force powers like Russia or China to begin to talk about new rules of the road for cyberspace.But government officials often fear that too strong a response risks escalation.That is a particular concern in the Russian and Chinese attacks, where both countries have clearly planted “back doors” to American systems that could be used for more destructive purposes.American officials say publicly that the current evidence suggests that the Russian intention in the SolarWinds attack was merely data theft. But several senior officials, when speaking not for attribution, said they believed the size, scope and expense of the operation suggested that the Russians might have had much broader motives.“I’m struck by how many of these attacks undercut trust in our systems,” Mr. Burt said, “just as there are efforts to make the country distrust the voting infrastructure, which is a core component of our democracy.”Russia broke into the Democratic National Committee and state voter-registration systems in 2016 largely by guessing or obtaining passwords. But they used a far more sophisticated method in the SolarWinds hacking, inserting code into the company’s software updates, which ushered them deep into about 18,000 systems that used the network management software. Once inside, the Russians had high-level access to the systems, with no passwords required.Similarly, four years ago, a vast majority of Chinese government hacking was conducted via email spear-phishing campaigns. But over the past few years, China’s military hacking divisions have been consolidating into a new strategic support force, similar to the Pentagon’s Cyber Command. Some of the most important hacking operations are run by the stealthier Ministry of State Security, China’s premier intelligence agency, which maintains a satellite network of contractors.Beijing also started hoarding so-called zero-days, flaws in code unknown to software vendors and for which a patch does not exist.In August 2019, security researchers got their first glimpse of how these undisclosed zero-day flaws were being used: Security researchers at Google’s Project Zero and Volexity — the same company in Reston, Va., that discovered the Microsoft attack — found that Chinese hackers were using a software vulnerability to spy on anyone who visited a website read by Uighurs, an ethnic minority group whose persecution has drawn international condemnation.For two years, until the campaign was discovered, anyone who visited the sites unwittingly downloaded Chinese implants onto their smartphones, allowing Beijing to monitor their communications.Kevin Mandia of FireEye, Sudhakar Ramakrishna of SolarWinds and Brad Smith of Microsoft testified last month in a Senate Intelligence Committee hearing on the Russian hacking.Credit…Drew Angerer/Agence France-Presse, via Pool/Afp Via Getty ImagesThe Chinese attack on Microsoft’s servers used four zero-days flaws in the email software. Security experts estimated on Friday that as many as 30,000 organizations were affected by the hacking, a detail first reported by the security writer Brian Krebs. But there is some evidence that the number could be much higher.AdvertisementContinue reading the main story More

  • in

    How Investigative Journalism Flourished in Hostile Russia

    #masthead-section-label, #masthead-bar-one { display: none }Aleksei NavalnyNavalny’s Life in OppositionKremlin AnxietyCourt DecisionWhat Will Yulia Navalnaya Do?Putin’s ‘Palace’AdvertisementContinue reading the main storySupported byContinue reading the main storythe media equationHow Investigative Journalism Flourished in Hostile RussiaA new wave of news outlets has used conventional, and unconventional, methods to pierce the veil of Putin’s power.Roman Dobrokhotov, the founder of The Insider, one of a wave of new investigative news outlets in Russia, said that Russia “is possibly the most transparent country in the world.”Credit…Pierre Crom/Getty ImagesFeb. 