Category Archives: News

Mosul battle to extend as far as Syria and Yemen, former Iraqi PM Maliki says

Middle East Eye reports: Former Iraqi prime minister Nouri al-Maliki said that the campaign to liberate Islamic State-occupied Mosul would be only the first step to liberating other cities as far away as Syria and Yemen.

“Today, Iraq has launched an operation to liberate Mosul, but it is also one to liberate other cities,” Maliki said at a conference in Baghdad. “The ‘We are coming Nineveh’ operation also means, ‘We are coming Raqqa’; ‘We are coming Aleppo’; ‘We are coming Yemen’.”

The ex-prime minister was referring to the northern Iraqi province of Nineveh where Mosul is located.

“We are coming to all places where Muslims are being killed, where Islamic thought is being renounced,” he said. [Continue reading…]

Facebooktwittermail

Why it’s taking so long for the U.S. and its allies to finish off the ISIS in Libya

The Washington Post reports: A U.S. air campaign against Islamic State militants in Libya, which was supposed to be a brisk illustration of the effectiveness of U.S. support for local forces, has turned into an extended operation with no clear end in sight.

About 100 militants are believed to remain in the coastal city of Sirte, which in 2015 became the most important Islamic State stronghold outside of Iraq and Syria. They are holed up in a small, densely packed residential area. For months, U.S.-backed local militia fighters have struggled against militant defenses and sniper attacks; last week, 14 fighters were killed on one day alone.

The elusiveness of victory in Sirte underscores the challenges that continue to face U.S. efforts to defeat extremists from North Africa to Afghanistan: the limitations of local fighting forces, including inadequate battlefield support and poor morale, and the corrosive effects of local political feuds. [Continue reading…]

Facebooktwittermail

Clinton’s careful courtship of Muslim voters

The Atlantic reports from Alexandria, Virginia: This Democratic headquarters one warm October night could have been practically anywhere in the country. Volunteers crammed into a dingy, decrepit office suite, complete with fake wood paneling from the era when Hillary Clinton still wore bell-bottoms, filling up every space—crouched over rickety tables or into corners, reciting a script as they called worked through long lists of voters, checking to see if people were supporting Hillary Clinton and whether they’d be willing to volunteer.

The only clue that this was an unusual event was sartorial: Several women wore headscarves, and a man sported a stylish kaffiyeh. The phone bank is one of dozens of Muslims for Hillary events that the Clinton campaign has arranged this year, part of what the campaign contends is an unprecedented effort to court a small but growing population.

On Friday, the Clinton campaign released an ad featuring Khizr Khan, the father of U.S. soldier Humayun Khan, who was slain fighting in Iraq. The ad, set to air in seven battleground states, is notable for its direct invocation of Islam. Telling the story of his son’s death saving comrades, Khan says, “He was 27 years old, and he was a Muslim American. I want to ask Mr. Trump, would my son have a place in your America?”

 

Such an ad would have been unthinkable as recently as four years ago, as Barack Obama grappled with false rumors that he was a secret Muslim. It’s surprising even now, amid a national campaign that has seen direct demonization of Muslims. But Donald Trump’s decision to demonize Islam has created what the Clinton team sees as an opening, leading the Democrat to court Muslim votes more boldly and methodically than any predecessor. [Continue reading…]

Facebooktwittermail

ISIS after Mosul

Hassan Hassan writes: As an alliance of Iraqi and Kurdish forces pushes to retake the city of Mosul from the Islamic State, there should be no doubt about what the group plans to do next. It will fight to the bitter end to defend its most populous and symbolic stronghold. After all, it was in Mosul that Abu Bakr al-Baghdadi — the city’s leader for two years before he became the Islamic State’s leader in 2010 — declared a caliphate from the pulpit of an iconic 12th-century mosque.

If the Islamic State loses Mosul, the group has a clearly articulated contingency plan, a strategy it has frequently broadcast on multiple platforms for the past five months: inhiyaz, or temporary retreat, into the desert.

The word “inhiyaz” appeared in May, in the last speech delivered by Abu Muhammad al-Adnani, the group’s spokesman who was killed by an American airstrike in August. Mr. Adnani explained that territorial losses did not mean defeat and that militants would fight until the end and then retreat to the desert, preparing for a comeback, just as they did between 2007 and 2013.

