Irish Hacking Suspect Freed in Wake of FBI Sting

By Shawn Pogatchnik

Dublin -  An Irish computer hacker accused of breaking into the email account of Ireland's top cybersecurity cop, then using its contents to eavesdrop on American and British anti-hacking detectives, was released without charges Wednesday.

Irish police said they were preparing a new evidence file for state prosecutors to use against Donncha O Cearbhaill. He's been arrested and released once before over alleged hacking attacks in Ireland last year.

FBI affidavits identified the 19-year-old Trinity College chemistry student as the Internet infiltrator responsible for recording and posting online a Jan. 17 trans-Atlantic conference call between American and British anti-hacking detectives.

The U.S. District Court in Manhattan, acting on FBI affidavits, issued indictments Tuesday against O Cearbhaill, two Britons, another Irishman and a Chicago man over their alleged role in a string of cyber attacks on several U.S. agencies and companies committed by an Anonymous hacker subgroup called Lulz Security, or LulzSec. The FBI built its case using the hackers' alleged leader, Sabu, as a turncoat informant who drew out incriminating online admissions from the others.

Hackers claiming allegiance to the amorphous Anonymous movement offered a defiant reply Wednesday by defacing dozens of Web sites connected to Internet defense firm Panda Security. The Anonymous activists justified their attacks citing Panda's links to law enforcement. The Bilbao, Spain-based company said its main site wasn't compromised.

Hackers from Anonymous also said they knocked out the Vatican's Web site Wednesday afternoon in a broad protest against Catholic doctrine, past and present, as well as the chronic cover-up of child abuse by clergy.

O Cearbhaill walked free from Terenure police station in south Dublin after a 24-hour interrogation period, the maximum permitted under Irish law for suspected hacking crimes.

Such releases are typical in Ireland, where state prosecutors can take months, even years, to mull whether to file charges.

He made no public comments following his release. His father John Carroll, a councilman in rural County Offaly, also declined comment.

The other Irish citizen indicted, Galway university student Darren Martyn, remained free Wednesday and conversed freely with followers on his Twitter account, in which he describes himself as a reformed "blackhat," slang for a criminal hacker.

Martyn said the FBI had got his age wrong — he's also just 19, not 25 — and he intended to keep working on his own Internet and school projects in expectation of potentially imminent arrest. He declined AP requests for an interview.

The U.S. court has indicted Martyn on two counts of hacking, with a potential 10-year prison sentence for each count, while O Cearbhaill faces one count of hacking and one count of disclosing an unlawfully intercepted wire communication, offenses that combined carry a maximum 15-year sentence.

Irish police arrested both O Cearbhaill and Martyn in September after their online noms de guerre claimed responsibility for a hacking attack on the Web site of Fine Gael, the major political party in Ireland's government. They were both released and files of evidence prepared for their potential prosecution, but they have yet to be charged over the Fine Gael attack.

According to the affidavit by FBI Special Agent George Schultzel, O Cearbhaill decided to crack the email codes of his recent police captors.

While Schultzel doesn't identify them by name, he testified that O Cearbhaill was able to crack into the private email accounts of two detectives in the Irish police's Computer Crime Investigation Unit, including its commander — and found a security gold mine because both detectives had been forwarding security-sensitive emails from their police accounts.

The FBI said it seized records of both Irish detectives' email accounts and found they'd been illegally accessed 146 times.

The affidavit reports that O Cearbhaill told his LulzSec contact Sabu Jan. 9 he had "just got into the iCloud for the head of a national cybercrime unit. I have all his contacts and can track his location 24/7." In a footnote, Schultzel identifies O Cearbhaill's target as the Irish police's cybercrime supervisor.

The Associated Press requested an interview Wednesday with the Computer Crime Investigation Unit's director, Detective Inspector Paul Gillen. He and the police force declined the request, citing their ongoing investigation.

The FBI affidavit suggests Gillen shipped a key email from the FBI — listing the invited officials and phone passwords for their Jan. 17 conference call — from his police email account to his private one.

