http://www.dhra.mil/perserec/osg/s2unclas/fouo.htm
Force Protection Summary - U.S. Army Garrison
UNCLASSIFIED/FOUO/LES
13-09-034 FOR THE PERIOD ENDING 06 SEP 2013
THREAT LEVELS
Local
1. (U//FOUO) Low for terrorist physical threat / High for Cyber terrorism
Note: The threat level statement is only a snapshot of actual or potential threats, as assessed at the time of publication
National
Defense Intelligence Agency Terrorism Threat Level – SIGNIFICANT
SIGNIFICANT is assigned when anti-US terrorists are operationally active, and attack personnel as their preferred MO or a group uses large casualty producing attacks as their preferred method and has limited operational activity. Operating Environment is neutral. (DIA)
This Force Protection Summary provides a periodic update of information for law enforcement and security personnel, military commanders, intelligence analysts, and others with force protection duties.
DISCLOSURE: The following Force Protection Summary contains information and intelligence compiled by Carlisle Barracks Force Protection Fusion Cell from reports generated by local, state and federal information and intelligence sharing partners. The Force Protection Summary contains only UNCLASSIFIED information; NO Classified sources are accessed, reviewed or otherwise used to create this Force Protection Summary. Further dissemination of the Force Protection Summary, will be limited to a minimum, consistent with the purpose of supporting homeland security, critical infrastructure protection, effective law enforcement and public safety. This collection of open source information is offered for informational purposes only. It is not, and should not be, construed as official evaluated intelligence. Points of view or opinions are those of the individual authors and do not necessarily represent the official position or policies of the U.S. Department of Defense. The Force Protection Summary is raw information intended to assist recipients by providing indications and warnings (I&W); the Force Protection Summary DOES NOT provide reasonable suspicion or probable cause.
WARNING: All information listed in this Force Protection Summary, unless otherwise marked, should be treated as law enforcement sensitive (LES). LES information may not be furnished to agencies outside of law enforcement, DoD, the U.S. government, or public safety agencies. Disclosure of LES information could jeopardize ongoing investigations and the safety of law enforcement personnel. Information marked (U) is unclassified. Information marked (FOUO) is for Official Use Only. Information should not be released to the media, or other agencies within or outside DoD without a need to know. This report contains privileged information, which must be protected. Further dissemination should be limited to a minimum, consistent with the purpose of supporting effective law enforcement and public safety. Persons or organizations violating distribution restrictions will be banned from receiving future Force Protection Summaries.
1. SUMMARY OF EVENTS FOR THE PERIOD. (U)
a. LOCAL. (U)
1. (U//FOUO) No Specific Threats: There are no indications of specific threats to Central Pennsylvania. We remain concerned about Homegrown Violent Extremists who may be planning, or attempting to participate in attacks that could occur with little or no warning. Current information suggests that al-Qa’ida, including its affiliates in the Arabian Peninsula, continues to plan terrorist attacks targeting Western interests, possibly within the US Homeland. Al-Qa’ida and its affiliates may focus efforts to conduct attacks in the period between now and 12 SEP. Terrorists may elect to use a variety of means and weapons and target both official and private interests. Law enforcement personnel are reminded of the potential for terrorists to attack public transportation systems, military installations and tourist infrastructure. Terrorists have targeted and attacked subway and rail systems, as well as aviation and maritime services. Law enforcement personnel should take every precaution to be aware of their surroundings and to adopt appropriate safety measures. NOTE: Out of an abundance of caution we should practice heightened vigilance from now until 12 SEP. Of most immediate concern would be interest by terrorists and criminals in targeting mass gatherings. Lone offenders and Homegrown Violent Extremists (HVEs) are of paramount concern given the expected crowd density as Pro and College football seasons begin as well as 911 Memorial events. ADD ON: A military strike against Syria could be launched in the coming days or weeks, potentially coinciding with the Jewish High Holy Days which began at sundown on 4 SEP. While there is currently no indication of any known, specific threat to the U.S Homeland as it relates to the Syrian situation at this time, continued awareness will be paramount.