Various Islamic State outlets picked up the theme. Al-Naba, the group’s newsletter, ran an article about the subject in August, recalling how the militants of the Islamic State of Iraq, the Islamic State’s predecessor, survived after they were driven out of Iraqi cities following the 2007 American troop surge and the tribal insurrection known as the Awakening. [Continue reading…]

Facebooktwittermail

From French soldier to ISIS spymaster

Michael Weiss writes: The photograph is nearly a decade old, but it is not difficult to imagine that the young man staring inscrutably into the camera, his face bathed in the white light of a flash, now looks much older. The clean-shaven teenager, about 16 or 17, with close-cropped black hair, probably has a long beard now. Gone will be the stylish patterned T-shirt he’s wearing, which looks like it was picked up at a local H&M. Ditto the blingy chain around his neck. If the ravages of time have been accelerated on this young face in the nine years since this portrait was taken then it is because the young man has got the blood of hundreds on his hands, blood that has been spilled in two capital cities of Europe.

The boy in the photograph, which a Western intelligence source shared exclusively with The Daily Beast on the condition that it is not published, is Abdelilah Himich, who U.S. and French intelligence officials have identified as the mysterious Abu Suleyman al-Firansi, the terror operative believed to have been a prime mover of the Paris and Brussels attacks over the last year, and arguably the single most important European in ISIS.

Much that was speculated about Abu Suleyman, pieced together from testimony of active informants inside the ISIS security branch he allegedly heads as well as from defectors from the organization—a game of terrorist telephone—missed some nuances, but otherwise was close to the mark. [Continue reading…]

Facebooktwittermail

The battle for Mosul: A precarious alliance takes on ISIS

Christoph Reuter reports: A thundercloud, heavy and dark gray. That is what it looks like from a distance. But the closer you get to Mosul from the south, the bigger and darker this cloud becomes. Instead of floating in the sky, it grows out of the ground, ultimately becoming a towering, opaque wall that swallowing entire villages, making them disappear into the darkness.

Driving to Mosul is a drive into the apocalypse. Or at least that’s what it feels like, with the gigantic clouds of smoke coming from burning oil wells, reservoirs and ditches — laid out by Islamic State over the last two years and now set alight one after the other. Although it would normally be a sunny midday in fall, the military jeeps coming from the other direction have their lights on.

The dark curtain is meant to keep the attackers’ jets and helicopters at bay; the smoke irritates the throat and causes headaches. An armada of over 30,000 soldiers and fighters from at least a half-dozen countries began a major offensive against the de-facto capital of the “caliphate” in northern Iraq last Monday. It is not only the biggest coalition to have assembled in the fight against Islamic State (IS), it is also the least predictable.

The jihadists can be expected to commit any number of heinous acts in the hopes of holding onto their most important city, which is home of many of its leaders. The attackers, meanwhile, are part of an extremely fragile alliance: The US Air Force and Special Forces are contributing enormous firepower that can react quickly to realities on the ground. On the ground, meanwhile, the two strongest forces eye each other with suspicion: The Peshmerga fighters from the Kurdish Regional Government and the primarily Shiite militias of the so-called Popular Mobilization Forces. They forces were recently declared by decree to be Iraqi state troops, but are ultimately controlled by the Iranian Revolutionary Guards. The Shiite militias are feared, and have been accused of systematically expulsing, torturing and killing Sunnis. Furthermore, under the guise of fighting IS, they are suspected of conducting large-scale sectarian cleansing. [Continue reading…]

Facebooktwittermail

Aleppo erupts in protests following temporary ceasefire

Riad Alarian reports: After the ceasefire negotiated by the United States and Russia collapsed on September 19, 2016, the Syrian regime and its Russian allies steadily intensified their ongoing bombing campaign against Aleppo. Since then, as many as 740 civilians have been killed, while at least 1900 others have been injured, according to the Syrian Observatory for Human Rights.

On October 20, 2016, the Syrian and Russian governments instituted another (extremely short-lived) ceasefire. According to Reuters, the “unilateral ceasefire backed by Russia had come into force to allow people to leave besieged eastern Aleppo, a move rejected by rebels who say they are preparing a counter-offensive to break the blockade.”

