Russian Info, Cyber and Disinformation (Jan-June 2017).

[OUTLAW 09]

Russian TV-station offered youths in #Rinkeby #Sweden money to do some "action" in front of the camera.

This was on Feb 22, a few days after the statement about #Sweden by @realDonaldTrump and two days after the riots

http://www.radio24syv.dk/udvalgte-ny...lave-ballade/#

[OUTLAW 09]

Russian TV-station offered youths in #Rinkeby #Sweden money to do some "action" in front of the camera.

This was on Feb 22, a few days after the statement about #Sweden by @realDonaldTrump and two days after the riots

http://www.radio24syv.dk/udvalgte-ny...lave-ballade/#

Swedish teenagers offered cash by Russian TV to riot. We are in an information war - time for Europe to fight back.
http://www.thelocal.se/20170306/rink...to-bribe-them#

Youths were offered 44 USDs each for their "actions"....

[OUTLAW 09]

Just in the initial reading of the WL CIA data bump ...have myself have spotted 14 statements/sentences that are blatantly FSB/GRU planted disinformation.....

NOTICE just how this flanking WL support attempts to tie CIA to the Russian hacking tools THUS the DNC hacking was not Russia but a CIA false flag attack.....ALL DESIGNED to hurt Trump.....

NOTICE now the so called "Deep State" conspiracy myth gets it support...

In the Trump/Breitbart.com/Bannon world "Deep State" is being led by Obama....

zerohedge‏#
@zerohedge
The CIA has stolen malware produced by Russia, and can misdirect attribution to Moscow
http://www.zerohedge.com/news/2017-0...astern#…

BUT WAIT......
Live Monitor‏#@amlivemon 2h
2 hours ago
Pure Russian disinformation

Live Monitor‏#@amlivemon 18m
18 minutes ago
I know both CIA & NSA well..the manipulative info mixed with disinformation selectively leaked by @Wikileaks is pure FSB propaganda #Vault7

REALLY not much to see in this data dump....exploits will be read about......necessary patches patched...hands washed and onto a new day...and a new cycle of exploits and zero days...

[OUTLAW 09]

Comments reference the WL CIA data dump from yesterday attempting to tie CIA to the Russian DNC hack and support the Trump and company thesis of being attacked by the "Deep State"....

Tuesday, March 07, 2017
Some comments on the Wikileaks CIA/#vault7 leak

I thought I'd write up some notes about the Wikileaks CIA "#vault7" leak. This post will be updated frequently over the next 24 hours.


The CIA didn't remotely hack a TV. The docs are clear that they can update the software running on the TV using a USB drive. There's no evidence of them doing so remotely over the Internet. If you aren't afraid of the CIA breaking in an installing a listening device, then you should't be afraid of the CIA installing listening software.


The CIA didn't defeat Signal/WhattsApp encryption. The CIA has some exploits for Android/iPhone. If they can get on your phone, then of course they can record audio and screenshots. Technically, this bypasses/defeats encryption -- but such phrases used by Wikileaks arehighly misleading, since nothing related to Signal/WhatsApp is happening. What's happening is the CIA is bypassing/defeating the phone. Sometimes. If they've got an exploit for it, or can trick you into installing their software.


There's no overlap or turf war with the NSA. The NSA does "signals intelligence", so they hack radios and remotely across the Internet. The CIA does "humans intelligence", so they hack locally, with a human. The sort of thing they do is bribe, blackmail, or bedazzle some human "asset" (like a technician in a nuclear plant) to stick a USB drive into a slot. All the various military, law enforcement, and intelligence agencies have hacking groups to help them do their own missions.


The CIA isn't more advanced than the NSA. Most of this dump is child's play, simply malware/trojans cobbled together from bits found on the Internet. Sometimes they buy more advanced stuff from contractors, or get stuff shared from the NSA. Technologically, they are far#behind the NSA in sophistication and technical expertise.


The CIA isn't hoarding 0days. For one thing, few 0days were mentioned at all. The CIA's techniques rely upon straightforward hacking, not super secret 0day hacking Second of all, they aren't keeping 0days back in a vault somewhere -- if they have 0days, they are using them.