21, 2021Updated 5:25 p.m. ETThe Russian language has introduced a few words that in recent years have been widely used and misused in English: disinformation, kompromat, Novichok.But the one that blows my mind is “probiv.” It’s drawn from the word that means “to pierce” — or to enter something into a search bar. Today, it refers to the practice by which anyone can buy, for a couple of dollars on the social media app Telegram or hundreds on a dark web marketplace, the call records, cellphone geolocation or air travel records of anyone in Russia you want to track. Probiv is purchased by jealous spouses or curious business partners, and criminals of various sorts. But it has also been used recently, and explosively, by journalists and political activists, overlapping categories in Russia, where the chief opposition leader, Aleksei A. Navalny, often makes use of the tools of investigative journalism.Probiv is only one of the factors that have made Russia, of all places, the most exciting place in the world for investigative journalism. There is a new wave of outlets, many using more conventional sourcing to pierce the veil of President Vladimir V. Putin’s power. And there is a growing online audience for their work in a country where the state controls, directly or indirectly, all of the major television networks.The boom in independent journalism and criticism of the government has reached a level “unseen in our country since the end of the 1990s,” Denis Volkov, the deputy director of the Levada Center, a Russian public opinion research group, wrote recently.Probiv has been a crucial part of that revival. The practice was at the heart of a stunning revelation late last year by the international investigative collective Bellingcat, working with the Russian site The Insider and other partners, identifying the agents from a secret Russian spy unit who poisoned Mr. Navalny. A reporter spent “a few hundred euros worth of cryptocurrency” for a trove of data. Then, in a riveting piece of theater, Mr. Navalny, working with Bellingcat, called one of those agents, pretending to be a senior government official, and tricked him into a confession. When Mr. Navalny returned to Russia after his treatment in Germany, he was promptly jailed for a parole violation in a case he has called fabricated, and now faces transport to a penal colony.The irony is delicious, of Mr. Putin seeing his own tools of corruption and surveillance turned against him by the underpaid police and intelligence officials who put the secrets up for sale. “Whatever Putin does keeps backfiring,” said Maria Pevchikh, who runs the investigative unit at Mr. Navalny’s Anti-Corruption Foundation.Aleksei Navalny, the chief opposition leader to President Vladimir Putin, at a court hearing in Moscow this month. He faces transport to a penal colony.Credit…Babushkinsky District CourtProbiv is almost exclusively a Russian phenomenon. When Roman Dobrokhotov, who founded The Insider in 2013, was in Kyiv a couple of years ago, he said he asked a local journalist where he could find the phone records for someone he was researching and was surprised to learn that wasn’t a common practice. He said he realized that “Russia is possibly the most transparent country in the world,” adding, “If you have 10 bucks, you can find any information on anyone.”The New York Times and some other major Western outlets don’t use probiv, on the principle that you shouldn’t pay for stolen information. Many Russian journalists debate the ethics and legality of it as well. Bellingcat’s probiv maestro, Christo Grozev, has said he spent his own money — the independent news site Meduza estimated it at more than $13,000 — unmasking murderous Russian spies. (He told The Washington Post that his vendor assumed he was a criminal, and was horrified to learn he was a journalist.) Mr. Dobrokhotov said he wouldn’t buy probiv himself, but had analyzed the data Mr. Grozev purchased. (CNN and Der Spiegel also collaborated on the investigation of Mr. Navalny’s poisoning.) Other reporters said it’s routine to use for research, but not to cite in a finished article. But for some, those norms are shifting, too.