2. (U//FOUO) No Credible Physical Threats to Homeland Related to September 11th Anniversary, but Cyber Threat Persists: This Joint Intelligence Bulletin (JIB) assesses the current threat environment to the Homeland surrounding the 12-year anniversary of the 11 September 2001 (9/11) attacks. This JIB focuses on the threat from al-Qa‘ida, including its affiliates and allies, particularly in light of last year’s 11 September attack on US Government Facilities in Benghazi, Libya; al-Qa‘ida-inspired homegrown violent extremists (HVEs); and cyber hackers. The information in this JIB is provided to support the activities of FBI and DHS and to assist federal, state, local, tribal, and territorial government counterterrorism and law enforcement officials, as well as first responders and private sector security officials to deter, prevent, preempt, or respond to terrorist attacks in the United States or overseas targeting US interests. FBI and DHS have no specific, credible information of physical threats timed to the 12-year anniversary of the 9/11 attacks. FBI and DHS assess al-Qa‘ida remains intent on conducting attacks against Western targets, but operational readiness remains the primary driving factor behind the timing of al-Qa‘ida attacks. FBI and DHS assess affiliates and allies, such as al-Qa‘ida in the Arabian Peninsula (AQAP) or Tehrik-e Taliban Pakistan (TTP)—both having demonstrated the ability to stage attacks against the United States—remain intent on attacking the Homeland and are almost certainly plotting attacks against US interests, although not necessarily tied to the 9/11 anniversary. AQAP has attempted two attacks against the United States in the past four years—the 25 DEC 09 attempted attack on a Detroit-bound commercial airliner and the OCT 10 plot to send explosive-laden packages aboard aircraft destined for the United States. We remain concerned the group continues to pursue innovative attack methods designed to overcome Western security measures. TTP, which sponsored the 1 MAY 10 attempted car bombing in Times Square, has repeatedly threatened additional Homeland attacks and publicly vowed to avenge the death of Usama bin Ladin. Although currently there is no information to suggest HVEs are actively plotting or planning to attack the United States in conjunction with the 9/11 anniversary, FBI and DHS assess HVEs could conduct an attack with little warning due to the individualized nature of the radicalization and mobilization processes. Additionally, HVEs who act independently—lone offenders—present law enforcement with limited opportunities to detect plots and increase the difficulty of law enforcement to detect those HVEs with the greatest propensity to take violent action. Public messages from al-Qa‘ida and its affiliates over the past several years encouraging independent attacks continue to motivate violent extremists and provide direct technical instructions for the construction of explosives and attack planning. In the past two years, al-Qa‘ida released two videos featuring statements by al-Qa‘ida spokesman Adam GadahnUSPER encouraging individuals in the West to obtain weapons and attack targets with which they are familiar. Several editions of AQAP’s English-language magazine Inspire provide both encouragement and advice for carrying out independent attacks in the West, including practical instructions for constructing homemade explosive devices and a two-part series on how to use and maintain an AK-47 assault rifle. Tunisian Hacker Group Threatens Cyber Attack on US Financial Institutions Through 11 September 2013. The hacker group “Tunisian_Hackers II” on 27 AUG 13 provided, via a social media site, information regarding the phases of a planned attack called OpUSA. “Phase I” was expected to begin on 1 SEP 13 and was believed to be a 10-day campaign, consisting of distributed denial-of-service (DDoS) attacks against US banks each day. “Phase II,” expected to commence on 11 SEP 13, is a day devoted to wide-spread web defacement. As of 5 SEP 13, FBI and DHS have not seen any credible evidence of a successful DDoS attack against US financial institutions by this hacker group. Despite the inactivity, FBI and DHS are still monitoring the situation and ask the private sector to remain on alert for this activity. (FBI/DHS; 5 SEP 13)
3. (U//FOUO) Compromises of Official Social Media Accounts Spread Disinformation: Malicious cyber actors have used compromised social media accounts to spread disinformation about alleged emergencies and attacks, most prominently through TwitterUSPER. Because it is difficult to determine the authenticity of a tweet, we anticipate malicious cyber actors will continue to seek to exploit Twitter and other social media platforms used by news organizations and public safety agencies to propagate disinformation. Syrian Electronic Army (SEA) cyber actors on 23 APR 13 claimed that they had posted disinformation on the Associated Press USPER (AP) Twitter account indicating that two explosions had occurred at the White House and that President Obama had been injured. Within minutes of the posting, the Dow Jones Industrial Average dropped 145 points (nearly 1 percent), but it quickly recovered after the AP removed the false posting. (SCIC; 30 AUG 13)