The VEP process is nonsense.#Activists keep mentioning the "vulnerability equities process", in which all those interested in 0days within the government has a say in what happens to them, with the eventual goal that they be disclosed to vendors. The VEP is nonsense. The activist argument is nonsense. As far as I can tell, the VEP is designed as busy work to keep people away from those who really use 0days, such as the NSA and the CIA. If they spend millions of dollars buying 0days because it has that value in intelligence operations, they aren't going to destroy that value by disclosing to a vendor. If VEP forces disclosure, disclosure still won't happen, the NSA will simply stop buying vulns.


There's no false flags. In several places, the CIA talks about making sure that what they do isn't so unique, so it can't be attributed to them. However, Wikileaks's press release hints that the "UMBRAGE" program is deliberately stealing techniques from Russia to use as a false-flag operation. This is nonsense. For example, the DNC hack attribution was live command-and-control servers simultaneously used against different Russian targets -- not a few snippets of code.


This hurts the CIA a lot. Already, one AV researcher has told me that a virus they once suspected came from the Russians or Chinese can now be attributed to the CIA, as it matches the description perfectly to something in the leak. We can develop anti-virus and intrusion-detection signatures based on this information that will defeat much of what we read in these documents. This would put a multi-year delay in the CIA's development efforts. Plus, it'll now go on a witch-hunt looking for the leaker, which will erode morale. Update:#Three extremely smart and knowledgeable people who I respect disagree, claiming it won't hurt the CIA a lot. I suppose I'm focusing on "hurting the cyber abilities" of the CIA, not the CIA as a whole, which mostly is non-cyber in function.


The CIA is not cutting edge.#A few days ago, Hak5 started selling "BashBunny", a USB hacking tool more advanced than the USB tools in the leak. The CIA seems to get most of their USB techniques from open-source projects, such Travis Goodpseeds "GoodFET" project.


The CIA isn't spying on us.#Snowden revealed how the NSA was surveilling all Americans. Nothing like that appears in the CIA dump. It's all legitimate spy stuff (assuming you think spying on foreign adversaries is legitimate).


Update #2: How is hacking cars and phones not SIGINT (which is the NSA's turf)?[*]#The answer is via physical access. For example, they might have a device that plugs into the ODBII port on the car that quickly updates the firmware of the brakes. Think of it as normal spy activity (e.g. cutting a victim's brakes), but now with cyber.

[OUTLAW 09]

Stop Fake @StopFakingNews

Tracking a Mysterious Missile Launcher Inside an Information War

http://www.stopfake.org/en/tracking-...ormation-war/#

[OUTLAW 09]

Kremlin bots instantly pounced on WikiLeaks dump, pushing false narrative that CIA framed Russia for hacking the DNC
http://thebea.st/2neCyPG

WikiLeaks' CIA dump came with a huge dezinformatsiya campaign that seemed poised and ready to exploit it.

“That narrative emerged far too quickly to have been organic...That usually speaks to some sort of automation or coordination.”

[OUTLAW 09]

BREAKING: U.S. intel, law enforcement officials have known of CIA security breach that led to latest WikiLeaks dump since end of last year.

Same timeframe as the Russian hacking in the US election...BUT they are assuming leakage came from a Contractor much like Snowdon was....

[OUTLAW 09]

Swedish teenagers offered cash by Russian TV to riot. We are in an information war - time for Europe to fight back.
http://www.thelocal.se/20170306/rink...to-bribe-them#

Youths were offered 44 USDs each for their "actions"....

How can there be "national security" when a US Congressman basically openly supports white supremacy and Russian disinformation.

Russian TV-station offered youths in #Rinkeby #Sweden money to do some "action" in front of the camera.

This was on Feb 22, a few days after the statement about #Sweden by @realDonaldTrump and two days after the riots
http://www.radio24syv.dk/udvalgte-ny...lave-ballade/#

Swedish teenagers offered cash by Russian TV to riot. We are in an information war - time for Europe to fight back.
http://www.thelocal.se/20170306/rink...to-bribe-them#

Youths were offered 44 USDs each for their "actions"....

NOW we have US Congressman King.......
Steve King‏
Verified account
#
@SteveKingIA
Steve King Retweeted Voice of Europe
I visited this "No-Go Zone" in Sweden and felt the hostility of the Muslims only Rinkeby area.

Voice of Europe‏#
@V_of_Europe
Cameraman gets run over by a car in one of Sweden's 45 no-go zones. Even the police is afraid.

HAS Congressman King fully understood he was used and abused by Russian propaganda OR did HE openly choose to support that Russian propaganda effort....