The purpose behind this ostensibly humanitarian gesture is, however, deeply sinister, and will likely end in even more bloodshed. Sharif Nashashibi, a London-based Syria analyst, argues in News Deeply that “as with previous cease-fires, this is an escalation – part of an overall military solution to the conflict – masquerading as diplomacy and humanitarianism.”

In Nashashibi’s view, the ceasefire’s purpose “is to facilitate the capture of eastern Aleppo by encouraging rebels to abandon their positions, before ramping up the previous onslaught under the pretext that those remaining in rebel-held areas are either fighters or sympathizers.” It should come as absolutely no surprise, therefore, that rebels and residents of the city alike are holding their ground and choosing not to leave.

The city’s residents not only refused to evacuate, but also mobilized a series of protests echoing the very same demands that sparked the uprising against President Bashar Al-Assad five years ago, namely, for freedom and liberty from the tyranny of the regime and its allies.

While these protests have received little attention, they are hardly new. During periods of calm in besieged areas of Syria, protests usually break out. In March of this year, for example, Aleppo, Idlib, and Hama were engulfed in mass protests calling for the fall of the Assad regime, both in between and during periods of constant shelling. [Continue reading…]

 

Facebooktwittermail

Iranian human rights activist given six years in prison for hand-written unpublished story

IranWire reports: On Tuesday, October 4, writer and human rights activist Golrokh Ebrahimi received a strange phone call ordering her to present herself at Evin Prison by noon on Wednesday evening to start serving her prison sentence. By law, authorities much convey such an order by way of a written summons. But that was not the only unusual thing about the call.

“The arresting officer used the phone of Navid Kamran, a codefendant of mine,” Ebrahimi told IranWire hours before presenting herself at Evin. “They had gone to his shop to arrest him and used his phone. When I answered the call, the man who introduced himself as an agent of the Centre for the Implementation of Sentences said that I must present myself to serve the sentence. I said that I had received no official summons or a call from Evin Court. ‘You are using my friend’s phone to call me and it might be a joke,’ I said. ‘I don’t know you and I have no idea who is talking to me.’ He answered back that ‘you might think this is a joke but we are here to arrest your friend and you must present yourself at Evin’s court right away.’ I said that I could not get there by the end of business hours but perhaps I could do it the next day. He said that I would be arrested if I did not present myself by the next day.”

Ebrahimi’s ordeal began when the Revolutionary Guards arrested her along with her husband, Arash Sadeghi, at his workplace in Tehran on September 6, 2014. The Guards had no arrest warrant, but took the couple to their home, ransacked the place, and confiscated their computers, CDs, and notes. Among the confiscated items was a story about the punishment, under Islamic law, of death by stoning. According to a report from Amnesty International, “The story describes the emotional reaction of a young woman who watches the film, The Stoning of Soraya M, which tells the true story of a young woman stoned to death for adultery — and becomes so enraged that she burns a copy of the Quran.” [Continue reading…]

Facebooktwittermail

Trump Organization is using horribly insecure email servers

Zack Whittaker reports: If you thought Former Secretary of State Hillary Clinton’s private email server was a mess, Donald Trump’s company is running email servers that look like a dumpster fire by comparison.

Security researcher Kevin Beaumont said in a tweet on Monday that the Trump Organization, the parent company of the alleged billionaire’s portfolio of realty, steaks, golf, and hotels, is running a set of email servers that are horribly outdated and long past the end-of-life, meaning they haven’t received security patches in over a year.

Beaumont said he found that the company’s email system is running the decade-old Windows Server 2003 and Internet Information Servers 6, both of which haven’t been supported in over a year.

Both sets of software are so old that Microsoft no longer patches even known security vulnerabilities. Instead, users should upgrade. Patches remain as one of the best ways for preventing hackers from exploiting security flaws.

A spokesperson for Trump, now the Republican presidential candidate, could not be reached on Tuesday. [Continue reading…]

Facebooktwittermail

Brexit: Leading banks set to pull out of UK early next year

The Guardian reports: Britain’s biggest banks are preparing to relocate out of the UK in the first few months of 2017 amid growing fears over the impending Brexit negotiations, while smaller banks are making plans to get out before Christmas.

The dramatic claim is made in the Observer by the chief executive of the British Bankers’ Association, Anthony Browne, who warns “the public and political debate at the moment is taking us in the wrong direction”.