The 15-minute discussion, and the list of security officials, both were leaked on to the Internet. In one telling moment, an FBI official asked about progress on investigating the two Irish hackers, O Cearbhaill and Martyn: "Is anyone on from Ireland?" Silence followed.

Internet security experts said they found it hard to believe that the head of a nation's cybersecurity unit would ship such a sensitive email to a poorly protected private account, then not bother to participate in the conference call.

"It's obviously deeply embarrassing," said Graham Cluley, a technology consultant for data security company Sophos. "It's a boo-boo. I would hope that more sensitive information isn't being shared via his personal account."

FBI: Irish Nisstep Led to Conference Call Leak

By Raphael Satter

London - An Irish police officer's email blunder led to the spectacular leak of a sensitive conference call between the FBI and Scotland Yard, U.S. law enforcement said Tuesday.

An indictment unsealed in a New York court alleges that a teenager linked to the Lulz Security group of hackers was able to eavesdrop on the call after an unnamed officer with Ireland's national police force forwarded a work message to his insecure personal email account.

The email, which apparently originated from the FBI's Timothy Lauster, invited dozens of law enforcement officers from across Europe and the United States to coordinate their efforts against LulzSec and its amorphous umbrella group, Anonymous.

The FBI's indictment said that 19-year-old Donncha O'Cearrbhail intercepted the email and used the information in it to access and secretly record the Jan. 17 call, which hackers subsequently broadcast across the Internet.

The indictment said O'Cearrbhail was charged with one count of computer hacking conspiracy, and one count of intentionally disclosing an unlawfully intercepted wire communication.

O'Cearrbhail was one of five people charged in a multinational operation targeting hackers linked to Lulz Security. His indictment was unsealed on Tuesday as authorities revealed the group's ringleader had secretly become an FBI informant and turned against his comrades.

A spokesman for the Irish police, known as the Garda Siochana, refused to comment either on the details of the O'Cearrbhail charge or on the nature of the email blunder.

There appear to be only two Garda-linked names in Lauster's email: Paul Gillen and Colm Gallagher.

Neither officer returned messages seeking comment.

NYPD Monitored Muslim Students All Over Northeast

By Chris Hawley

 

New York - One autumn morning in Buffalo, N.Y., a college student named Adeela Khan logged into her email and found a message announcing an upcoming Islamic conference in Toronto.

Khan clicked "forward," sent it to a group of fellow Muslims at the University at Buffalo, and promptly forgot about it.

But that simple act on Nov. 9, 2006, was enough to arouse the suspicion of an intelligence analyst at the New York Police Department, 300 miles away, who combed through her post and put her name in an official report. Marked "SECRET" in large red letters, the document went all the way to Commissioner Raymond Kelly's office.

The report, along with other documents obtained by The Associated Press, reveals how the NYPD's intelligence division focused far beyond New York City as part of a surveillance program targeting Muslims.

Police trawled daily through student websites run by Muslim student groups at Yale, the University of Pennsylvania, Rutgers and 13 other colleges in the Northeast. They talked with local authorities about professors in Buffalo and even sent an undercover agent on a whitewater rafting trip, where he recorded students' names and noted in police intelligence files how many times they prayed.

Asked about the monitoring, police spokesman Paul Browne provided a list of 12 people arrested or convicted on terrorism charges in the United States and abroad who had once been members of Muslim student associations, which the NYPD referred to as MSAs. They included Jesse Morton, who this month pleaded guilty to posting online threats against the creators of the animated TV show "South Park." He had once tried to recruit followers at Stony Brook University on Long Island, Browne said.

"As a result, the NYPD deemed it prudent to get a better handle on what was occurring at MSAs," Browne said in an email. He said police monitored student websites and collected publicly available information in 2006 and 2007.But documents show other surveillance efforts continued for years afterward.

"I see a violation of civil rights here," said Tanweer Haq, chaplain of the Muslim Student Association at Syracuse University. "Nobody wants to be on the list of the FBI or the NYPD or whatever. Muslim students want to have their own lives, their own privacy and enjoy the same freedoms and opportunities that everybody else has."