NOTICE who is now supporting Congressman King....

Former KKK Imperial Wizard David Duke endorsing Congressman @SteveKingIA's call for racial purity.

QUOTE
David Duke
Just in case you are moving....sanity reigns supreme in Iowa's 4 congressional district
MAGA

[OUTLAW 09]

I have been drumbeating the use of Russian bot networks to amplify proTrump social media support....

And again I am not alone in seeing this Russian activity.....

Forbes
✔
@Forbes
Only 3 million of Trump's 20 million Twitter followers are active domestic users
http://on.forbes.com/60148r68O

So who is driving the remaining 17M Twitter followers....actually computer servers and humans in the pay of Russian companies and or the Russian Intelligence Services...simple actually...

Just many Trump voters do not want to really accept that small fact of life...

[OUTLAW 09]

Over SIX MILLION of Trump's followers are fake. Paid-for Russian bots, perhaps?
https://www.twitteraudit.com/Realdonaldtrump


So again no Russian connections...

[OUTLAW 09]

NCI Agency @NCIAgency
.@NATO SecGen @jensstoltenberg: "In 2016, NATO dealt with an average of 500 cyber incidents per month, a 60% increase on 2015."

[OUTLAW 09]

This is the story that's got @RussianEmbassy so afraid. Unmaking Peter Chayanov, Russian hacker and @Wikileaks host
https://patribotics.wordpress.com/20...-their-claims/


Wikileaks is Connected to Russia – Despite Their Claims
March 12, 2017 ~ patribotics

By Laurelai Bailey

Wikileaks has time and time again denied any connections to Russia or the Russian state, but – like Donald Trump – they are lying. This weekend, it was exposed on Twitter that they acquired major Russian servers – from a known hacker – one week before the Podesta emails were released.

I will walk you through the proof, since its a little complex for non computer experts. So let’s start with a primer.

All websites on the internet have an address, much like houses in the real world. This address are usually names and things you recognize, like google.com or amazon.com. But behind that address there are a series of numbers, unique to each server known as internet protocol addresses. If you have ever had to log in to your wireless router, you wound up typing a number into your browser like 192.168.1.1, this is an IP address.

Now IP addresses have physical locations, in the real world, and tools exist to discover where those addresses are.

Wikileaks -like every other website – has servers and IP addresses behind the domain name “wikileaks.org”. When we do a command on a linux machine called “dig” we find out all of the IP addresses behind the domain name. Here is the output of the dig command. Don’t worry if you can’t understand this part – just scroll down to the rest of the article. The writing in the middle explains it, but for those that want proof, we need to list how we get from a to b.

dig wikileaks.org

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6_8.4 <<>> wikileaks.org

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4839

;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 8

;; QUESTION SECTION:

;wikileaks.org. IN A

;; ANSWER SECTION:

wikileaks.org. 600 IN A 95.211.113.154

wikileaks.org. 600 IN A 141.105.65.113

wikileaks.org. 600 IN A 141.105.69.239

wikileaks.org. 600 IN A 195.35.109.44

wikileaks.org. 600 IN A 195.35.109.53

wikileaks.org. 600 IN A 95.211.113.131

; ; AUTHORITY SECTION:

wikileaks.org. 1470 IN NS ns2.wikileaks.org.

wikileaks.org. 1470 IN NS ns1.wikileaks.org.

wikileaks.org. 1470 IN NS ns4.wikileaks.org.

wikileaks.org. 1470 IN NS ns3.wikileaks.org.

;; ADDITIONAL SECTION:

ns1.wikileaks.org. 80774 IN A 46.28.206.81

ns2.wikileaks.org. 83083 IN A 46.28.206.82

ns3.wikileaks.org. 80774 IN A 95.211.113.131

ns3.wikileaks.org. 80774 IN A 195.35.109.54

ns3.wikileaks.org. 80774 IN A 31.192.105.18

ns4.wikileaks.org. 80774 IN A 195.35.109.44

ns4.wikileaks.org. 80774 IN A 95.211.113.154

ns4.wikileaks.org. 80774 IN A 141.105.65.114

;; Query time: 20 msec

;; SERVER: 213.186.33.99#53(213.186.33.99)