4. (U//FOUO) Cybercriminals Use Department of Homeland Security-Themed Ransomware for Financial Gain: Cybercriminals are using ransomware designed to look like it comes from DHS to extort money from computer users. Ransomware is malware that locks a computer or files, and can give the cybercriminal remote access to the computer. Ransomware alleges illegal activity has occurred on the system and demands payment of a fine to unlock the computer. The lockscreen and association with DHS make the ransomware highlighted here an effective criminal tool. Protecting from Ransomware – Implementing standard computer security practices—maintaining updated antivirus software, fully patching all programs, not opening suspicious e-mails or attachments, and enabling pop-up blockers—decreases susceptibility to ransomware attacks. Recovering from a Ransomware Infection – If infected, immediately disconnect from the Internet. The ransomware can be deleted from an infected system through malware removal by an information technology professional, but the victim could still be susceptible if computer security measures are unchanged. Ransomware incidents should be reported to FBI’s Internet Crime Complaint Center (IC3) at - http://www.ic3.gov/default.aspx. (DHS/FBI/30 AUG 13)
b. REGIONAL. (U)
1. (U//FOUO) Planned "Million American March Against Fear“: A Muslim advocacy political action group is planning a “Million American March Against Fear” in Washington, D.C., on 11 SEP 13 to demand social justice by the US government. The known group is demanding “that laws be enacted protecting our 1st amendment.” The organizers scheduled a Rally Against Fear at 12 noon on The National Mall, then the Congress, the Supreme Court, and the White House, to hold truth to power at the three major branches of American government. According to the group’s website, the attendees interested in working for peace will tell the Government about a desire for transparency and policies of peace. The group claims in the past 12 years (since 9/11) the United States government failed to protect and promote Constitutional liberties and human life, here and abroad. The organization feels accountability in government has been ignored and the time has arrived to collectively speak truth to power. Experts and individuals will speak on the lack of transparency and questions plaguing 9/11, steady erosion of domestic civil liberties, drone policy and the very dire effect of these on of plight of American Muslims here at home, and Muslim communities globally in the scope of US imperialism, and the modern face of resistance to unmanned aerial surveillance and warfare. At 2:00 pm, the marchers will embark from the Rally Against Fear, and onto the March Against Drones. The march will go from the rally point between 7th and 14th Streets on the National Mall to the Capitol building, around the Capitol, and onto the street between the Supreme Court and Congress. Attendees will rally there, in the streets, for about 15 minutes, and then will continue to Pennsylvania Avenue and down to the White House, where they will rally again in the street between Lafayette Park and the North Lawn. The group is calling for a professional, positive, and proactive event for the whole family. USARNORTH LEIB ANALYSIS: If this gathering and demonstration takes place (as planned) it is anticipated counter-protests will occur at each of the venues listed in the itinerary. It should be noted this organization has a legitimate right to demonstrate. This TTA is not intended to suggest any interference with or disruption of legal activity. During these activities, tempers may flare, and confrontations could occur. While there is no direct threat to DOD equities, the possibility of a protest escalating may exist. Also, a large turnout near any of the gathering points, or major intersections, could impede traffic or delay access to nearby government facilities. Non-participating DOD personnel are advised to avoid these events and any potential confrontation. (UASRNORTH; 27 AUG 13) IOC COMMENT: Based on currently available information, it is questionable whether the "Million American March Against Fear“ will be organized to the point where they qualify for a permit for their gathering. If they do manage to meet all the requirements, estimated attendance at this point would most likely peak between 3,000 and 4,000 persons. Even including other affinity groups joining in estimated attendance would not be projected, at this point, to exceed 6,000 persons.