In recent months, the AP has revealed secret programs the NYPD built with help from the CIA to monitor Muslims at the places where they eat, shop and worship. The AP also published details about how police placed undercover officers at Muslim student associations in colleges within the city limits; this revelation has outraged faculty and student groups.

Though the NYPD says it follows the same rules as the FBI, some of the NYPD's activities go beyond what the FBI is allowed to do.

Kelly and New York City Mayor Michael Bloomberg repeatedly have said that the police only follow legitimate leads about suspected criminal activity.

But the latest documents mention no wrongdoing by any students.

In one report, an undercover officer describes accompanying 18 Muslim students from the City College of New York on a whitewater rafting trip in upstate New York on April 21, 2008. The officer noted the names of attendees who were officers of the Muslim Student Association.

"In addition to the regularly scheduled events (Rafting), the group prayed at least four times a day, and much of the conversation was spent discussing Islam and was religious in nature," the report says.

Praying five times a day is one of the core traditions of Islam.

Jawad Rasul, one of the students on the trip, said he was stunned that his name was included in the police report.

"It forces me to look around wherever I am now," Rasul said.

But another student, Ali Ahmed, whom the NYPD said appeared to be in charge of the trip, said he understood the police department's concern.

"I can't blame them for doing their job," Ahmed said. "There's lots of Muslims doing some bad things and it gives a bad name to all of us, so they have to take their due diligence."

City College criticized the surveillance and said it was unaware the NYPD was watching students.

"The City College of New York does not accept or condone any investigation of any student organization based on the political or religious content of its ideas," the college said in a written statement. "Absent specific evidence linking a member of the City College community to criminal activity, we do not condone this kind of investigation."

Browne said undercover officers go wherever people they're investigating go. There is no indication that, in the nearly four years since the report, the NYPD brought charges connecting City College students to terrorism.

Student groups were of particular interest to the NYPD because they attract young Muslim men, a demographic that terrorist groups frequently draw from. Police worried about which Muslim scholars were influencing these students and feared that extracurricular activities such as paintball outings could be used as terrorist training.

The AP first reported in October that the NYPD had placed informants or undercover officers in the Muslim Student Associations at City College, Brooklyn College, Baruch College, Hunter College, City College of New York, Queens College, La Guardia Community College and St. John's University. All of those colleges are within the New York City limits.

A person familiar with the program, who like others insisted on anonymity because he was not authorized to discuss it, said the NYPD also had a student informant at Syracuse.

Police also were interested in the Muslim student group at Rutgers, in New Brunswick, New Jersey. In 2009, undercover NYPD officers had a safe house in an apartment not far from campus. The operation was blown when the building superintendent stumbled upon the safe house and, thinking it was some sort of a terrorist cell, called the police emerency dispatcher.

The FBI responded and determined that monitoring Rutgers students was one of the operation's objectives, current and former federal officials said.

The Rutgers police chief at the time, Rhonda Harris, would not discuss the fallout. In a written statement, university spokesman E.J. Miranda said: "The university was not aware of this at the time and we have nothing to add on this matter."

Another NYPD intelligence report from Jan. 2, 2009, described a trip by three NYPD officers to Buffalo, where they met with a high-ranking member of the Erie County Sheriff's Department and agreed "to develop assets jointly in the Buffalo area, to act as listening posts within the ethnic Somalian community."

The sheriff's department official noted "that there are some Somali Professors and students at SUNY-Buffalo and it would be worthwhile to further analyze that population," the report says.

Browne said the NYPD did not follow that recommendation. A spokesman for the university, John DellaContrada, said the NYPD never contacted the administration. Sheriff's Departments spokeswoman Mary Murray could not immediately confirm the meeting or say whether the proposal went any further.

The document that mentions Khan, the University at Buffalo student, is entitled "Weekly MSA Report" and dated Nov. 22, 2006. It explains that officers from the NYPD's Cyber Intelligence unit visited the websites, blogs and forums of Muslim student associations as a "daily routine."

