Skip to main content

Home/ International Politics of the Middle East/ Group items tagged hacking

Rss Feed Group items tagged

Filter: All | Bookmarks | Topics Simple Middle
Ed Webb

bellingcat - Lord Of The Flies: An Open-Source Investigation Into Saud Al-Qahtani - bel... - 0 views

www.bellingcat.com/...stigation-into-saud-al-qahtani

KSA Saudi MBS hacking cyberwar intelligence authoritarianism internet

shared by Ed Webb on 26 Jun 19 - No Cached
  • Before tuning in via Skype to oversee the murder and dismemberment of Saudi Arabian journalist Jamal Khashoggi, Saud al-Qahtani, a high-level adviser to the crown prince of Saudi Arabia, Mohammed bin Salman (MBS), was best known for running social media operations for the royal court and serving as MBS’s chief propagandist and enforcer. His portfolio also included hacking and monitoring critics of the Kingdom and MBS.
  • Al-Qahtani registered at least 22 domains since 2009, some of which have been used as command and control servers for malware
  • al-Qahtani’s posts on Hack Forums detail the hacking tools and services he purchased and used and the social media platforms and mobile apps he targeted. By June 2011, less than two years after joining the forum, he estimated that he had 90% of paid and free RATs on the market. Al-Qahtani also paid Hack Forum members to have social media accounts deleted and sought to manufacture engagement activity on major social media platforms, including YouTube and Facebook.
  • ...8 more annotations...
  • He also posted at least three times while drunk, by his own admission, and opined on topics unrelated to hacking such as the role of religion in politics and policy toward Iran.
  • MBS’s repression machine is alive and well thanks in no small part to the Trump administration’s refusal to hold the Saudi strongman and his regime to account. 
  • Since Khashoggi was murdered last October, the CIA has observed its “duty to warn” on three separate occasions, sharing intelligence to alert dissidents based in the U.S., Canada and Norway to threats originating from Saudi Arabia. 
  • multiple media outlets have cited sources saying that he is still in MBS’s good graces and continuing to work in a similar capacity as before he was officially ousted from the royal court.
  • The best open-source indication to date that al-Qahtani is continuing his hacking work comes from the Guardian, which reported in June 2019, that it was targeted by a Saudi hacking team at the order of al-Qahtani. The newspaper was initially warned of the order by a source in Riyadh earlier this year, and the threat was subsequently corroborated by a confidential internal order signed by al-Qahtani, which the Guardian reviewed. The document, dated March 7, 2019, was written in Arabic and instructed “heads of technological and technical departments” run from the cybersecurity directorate within the private office of the MBS to “carry out the penetration of the servers of the Guardian newspaper and those who worked on the report that was published, and deal with the issue with complete secrecy, then send us all the data as soon as possible.”
  • On June 19, 2019, Agnes Callamard, the United Nations (UN) Special Rapporteur on extrajudicial, summary or arbitrary killings, published a report on Khashoggi’s death, calling it a “premeditated extrajudicial execution” at the hands of the Saudi state. “His killing was the result of elaborate planning involving extensive coordination and significant human and financial resources. It was overseen, planned and endorsed by high-level officials. It was premeditated.”
  • The report specifically names al-Qahtani and MBS as two high-level officials who have not been criminally charged but for whom there is “credible evidence meriting further investigation.” 
  • In addition to the 22 domains analyzed above, this investigation identified several other domains that are likely linked to al-Qahtani but require further research and analysis
Ed Webb

How Two Persian Gulf Nations Turned The US Media Into Their Battleground - 0 views