“The audience doesn’t care whether you bought data or got it from a source,” said Roman Anin, the founder of iStories, a nonprofit Russian investigative site with a staff of 15. He said he had concluded that “since we live in a country where authorities are killing opposition leaders, let’s forget about these rules, because these stories are more important than our ethical rules.”A bot on Telegram that offers to identify the owner of any car.Credit…The New York TimesThat portal into Vladimir Putin’s world has opened even as some American journalists covering Russian interference in the 2016 election produced overheated essays and viral Twitter threads. They cast Mr. Putin, in the American imagination, as an all-powerful puppet master and everyone whose name ends in the letter “v” as his agent. But it was actual Russians, running their websites on the margins of legality or from abroad, who opened windows into Mr. Putin’s real Russia. And what they’ve uncovered is unbelievable personal corruption, shadowy figures behind international political interference and murderous but sometimes inept security services.Here are a few examples of these revelations:The investigative nonprofit outlet Proekt identified Mr. Putin’s “secret family,” and found that the woman it linked to the president had acquired some $100 million in wealth from sources tied to the Russian state.IStories used a trove of hacked emails to document how Mr. Putin’s former son-in-law built a huge fortune out of state connections.Bellingcat, which was founded in London, and the Russia-based Insider identified, by name and photograph, the Russian agents who poisoned the defector Sergei Skripal and his daughter in England in 2018.The media group RBC delved into the political machinery behind the troll farm interfering in U.S. elections.Meduza exposed deep corruption in all corners of the Moscow city government, down to the funeral business.Mr. Navalny’s foundation flew drones over Mr. Putin’s palace, a vast estate on the Black Sea that Mr. Navalny labeled “the World’s Biggest Bribe” in a scathing, mocking nearly two-hour video he released on his return to Russia last month. The video has been viewed more than 100 million times on YouTube.There’s a tendency in parts of the American media right now to reflexively decry the rise of alternative voices and open platforms on social media, seeing them solely as vectors for misinformation or tools of Donald J. Trump. Russia is a potent reminder of the other side of that story, the power of these new platforms to challenge one of the world’s most corrupt governments. That’s why, for instance, Mr. Navalny was a vocal critic of Twitter’s decision to ban Mr. Trump, calling it an “unacceptable act of censorship.”The new Russian investigative media is also resolutely of the internet. And much of it began with Mr. Navalny, a lawyer and blogger who created a style of YouTube investigation that draws more from the lightweight, meme-y formats of that platform than from heavily produced documentaries or newsmagazine investigations.Mr. Navalny doesn’t cast himself as a journalist. “We are using investigative reporting as a tool to achieve our political ends,” his aide, Ms. Pevchikh, said. (One convention they don’t follow: getting comment from the target of an investigation.) Indeed, his relationship with the independent journalists can be complicated. Most are careful to maintain their identity as independent actors, not activists. They criticize him, but also message him their stories, hoping he’ll promote them to his own vast audience, and he publicly criticizes them, in turn, for being too soft on the Kremlin.The new news outlets learned from Mr. Navalny as well. Many of them have imitated his style on YouTube. And he proved that certain lines could be crossed. What’s more, they all undoubtedly benefit from the homogeneity of the television networks. Imagine how much YouTube you would watch if the only news channels available were Fox News, Newsmax and OAN.The traffic they see online also tells them they’re connecting.For Roman Badanin, the founder of Proekt, reporting on Mr. Putin’s hidden life has been a career-long obsession.Credit…James Hill for The New York Times“I see the numbers and I think that all this is not in vain,” said Roman Badanin, the founder of Proekt, for whom Mr. Putin’s hidden life has been a career-long obsession. (A confusingly high percentage of the founders of these new outlets are named Roman.) In a particularly surreal moment this month, the young woman who Proekt suggested was Mr. Putin’s daughter said — in a conversation on the social audio app Clubhouse with the reporter who wrote the article — that she was “grateful” for all the attention his reporting had brought … to her Instagram account.Mr. Badanin, who modeled Proekt on the American nonprofit news organization ProPublica, said he had begun to see another sign of intense interest: financial support