The universities included Yale; Columbia; the University of Pennsylvania; Syracuse; New York University; Clarkson University; the Newark and New Brunswick campuses of Rutgers; and the State University of New York campuses in Buffalo, Albany, Stony Brook and Potsdam; Queens College, Baruch College, Brooklyn College and La Guardia Community College.

Khan was a board member of the Muslim Student Association at the University at Buffalo at the time she received the conference announcement, which went out to a mailing list of Muslim organizations.

The email said "highly respected scholars" would be attending the Toronto conference, but did not say who or give any details of the program. Khan says she never went to the conference, was not affiliated with it and had no idea who was speaking at it.

Khan says she clicked "forward" and sent it to a Yahoo chat group of fellow students.

"A couple people had gone the year prior and they said they had a really nice time, so I was just passing the information on forward. That's really all it was," said Khan, who has since graduated.

But officer Mahmood Ahmad of the NYPD's Cyber Intelligence Unit took notice and listed Khan in his weekly report for Kelly. The officer began researching the Toronto conference and found that one of the speakers, Tariq Ramadan, had his U.S. visa revoked in 2004. The U.S. government said it was because Ramadan had given money to a Palestinian group. It reinstated his visa in 2010.

The officer's report notes three other speakers. One, Siraj Wahaj, is a prominent but controversial New York imam who has attracted the attention of authorities for years. Prosecutors included his name on a 3 ½-page list of people they said "may be alleged as co-conspirators" in the 1993 World Trade Center bombing, though he was never charged.

The other two are Hamza Yusuf and Zaid Shakir, two of the nation's most prominent Muslim scholars. Both have lectured at top universities in the U.S.. Yusuf met with President George W. Bush at the White House following the 2001 terrorist attacks.

There is no indication that the investigation went any further, or that Khan was ever implicated in anything. Browne, the NYPD spokesman, said students like her have nothing to fear from the police.

"Students who advertised events or sent emails about regular events should not be worried about a 'terrorism file' being kept on them. NYPD only investigated persons who we had reasonable suspicion to believe might be involved in unlawful activities," Browne said.

But Khan still worries about being associated with the police report.

"It's just a waste of resources, if you ask me," she said. "I understand why they're doing it, but it's just kind of like a Catch-22. I'm not the one doing anything wrong."

The university said it was unaware its students were being monitored.

"UB does not conduct this kind of surveillance and if asked, UB would not voluntarily cooperate with such a request," the university said in a written statement. "As a public university, UB strongly supports the values of freedom of speech and assembly, freedom of religion, and a reasonable expectation of privacy."

The same Nov. 22, 2006, report also noted seminars announced on the websites of the Muslim student associations at New York University and Rutgers University's campus in Newark, New Jersey.

Browne said intelligence analysts were interested in recruiting by the Islamic Thinkers Society, a New York-based group that wants to see the United States governed under Islamic law. Morton was a leader of the group and went to Stony Brook University's MSA to recruit students that same month.

"One thing that our open source searches were interested in determining at the time was, where (does the) Islamic Thinkers Society go — in terms of MSAs for recruiting," Browne said.

Yale declined comment. The University of Pennsylvania did not immediately respond to requests for comment. Other colleges on the list said they worried the monitoring infringed on students' freedom of speech.

"Like New York City itself, American universities are admired across the globe as places that welcome a diversity of people and viewpoints. So we would obviously be concerned about anything that could chill our essential values of academic freedom or intrude on student privacy," Columbia University spokesman Robert Hornsby said in a written statement.

Danish Munir, an alumnus adviser for the University of Pennsylvania's Muslim Student Association, said he believes police are wasting their time by watching college students.

"What do they expect to find here?" Munir said. "These are all kids coming from rich families or good families, and they're just trying to make a living, have a good career, have a good college experience. It's a futile allocation of resources."

Justice Dept. Ignored Law Requiring Annual Submission of Surveillance Reports to Congress

United States - For five years, the U.S. Department of Justice failed to inform Congress about the surveillance by federal law enforcement of certain types of email and telephone information, despite a lawful requirement to do so.