2. (U//FOUO) Remote-Controlled (RC) Aircraft/Possible Surveillance at Fort McNair – Washington, DC: On 29 AUG 13, employees discovered a RC aircraft on the roof of Building 32 at Fort McNair Joint Base Myer-Henderson Hall (JBMHH) police detectives responded to the scene and noticed a camera attached to the bottom of the RC aircraft. A review of the footage revealed 17 minutes of images covering the general vicinity of Fort McNair (very little footage was of Fort McNair proper) and the possible operator of the RC aircraft. The JBMHH police notified US Army Criminal Investigation Division and the 902nd Military Intelligence Group at Fort Belvoir of the incident.LEIB Comment: This incident highlights the relative ease in which an adversary could use a RC aircraft to bypass physical security to conduct surveillance against secured Department of Defense (DOD) facilities. The payload capabilities of the RC aircraft are unknown, but open source reporting indicates individuals have planned to use RC aircraft with explosives to conduct attacks; a possibility that would have been successful in this case. In JUN 13, German authorities stopped an Islamic extremist plot to use multiple RC aircraft filled with explosives to conduct attacks in that country. In SEP 11, a US federal grand jury indicted a US person on charges of planning to use several RC aircraft to attack the US Capitol building as well as the Pentagon. There is the potential in this instance that this RC aircraft operator was conducting a dry run/surveillance in preparation for a RC aircraft attack against targets on Fort McNair. (USARNORTH; 4 SEP 13)
c. CONUS. (U)
1. (U//OS) 'Syrian Electronic Army' Hacks Marines Website: Pro-Assad computer hackers on 2 SEP broke into the Marine Corps recruiting website, redirecting visitors to a screed that called President Barack Obama "a traitor who wants to put your lives in danger to rescue al- Qaida insurgents." A Marine Corps spokesman confirmed that the site, marines.com, was tampered with and redirected temporarily, but no information was put at risk. Capt. Eric Flanagan wouldn't say who was responsible for the hacking, but the site was redirected to a message from the Syrian Electronic Army, a hacker group that's claimed responsibility for disrupting the New York Times website, Twitter and other media sites the group sees as sympathetic to Syria's rebels. The message to the Marine Corps was a plea for Americans to fight alongside the Syrian army and not aide the rebels. President Barack Obama is seeking congressional approval for U.S. military intervention in Syria in response to the suspected August chemical weapons attack on Syrian rebels who are trying to oust Syrian President Bashar Assad from power. The full message as it appeared on the redirected site is below: “This is a message written by your brothers in the Syrian Army, who have been fighting al-Qaida for the last 3 years. We understand your patriotism and love for your country so please understand our love for ours. Obama is a traitor who wants to put your lives in danger to rescue al- Qaida insurgents. Marines, please take a look at what your comrades think about Obama's alliance with al-Qaida against Syria. Your officer in charge probably has no qualms about sending you to die against soldiers just like you, fighting a vile common enemy. The Syrian army should be your ally not your enemy. Refuse your orders and concentrate on the real reason every soldier joins their military, to defend their homeland. You're more than welcome to fight alongside our army rather than against it. Your brothers, the Syrian army soldiers. A message delivered by the SEA” (MTA; 3 SEP 13) LEIB Comment: Several DOD individuals also had the identical message directly emailed to them. The USMC website affected by this action was their commercial site, not the official .mil site. As non-DOD entities (i.e., the aforementioned computer hackers) urge active duty service members to refute orders, or make seditious statements, DOD may observe an increase in insider threats. (USARNORTH; 5 SEP 13)
2. (U//FOUO) Suspicious E-mail Attempting to Recruit US Coast Guard Member – Savannah, GA: On 30 AUG 13, a possible member of an identified cyber activist group sent an e-mail to an identified US Coast Guard member’s uscg.mil e-mail address. The e-mail advised the Coast Guard member of possible impending US military action against Syria and possibly Iran, and warned the Coast Guard member he would have to choose between serving the military or serving the people of the US. Ultimately, the e-mail encouraged the Coast Guard member to voice dissent against the US military to be used by the cyber activist group as propaganda. LEIB Comment: This is the first suspicious cyber activity reported to the LEIB where an identified cyber activist group solicited potentially seditious remarks from a Department of Defense member in response to a current event. The Coast Guard member reported the suspicious e-mail and does not appear to be an insider threat. It is currently unknown how the cyber activist group obtained the Coast Guard member’s .mil e-mail address or if they sent the same e-mail to other DOD members. (USARNORTH; 4 SEP 13)