from his audience. About a third of the budget that supports a staff of 12, he said, now comes from donations averaging $8, mirroring the global trend toward news organizations relying on their readers. In Russia, some of this is still nascent. For instance, a colleague in Russia, Anton Troianovski, tells me that there’s a cafe near the Kurskaya Metro station where you can add to your bill a donation to MediaZona, which was founded by two members of the protest group Pussy Riot to hold the Russian justice system to account. But the protests against Mr. Navalny’s imprisonment also seem to be driving support for independent media, a phenomenon that The Bell, another of the new independent websites, christened “the Navalny Effect.”That might help these outlets navigate a narrowing legal window in Mr. Putin’s decades-long game of cat-and-mouse with independent journalism. (The government is also struggling to balance its citizens’ love of the open internet with the threat it can pose to government power.)Many of the new outlets, along with BBC Russia, have drawn talent from a previous wave of independent voices that the government effectively put out of the investigations business. Some of the new outlets, like the Latvia-based Meduza, have their operations abroad. But many are incorporated overseas, even as their journalists live and work in Moscow. Some subsist on grants whose sources they keep confidential — a vulnerability the Russian government appears likely to exploit under a new law broadening restrictions on what it considers “foreign agents.”MediaZona’s editor, Sergei Smirnov, center, at a hearing at the Moscow City Court this month. He was arrested for retweeting a joke with an image that included the date and time of a protest.Credit…Moscow City Court Press OfficeIndeed, the sense of possibility is rivaled only by the sense of menace. Virtually every journalist I spoke to in Russia said they expected this period to end at any moment. In a particularly ominous sign, police arrested the editor of MediaZona, Sergei Smirnov, on Jan. 30 for retweeting a joke with an image that included the date and time of a protest. He was sentenced to 15 days in jail for violating the rules on holding public events, and journalists debated whether it was an incompetent mistake or a deliberate warning to his peers.“To be an independent journalist in Russia is like being a lobster in a pot,” said Meduza’s editor in chief, Ivan Kolpakov. “They are boiling you, but you don’t know exactly when you will die.”AdvertisementContinue reading the main story More

  • in

    Justice Dept. Is Said to Be Examining Stone’s Possible Ties to Capitol Rioters

    #masthead-section-label, #masthead-bar-one { display: none }Capitol Riot FalloutTracking the ArrestsVisual TimelineInside the SiegeMurder Charges?The Oath KeepersAdvertisementContinue reading the main storySupported byContinue reading the main storyJustice Dept. Is Said to Be Examining Stone’s Possible Ties to Capitol RiotersA full criminal investigation is far from certain, a person familiar with the inquiry said.Trump loyalists storming the Capitol on Jan. 6 in an effort to disrupt the certification of President Biden’s electoral victory.Credit…Jason Andrew for The New York TimesFeb. 20, 2021Updated 9:22 p.m. ETWASHINGTON — The Justice Department is examining communications between right-wing extremists who breached the Capitol and Roger J. Stone Jr., a close associate of former President Donald J. Trump, to determine whether Mr. Stone played any role in the extremists’ plans to disrupt the certification of President Biden’s electoral victory, a person familiar with the matter said on Saturday.Should investigators find messages showing that Mr. Stone knew about or took part in those plans, they would have a factual basis to open a full criminal investigation into him, according to the person, who spoke on the condition of anonymity to discuss a continuing inquiry. While that is far from certain, the person said, prosecutors in the U.S. attorney’s office in Washington are likely to do so if they find that connection.Mr. Stone, a self-described fixer for Mr. Trump, evaded a 40-month prison term when the former president commuted his sentence in July and pardoned him in late December. Mr. Stone had been convicted on seven felony charges, which included obstructing a