 

Using what’s known as pen register and trap-and-trace capturing, agencies such as the Federal Bureau of Investigation, the Drug Enforcement Administration, the Marshals Service and the Bureau of Alcohol, Tobacco, Firearms and Explosives increasingly snooped on Internet communications by the tens of thousands from 2004 to 2008.

 

During this period, the frequency of this wiretapping method nearly doubled, from 10,885 to 21,152, according to Wired’s Danger Room.

 

But the Justice Department did not report as required to lawmakers on this activity. The Senate Judiciary Committee, which is supposed to receive these reports, also was not pro-active in reminding the agency that it had failed to comply with federal law.

 

Types of information collected through pen registers and trap-and-trace capturing include phone numbers of calls made and received, as well as the senders and recipients (and sometimes the subject lines) of email messages.

 

With a collective straight face, the Justice Department has claimed that the failure to submit the annual surveillance reports to Congress was an oversight or a “mistake.” In 2004, the Justice Department turned in its reports for 1999-2003, and in December 2010 it posted its reports online for the years 2004-2009.

FBI Warns that People Who Use AOL at Internet Cafés Could be Terrorists

By Noel Brinkerhoff, David Wallechinsky

 

United States - America Online users beware: If you access your AOL account from a computer at an Internet café, your name may wind up on a terrorist-watch list.

 

According to the Federal Bureau of Investigation (FBI), AOL users at public computer venues are just one possible type of suspicious person that business owners need to keep tabs on.

 

The FBI has been distributing flyers to paintball centers, banks, dive shops and even tattoo shops to educate them on how to spot potential terrorist activities.

 

In addition to noting who is accessing AOL, Internet café owners should watch out for and report customers who always pay for their service with cash, attempt to shield their screen from other people in the room, communicate through video games or use VOIP, all of which are signs of a would-be terrorist, says the FBI.

 

The flyers do remind business owners and their employees that “It is important to remember that just because someone’s speech, actions, beliefs, appearance, or way of life is different; it does not mean that he or she is suspicious.”

Anonymous Hacks FBI/Scotland Yard Calls

United States/Great Britain - Like a scene from a movie, the FBI and Scotland Yard were shown to be fools when it comes to hacking groups.

Anonymous, the infamous hacking group which has taken on credit card companies, cybersecurity firms, the Church of Scientology, and even the music industry, has taken on two of the world's top investigative agencies and won.

A 15 minute long recording has been released which revealed a plan to track and prosecute the collective hacking group and another, the lesser-known LulzSec.  Saying the hack "was intended for law enforcement officers only and was illegally obtained [and] a criminal investigation is under way to identify and hold accountable those responsible," the FBI has said it is unsure exactly how the hack happened.

It seems Anonymous somehow intercepted an email from an FBI agent to other law enforcement agencies throughout the world, including Ireland, the Netherlands, Sweden, and France.

So what's the conservation about? In case you don't have time to listen to it, it's about 15 minutes, I will sum it up for you.  They talk about two people who are supposedly linked to Anonymous - British citizens Ryan Cleary and Jake Davis - and the details they gathered against them and a few other unnamed suspects.

FBI to Create Spy System: AP

By David Wallechinsky and Noel Brinkerhoff

 

United States - The Federal Bureau of Investigation (FBI) is creating a spy system that will allow it to monitor social media websites, including Facebook and Twitter.

 

FBI analysts are hoping to pick up tips about future terrorist threats by examining “publicly available” material from Facebook, Twitter and other social media sites, as well as national and local television news, including Fox News, CNN and MSNBC. The bureau intends to zero in on keywords relating to terrorism, surveillance operations, online crime and other criminal matters. It also hopes to better “track hurricane paths and timelines for landfall and other natural disasters.”

 

Applicants who believe they can provide the system the FBI is seeking must be able to view tweets in at least 12 languages and translate them into English. They must also have the “Ability to display video feeds from traffic cameras to monitor traffic patterns, obstructions, bottle necks, protestors, and flash mobs.”

