WASHINGTON: The hackers’ targets: The former head of cybersecurity for the US Air Force. An ex-director at the National Security Council. A former head of the Defense Intelligence Agency.
All were caught up in a Russian government-aligned cyberespionage campaign. None was warned by the FBI.
The bureau repeatedly failed to alert targets of the Russian hacking group known as Fancy Bear despite knowing for more than a year that their personal emails were in the Kremlin’s sights, an Associated Press investigation has found.
“No one’s ever said to me, ‘Hey Joe, you’ve been targeted by this Russian group,’” said former Navy intelligence officer Joe Mazzafro, whose inbox the hackers tried to compromise in 2015. “That our own security services have not gone out and alerted me, that’s what I find the most disconcerting as a national security professional.”
The FBI declined to discuss its investigation into Fancy Bear’s spying campaign, but did provide a statement that said in part: “The FBI routinely notifies individuals and organizations of potential threat information.”
Three people familiar with the matter — including a current and a former government official — said the FBI has known the details of Fancy Bear’s attempts to break into Gmail inboxes for more than a year. A senior FBI official, who was not to authorized to publicly discuss the hacking operation because of its sensitivity, said the bureau had been overwhelmed by an “almost insurmountable problem.”
The AP conducted its own investigation into Fancy Bear, dedicating two months and a small team of reporters to go through a list of 19,000 phishing links provided by the cybersecurity firm Secureworks.
The list showed how Fancy Bear worked in close alignment with Kremlin interests to steal tens of thousands of emails from the Democratic Party, the AP reported this month.
But it wasn’t just Democrats the hackers were after.
The AP identified more than 500 US-based targets in the data, reached out to more than 190 of them and interviewed nearly 80 people, including current or former military personnel, Democratic operatives, diplomats or ex-intelligence workers such as Mazzafro.
Many were long-retired, but about one-third were still in government or held security clearances at the time of the hacking attempts. Only two told the AP they learned of the hacking attempts from the FBI. A few more were contacted by the FBI after their emails were published in the torrent of leaks that coursed through last year’s electoral contest. To this day, some leak victims have not heard from the bureau.
One was retired Maj. James Phillips, who was one of the first people exposed by the website DCLeaks in mid-2016. A year later, Philips has yet to hear anything from the FBI.
In fact he didn’t learn his emails were “flapping in the breeze” until two months after the fact, when a journalist called him to ask for comment.
“The fact that a reporter told me about DCLeaks kind of makes me sad,” Phillips said in a telephone interview.
Phillips’ story would be repeated again and again as the AP spoke to officials from the National Defense University in Washington to the North American Aerospace Defense Command in Colorado.
Among them: a former head of the Defense Intelligence Agency, retired Lt. Gen. Patrick Hughes; a former head of Air Force Intelligence, retired Lt. Gen. David Deptula; a former defense undersecretary, Eric Edelman; and a former director of cybersecurity for the Air Force, retired Lt. Gen. Mark Schissler.
Some targets of Fancy Bear’s spying said they don’t blame the FBI for not notifying them.
“The expectation that the government is going to protect everyone and go back to everyone is false,” said Nicholas Eftimiades, a retired senior technical officer at the Defense Intelligence Agency who teaches homeland security at Pennsylvania State University in Harrisburg and was himself among the targets.
But Charles Sowell, who previously worked as a senior administrator in the Office of the Director of National Intelligence and was targeted by Fancy Bear two years ago, said there was no reason the FBI couldn’t do the same work the AP did.
“It’s absolutely not OK for them to use an excuse that there’s too much data,” said Sowell. “Would that hold water if there were a serial killer investigation, and people were calling in tips left and right, and they were holding up their hands and saying, ‘It’s too much’?
“That’s ridiculous.”
___
EDITOR’S NOTE — Raphael Satter’s father, David Satter, is an author and Russia specialist who has been critical of the Kremlin. His emails were published last year by hackers and his account is on Secureworks’ list of Fancy Bear targets. He was not notified by the FBI.