3. (U//OS) AZ Man With Weapons Cache Talked Of Doomsday: Two men are in custody and a cache of assorted weapons seized after authorities saw their vehicle nearly collide with a cement barrier in Phoenix. The driver, Michael Doyle, 30, and his passenger, Christopher Dewey, 26, were placed in handcuffs, searched and booked into jail on 14 counts of misconduct with explosives, according to the Arizona Department of Public Safety When the DPS officer approached the vehicle near U.S. 60 and 91st Avenue on 27 AUG, the lawman saw Doyle was wearing a ballistic vest and had large bulges in his pockets, DPS said. A large number of weapons and explosives were discovered inside the vehicle. They included: A fully loaded AK-47 rifle; Pipe bombs; Bomb components; A steel plate converted into a shield; A copy of the Anarchist Cookbook and a copy of the Improvised Munitions Handbook; A machete; Five magazines with 159 rounds of ammunition; A steel shank. Officers said they also found a set of handcuffs in Doyle's back pocket, a pipe bomb with a red fuse in his front pants and a ballistic vest. Seven complete improvised explosive devices were discovered and rendered safe by the State DPS Bomb Squad. Detectives, working with the Yavapai County Sheriff's Office and the Northern Narcotics task force, located Doyle's estranged wife. During a police interview, she said that Doyle considers himself a sovereign citizen, DPS said. During a search of the home, detectives said they found a cassette tape with Doyle talking about killing and doomsday. They also found Molotov cocktail devices and a 30-06 scoped rifle. Doyle and Dewey also face two counts of misconduct with a weapon and use of body armor during commission of a felony. A records check showed Doyle's license was suspended, DPS said. They were booked into the Maricopa County Jail. (CBS; 4 SEP 13; NYCTC; 5 SEP 13)
d. OCONUS (U)
1. (U//OS) Al-Amriki Alive, Severs Ties With Al-Shabaab and al-Qaeda: American-born jihadist Omar Hammami, better known as Abu Mansour al-Amriki, resurfaced 3 SEP and announced his severance from al-Shabaab and al-Qaeda. Al-Amriki said in an interview with Voice of America that he is hiding somewhere in the Bay and Bakool jungles of southern Somalia. News outlets reported that he was killed by fighters loyal to top al-Shabaab commander Ahmed Abdi Godane in MAY, but al-Amriki contacted Voice of America (VOA) Somali Service 3 SEP after two of his wives were arrested in Dinsor by members from al-Shabaab's Amniyat unit. In an interview with VOA, he announced that he was finished with al-Shabaab and al-Qaeda, and said Godane had turned into a dictator. "The cause of the problem is that basically he has left the principles of our religion," al-Amriki said, calling Godane an oppressive leader the likes of former Somali President Moahmed Siad Barre. He again accused Godane, who is commonly referred to as Mukhtar Abu Zubayr, of attempting to kill him and of murdering the person who offered shelter to al-Amriki's two wives. Al-Amriki said he has been travelling with a small group of fighters and is hiding out in the jungles of Bay or Bakol. Following an unprecedented battle in Barawe in JUN between rival al-Shabaab factions -- in which Godane loyalists executed two well respected al-Shabaab commanders, Ibrahim al-Afghani and Sheikh Maalim Burhan -- al-Amriki reportedly fled Barawe to join senior al-Shabaab leader Mukhtar Robow Ali in Bakol. Losing faith in al-Qaeda - al-Amriki's defection from al-Shabaab and al-Qaeda came after he lost hope that al-Qaeda would take steps to rescue him from Godane and his loyalists, according to Omar Sheikh Abdirahman, a security analyst and director of the Mogadishu-based Center for Moderation and Dialogue. "Hammami has been desperately calling on al-Qaeda for a while and it has failed to help him, so it became clear to him that al-Qaeda did not have any use for him, and al-Shabaab was searching for him, so he abandoned both," Abdirahman told Sabahi. "It is possible that Hammami thinks al-Qaeda has taken Ahmed Godane's side and that might be the reason he left, but al-Qaeda recently seems as though it is not as united as it used to be, which means that it is unable to do anything even if it wanted to take steps against Godane in light of how weak it has become," he said. Al-Amriki's current protectors are former mid-level leaders of al-Shabaab who have also defected from Godane, Abdirahman said, adding that the defectors' clans are helping protect al-Amriki. "Mukhtar Robow Abu Mansur is also in the bush and has abandoned Godane's side, so it possible that he will make the same decision," Abdirahman said, adding that al-Amriki's latest revelation could influence Somali members of al-Shabaab who share his viewpoint to take the same decision and defect from the