 

The Central Intelligence Agency has already been spying on Facebook and Twitter, as well as news outlets, as part of its effort to glean intelligence on upcoming threats or overseas upheaval, such as revolutions, before they begin. Doug Naquin, director of the CIA’s Open Source Center, told the Associated Press that the best analysts are those who, like the heroine of The Girl with the Dragon Tattoo, know “how to find stuff other people don’t know exists.”

Anti-war Activist Speaks Against U.S. Treatment of Iran

Minneapolis - Anti-war activist Jess Sundin, one of several activists who were raided by the FBI in an attempt to find links between anti-war activists and groups in Colombia and the Middle East, condemned what she calls an “act of war against Iran.”

“The anti-war movement needs to take U.S. threats against Iran very seriously,” said Sundin. “Over the past several months we have seen more military deployments of U.S. forces into the Persian Gulf, a new round of U.S. sanctions - with more threatened from Europe - and the murder of Iranian scientists. The situation is looking a lot like the run-ups to the U.S. wars on Iraq. In and of themselves, the U.S. sanctions on Iran are an act of war. The sanctions are designed to harm Iran’s economy and cause human suffering on a mass scale.”


Despite the treatment she is facing from the FBI as well as a Chicago grand jury, she continues to speak out against state repression. When questioned about repression from the FBI she said “As peace activists, we need to continue to speak out against all U.S. wars and we need to condemn government repression directed against the anti-war movement, like the attack on Carlos Montes in Los Angeles. He is a veteran leader of the Chicano movement, who speaks out against U.S. intervention abroad. The government wants to put him in jail, and we say drop the charges. “People in this country can’t afford to let the government pick our ‘enemies.’ The State Department is trying to demonize Iran and pave the way towards another war. We have to speak out and say, ‘Hands off Iran.’”

Why Does the FBI Treat Videotaping Corporate Animal Abuse As Terrorism?

By Noel Brinkerhoff

 

Activists who expose animal abuses on factory farms face the risk of being prosecuted as domestic terrorists.

 

Using the Animal Enterprise Terrorism Act (AETA), which was signed into law by President George W. Bush in November 2006, the Federal Bureau of Investigation (FBI) has kept files on animal rights activists who have recorded incidents of cruelty towards animals on large farming operations.  Now, though, a bureau task force has even recommended trying these individuals as terrorism suspects.

 

Activist Ryan Shapiro, who used the Freedom of Information Act to discover what the FBI was up to, told the Los Angeles Times that “it’s simply outrageous to consider civil disobedience as terrorism.”

 

“Civil disobedience” he added, “has a long and proud place in our nation’s history, from Martin Luther King to Occupy Wall Street, and the AETA takes that kind of advocacy that we celebrate from the civil rights movement and turns it into a terrorist event.”

 

The Center for Constitutional Rights has filed a lawsuit challenging the AETA as unconstitutional, claiming the law is too vague and is discouraging political activism.

Army Expert Forgot About C-4 in Bag, Court Papers By Jeremy Pelofsky

Midland, Texas - A U.S. Army Special Forces engineer arrested for trying to take explosives aboard a U.S. commercial airliner in Texas told authorities he had forgotten they were in his bag and did not notice them when he packed, according to court papers filed on Tuesday.

Trey Scott Atwater, who had been deployed to Afghanistan three times, was charged with trying to board an aircraft with explosives when he tried to fly out of Midland, Texas, on December 31 to Dallas, according to an FBI affidavit filed in federal court.

He told authorities that his Special Forces Team procedure was to carry at least two blocks of C-4 on any operation and when he packed his bags to leave from Afghanistan in April 2011 he did not recall the explosives being there.

Atwater grabbed the bag out of his garage for his Christmas-time trip from North Carolina to Texas as a carry-on and put his children's items in it, but he did not see the C-4 explosives inside, the affidavit said.
He said that he had not used any C-4 in training since his return to the United States.
When he left North Carolina on December 24, airport screening officers confiscated a smoke grenade from his bag, according to the affidavit.

Atwater is an Army Sergeant First Class in the elite Green Berets, assigned as an instructor at the John F. Kennedy Special Warfare Center and School at Ft. Bragg, North Carolina, where he is a member of the Special Forces Engineers, according to the Army Special Operations Command.