Monday, June 05, 2023

Noted in Passing: Found Dead in His Supermax Prison Cell/UnResponsive: KGB Mole Robert P. Hanseen

Robert Philip Hanssen was an American Federal Bureau of Investigation agent who spied for Soviet and Russian intelligence services against the United States from 1979 to 2001. His espionage was described by the Department of Justice as "possibly the worst intelligence disaster in U.S. history". --- Wikipedia 



Eric O'Neill, former FBI officer
Listen to Eric O'Neill, former FBI agent, in the True Spies podcast Gray Suit & The Ghost


EXPOSING KGB AGENTS

Hanssen was suspected of leaking critical US intelligence. In one deadly instance in 1985, the FBI believed Hanssen exposed three KGB agents working for the Americans. They were deported and arrested. Two were executed.. . .

The undercover had to be techie as the operation involved cybersecurity. They’d also need an ‘unknown’ so Hanssen didn’t suspect he was under surveillance. Eric O’Neill, at the time a computer-savvy 27-year-old, fit the bill.

Article Ad


CODE NAME: WEREWOLF

FBI code names are given, not chosen, and O'Neill's alias was 'Werewolf' after an episode at the FBI Academy bar where O'Neill had climbed up on a table, threw back his head and howled at a full moon. Hanssen was 'Gray Day'.

“My role in Operation Gray Suit was to work undercover with Robert Hanssen in a newly established division in the FBI called the Information Assurance Section,” O’Neill recalled. “He thought we were doing the job of cybersecurity, but my covert role was to gather information about Hanssen and determine whether he was the spy.”

O’Neill started his career as a government investigations specialist - a surveillance ‘ghost’ - so he knew about clandestine techniques and disguises. Normally he’d use a fake identity but, in this case, O’Neill would need to rely on his Werewolf shape-shifting skills to go undercover disguised as himself. He’d also need to keep the stress inside. His wife would potentially be exposed to Hanssen and the KGB, but he couldn’t tell her.


Robert Hanssen, KGB spy
Hanssen was nicknamed ‘Dr. Death’ for his love of black clothing


O’Neill was walking a high wire every day on the ninth floor of the FBI’s D.C. headquarters. It was the line between suspicion and paranoia. He had his own FBI handler, but it was just O’Neill and Hanssen together all day, every day, sharing two rooms: the main pit where Eric sat with the computers, and Hanssen’s office.

“We could barely fit in there with Hanssen's ego,” O’Neill said.

Gray Suit and the Ghost podcast on True Spies


Roger Moore as 007
Hanssen thought of himself as a suave, 007-like agent


FOR YOUR EYES ONLY

Hanssen was a James Bond aficionado. He even had the Walther PPK gun and was determined to live the 007 lifestyle. Operationally, however, he struggled in the field. Fortunately he was a brilliant analyst, but also a classic narcissist who thought he was working below his station in life. 

Vanity and dissatisfaction - two ingredients that often lead to betrayal and spying. The third ingredient was money. Hanssen married up and aimed to appear affluent. He’d been selling secrets to the Russians to fund the illusion for more than 20 years.

While it was mind-numbing to hear Hanssen’s bravado, O’Neill needed to keep him talking, hoping he’d incriminate himself. Eventually, they bonded. That’s when O’Neill began taking risks, slipping in and out of Hanssen’s office, going through his computer disks or checking anything Hanssen left it behind. 

Ryan Phillippe as Eric O'Neill in the movie
Ryan Phillippe stars as Eric O'Neill in Breach

TECHNICAL DIFFICULTIES

O’Neill suspected Hanssen’s PalmPilot - a device he talked about more than his wife - was likely the ‘smoking gun’ that would reveal all. So, the FBI came up with a ruse to get Hanssen out of the office without his beloved Palm IIIx. 

An FBI assistant director - one Hanssen didn't like - threw down the gauntlet by challenging Hanssen to a shooting competition with a $20 bet. With Hanssen safely down at the range, O’Neill grabbed the PalmPilot, a floppy disk, and a data card from Hanssen’s bag and ran down three flights of steps where the FBI tech team were ready to make a copy. They’d break the encryption later.

“They're starting to do the work and it's slowly moving,” O’Neill said. “As this is happening, I get another page: I don't know what happened. Out of pocket. Probably coming to you.”

Hanssen was returning early. The FBI tech team thrust the PalmPilot in O’Neill’s hand with a warning: "Run." Back in the office, O’Neill made a beeline for Hanssen’s bag and realized there were four pockets. “And I've opened all four and I have three devices and I have no clue which pocket it went into.”