House inquiry into possible ties between the Trump campaign and Russia’s efforts to interfere in the 2016 election, lying to Congress and witness tampering. But that pardon does not protect Mr. Stone from future prosecutions.Justice Department officials have debated for weeks whether to open a full investigation into Mr. Stone, the person said. While Mr. Stone spoke at an incendiary rally a day before the attack, had right-wing extremists act as his bodyguards and stood outside the Capitol, those actions themselves are not crimes.But the F.B.I. also has video and other information to suggest that in the days leading to and including the day of the assault, Mr. Stone associated with men who eventually stormed the building and broke the law, said the person familiar with the inquiry. That has given investigators a window to examine communications to see whether Mr. Stone knew of any plans to breach the complex.The Washington Post earlier reported that the Justice Department was scrutinizing Mr. Stone’s possible ties to right-wing extremists at the Capitol.The New York Times has identified at least six members of the Oath Keepers, a far-right extremist group founded by former military and law enforcement personnel, who guarded Mr. Stone and were later seen inside the Capitol after a pro-Trump mob took the building by force. Prosecutors have charged two of those men with conspiring to attack Congress.A Justice Department spokesman declined to comment. Mr. Stone did not immediately respond to a request for comment.In a statement posted online this month, Mr. Stone denied any role in the “lawless attack” and said that members of the Oath Keepers “should be prosecuted” if there was proof that they had broken the law. He added that he “saw no evidence whatsoever of illegal activity by any members” of the group.A day after the Capitol assault, Michael Sherwin, the U.S. attorney in Washington, told reporters that he would not rule out pursuing charges against Mr. Trump or his associates for their possible role in inciting or otherwise encouraging the mob..css-1xzcza9{list-style-type:disc;padding-inline-start:1em;}.css-c7gg1r{font-family:nyt-franklin,helvetica,arial,sans-serif;font-weight:700;font-size:0.875rem;line-height:0.875rem;margin-bottom:15px;color:#121212 !important;}@media (min-width:740px){.css-c7gg1r{font-size:0.9375rem;line-height:0.9375rem;}}.css-rqynmc{font-family:nyt-franklin,helvetica,arial,sans-serif;font-size:0.9375rem;line-height:1.25rem;color:#333;margin-bottom:0.78125rem;}@media (min-width:740px){.css-rqynmc{font-size:1.0625rem;line-height:1.5rem;margin-bottom:0.9375rem;}}.css-rqynmc strong{font-weight:600;}.css-rqynmc em{font-style:italic;}.css-yoay6m{margin:0 auto 5px;font-family:nyt-franklin,helvetica,arial,sans-serif;font-weight:700;font-size:1.125rem;line-height:1.3125rem;color:#121212;}@media (min-width:740px){.css-yoay6m{font-size:1.25rem;line-height:1.4375rem;}}.css-1dg6kl4{margin-top:5px;margin-bottom:15px;}.css-16ed7iq{width:100%;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;-ms-flex-pack:center;justify-content:center;padding:10px 0;background-color:white;}.css-pmm6ed{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;}.css-pmm6ed > :not(:first-child){margin-left:5px;}.css-5gimkt{font-family:nyt-franklin,helvetica,arial,sans-serif;font-size:0.8125rem;font-weight:700;-webkit-letter-spacing:0.03em;-moz-letter-spacing:0.03em;-ms-letter-spacing:0.03em;letter-spacing:0.03em;text-transform:uppercase;color:#333;}.css-5gimkt:after{content:’Collapse’;}.css-rdoyk0{-webkit-transition:all 0.5s ease;transition:all 0.5s ease;-webkit-transform:rotate(180deg);-ms-transform:rotate(180deg);transform:rotate(180deg);}.css-eb027h{max-height:5000px;-webkit-transition:max-height 0.5s ease;transition:max-height 0.5s ease;}.css-6mllg9{-webkit-transition:all 0.5s ease;transition:all 0.5s ease;position:relative;opacity:0;}.css-6mllg9:before{content:”;background-image:linear-gradient(180deg,transparent,#ffffff);background-image:-webkit-linear-gradient(270deg,rgba(255,255,255,0),#ffffff);height:80px;width:100%;position:absolute;bottom:0px;pointer-events:none;}#masthead-bar-one{display:none;}#masthead-bar-one{display:none;}.css-1amoy78{background-color:white;border:1px solid #e2e2e2;width:calc(100% – 40px);max-width:600px;margin:1.5rem auto 1.9rem;padding:15px;box-sizing:border-box;}@media (min-width:740px){.css-1amoy78{padding:20px;width:100%;}}.css-1amoy78:focus{outline:1px solid #e2e2e2;}.css-1amoy78[data-truncated] .css-rdoyk0{-webkit-transform:rotate(0deg);-ms-transform:rotate(0deg);transform:rotate(0deg);}.css-1amoy78[data-truncated] .css-eb027h{max-height:300px;overflow:hidden;-webkit-transition:none;transition:none;}.css-1amoy78[data-truncated] .css-5gimkt:after{content:’See more’;}.css-1amoy78[data-truncated] .css-6mllg9{opacity:1;}.css-k9atqk{margin:0 auto;overflow:hidden;}.css-k9atqk strong{font-weight:700;}.css-k9atqk em{font-style:italic;}.css-k9atqk a{color:#326891;-webkit-text-decoration:none;text-decoration:none;border-bottom:1px solid #ccd9e3;}.css-k9atqk a:visited{color:#333;-webkit-text-decoration:none;text-decoration:none;border-bottom:1px solid #ddd;}.css-k9atqk a:hover{border-bottom:none;}Capitol Riot FalloutFrom Riot to ImpeachmentThe riot inside the U.S. Capitol on Wednesday, Jan. 6, followed a rally at which President Trump made an inflammatory speech to his supporters, questioning the results of the election. Here’s a look at what happened and the ongoing fallout:As this video shows, poor planning and a restive crowd encouraged by President Trump set the stage for the riot.A two hour period was crucial to turning the rally into the riot.Several Trump administration officials, including cabinet members Betsy DeVos and Elaine Chao, announced that they were stepping down as a result of the riot.Federal prosecutors have charged more than 70 people, including some who appeared in viral photos and videos of the riot. Officials expect to eventually charge hundreds of others.The House voted to impeach the president on charges of “inciting an insurrection” that led to the rampage by his supporters.“We are looking at all actors, not only the people who went into the building,” Mr. Sherwin said. Asked whether such targets would include Mr. Trump, who exhorted supporters during a rally near the White House on Jan. 6, telling them that they could never “take back our country with weakness,” Mr. Sherwin stood by his statement. “We’re looking at all actors,” he said. “If the evidence fits the elements of a crime, they’re going to be charged.”Another member of Mr. Sherwin’s office appeared to walk back those remarks soon after, suggesting that people in Mr. Trump’s orbit were unlikely to be investigated. But Mr. Sherwin later said he stood by his original statement.AdvertisementContinue reading the main story More

  • in

    Justice Dept. to Keep Special Counsel Investigating Russia Inquiry

    AdvertisementContinue reading the main storySupported byContinue reading the main storyJustice Dept. to Keep Special Counsel Investigating Russia InquiryJohn H. Durham will remain as special counsel even as the Biden administration requests a mass resignation of U.S. attorneys. The prosecutor investigating Hunter Biden’s taxes will also remain.The Justice Department will begin to ask dozens of remaining Trump-era U.S. attorneys to resign on Tuesday.Credit…Stefani Reynolds for The New York TimesFeb. 9, 2021Updated 8:03 a.m. ETWASHINGTON — The Justice Department will allow John H. Durham to remain in the role of special counsel appointed to investigate the origins of the Trump-Russia inquiry, even after he relinquishes his role as the top federal prosecutor in Connecticut, according to a senior Justice Department official.Mr. Durham is expected to step down as the U.S. attorney in Connecticut as early as Tuesday, when the Biden administration will begin to ask dozens of Trump-era U.S. attorneys who have not already quit to submit their resignations, the official said Monday.All of the remaining U.S. attorneys appointed by President Donald J. Trump and confirmed by the Senate will be asked to tender their resignations except for David C. Weiss, the U.S. attorney in Delaware who is overseeing the tax fraud investigation into President Biden’s son Hunter Biden. Acting Attorney General Monty Wilkinson called Mr. Weiss on Monday evening and asked him to remain in office, according to the official.It is common for new presidents to replace U.S. attorneys en masse, and the request for resignations has long been expected. But Mr. Durham’s and Mr. Weiss’s investigations had created delicate situations for the Biden administration, which is seeking to restore the Justice Department’s image