;; WHEN: Fri Mar 10 16:21:37 2017

;; MSG SIZE rcvd: 327

Now the above might mostly seem like junk to you, if you don’t speak computer, so we’ll cut out everything not that’s not relevant and focus on what is relevant, namely, these two addresses:

wikileaks.org. 600 IN A 141.105.65.113

wikileaks.org. 600 IN A 141.105.69.239

When you look up these addresses, listed above, via a command known as “whois”, you can find their physical location in the real world.

organisation: ORG-MTL21-RIPE

org-name: Mir Telematiki Ltd

org-type: LIR

address: Barabannii pereulok 4/4

address: 107023

address: Moscow

address: RUSSIAN FEDERATION

phone: +7 495 369 9796

fax-no: +7 495 369 9796

mnt-ref: MTLM-MNT

mnt-ref: RIPE-NCC-HM-MNT

mnt-by: RIPE-NCC-HM-MNT

mnt-by: MTLM-MNT

abuse-mailbox: abuse@hostkey.ru

abuse-c: HA2800-RIPE

created: 2010-10-06T10:46:46Z

last-modified: 2016-09-30T12:14:19Z

source: RIPE # Filtered

This information is the same for both IP addresses, and if you notice the last modified date as “2016-09-30” that is when the IP address’s pointing to a server was changed. So we can safely bet that this is when wikileaks added these addresses to their systems.

In turn, this proves Wikileaks gained Russian hosting on September 30th 2016, one week before the Podesta emails were made public. Wikileaks got Russian Federation virtual addresses one week before the Podesta emails. Let that sink in.

Now the actual owner of the IP addresses is a man by the name of Peter Chayanov, whose IP addresses have hosted spammers and hackers, according to my sources, who work in internet backbone companies.

Chayanov’s IP space is a virtual equivalent of a bad neighborhood that makes you lock your car doors when you drive through it. So this further implies a connection to Wikileaks and Russian hackers. That sort of stuff is Chayanov’s day job. And, further, it’s important to remember, this web host also stays around at the consent of the Russian government despite (or because of?) being known cyber criminal hosts.

The other addresses I told you to ignore before? When you do a whois on wikileaks itself you get shown IP’s in Amsterdam and Zurich, ones that make much more sense to have since they are in countries with strong freedom of speech and transparency laws. Places you would want an organization like that in, but the Russian IP spaces, to be visible to you have to be dug for carefully to find them. They did a fairly good job obfuscating it, but the records will always be able to be found.

Mr. Chayanov did not disguise his hosting carefully enough. And when he was exposed this weekend on Twitter, he made matters worse by deleting his account at once.

So why would Wikileaks, a “transparency” org acquire hosting in a country thats known to assassinate whistleblowers? Especially ones that challenge Trumps presidency? It makes no sense for people who claim to be for transparency to take up virtual residence in an autocratic nation that might try to kill them. So why would they do it? Well, it’s pretty simple; they would only be there with the consent of the Russian government, ieVladimir Putin. He wants them to be there and allows them to be there.

Why would he do that? Sounds an awful lot like putting a rattlesnake in your own bed to keep the neighbors away. That is if wikileaks was as neutral and would leak against anyone like they claim. Putin might be an autocrat, but he isn’t an idiot.

He would not allow them there unless he got something out of it for himself, like immunity to being leaked against or by having influence over what gets leaked and when. Putin like all politicians is a self interested lout and acts in ways that keep him in power. Much like many other world leaders. So wikileaks dropping info on the US alone isn’t enough to allow them to stay, he knows he would be next on the leaking list.

So that strongly suggests Russia is getting some kind of favorable or special treatment. Its also likely that the CIA was already aware of this and that this is part of the information they base their claims of Russian interference on. When you see this alone its enough to strongly suggests collusion with the Russian government either directly or indirectly.

So it seems fairly sure to me that Wikileaks is now in bed with the Russian government in some form or fashion.

Will we shortly discover that Mr. Chayanov is also connected to Guccifer2?

[OUTLAW 09]

Over SIX MILLION of Trump's followers are fake. Paid-for Russian bots, perhaps?
https://www.twitteraudit.com/Realdonaldtrump

So again no Russian connections...

I keep going back to the idea tha national security has two elements....

1. internal and
2. external

Right now on the interna side we have seen a strong tendency of the Trump WH to draw in adviors from the White nationalist side with Miller and Bannon...Bannon sits in the NSC....and white nationalism is the vehicle used to project white supremacy......

This is a long read but well worth reading as it is well researched and goes to a serious question I have....