www.buzzfeed.com/...iran-trump-leaks-emails-broidy

UAE Qatar Saudi KSA Egypt Iraq US USA hacking media propaganda

shared by Ed Webb on 29 May 18 - Cached
  • Two rival Persian Gulf nations have for the past year been conducting a tit-for-tat battle of leaked emails in US news outlets that appears, at least in part, to have been an effort to influence Trump administration policy toward Iran.
  • On one side is the United Arab Emirates, a wealthy confederation of seven small states allied with Saudi Arabia, Iran’s bitter foe. On the other is Qatar, another oil-rich Arab monarchy, but one that maintains friendly relations with Iran, with which it shares a giant natural gas field.
  • unfolding battle alarms transparency advocates who fear it will usher in an era in which computer hacking and the dissemination of hacked emails will become the norm in international foreign policy disputes
  • ...10 more annotations...
  • “You could spend years campaigning traditionally against someone or you could hack an email account and leak salacious details to the media. If you have no scruples, and access to hackers, the choice is obvious.”
  • This is the new warfare. This is something the governments use for commercial reasons, use for political reasons, and use to destroy their opponents
  • Tensions have been building for years between the UAE and Qatar. The two have feuded over Qatar’s support for the Muslim Brotherhood, the Islamist movement that many Persian Gulf monarchies see as a threat to their hereditary kingdoms. They’ve also been at odds over Qatar’s friendly relations with Iran and its backing of the Al Jazeera television channel, whose newscasts are often critical of Arab autocrats.The feud broke into the open on May 24 last year when someone hacked into the website and Twitter account of Qatar’s government news agency, QNA, and posted news stories and tweets that quoted the country’s emir, Sheikh Tamim bin Hamad Al Thani, making bizarrely pro-Iran statements.Qatar disavowed the remarks within an hour, and its foreign minister, Mohammed bin Abdulrahman Al Thani, quickly texted the UAE’s crown prince, Mohammed bin Zayed, that the statements weren’t true. Qatar took its official news website down, and still hasn’t brought it back online.But the damage had been done
  • The UAE and Saudi Arabia, with the backing of the Trump administration, used the hacked news stories as a pretext for severing relations with Qatar, imposing a blockade, and making 13 demands, including that Qatar cut all ties with Iran and shut down Al Jazeera and all other state-funded news sites.
  • “They weaponized fake news to justify the illegal blockade of Qatar,” said Jassim Al Thani, Qatar’s Washington-based media attaché. “In the year since then, we have seen their repeated use of cyberespionage, fake news, and propaganda to justify unlawful actions and obfuscate underhanded dealings.”
  • he FBI concluded that freelance Russian hackers had carried out the operation on the UAE’s behalf
  • In June of last year, someone began leaking the contents of a Hotmail account belonging to Yousef al-Otaiba, the UAE’s flashy ambassador to the United States. The leaks were distributed to a group of online news sites, including the Huffington Post, the Intercept, and the Daily Beast.“The leakers claimed the documents had been provided to them by a paid whistleblower embedded in a Washington, DC, lobbyist group, though it’s clear from even a cursory examination that they were printed out from Al Otaiba’s Hotmail account,”
  • “It’s not clear whether Otaiba’s inbox was hacked or passed along by someone with access to the account,”
  • The most damaging email leaks came in March when someone went after Elliott Broidy, a 60-year-old American hired to lobby for the UAE, and whose company, Circinus, has received more than $200 billion in defense contracts from the country. In recent years, he’s been one of the loudest American voices against Qatar, employing tactics ranging from anti-Qatar op-eds to personally lobbying Donald Trump to support the blockade against it.Broidy was in a prime position to lobby the president. He was the Republican Party’s vice chair of fundraising until April 13, when he resigned after the Wall Street Journal revealed that he’d used Trump’s lawyer, Michael Cohen, to pay a 34-year-old former Playboy model $1.6 million in hush money after he’d gotten her pregnant. The Journal said leaked emails played no role in that coverage.
  • “There was thought and calculation behind how this material was being distributed,” Wieder, who wrote about the emails in a follow-up story, told BuzzFeed News. “It’s not the old-school, WikiLeaks, ‘everything’s up on a site; make what you will of it.’”
Ed Webb