group. General Yusuf Hussein Dhumal, former commander of the Somali military during the transitional government, has dismissed al-Amriki's comments, saying he is just struggling to stay alive. "He is unable to protect his own [life], so cutting ties with al-Qaeda or al-Shabaab will not do anything to them," he told Sabahi. He said the only thing al-Amriki's decision shows is the continued failure al-Shabaab is slipping into, and it gives the government the morale boost it needs to push al-Shabaab out of the places it still holds. When asked to comment on al-Amriki's interview, Somali government spokesman Abdirahman Omar Osman Yarisow told Sabahi, "The only thing I can say is that we will not negotiate with any internationally recognized terrorist." He did not provide any additional details on if or how the federal government intends to use al-Amriki's defection from al-Shabaab to advance its own fight against the militant group, but said administration officials will hold a press conference to update the public on Somalia's general security situation on 4 SEP. This is not the first time al-Amriki has been reported dead for several months and then reappeared online in a video message or through social media. In early 2012, al-Amriki -- one of al-Shabaab's top propagandists at that time -- posted a series of video messages appealing to al-Qaeda to intervene in the internal strife among al-Shabaab leadership. Al-Amriki also said his life was in danger from fellow al-Shabaab members after he spoke out against the Somali militant group. (SABAHI; 4 SEP 13)
2. CHEMICAL, BIOLOGICAL, RADIOLOGICAL, NUCLEAR, AND EXPLOSIVE (CBRNE). (U)
a. (U//FOUO) Minimal Threat from Explosives-Impregnated Clothing: The Terrorist Explosive Device Analytical Center (TEDAC) assesses with high confidence there is a minimal improvised explosive device (IED) threat from clothing or textiles that have been impregnated with explosive compounds, based on the material characteristics necessary to achieve successful detonation. According to recent Western media reporting, al-Qa’ida in the Arabian Peninsula (AQAP) has the capability to impregnate an undetectable liquid explosive into clothing, which when dried could presumably be worn as a suicide vest (SVEST). TEDAC assesses with high confidence the open-source reporting regarding this threat incorrectly judges the explosive potential from such material. High confidence generally indicates that judgments are based on high-quality information from multiple sources or from a single highly reliable source, or that the nature of the issue makes it possible to render a solid judgment. Material Characteristics Insufficient to Achieve Detonation - TEDAC assesses with high confidence explosives-impregnated clothing does not have the necessary characteristics to achieve detonation. There are several specific requirements necessary to achieve a steady state detonation, most of which are difficult to achieve in a piece of clothing. Further, while it is technically feasible to integrate an explosive compound into a piece of clothing, the physical and visible characteristics of the resulting garment would likely attract attention or be otherwise detectable. All explosive materials have a unique characteristic known as critical diameter, which is the mass below which they will not sustain a detonation. Cloth or fabric impregnated with explosives would create narrow sheets of explosives but would have a critical diameter below that necessary to sustain a detonation. To achieve successful detonation, explosive materials also require a consistent molecular interface throughout their mass. This explosive interface ensures propagation of the detonation wave. Explosives impregnated clothing would contain air gaps and the resulting interruption in the explosive interface throughout the material would likely create a disruption in the detonation. (WSIC; 5 SEP 13)
3. RECENT SURVEILLANCE ACTIVITY. (U) NSTR
4. SIGNIFICANT UPCOMING DATES. (U)
(a) 7 SEP ANSWER- Mass Demonstration (Washington, D.C).- 'No War on Syria
(b) 11 SEP 12th Anniversary of 9/11 Attack
(c) 11 SEP "Million American March Against Fear" (Million Muslim March)
(d) 03 – 14 SEP Yom Kippur
Installation Operations Center
Senior Force Protection Intelligence Analyst
Local
1. (U//FOUO) Low for terrorist physical threat / High for Cyber terrorism
Note: The threat level statement is only a snapshot of actual or potential threats, as assessed at the time of publication
National
Defense Intelligence Agency Terrorism Threat Level – SIGNIFICANT
SIGNIFICANT is assigned when anti-US terrorists are operationally active, and attack personnel as their preferred MO or a group uses large casualty producing attacks as their preferred method and has limited operational activity. Operating Environment is neutral. (DIA)
This Force Protection Summary provides a periodic update of information for law enforcement and security personnel, military commanders, intelligence analysts, and others with force protection duties.