A source close to Brexit secretary David Davis said he and the chancellor Philip Hammond had last week sought to offer reassurance that they were determined to secure the status of the City of London.

However, the government’s stated intention to take control of the freedom of movement into the UK is widely recognised among officials to be a hammer blow to any chance of retaining the present terms of trade for banks, particularly given the bellicose rhetoric of major politicians on the continent. [Continue reading…]

Facebooktwittermail

How massive DDoS attacks are undermining the Internet

NBC News reports: Andrew Komarov of InfoArmor told NBC News he didn’t see any sign of Russian involvement at all, whether state or private [in the “denial of service,” or DDoS, attacks that caused massive internet outages across the U.S. on Friday]. He noted that the botnet used in the attack, “Mirai,” was developed by an English speaker and that he had found no link between “Mirai” and the Russians, who have their own much more sophisticated methods.

He said the attacks seemed more consistent with the methods used by the hacking group known as Lizard Squad, two of whose members, both teens, were arrested earlier this month in the U.S. and the Netherlands and charged in connection with DDoS attacks.

Said Komarov, “We have some context, that because of similar victims, using Dyn, and also tactics, tools and procedures by threat actors, it may be a revenge for the past arrests of DDoS’ers in the underground, happened several weeks ago.”

Dmitri Alperovitch of Crowdstrike also expressed doubt about a link to the Russian government, and speculated the attacks might have to do with a recent interview that cybersecurity expert Brian Krebs did with Dyn mentioning Russian organized crime. Alperovitch said use of a botnet bears the hallmark of a criminal rather than state attack, and the target may simply have been Dyn, not the U.S.

Flashpoint, a private cybersecurity and intelligence firm, noted that the Krebs site was attacked in September by a Mirai botnet, and the Krebs site was among those attacked Friday. The hacker who attacked Krebs in September released the source code on the web earlier this month, and hackers have copied the code to create their own botnets.

Flashpoint said it had concluded that the Friday attacks were not mounted by hacktivists, a political group or a state actor. [Continue reading…]

TechCrunch reports: In the past few weeks, hackers have upped the DDoS stakes in a big way. Starting with the attack on KrebsonSecurity.com and increasing in severity from there, hundreds of thousands of devices have been used to perpetrate these actions. A number that dwarfs previous attacks by orders of magnitude.

While it isn’t yet confirmed, evidence points to the attack that we saw on Friday morning following this same playbook, but being perpetrated on a much larger scale, relying on Internet of Things (IoT) devices rather than computers and servers to carry out an attack.

In fact, in all likelihood an army of surveillance cameras attacked Dyn. Why surveillance cameras? Because many of the security cameras used in homes and business around the world typically run the same or similar firmware produced by just a few companies.

This firmware is now known to contain a vulnerability that can easily be exploited, allowing the devices to have their sights trained on targets like Dyn. What’s more, many still operate with default credentials — making them a simple, but powerful target for hackers.

Why is this significant? The ability to enslave these video cameras has made it easier and far cheaper to create botnets at a scale that the world has never seen before. If someone wants to launch a DDoS attack, they no longer have to purchase a botnet—they can create their own using a program that was dumped on the internet just a few weeks ago. [Continue reading…]

The New York Times reports: Dale Drew, chief security officer at Level 3, an internet service provider, found evidence that roughly 10 percent of all devices co-opted by Mirai were being used to attack Dyn’s servers. Just one week ago, Level 3 found that 493,000 devices had been infected with Mirai malware, nearly double the number infected last month.

Mr. Allen added that Dyn was collaborating with law enforcement and other internet service providers to deal with the attacks.

In a recent report, Verisign, a registrar for many internet sites that has a unique perspective into this type of attack activity, reported a 75 percent increase in such attacks from April through June of this year, compared with the same period last year.

The attacks were not only more frequent, they were bigger and more sophisticated. The typical attack more than doubled in size. What is more, the attackers were simultaneously using different methods to attack the company’s servers, making them harder to stop.

The most frequent targets were businesses that provide internet infrastructure services like Dyn. [Continue reading…]

Brian Krebs reports: The attack on DYN comes just hours after DYN researcher Doug Madory presented a talk on DDoS attacks in Dallas, Texas at a meeting of the North American Network Operators Group (NANOG). Madory’s talk — available here on Youtube.com — delved deeper into research that he and I teamed up on to produce the data behind the story DDoS Mitigation Firm Has History of Hijacks.