Just how is it possible that these large amounts of Russian controlled bots on the social media side WERE absolutely not detected by US tech giants??

WHY did it take European social media open source analysts and IT researchers to find what Twitter or FB or Instrgram should have seen first??

AND why has Twitter been so resistent in understanding the significance of these developments and downplays it at every opportunity....

http://www.motherjones.com/politics/...-tech-alt-righ...

Meet Silicon Valley's Secretive Alt-Right Followers
I investigated the role of "alt-techies" in the extremist movement emboldened by Trump.

Josh HarkinsonMar. 10, 2017 7:00 AM

Mother Jones Illustration; Marco Rullkoetter/Getty

Readers of The Right Stuff long knew that founder "Mike Enoch" had two main interests: technology and white supremacy. Posts on the neo-Nazi site have included discussion of "a new blogging platform built on node.js," while other less techie content has alluded to the "chimpout" in Ferguson, putting Jews in ovens, and Trump's "top-tier troll" of Jews on Holocaust Remembrance Day.

In January, Enoch was outed as Mike Peinovich, a Manhattan-based software engineer. His unmasking highlighted a lingering question about the racist far-right movement that rose to prominence with Donald Trump's election: What support might the so-called alt-right have among techies?

Ever since I began investigating the extremist groups lining up behind Trump last spring, several of their leaders have made big claims to me about an alt-right following in Silicon Valley and across the broader tech industry. "The average alt-right-ist is probably a 28-year-old tech-savvy guy working in IT," white nationalist Richard Spencer insisted when I interviewed him a few weeks before the election. "I have seen so many people like that." Andrew Anglin, the publisher of the neo-Nazi Daily Stormer, told me he gets donations from Silicon Valley, and that Santa Clara County, home to Apple and Intel, is his site's largest traffic source.

Chuck Johnson, the publisher of the conspiracy-mongering site Got News, said he gets lots of page views from the San Francisco Bay Area.
"If you even try to posit that racism and sexism aren't why women and minorities aren't making it, that it's some combination of talent and values, people's heads just explode."

After Peinovich was outed, he also insisted to me that many techies secretly identify with the alt-right, which he attributed to a backlash against the "corporate feminist and diversity agenda" of tech companies. "The fact that speaking up about this virtually guarantees career and social suicide, as in my case, shows why so many white males in tech would be attracted to the alt-right."

None of these alt-right figures would provide any data to support their claims. As I've reported, some alt-right sites have wildly overstated their reach. Moreover, the tech industry is renowned for its globalist outlook: Public-opinion surveys conducted by a Stanford political economist have found that rank-and-file workers in Silicon Valley exhibit less racial resentment and more favorable views toward most forms of immigration than average Americans.

Nonetheless, "alt-techies," as Spencer and others call them, do appear to play a role in a movement that first incubated in the backwaters of the internet and eventually spread online with the rise of Trump. Some heroes of the far right are associated with tech: They include former Breitbart News "tech editor" Milo Yiannopoulos; the infamous neo-Nazi hacker Andrew Auernheimer (a.k.a. Weev); and the video gaming vlogger Felix Arvid Ulf Kjellberg, whose "Pewdiepie" YouTube channel featuring Nazi-themed jokes has 54 million subscribers. (Last month Kjellberg apologized for the jokes and said he is not a Nazi.)

There are also successful figures in the tech industry who appeal to and have commingled with the alt-right: The DeploraBall, a gathering of far-right activists and conspiracy theorists during Trump's inauguration, was co-organized by software investor Jeff Giesea and attended by tech billionaire and Trump backer Peter Thiel.

San Francisco-based tech entrepreneur Curtis Yarvin is known for launching the pro-authoritarian "neoreactionary" movement and reportedly has been in contact with Trump's chief strategist, Steve Bannon. (Yarvin denies this.) Giesea and Yarvin, both of whom I interviewed, reject the "alt-right" label for its associations with white nationalism, yet they share the movement's disdain for the race and gender politics of the left. (Thiel's media representative did not respond to a request for comment from him.)

Continued...a long read.....

[OUTLAW 09]

Ukraine’s fight against fake news goes global

Countering Kremlin disinformation is one area where Kiev has the upper hand.

By Vijai Maheshwari
3/12/17, 10:30 PM CET

http://www.politico.eu/article/on-th...9d93-189575777