DISCLOSURE: The following Force Protection Summary contains information and intelligence compiled by Carlisle Barracks Force Protection Fusion Cell from reports generated by local, state and federal information and intelligence sharing partners. The Force Protection Summary contains only UNCLASSIFIED information; NO Classified sources are accessed, reviewed or otherwise used to create this Force Protection Summary. Further dissemination of the Force Protection Summary, will be limited to a minimum, consistent with the purpose of supporting homeland security, critical infrastructure protection, effective law enforcement and public safety. This collection of open source information is offered for informational purposes only. It is not, and should not be, construed as official evaluated intelligence. Points of view or opinions are those of the individual authors and do not necessarily represent the official position or policies of the U.S. Department of Defense. The Force Protection Summary is raw information intended to assist recipients by providing indications and warnings (I&W); the Force Protection Summary DOES NOT provide reasonable suspicion or probable cause.
WARNING: All information listed in this Force Protection Summary, unless otherwise marked, should be treated as law enforcement sensitive (LES). LES information may not be furnished to agencies outside of law enforcement, DoD, the U.S. government, or public safety agencies. Disclosure of LES information could jeopardize ongoing investigations and the safety of law enforcement personnel. Information marked (U) is unclassified. Information marked (FOUO) is for Official Use Only. Information should not be released to the media, or other agencies within or outside DoD without a need to know. This report contains privileged information, which must be protected. Further dissemination should be limited to a minimum, consistent with the purpose of supporting effective law enforcement and public safety. Persons or organizations violating distribution restrictions will be banned from receiving future Force Protection Summaries.
1. SUMMARY OF EVENTS FOR THE PERIOD. (U)
a. LOCAL. (U)
1. (U//FOUO) No Specific Threats: There are no indications of specific threats to Central Pennsylvania. We remain concerned about Homegrown Violent Extremists who may be planning, or attempting to participate in attacks that could occur with little or no warning. Current information suggests that al-Qa’ida, including its affiliates in the Arabian Peninsula, continues to plan terrorist attacks targeting Western interests, possibly within the US Homeland. Al-Qa’ida and its affiliates may focus efforts to conduct attacks in the period between now and 12 SEP. Terrorists may elect to use a variety of means and weapons and target both official and private interests. Law enforcement personnel are reminded of the potential for terrorists to attack public transportation systems, military installations and tourist infrastructure. Terrorists have targeted and attacked subway and rail systems, as well as aviation and maritime services. Law enforcement personnel should take every precaution to be aware of their surroundings and to adopt appropriate safety measures. NOTE: Out of an abundance of caution we should practice heightened vigilance from now until 12 SEP. Of most immediate concern would be interest by terrorists and criminals in targeting mass gatherings. Lone offenders and Homegrown Violent Extremists (HVEs) are of paramount concern given the expected crowd density as Pro and College football seasons begin as well as 911 Memorial events. ADD ON: A military strike against Syria could be launched in the coming days or weeks, potentially coinciding with the Jewish High Holy Days which began at sundown on 4 SEP. While there is currently no indication of any known, specific threat to the U.S Homeland as it relates to the Syrian situation at this time, continued awareness will be paramount.