Exclusive: Ex-NSA cyberspies reveal how they helped hack foes of UAE - 0 views

www.reuters.com/...usa-spying-raven

US USA UAE intelligence espionage NSA

shared by Ed Webb on 11 Jul 19 - Cached
  • Project Raven, a clandestine team that included more than a dozen former U.S. intelligence operatives recruited to help the United Arab Emirates engage in surveillance of other governments, militants and human rights activists critical of the monarchy.
  • in 2016, the Emiratis moved Project Raven to a UAE cybersecurity firm named DarkMatter. Before long, Stroud and other Americans involved in the effort say they saw the mission cross a red line: targeting fellow Americans for surveillance.
  • former U.S. government hackers have employed state-of-the-art cyber-espionage tools on behalf of a foreign intelligence service that spies on human rights activists, journalists and political rivals
  • ...20 more annotations...
  • surveillance techniques taught by the NSA were central to the UAE’s efforts to monitor opponents
  • Various reports have highlighted the ongoing cyber arms race in the Middle East, as the Emirates and other nations attempt to sweep up hacking weapons and personnel faster than their rivals. The Reuters investigation is the first to reveal the existence of Project Raven, providing a rare inside account of state hacking operations usually shrouded in secrecy and denials.
  • While this activity raises ethical dilemmas, U.S. national security lawyers say the laws guiding what American intelligence contractors can do abroad are murky. Though it’s illegal to share classified information, there is no specific law that bars contractors from sharing more general spycraft knowhow, such as how to bait a target with a virus-laden email.
  • The hacking of Americans was a tightly held secret even within Raven, with those operations led by Emiratis instead. Stroud’s account of the targeting of Americans was confirmed by four other former operatives and in emails reviewed by Reuters.
  • Mansoor was convicted in a secret trial in 2017 of damaging the country’s unity and sentenced to 10 years in jail. He is now held in solitary confinement, his health declining, a person familiar with the matter said. Mansoor’s wife, Nadia, has lived in social isolation in Abu Dhabi. Neighbors are avoiding her out of fear security forces are watching. They are correct. By June 2017 Raven had tapped into her mobile device and given her the code name Purple Egret, program documents reviewed by Reuters show. To do so, Raven utilized a powerful new hacking tool called Karma, which allowed operatives to break into the iPhones of users around the world.
  • the UAE has been accused of suppressing free speech, detaining dissidents and other abuses by groups such as Human Rights Watch. The UAE says it is working closely with Washington to fight extremism “beyond the battlefield” and is promoting efforts to counter the “root causes” of radical violence. Raven’s targets eventually would include militants in Yemen, foreign adversaries such as Iran, Qatar and Turkey, and individuals who criticized the monarchy, said Stroud and eight other former Raven operatives. Their accounts were confirmed by hundreds of Raven program documents reviewed by Reuters.
  • “Some days it was hard to swallow, like [when you target] a 16-year-old kid on Twitter,” she said. “But it’s an intelligence mission, you are an intelligence operative. I never made it personal.”
  • the program took aim not just at terrorists and foreign government agencies, but also dissidents and human rights activists. The Emiratis categorized them as national security targets
  • Emirati security forces viewed human rights advocates as a major threat to “national stability,”
  • Reached by phone in London, Donaghy, now a graduate student pursuing Arab studies, expressed surprise he was considered a top national security target for five years. Donaghy confirmed he was targeted using the techniques described in the documents. “I’m glad my partner is sitting here as I talk on the phone because she wouldn’t believe it,” he said. Told the hackers were American mercenaries working for the UAE, Donaghy, a British citizen, expressed surprise and disgust. “It feels like a betrayal of the alliance we have,” he said.
  • Stroud had already made the switch from government employee to Booz Allen contractor, essentially performing the same NSA job at higher pay. Taking a job with CyberPoint would fulfill a lifelong dream of deploying to the Middle East and doing so at a lucrative salary. Many analysts, like Stroud, were paid more than $200,000 a year, and some managers received salaries and compensation above $400,000.
  • Karma was particularly potent because it did not require a target to click on any link to download malicious software. The operatives understood the hacking tool to rely on an undisclosed vulnerability in Apple’s iMessage text messaging software. In 2016 and 2017, it would be used against hundreds of targets across the Middle East and Europe, including governments of Qatar, Yemen, Iran and Turkey, documents show. Raven used Karma to hack an iPhone used by the Emir of Qatar, Sheikh Tamim bin Hamad al-Thani, as well as the phones of close associates and his brother.
  • Providing sensitive defense technologies or services to a foreign government generally requires special licenses from the U.S. State and Commerce Departments. Both agencies declined to comment on whether they issued such licenses to CyberPoint for its operations in the UAE. They added that human rights considerations figure into any such approvals.
  • But a 2014 State Department agreement with CyberPoint showed Washington understood the contractors were helping launch cyber surveillance operations for the UAE. The approval document explains CyberPoint’s contract is to work alongside NESA in the “protection of UAE sovereignty” through “collection of information from communications systems inside and outside the UAE” and “surveillance analysis.”
  • “It was incredible because there weren’t these limitations like there was at the NSA. There wasn’t that bullshit red tape,”
  • Under DarkMatter, Project Raven continued to operate in Abu Dhabi from the Villa, but pressure escalated for the program to become more aggressive. Before long, senior NESA officers were given more control over daily functions, former Raven operatives said, often leaving American managers out of the loop. By mid-2016, the Emirates had begun making an increasing number of sections of Raven hidden from the Americans still managing day-to-day operations. Soon, an “Emirate-eyes only” designation appeared for some hacking targets.
  • Stroud began searching a targeting request list usually limited to Raven’s Emirati staff, which she was still able to access because of her role as lead analyst. She saw that security forces had sought surveillance against two other Americans. When she questioned the apparent targeting of Americans, she received a rebuke from an Emirati colleague for accessing the targeting list, the emails show. The target requests she viewed were to be processed by “certain people. You are not one of them,” the Emirati officer wrote.
  • Days later, Stroud said she came upon three more American names on the hidden targeting queue.
  • occupations were listed: journalist
  • When Stroud kept raising questions, she said, she was put on leave by superiors, her phones and passport were taken, and she was escorted from the building. Stroud said it all happened so quickly she was unable to recall the names of the three U.S. journalists or other Americans she came across in the files. “I felt like one of those national security targets,” she said. “I’m stuck in the country, I’m being surveilled, I can’t leave.” After two months, Stroud was allowed to return to America. Soon after, she fished out the business card of the FBI agents who had confronted her at the airport. “I don’t think Americans should be doing this to other Americans,” she told Reuters. “I’m a spy, I get that. I’m an intelligence officer, but I’m not a bad one.”
Ed Webb

Exclusive: Secret Trump order gives CIA more powers to launch cyberattacks - 0 views