With his heart slamming into his chest, O’Neill did the only thing he could - he guessed. Hanssen already had the blood of two KGB agents on his hands. Would he spare O’Neill? What if Hanssen shared his suspicions with the KGB and potentially arranged an ‘accident’. Instead, Hanssen barged into the room, barked a few orders, and left. Days later, Hanssen made his final ‘dead drop’, passing intelligence to the Russians. The FBI caught him in the act.

The dead drop location for Hanssen's Russian contacts
The Foxstone Park ‘dead drop’ where Hanssen left FBI documents hidden in a garbage bag

END GAME

In March 2002, Hanssen admitted guilt on 15 counts of espionage and agreed to help the FBI to avoid the death penalty. He died while still in prison in June 2023. Hanssen didn’t explain why he carried on spying for Moscow when he no longer needed the money but Eric O’Neill thinks he knows the answer.

It was the thing that made him feel that he was the best at something in the world. No one was better,” O’Neill said. “And he knew that it was going to make him immortal. And it did.”


****


Ex-FBI counterintelligence officer 
Eric O’Neill is a SPYEX consultant, lawyer, and an expert on cybersecurity, investigation, and security. For further information please contact SPYEX.


>

ISRAELI PARAGON GRAPHITE SPYWARE: Locked Out Of NSO Group’s Pegasus Spyware, DEA Purchases Exploits From Its Non-Union, Israeli Equivalent | Techdirt report and other news sources

 After all "...the DEA has demonstrated it’s willing to throw tax dollars at other Israeli malware companies formed by former Israeli intelligence agents, apparently assuming international criticism lightning won’t strike twice, as 9to5Mac reports, citing earlier reporting by the Financial Times.



Locked Out Of NSO Group’s Pegasus Spyware, DEA Purchases Exploits From Its Non-Union, Israeli Equivalent

from the pegasus,-paragon:-tomato,-tomahto dept

First off, let’s just clear one thing up: the headline is a Simpson’s reference, not a dog whistle aimed at unions and/or the Jewish population of Israel.

Facts in evidence:

BACKGROUND INSERT:
The Jerusalem Post
Despite banning NSO, US using other Israeli spyware owned by Ehud Barak
The DEA is using a spyware called Graphite, developed by the Israeli Paragon company, according to a new report.
.
Dec 8, 2022

2 Here's more 


TECHDIRT REPORT CONTINUES...
Let’s face it: the DEA doesn’t care what anybody thinks of it. It will continue to get funded. It will continue to say incredibly stupid shit. It will continue to gain the attention and support of alarmists. And it will continue to seek out the spyware it desires to carry out its mission, which appears to be “lose the war on drugs for decades in a row.”

The administration can blacklist, criticize, and strongly suggest federal agencies not do business with shady exploit hawkers. None of these things will have an effect on the DEA, which will continue to do what it wants because Congress as a whole is too cowardly to sign off on anything indicating the agency has done more harm than good since its inception.

With NSO Group (and one of its prominent competitors) currently blacklisted by the US Commerce Department, the DEA must search elsewhere for phone exploits. But it’s not willing to search elsewhere, much less hold off for just a bit to make sure its newest malware partner isn’t just another NSO — a company stockpiling accelerants and dumpsters in hopes of setting its own reputation on fire within the next few months or years.

Instead, the DEA has demonstrated it’s willing to throw tax dollars at other Israeli malware companies formed by former Israeli intelligence agents, apparently assuming international criticism lightning won’t strike twice, as 9to5Mac reports, citing earlier reporting by the Financial Times.

The US government banned the use of NSO’s Pegasus spyware 18 months ago, but a new report today says that at least one government agency is using very similar malware from a rival company: Paragon Graphite.

Graphite reportedly has the same capabilities as Pegasus, and the US Drug Enforcement Administration (DEA) is said to be using it …

The Financial Times report (paywalled) contains more details. But the details are unsurprising.

According to four of those people, the US Drug Enforcement and Administration Agency is among the top customers for Paragon’s signature product nicknamed Graphite.

The malware surreptitiously pierces the protections of modern smartphones and evades the encryption of messaging apps like Signal or WhatsApp, sometimes harvesting the data from cloud backups — much like Pegasus does.

Paragon was set up by Ehud Schneorson, the retired commander of Unit 8200, the Israeli army’s elite signals intelligence arm. According to people familiar with the company, which includes ex-Prime Minister Ehud Barak on its board, has secured investment from two US-based venture capital firms, Battery Ventures and Red Dot.