FBI did not alert US officials of Russian hacking attempts
FBI did not alert US officials of Russian hacking attempts
US senators visit key Ukrainian port city as they push for fresh sanctions on Russia
- The visit and the push for Congress to take up sanctions on Russia come at a crucial moment in the conflict
WASHINGTON: A delegation of US senators was returning Wednesday from a trip to Ukraine, hoping to spur action in Congress for a series of sanctions meant to economically cripple Moscow and pressure President Vladimir Putin to make key concessions in peace talks.
It was the first time US senators have visited Odesa, Ukraine’s third-most populous city and an economically crucial Black Sea port that has been particularly targeted by Russia, since the war began nearly four years ago. Democratic Sens. Jeanne Shaheen, Chris Coons, Richard Blumenthal and Sheldon Whitehouse made the trip. Republican Sen. Thom Tillis had planned to join but was unable to for personal reasons.
“One of the things we heard wherever we stopped today was that the people of Ukraine want a peace deal, but they want a peace deal that preserves their sovereignty, that recognizes the importance of the integrity of Ukraine,” Shaheen said on a phone call with reporters.
The visit and the push for Congress to take up sanctions on Russia come at a crucial moment in the conflict. Delegations for the two sides were also meeting in Switzerland for two days of US-brokered talks, but neither side appeared ready to budge on key issues like territory and future security guarantees. The sanctions, senators hoped, could prod Putin toward settling for peace, as the US has set a June deadline for settlement.
“Literally nobody believes that Russia is acting in good faith in the negotiations with our government and with the Ukrainians,” Whitehouse said. “And so pressure becomes the key.”
Still, legislation to impose tough sanctions on Russia has been on hold in Congress for months.
Senators have put forward a range of sanction measures, including one sweeping bill that would allows the Trump administration to impose tariffs and secondary sanctions on countries that purchase Russia’s oil, gas, uranium and other exports, which are crucial to financing Russia’s military. The Senate Foreign Relations Committee has also advanced a series of more-targeted bills that would sanction China’s efforts to support Russia’s military, commandeer frozen Russian assets and go after what’s known as Moscow’s “shadow fleet” of oil tankers being used to circumvent sanctions already in place.
Republican Sen. Lindsey Graham, who has co-sponsored the Senate’s sweeping sanctions and tariff legislation, also released a statement during the Munich Security Conference this weekend saying that Senate Majority Leader John Thune had committed to bringing up the sanctions bill once it clearly has the 60 votes needed to move through the Senate.
“This legislation will be a game changer,” Graham said. “President Trump has embraced it. It is time to vote.”
Blumenthal, who co-sponsored that bill alongside Graham, also said there is bipartisan support for the legislation, which he called a “very tough sledgehammer of sanctions and tariffs,” but he also noted that “we need to work out some of the remaining details.” Democrats, and a handful of Republicans, have been opposed to President Donald Trump’s campaign to impose tariffs around the world in an effort to strike trade deals and spur more manufacturing in the US
In the House, Democrats are opposed to the tariff provisions of that bill. Instead, a bipartisan group of lawmakers, led by Republican Rep. Brian Fitzpatrick, has proposed separate legislation that makes it more difficult for Trump to waive sanctions, but does away with the tariff provisions.
A separate bill, led by the top Democrat on the House Foreign Affairs Committee, Rep. Gregory Meeks, would bolster US military support for Ukraine by $8 billion. Democrats currently need one more Republican to support an effort to force a vote on that bill.
Once they return to the US, the senators said they would detail how US businesses based in Ukraine have been attacked by Russia. The Democrats are also hoping to build pressure on Trump to send more US weapons to Ukraine. “Putin understands weapons, not words,” Blumenthal said.
Still, the lawmakers will soon return to a Washington where the Trump administration is ambivalent about its long-term commitments to securing peace in Ukraine, as well as Europe. For now, at least, they were buoyed by the conversations from their European counterparts and Republican colleagues.
“We and the Republican senators who were with us in Munich spoke with one voice about our determination to continue to support Ukraine,” Coons said.