news.yahoo.com/ch-cyberattacks-090015219.html

Iran Russia US USA Trump CIA hacking cyberwar cybersecurity

shared by Ed Webb on 15 Jul 20 - Cached
  • The Central Intelligence Agency has conducted a series of covert cyber operations against Iran and other targets since winning a secret victory in 2018 when President Trump signed what amounts to a sweeping authorization for such activities
  • The secret authorization, known as a presidential finding, gives the spy agency more freedom in both the kinds of operations it conducts and who it targets, undoing many restrictions that had been in place under prior administrations
  • Unlike previous presidential findings that have focused on a specific foreign policy objective or outcome — such as preventing Iran from becoming a nuclear power — this directive, driven by the National Security Council and crafted by the CIA, focuses more broadly on a capability: covert action in cyberspace.  
  • ...19 more annotations...
  • countries include Russia, China, Iran and North Korea — which are mentioned directly in the document — but the finding potentially applies to others as well
  • offensive cyber operations with the aim of producing disruption — like cutting off electricity or compromising an intelligence operation by dumping documents online — as well as destruction, similar to the U.S.-Israeli 2009 Stuxnet attack, which destroyed centrifuges that Iran used to enrich uranium gas for its nuclear program
  • freed the agency to conduct disruptive operations against organizations that were largely off limits previously, such as banks and other financial institutions
  • it lessened the evidentiary requirements that limited the CIA’s ability to conduct covert cyber operations against entities like media organizations, charities, religious institutions or businesses believed to be working on behalf of adversaries’ foreign intelligence services, as well as individuals affiliated with these organizations
  • “as long as you can show that it vaguely looks like the charity is working on behalf of that government, then you’re good.”
  • Since the finding was signed two years ago, the agency has carried out at least a dozen operations that were on its wish list, according to this former official. “This has been a combination of destructive things — stuff is on fire and exploding — and also public dissemination of data: leaking or things that look like leaking.” 
  • “We’re playing semantics — destabilization is functionally the same thing as regime change. It’s a deniability issue,”
  • “Our government is basically turning into f****ing WikiLeaks, [using] secure communications on the dark web with dissidents, hacking and dumping,”
  • senior Trump officials weren’t interested in retaliating against Russia for the election interference
  • “Trump came in and way overcorrected,” said a former official. Covert cyber operations that in the past would have been rigorously vetted through the NSC, with sometimes years-long gaps between formulation and execution, now go “from idea to approval in weeks,” said the former official. 
  • an unknown group in March 2019 posted on the internet chat platform Telegram the names, addresses, phone numbers and photos of Iranian intelligence officers allegedly involved in hacking operations, as well as hacking tools used by Iranian intelligence operatives. That November, the details of 15 million debit cards for customers of three Iranian banks linked to Iran’s Islamic Revolutionary Guard Corps were also dumped on Telegram.Although sources wouldn’t say if the CIA was behind those Iran breaches, the finding’s expansion of CIA authorities to target financial institutions, such as an operation to leak bank card data, represents a significant escalation in U.S. cyber operations
  • These were operations the “CIA always knew were an option, but were always a bridge too far," said a former official. “They had been bandied about at senior levels for a long time, but cooler heads had always prevailed." 
  • “It was obvious that destabilization was the plan on Iran,”
  • Neither these two Iran-related findings, nor the new cyber finding, mention regime change as a stated goal, according to former officials. Over time, however, the CIA and other national security officials have interpreted the first two Iran findings increasingly broadly, with covert activities evolving from their narrow focus on stopping Tehran’s nuclear program, they said. The Iran findings have been subject to “classic mission creep,” said one former official.
  • critics, including some former U.S. officials, see a potentially dangerous attenuation of intelligence oversight, which could have unintended consequences and even put people’s lives at risk
  • The CIA’s “deconfliction is poor, they’re not keeping people in the loop on what their cyber operations are,”
  • This more permissive environment may also intensify concerns about the CIA’s ability to secure its hacking arsenal. In 2017, WikiLeaks published a large cache of CIA hacking tools known as “Vault 7.” The leak, which a partially declassified CIA assessment called “the largest data loss in CIA history,” was made possible by “woefully lax” security practices at the CIA’s top hacker unit, the assessment said.
  • Removing NSC oversight of covert operations is a significant departure from recent history, according to Eatinger. “I would look at the intel community as the same as the military in that there should be civilian control of big decisions — who to go to war against, who to launch an attack against, who to fight a particular battle,” he said. “It makes sense that you would have that kind of civilian or non-intelligence civilian leadership for activities as sensitive as covert action.”
  • “People thought, ‘Hey, George W. Bush will sign this,’ but he didn’t,” said a former official. CIA officials then believed, “‘Obama will sign it.’ Then he didn’t.”“Then Trump came in, and CIA thought he wouldn’t sign,” recalled this official. “But he did.”
Ed Webb

Path to Success for One Palestinian Hacker: Publicly Owning Mark Zuckerberg | Threat Le... - 0 views