That story (as well as one published earlier this week, Spreading the DDoS Disease and Selling the Cure) examined the sometimes blurry lines between certain DDoS mitigation firms and the cybercriminals apparently involved in launching some of the largest DDoS attacks the Internet has ever seen. Indeed, the record 620 Gbps DDoS against KrebsOnSecurity.com came just hours after I published the story on which Madory and I collaborated.

The record-sized attack that hit my site last month was quickly superseded by a DDoS against OVH, a French hosting firm that reported being targeted by a DDoS that was roughly twice the size of the assault on KrebsOnSecurity. As I noted in The Democratization of Censorship — the first story published after bringing my site back up under the protection of Google’s Project Shield — DDoS mitigation firms simply did not count on the size of these attacks increasing so quickly overnight, and are now scrambling to secure far greater capacity to handle much larger attacks concurrently. [Continue reading…]

Facebooktwittermail

Senior administration official says Obama is ‘giving the Russians time to finish the job in Aleppo’

Josh Rogin writes: At last Friday’s National Security Council meeting on the Middle East, top Obama administration officials tabled any decisions on whether to increase the U.S. response to the ongoing Syrian and Russian aerial bombardment of civilians in Aleppo, The Post reported earlier this week. The administration prioritized discussing the new Iraqi-led offensive against the Islamic State in Mosul and the future offensive in Raqqa, for which planning is already underway.

But despite what Secretary of State John F. Kerry has called ongoing Syrian and Russian war crimes in Aleppo, there was no action on any of the several options discussed at lower-level administration meetings, including but not limited to limited strikes against the Assad regime’s air force or an increase in the quantity or quality of arms provided to the moderate Syrian rebels in the area.

One senior administration official pointed toward the slow pace of the bureaucracy in responding to the Aleppo crisis as evidence the White House has decided that Aleppo can’t be saved and therefore the United States should not try.

“They are giving the Russians time to finish the job in Aleppo, in part to tie the hands of the next president,” the official told me. [Continue reading…]

Facebooktwittermail

Inquiry finds Syrian government forces responsible for third gas attack

Reuters reports: An international inquiry found Syrian government forces responsible for a third toxic gas attack, according to a confidential report submitted to the U.N. Security Council on Friday, setting the stage for a showdown between Russia and western council members over how to respond.

The fourth report from the 13-month-long inquiry by the United Nations and the Organization for the Prohibition of Chemical Weapons (OPCW), the global chemical weapons watchdog, blamed Syrian government forces for a toxic gas attack in Qmenas in Idlib governorate on March 16, 2015, according to a text of the report seen by Reuters.

The third report by the inquiry in August blamed the Syrian government for two chlorine attacks – in Talmenes on April 21, 2014 and Sarmin on March 16, 2015 – and said Islamic State militants had used sulfur mustard gas.

The results set the stage for a Security Council showdown between the five veto-wielding powers, likely pitting Russia and China against the United States, Britain and France over how those responsible should be held accountable. [Continue reading…]

Facebooktwittermail

ISIS executes hundreds of Mosul area residents

CNN reports: ISIS executed 284 men and boys as coalition forces closed in on Mosul, an Iraqi intelligence source told CNN.

Those killed on Thursday and Friday had been rounded up near and in the city for use as human shields against attacks that are forcing ISIS out of the southern sections of Mosul, the source explained.

ISIS used a bulldozer to dump the corpses in a mass grave at the scene of the executions — Mosul’s defunct College of Agriculture in the north of the city, the intelligence source said.

The victims were all shot and some were children, said the source, who wanted anonymity because he is not authorized to speak to the media. CNN could not independently confirm the claim. [Continue reading…]

BBC News reports: Hundreds of people in Iraq are being treated for the effects of toxic gases after a sulphur plant was set alight in fighting with so-called Islamic State.

The US military says IS fighters set the plant on fire earlier this week, as they fled an advance by pro-government forces on their Mosul stronghold.

On Saturday, US soldiers at a base near Mosul donned protective masks as wind blew smoke towards them.

Reuters said another 1,000 people were being treated for breathing problems. [Continue reading…]

Facebooktwittermail

Bunkers and booby-traps as ISIS makes a stand in Libya

Reuters reports: Sheltering in tunnels, improvised bunkers and rooms fortified by sand-filled fridges, Islamic State is holding out in the Libyan city of Sirte, defending itself with snipers, booby-traps and car bombs against pro-government forces.