Locked out of securing contracts with the disgraced NSO Group, the DEA has decided to go with its closest analogue. It’s another Israeli malware company selling a product that has the same amount of syllables (Paragon) as NSO’s flagship exploit, Pegasus. All that’s missing is a couple of years of negative press coverage.

And that’s good enough for the DEA, which will undoubtedly weather yet another scandal once it’s shown Paragon is no more trustworthy than NSO.

I’m not being glib or facile. 
  • We have yet to see an Israeli exploit developer formed by former Israeli intelligence officers steer clear of scandal
  • While it’s true these former government employees are good at their job (as far as exploit development is concerned), they seem universally unwilling to prevent the world from becoming a worse place to live. 
  • Universally, these companies court and cater to known human rights abusers, providing them with powerful tools to further their evil aims.

If there’s anything positive to glean from this reporting, it’s this: Paragon — at least for the moment — is steering clear of selling to the many of the known human rights abusers NSO Group catered to. But everyone has to turn a profit — especially companies beholden to foreign investors. And while US investors certainly don’t want to be linked to human rights abuses, they also want to see a return on their investment, which might mean Paragon will be expected to start selling to the countries that want these exploits the most… which are also the ones most willing to target journalists, activists, opposition leaders, and anyone sympathizing with those being targeted." 

RELATED 

NOTIZIE

USA bandisce Pegasus di NSO, ma acquista software spia Paragon Graphite


empo di lettura: 2 minuti.

(Introduzione) Circa 18 mesi fa, il governo degli Stati Uniti ha vietato l’uso del software spia Pegasus di NSO Group. Nonostante ciò, un nuovo rapporto afferma che almeno un’agenzia governativa sta utilizzando un malware molto simile proveniente da un’azienda concorrente: Paragon Graphite.

NOTIZIE

USA bandisce Pegasus di NSO, ma acquista software spia Paragon Graphite

Condividi questo contenuto

Tempo di lettura: 2 minuti.Il software spia Pegasus di NSO Group è stato bandito dagli Stati Uniti, tuttavia, una nuova indagine rivela che un’agenzia governativa sta utilizzando un malware molto simile prodotto da un concorrente, Paragon Graphite.

Pubblicato

  

il

 

Pegasus: da arma di sorveglianza a minaccia per la sicurezza nazionale

NSO Group produce un software spia chiamato Pegasus, venduto a governi e agenzie di law enforcement. Questo software è in grado di sfruttare vulnerabilità zero-day (ovvero vulnerabilità sconosciute ad Apple) acquistate da hacker, rendendo possibile lanciare attacchi zero-click, ovvero attacchi che non richiedono alcuna interazione da parte dell’utente bersaglio. Basta ricevere un determinato iMessage per consentire a un iPhone di essere compromesso, con i dati personali dell’utente esposti.

Nel 2021, il governo degli Stati Uniti ha dichiarato questo spyware una minaccia per la sicurezza nazionale, vietandone l’uso all’interno del paese sia da organizzazioni pubbliche che private. Il Bureau of Industry and Security (BIS) del Dipartimento del Commercio ha aggiunto la società israeliana alla Entity List, vietando l’importazione, l’esportazione o il trasferimento dei prodotti dell’azienda all’interno degli Stati Uniti.

Governo USA utilizza Paragon Graphite

Nonostante il divieto su Pegasus, un rapporto del Financial Times sostiene che il governo degli Stati Uniti utilizza un software spia quasi identico: Graphite di Paragon. Secondo fonti dell’industria, l’Agenzia per la lotta alla droga (DEA) degli Stati Uniti è tra i principali clienti del prodotto di punta di Paragon, soprannominato Graphite.

Questo malware penetra subdolamente le protezioni degli smartphone moderni ed elude la crittografia di app di messaggistica come Signal o WhatsApp, raccogliendo talvolta i dati dai backup su cloud – proprio come fa Pegasus.

La DEA non ha rilasciato commenti diretti, ma è stato affermato che l’agenzia ha acquistato Graphite per l’utilizzo da parte dei partner di law enforcement in Messico nella lotta ai cartelli della droga.' 

US govt banned NSO's Pegasus, but said to buy rival spyware Paragon Graphite ... The US government banned the use of NSO's Pegasus spyware 18 ...
9to5Mac · 9to5Mac · 6 days ago
... information about the Drug Enforcement Administration's use of Graphite, a spyware tool produced by the Israeli company Paragon.
Al Mayadeen English · Al Mayadeen English · Dec 29, 2022

Filed Under: 
Companies: nso groupparagon graphite

NO CAPTAIN ONBOARD