www.wired.com/...all

Palestine Israel israelpalestine hacking hackers Facebook

shared by Ed Webb on 31 Oct 13 - No Cached
  • It was August 14, and Shreateh had just reached halfway around the world to pull off a prank that would make him the most famous hacker in the Israeli-occupied West Bank. He’d discovered a Facebook bug that would allow him to post to another user’s wall even if he wasn’t on the user’s friends list. Demonstrating the bug on Zuckerberg was a last resort: He first reported the vulnerability to Facebook’s bug bounty program, which usually pays $500 for discoveries like his. But Facebook dismissed his report out of hand, and to this day refuses to pay the bounty for the security hole, which it has now fixed. Where Facebook failed, though, techies from across the world stepped in to fix, crowdfunding a $13,000 reward for Shreateh. Now that money, and Shreateh’s notoriety, is about to launch the former construction worker into a new life. He’s using the funds to buy a new laptop and launch a cybersecurity service where websites will be able to request “ethical hacking” to identify their vulnerabilities. And he’s started a six-month contract with a nearby university to find bugs as part of their information security unit. He hacks and reports flaws on other universities’ sites in his free time.
  • The West Bank is no easy place to be a hacker, or to do anything in the technology sphere. The occupied region depends on Israel for electricity, water and telecommunications, including the sluggish Internet that crawls into the South Hebron Hills. Shreateh has a well and three water tanks on his roof because Yatta only receives several days of running water every few months. Blackouts are common, and the town often goes without electricity for whole days in the winter. Partly to blame is a complex system established by the Oslo accords that splits the West Bank into three zones under different combinations of Palestinian and Israeli control. “It’s like Swiss cheese,” says George Khadder, a tech entrepreneur who worked in Silicon Valley for 13 years. He sketches how Zones A, B and C weave in, out and around each other, with chunks of Israeli settlement territory in between. “The West Bank is like an archipelago, in terms of contiguity and services. This is absolutely a problem.” This access gap is clear on the drive from Jerusalem to Yatta, which requires passing through a military checkpoint that bars Shreateh from entering Israel. The road to Yatta passes several Israeli settlements, sprawling over hilltops with their separate telecom systems, brightly lit streets and green, well-watered lawns. “The dogs in Israel drink more water than Palestinians,” the taxi driver laughs.
  • Shreateh has his own website and 44,156 followers on Facebook, many of whom spam him with questions about hacking into their boyfriends’ profiles or raising their exam grades online. Shreateh ignores them. “I am an ethical hacker,” he says. “I don’t damage or destroy.” That makes him different from some other Palestinian hackers. The same month as Shreateh’s Facebook prank, hacktivists hijacked Google’s Palestine domain, redirecting it to a page with a Rihanna background song and written message: “uncle google we say hi from palestine to remember you that the country in google map not called israel. its called Palestine” This month, another group called KDMS hacked the websites of security companies AVG and Avira, among other companies, redirecting to a site displaying the Palestinian flag, a graphic of Palestinian land loss, and a similar message: “we want to tell you that there is a land called Palestine on the earth,” it read in part. “this land has been stolen by Zionist.’
  • ...1 more annotation...
  • As for Israeli hackers, he sees them as inferior, babied by the privilege of living without occupation. “Israeli hackers all come from university classes. They have companies and courses to teach them,” Shreateh scoffs. “Palestinian hackers come from Google search and YouTube videos. We all learned on our own.”
Ed Webb

Hacking Group Claims N.S.A. Infiltrated Mideast Banking System - The New York Times - 0 views

www.nytimes.com/...kers-nsa-hack-middle-east.html

NSA US USA espionage MENA banks banking economy

shared by Ed Webb on 23 Apr 17 - No Cached
  • evidence that the N.S.A. had infiltrated the backbone of the Middle East’s banking infrastructure.
  • Among the leaks on Friday was an extensive list of PowerPoint and Excel documents that, if authentic, indicate that the N.S.A. has successfully infiltrated EastNets, a company based in Dubai that helps to manage transactions in the international bank messaging system called Swift.
  • The latest leaks suggest that, by hacking EastNets, the N.S.A. may have successfully hacked, or at minimum targeted, computers inside some of the biggest banks in the Middle East, including ones in Abu Dhabi and Dubai in the United Arab Emirates; Kuwait; Qatar; Syria; Yemen; and the Palestinian territories.
  • ...2 more annotations...
  • On Friday, EastNets denied that it had been hacked. In a statement, the company said its Swift service bureau runs on a separate secure network that cannot be reached over the public internet. The company said the leaked documents that claimed its computers had been compromised referred to an old server that the bureau had retired in 2013.“While we cannot ascertain the information that has been published, we can confirm that no EastNets customer data has been compromised in any way,” Hazem Mulhim, EastNets’ chief executive, said in the statement.
  • Among those listed as having been successfully “implanted,” or infected with spyware, are Noor Bank, Tadhamon International Islamic Bank, Al Quds Bank for Development and Investment, Arcapita Bank and the Kuwait Fund for Arab Economic Development.
Ed Webb

U.S. Needs to Look Beyond Russia for Disinformation Culprits | Time - 0 views

time.com/...tion-middle-east-allies-russia

US USA media journalists socialmedia KSA Saudi UAE Qatar hacking propaganda twitter

shared by Ed Webb on 02 Dec 22 - No Cached
  • Russian disinformation may come first to mind for interfering in U.S. politics, but some of the most damning evidence of efforts to influence the American public leads to Washington’s allies in the Middle East. Saudi Arabia and the United Arab Emirates are at the forefront of undermining democratic deliberation–from manipulating the impact of Donald Trump’s tweets, to tricking editors across the world into publishing propaganda.
  • The FBI in 2019 found evidence that employees at Twitter’s San Fransciso headquarters, groomed with bribes such as luxury watches, were co-ordinating with members of the Saudi royal family to obtain private information from Twitter users. In August 2022, a jury found one of these men guilty. Two others couldn’t be tried because they were in Saudi Arabia.
  • One of the most audacious deception operations appeared to be connected to the UAE. Between 2019 and 2021, op-eds that supported the foreign policy position of the UAE, Saudi, and the U.S. administration under Trump began appearing in numerous well-known U.S. outlets, such as Newsmax, The National Interest, The Post Millennial and the Washington Examiner. The catch: The journalists writing them did not actually exist.
  • ...3 more annotations...
  • Cambridge Analytica’s parent company, SCL Social Limited, worked with the UAE to create a social media advertising campaign attacking Qatar, a Gulf rival that’s home of the largest U.S. military base in the region. Though better known its use of “soft power” through projects like Al Jazeera, Qatar has also been reported to use disinformation, as well as allegedly hacking the email of the Emirates’ powerful ambassador to Washington.
  • the Emiratis worked with ex-NSA spies to hack the devices of U.S. citizens. And both Saudi Arabia and the UAE are among the biggest customers of NSO, the Israeli firm that sells the spyware Pegasus, which they have used to target dozens of activists, journalists and academics
  • In 2011, during the heady days of the Arab Spring, social media and digital technology was touted as the force that would help liberate the region from authoritarian rule and bring democracy. Now, authoritarian regimes in the Gulf, along with Western companies and expertise, are using digital technology and social media to try and hack democracy wherever they find it, including in the U.S. The effect is clearest, however, in the Middle East. With critics silenced through incarceration, surveillance, torture, or death, opposition voices are increasingly fearful of self-expression, meaning that the digital public sphere is simply a space to praise the regime or engage in banal platitudes.
Ed Webb