After a six-month campaign of often fierce street fighting, Islamic State militants are surrounded in a district less than one-kilometer square, after hundreds of U.S. air strikes that began in August in support of Libyan forces.

The battle for Sirte, taken by Islamic State more than a year ago, may be over soon. But how the militants managed to survive may give insight into the kind of tactics they could use to defend other cities. [Continue reading…]

Facebooktwittermail

Trump sides with Putin over U.S. intelligence

Politico reports: Donald Trump angrily insisted on Wednesday night that he is not Vladimir Putin’s “puppet.”

But at a minimum, in recent months he has often sounded like the Russian president’s lawyer—defending Putin against a variety of specific charges, from political killings to the 2014 downing of a passenger jet over Ukraine, despite the weight of intelligence, legal findings and expert opinion.

Wednesday, for instance, Trump dismissed Hillary Clinton’s assertion that Russia was behind the recent hacking of Democratic Party and Clinton campaign emails.

“She has no idea whether it’s Russia or China or anybody else,” Trump retorted. “Our country has no idea.”

As Clinton tried to explain that the Russian role is the finding of 17 military and civilian intelligence agencies, Trump cut her off: “I doubt it.”

On Oct. 7, the Department of Homeland Security and the Office of the Director of National Intelligence released a joint statement saying that the U.S. intelligence community “is confident that the Russian Government directed the recent compromises of e-mails from US persons and institutions, including from US political organizations.” That finding has also been relayed directly to Trump in the classified national security briefings he receives as a major party nominee. [Continue reading…]

Facebooktwittermail

How hackers broke into John Podesta and Colin Powell’s Gmail accounts

Motherboard reports: On March 19 of this year, Hillary Clinton’s campaign chairman John Podesta received an alarming email that appeared to come from Google.

The email, however, didn’t come from the internet giant. It was actually an attempt to hack into his personal account. In fact, the message came from a group of hackers that security researchers, as well as the US government, believe are spies working for the Russian government. At the time, however, Podesta didn’t know any of this, and he clicked on the malicious link contained in the email, giving hackers access to his account.

Months later, on October 9, WikiLeaks began publishing thousands of Podesta’s hacked emails. Almost everyone immediately pointed the finger at Russia, who is suspected of being behind a long and sophisticated hacking campaign that has the apparent goal of influencing the upcoming US elections. But there was no public evidence proving the same group that targeted the Democratic National Committee was behind the hack on Podesta — until now.

The data linking a group of Russian hackers — known as Fancy Bear, APT28, or Sofacy — to the hack on Podesta is also yet another piece in a growing heap of evidence pointing toward the Kremlin. And it also shows a clear thread between apparently separate and independent leaks that have appeared on a website called DC Leaks, such as that of Colin Powell’s emails; and the Podesta leak, which was publicized on WikiLeaks.

All these hacks were done using the same tool: malicious short URLs hidden in fake Gmail messages. And those URLs, according to a security firm that’s tracked them for a year, were created with Bitly account linked to a domain under the control of Fancy Bear. [Continue reading…]

Facebooktwittermail

Syria: Aleppo attack ‘pause’ ridiculed by rebels

Al Jazeera reports: The Syrian military said on Thursday a unilateral ceasefire backed by Russia had come into force to allow people to leave besieged eastern Aleppo, a move rejected by rebels who say they are preparing a counter-offensive to break the blockade.

Rebels say the goal of Moscow and Syrian President Bashar al-Assad is to empty opposition-held areas of civilians so they can take over the whole city.

“They talk about humanitarian corridors, but why are they not allowing food into besieged eastern Aleppo to alleviate our suffering? We only need the Russian bombers to stop killing our children. We don’t want to leave,” said Ammar al-Qaran, a resident in Sakhour district.

Syrian state-owned Ikhbariyah television said rebels had fired a mortar barrage near to where ambulances had been heading to take patients from the besieged parts of the city for treatment in government-held areas.

Also on Thursday, a UN aid official for Syria said Russia agreed to extend daily pauses in military action against rebel-held eastern Aleppo for four more days. [Continue reading…]

Facebooktwittermail