of impartiality.It is not clear exactly when the resignations, 56 in all, will take effect, or when their replacements can be confirmed by the Senate. The resignations were reported earlier by CNN.The confirmation hearing for Judge Merrick B. Garland, Mr. Biden’s nominee for attorney general, is not expected to begin for two weeks, according to a person briefed on the matter. The process has been slowed by the tumultuous transition from the Trump administration and by the second impeachment trial of Mr. Trump, which begins on Tuesday.Since the spring of 2019, Mr. Durham has been investigating whether any Obama administration officials broke the law when they examined the Trump campaign’s potential ties to Russian efforts to interfere in the 2016 presidential election.The New WashingtonLive UpdatesUpdated Feb. 9, 2021, 9:53 a.m. ETBiden will spend the day focused on the stimulus package and his push to increase the minimum wage to $15.Conservative media, the apparatus that fed Trump’s power, is facing a test, too.Trump’s trial is expected to be brief but may have lasting political repercussions.Both Mr. Trump and the attorney general at the time, William P. Barr, had publicly said they were certain that Mr. Durham would uncover grave offenses, if not outright criminal behavior, that supported the idea that the Russia investigation was a plot created to sabotage Mr. Trump.But Mr. Durham never lived up to their expectations. The only criminal case Mr. Durham has brought was against Kevin E. Clinesmith, a former lower-level F.B.I. lawyer, who falsified information in an email from the C.I.A. that the bureau used to renew a wiretap order that targeted Carter Page, a onetime Trump campaign aide. In the weeks before the 2020 election, Mr. Trump and his supporters expressed outrage that the Durham inquiry had not produced anything useful to Mr. Trump’s campaign efforts.In October, Mr. Barr secretly appointed Mr. Durham to serve as special counsel to continue his work. The move gave Mr. Durham independence from a possible Biden administration and made it very difficult for a new attorney general to end his investigation, all but ensuring the Durham inquiry would live on after Mr. Trump left office.“In advance of the presidential election, I decided to appoint Mr. Durham as a special counsel to provide him and his team with the assurance that they could complete their work, without regard to the outcome of the election,” Mr. Barr wrote in a letter that he submitted to Congress in December.Dozens of Mr. Trump’s U.S. attorneys have already resigned, in the weeks before and after the election, leaving those offices in the hands of acting officials. While Mr. Durham and several more U.S. attorneys are expected to join them this week, that cohort will not include the leaders of the largest, most prominent federal prosecutor’s offices: Audrey Strauss, the U.S. attorney in Manhattan, who was appointed to her position by the courts, and Michael R. Sherwin, the U.S. attorney in Washington, who is an acting official and was not confirmed by the Senate.Both Ms. Strauss and Mr. Sherwin were elevated to their roles amid upheaval and controversy that stemmed from Mr. Barr’s handling of politically delicate cases involving Mr. Trump.Ms. Strauss was made the acting U.S. attorney after her boss, Geoffrey S. Berman, angered the White House with his handling of cases against Mr. Trump’s associates and ultimately refused to leave when Mr. Barr tried to replace him. The standoff between the two men ended when Mr. Barr allowed Ms. Strauss, a registered Democrat, to lead the office. Federal judges in her district, exercising a rarely used power, formally appointed her to the position in December.Mr. Sherwin was tapped to lead the Washington office after his predecessor was removed amid a contentious decision by Mr. Barr to force prosecutors to lower a sentencing recommendation for one of Mr. Trump’s allies, Roger J. Stone Jr. Mr. Sherwin has since emerged as the face of the Justice Department’s sprawling investigation into the Jan. 6 siege of the Capitol by a pro-Trump mob.Mr. Sherwin could remain at the department to work on the Capitol riots investigation, even after the administration nominates a new U.S. attorney, according to a person with knowledge of the deliberations.AdvertisementContinue reading the main story More