Qatar's Al Jazeera website hacked by Syria's Assad loyalists | Reuters - 0 views

www.reuters.com/...-hacking-idUSBRE8830ZI20120904

hackers hacking jazeera media television internet Syria Qatar KSA Saudi

shared by Ed Webb on 04 Sep 12 - No Cached
  • Ed Webb on 04 Sep 12
     
    Conflict by other means
Ed Webb

"Arabian Street Artists" Bomb Homeland: Why We Hacked an Award-Winning Series | Heba Amin - 1 views

www.hebaamin.com/hacked-an-award-winning-series

arabs media Islamophobia gwot protest graffiti television US USA Arabic language languages

shared by Ed Webb on 15 Oct 15 - No Cached
  • Ed Webb on 15 Oct 15
     
    Love this so much
Ed Webb

Flame and Stuxnet Cousin Targets Lebanese Bank Customers, Carries Mysterious Payload | ... - 0 views

www.wired.com/...all

hacking viruses cyberwar crime espionage sabotage Lebanon Israel US USA

shared by Ed Webb on 09 Aug 12 - No Cached
  • Gauss marks the first time that apparently nation-state-created malware has been found stealing banking credentials, something that is commonly seen in malware distributed by criminal hacking groups.
  • Gauss appears to have been created sometime in mid-2011 and was first deployed in September or October of last year, around the same time that DuQu was uncovered by researchers in Hungary. DuQu was an espionage tool discovered on machines in Iran, Sudan, and other countries around August 2011 and was designed to steal documents and other data from machines. Stuxnet and DuQu appeared to have been built on the same framework, using identical parts and using similar techniques. Flame and Stuxnet also shared a component, and now Flame and Gauss have been found to be using similar code as well.
  • Extrapolating from the number of infected Kaspersky customers, they speculate that there may be as many as tens of thousands of other victims infected with Gauss. By comparison, Stuxnet infected more than 100,000 machines, primarily in Iran. DuQu infected an estimated 50 machines, but was not geographically focused. Flame is estimated to have infected about 1,000 machines in Iran and elsewhere in the Middle East.
  • ...4 more annotations...
  • Kaspersky suggests that “white” in the file name may refer to Lebanon, a name said to be derived from the Semitic root letters “lbn,” which are also the root letters for “white.” Although in Arabic — a Semitic language — white is “abayd,” in Hebrew — also a Semitic language — the word for white is “lavan,” which comes from the root letters “lbn.”
  • Like Flame, Gauss is modular, so that new functionality can be swapped in and out, depending on the needs of the attackers. To date, only a few modules have been uncovered — these are designed to steal browser cookies and passwords, harvest system configuration data including information about the BIOS and CMOS RAM, infect USB sticks, enumerate the content of drives and folders, and to steal banking credentials as well as account information for social networking accounts, e-mail and instant messaging.
  • Gauss also installs a custom font called Palida Narrow, the purpose of which is not known. The use of a custom font designed by the malware authors is reminiscent of DuQu, which used a font called Dexter fabricated by its creators to exploit victim machines. Kaspersky has found no malicious code in the Palida Narrow font files and has no idea why it’s in the code, though the font contains Western, Baltic and Turkish symbols.
  • the USB module appears to be aimed at bridging an airgap and getting the payload onto systems that are not connected to the internet, as it had been used previously to get Stuxnet onto industrial control systems in Iran that were not connected to the internet. As noted, the payload is only unleashed on systems that have a specific configuration. That specific configuration is currently unknown, but Schoewenberg says it has to do with paths and files that are on the system. This suggests that the attackers have extensive knowledge about what is on the target system they are seeking.
Ed Webb

Was Stuxnet Built to Attack Iran's Nuclear Program? - PCWorld Business Center - 0 views

www.pcworld.com/...ack_irans_nuclear_program.html

Iran nukes nuclear sabotage hacking espionage Russia Israel

shared by Ed Webb on 22 Sep 10 - No Cached
  • A highly sophisticated computer worm that has spread through Iran, Indonesia and India was built to destroy operations at one target: possibly Iran's Bushehr nuclear reactor.
  • Langner thinks that it's possible that Bushehr may have been infected through the Russian contractor that is now building the facility, JSC AtomStroyExport. Recently AtomStroyExport had its Web site hacked, and some of its Web pages are still blocked by security vendors because they are known to host malware. This is not an auspicious sign for a company contracted with handling nuclear secrets.
  • y messing with Operational Block 35, Stuxnet could easily cause a refinery's centrifuge to malfunction, but it could be used to hit other targets too, Byres said. "The only thing I can say is that it is something designed to go bang," he said.
  • ...3 more annotations...
  • Many security researchers think that it would take the resources of a nation state to accomplish.
  • Bushehr is a plausible target, but there could easily be other facilities -- refineries, chemical plants or factories that could also make valuable targets, said Scott Borg, CEO of the U.S. Cyber Consequences Unit, a security advisory group. "It's not obvious that it has to be the nuclear program," he said. "Iran has other control systems that could be targeted."
  • Iran has been hit hard by the worm. When it was first discovered, 60 percent of the infected Stuxnet computers were located in Iran, according to Symantec.
Ed Webb

UAE meddled in U.S. political system, intelligence report says - The Washington Post - 0 views

www.washingtonpost.com/...ddled-us-politics-intel-report

USA US UAE espionage influence propaganda lobbying

shared by Ed Webb on 02 Dec 22 - Cached
  • The relationship is unique. Over the years, the United States has agreed to sell the UAE some of its most sophisticated and lethal military equipment, including MQ-9 aerial drones and advanced F-35 fighter jets, a privilege not bestowed on any other Arab country over concern about diminishing Israel’s qualitative military edge.Some of the influence operations described in the report are known to national security professionals, but such activities have flourished due to Washington’s unwillingness to reform foreign-influence laws or provide additional resources to the Department of Justice. Other activities more closely resemble espionage, people familiar with the report said.
  • The UAE has spent more than $154 million on lobbyists since 2016, according to Justice Department records. It has spent hundreds of millions of dollars more on donations to American universities and think tanks, many that produce policy papers with findings favorable to UAE interests.
  • Since 2012, it has been the third-biggest purchaser of U.S. weapons and built what many consider the most powerful military in the Arab world by cultivating close ties to the U.S. political, defense and military establishment.
  • ...7 more annotations...
  • The UAE is far from alone in using aggressive tactics to try to bend the U.S. political system to its liking. Saudi Arabia, Qatar, Israel, Taiwan and scores of other governments run influence campaigns in the United States in an effort to impact U.S. policy.
  • But the intelligence community’s scrutiny of the UAE indicates a heightened level of concern and a dramatic departure from the laudatory way the country is discussed in public by U.S. secretaries of state and defense and presidents, who routinely emphasize the “importance of further deepening the U.S.-UAE strategic relationship.”
  • People who shared information about the report declined to provide a copy of it. They said the activities attributed to the UAE in the report go well beyond mere influence peddling.Story continues below advertisementOne of the more brazen exploits involved the hiring of three former U.S. intelligence and military officials to help the UAE surveil dissidents, politicians, journalists and U.S. companies. In public legal filings, U.S. prosecutors said the men helped the UAE break into computers in the United States and other countries. Last year, all three admitted in court to providing sophisticated hacking technology to the UAE, agreeing to surrender their security clearances and pay about $1.7 million to resolve criminal charges. The Justice Department touted the settlement as a “first-of-its-kind resolution.”
  • The UAE’s armed forces have fought alongside U.S. troops in Afghanistan, Iraq and Syria. The country also hosts 5,000 U.S. military personnel at al-Dhafra Air Base and U.S. warships at the Jebel Ali deep-water port.
  • There are no elections or political parties in the UAE, and no independent judiciary. Criticism of the government is banned, and trade unions and homosexuality are outlawed. Freedom House ranks the gulf state among the least free countries in the world.
  • U.S. officials and independent watchdogs have warned that smuggling and money-laundering in the UAE have allowed criminals and militants to hide their wealth there
  • Though the UAE has maintained strong bipartisan support in the United States, it cultivated a particularly close connection to the Trump administration, which approved the $23 billion sale of F-35s, MQ-9s and other munitions to the gulf state. The transfer, which has faced resistance by congressional Democrats, has not moved forward yet but is supported by the Biden administration.
Ed Webb

Disinformation flies in Syria's growing cyber war - Yahoo! News - 1 views

news.yahoo.com/owing-cyber-war-113420342.html

Syria Russia KSA Saudi Qatar cyberwar socialmedia propaganda hacking

shared by Ed Webb on 07 Aug 12 - No Cached
  • "Cyber attacks are the new reality of modern warfare," said Hayat Alvi, lecturer in Middle Eastern studies at the US Naval War College. "We can expect more... from all directions. In war, the greatest casualty is the truth. Each side will try to manipulate information to make their own side look like it is gaining while the other is losing."
  • In April, Saudi-based broadcaster Al Arabiya briefly lost control of one of its twitter accounts, which was then used to spread a string of stories suggesting a political crisis in Qatar. Tweets included claims that the Qatari prime minister had been sacked, his daughter arrested in London and that a coup orchestrated by the army chief was underway.
  • there seems little sign such incidents made a significant difference either on the ground in Syria or to the wider geopolitical picture
  • ...1 more annotation...
  • Some believe Assad may be getting technical support from his long-term allies in Tehran, who successfully crushed their own post-election protests that were in part organized over the Internet. China and Russia too are has amongst the world leaders in managing online political activism and dissent, with the latter at least also seen likely helping out in Syria.
Ed Webb

Is Oman ready to mourn Qaboos? - 0 views

www.middleeastmonitor.com/...-is-oman-ready-to-mourn-qaboos

Oman succession authoritarianism

shared by Ed Webb on 20 Nov 14 - No Cached
  • Despite maintaining a low profile, Oman remains an extremely important regional actor, particularly as it is on good terms with both Iran and the Saudi-West alliance. In particular, Oman was the only gulf state to recognise the 1979 peace agreement between Egypt and Israel and more recently it has played a significant role in supporting the P5+1 talks over Iran's nuclear programme, including hosting the latest round of talks.
  • the Sultan rules through decree and occupies several positions at the top of government
  • Oman has managed to cultivate a reputation as the "world's most charming police state".
  • ...6 more annotations...
  • if we follow the categorisation of the region's regimes discussed by Henry and Springborg in Globalization and the Politics of Development in the Middle East, we can see that Qaboos' Oman represents an almost completely different approach to government from most other regimes in the region. Indeed, it reflects neither the kind of practices of a bunker state – associated with rule "through military/security/party structures that are in turn controlled by alliances of these leaders' families and tribes", such as was the case in Salah's Yemen, Assad's Syria or Gaddafi's Libya – nor the kind of "bully praetorianism" which characterised the kleptocratic regimes of Ben Ali's Tunisia, Mubarak's Egypt or the PLO/PA under Arafat. Moreover, it also differs from the strife riddled monarchies in Riyadh and Manama particularly in as much as the ruling family has not gone out of its way to ostracise, exclude and oppress particular sections of the population. Instead, according to Henry and Springborg, "being the sole GCC ruler without a solid family and tribal base ... [Qaboos' Oman has] been the most assiduous in seeking to build an identity that simultaneously glorifies the Sultan himself".
  • the Oman 2020 plan, launched in 1995. With the goal of diversifing the economy away from hydrocarbons and increasing the ratio of nationals in public and private employment to 95 per cent, from 68 per cent in 1996. However, these two goals have proven somewhat contradictory. The high rate of foreign labour in both the public and private sectors has increased since 2009 when a Free Trade Agreement with the US came into force– more than doubling the 2005 figure. High rates of unemployment, low wages and the concentration of wealth among elites aligned to the government were contributing factors to the popular unrest of 2011-12.
  • Under a 1996 constitutional provision a council comprising members of the ruling family and senior officials is granted three days from the Sultan's death to choose a successor. If this process fails to provide a clear transition, then a contingency plan would be activated. This, as Qaboos himself told Foreign Affairs in a 1997 interview, would mean that: "As for a successor, the process, always known to us, has now been publicised in the Basic Law. When I die, my family will meet. If they cannot agree on a candidate, the Defence Council will decide, based on a name or names submitted by the previous sultan. I have already written down two names, in descending order, and put them in sealed envelopes in two different regions."
  • Oman faces a number of pressing, and distinctly Omani-challenges in the immediate and mid-term
  • 49 per cent of residents under the age of 20
  • some dissatisfaction arose during the height of the uprisings across the region in 2011-12. Though initially it appeared that Qaboos had handled popular protests deftly – through increased public sector spending, and some political reorganisation and an anti-corruption campaign – frustration at the slow pace of reform contributed to strikes by workers at Petroleum Development Oman and protests elsewhere. Authorities countered with arrests and a draconian crackdown on freedom of speech including hacking the social media accounts of intellectuals involved in the protest
Ed Webb

Palestinians, Israelis face off on Facebook - Al-Monitor: the Pulse of the Middle East - 0 views

www.al-monitor.com/...ial-media-israel-facebook.html

Israel Palestine israelpalestine intifada socialmedia facebook censorship politics

shared by Ed Webb on 09 Feb 16 - No Cached
  • “Ever since the intifada broke out in Jerusalem, there has been an online virtual war between Palestinians and Israelis. Social networks are flooded with firsthand field news, while campaigns are launched on Twitter on a daily basis to put pressure on Israel and its supporters around the world.”
  • Raji al-Hams, a prominent presenter at Al-Aqsa TV, said his original Facebook page was closed down after it garnered 90,000 followers. He told Al-Monitor he received “a message Jan. 15 from the Facebook administration saying I had violated the website’s rules by posting [slogans] about the intifada along with pictures of armed Palestinians."
  • Israel has been urging dozens of Israeli Facebook users to submit reports to the Facebook administration claiming that Palestinian pages are inciting murder. These users mention the name of these pages in the reports and the Facebook administration shuts them down, as they contain posts inciting murder and violence, which violate Facebook’s conditions.
  • ...4 more annotations...
  • On Nov. 24, the Israeli Ministry of Foreign Affairs, Google, YouTube and some other social networks agreed to fight incitement posted on their pages.
  • Israel uses a number of measures to counter the postings, most notably by creating around 5,000 fake Facebook accounts, Quds Press reported Oct. 29. Those who operate these accounts are fluent in English and Arabic, and their mission is to hack into and shut down Palestinian pages by submitting reports to the Facebook administration. Israel also has arrested of a number of Palestinians during the past three months on charges of inciting to kill Israelis in their Facebook posts.
  • the Authority for Palestinian Prisoners' Affairs reported the Israeli army has detained 27 Palestinians on charges of incitement since October, due to their activities on social networks
  • there are Israeli pages in Hebrew that call Palestinians terrorists, among other bad names, but they are not being closed down
1 - 20 of 25 Next ›
Showing 20▼ items per page