2. (U//FOUO) No Credible Physical Threats to Homeland Related to September 11th Anniversary, but Cyber Threat Persists: This Joint Intelligence Bulletin (JIB) assesses the current threat environment to the Homeland surrounding the 12-year anniversary of the 11 September 2001 (9/11) attacks. This JIB focuses on the threat from al-Qa‘ida, including its affiliates and allies, particularly in light of last year’s 11 September attack on US Government Facilities in Benghazi, Libya; al-Qa‘ida-inspired homegrown violent extremists (HVEs); and cyber hackers. The information in this JIB is provided to support the activities of FBI and DHS and to assist federal, state, local, tribal, and territorial government counterterrorism and law enforcement officials, as well as first responders and private sector security officials to deter, prevent, preempt, or respond to terrorist attacks in the United States or overseas targeting US interests. FBI and DHS have no specific, credible information of physical threats timed to the 12-year anniversary of the 9/11 attacks. FBI and DHS assess al-Qa‘ida remains intent on conducting attacks against Western targets, but operational readiness remains the primary driving factor behind the timing of al-Qa‘ida attacks. FBI and DHS assess affiliates and allies, such as al-Qa‘ida in the Arabian Peninsula (AQAP) or Tehrik-e Taliban Pakistan (TTP)—both having demonstrated the ability to stage attacks against the United States—remain intent on attacking the Homeland and are almost certainly plotting attacks against US interests, although not necessarily tied to the 9/11 anniversary. AQAP has attempted two attacks against the United States in the past four years—the 25 DEC 09 attempted attack on a Detroit-bound commercial airliner and the OCT 10 plot to send explosive-laden packages aboard aircraft destined for the United States. We remain concerned the group continues to pursue innovative attack methods designed to overcome Western security measures. TTP, which sponsored the 1 MAY 10 attempted car bombing in Times Square, has repeatedly threatened additional Homeland attacks and publicly vowed to avenge the death of Usama bin Ladin. Although currently there is no information to suggest HVEs are actively plotting or planning to attack the United States in conjunction with the 9/11 anniversary, FBI and DHS assess HVEs could conduct an attack with little warning due to the individualized nature of the radicalization and mobilization processes. Additionally, HVEs who act independently—lone offenders—present law enforcement with limited opportunities to detect plots and increase the difficulty of law enforcement to detect those HVEs with the greatest propensity to take violent action. Public messages from al-Qa‘ida and its affiliates over the past several years encouraging independent attacks continue to motivate violent extremists and provide direct technical instructions for the construction of explosives and attack planning. In the past two years, al-Qa‘ida released two videos featuring statements by al-Qa‘ida spokesman Adam GadahnUSPER encouraging individuals in the West to obtain weapons and attack targets with which they are familiar. Several editions of AQAP’s English-language magazine Inspire provide both encouragement and advice for carrying out independent attacks in the West, including practical instructions for constructing homemade explosive devices and a two-part series on how to use and maintain an AK-47 assault rifle. Tunisian Hacker Group Threatens Cyber Attack on US Financial Institutions Through 11 September 2013. The hacker group “Tunisian_Hackers II” on 27 AUG 13 provided, via a social media site, information regarding the phases of a planned attack called OpUSA. “Phase I” was expected to begin on 1 SEP 13 and was believed to be a 10-day campaign, consisting of distributed denial-of-service (DDoS) attacks against US banks each day. “Phase II,” expected to commence on 11 SEP 13, is a day devoted to wide-spread web defacement. As of 5 SEP 13, FBI and DHS have not seen any credible evidence of a successful DDoS attack against US financial institutions by this hacker group. Despite the inactivity, FBI and DHS are still monitoring the situation and ask the private sector to remain on alert for this activity. (FBI/DHS; 5 SEP 13)
3. (U//FOUO) Compromises of Official Social Media Accounts Spread Disinformation: Malicious cyber actors have used compromised social media accounts to spread disinformation about alleged emergencies and attacks, most prominently through TwitterUSPER. Because it is difficult to determine the authenticity of a tweet, we anticipate malicious cyber actors will continue to seek to exploit Twitter and other social media platforms used by news organizations and public safety agencies to propagate disinformation. Syrian Electronic Army (SEA) cyber actors on 23 APR 13 claimed that they had posted disinformation on the Associated Press USPER (AP) Twitter account indicating that two explosions had occurred at the White House and that President Obama had been injured. Within minutes of the posting, the Dow Jones Industrial Average dropped 145 points (nearly 1 percent), but it quickly recovered after the AP removed the false posting. (SCIC; 30 AUG 13)
4. (U//FOUO) Cybercriminals Use Department of Homeland Security-Themed Ransomware for Financial Gain: Cybercriminals are using ransomware designed to look like it comes from DHS to extort money from computer users. Ransomware is malware that locks a computer or files, and can give the cybercriminal remote access to the computer. Ransomware alleges illegal activity has occurred on the system and demands payment of a fine to unlock the computer. The lockscreen and association with DHS make the ransomware highlighted here an effective criminal tool. Protecting from Ransomware – Implementing standard computer security practices—maintaining updated antivirus software, fully patching all programs, not opening suspicious e-mails or attachments, and enabling pop-up blockers—decreases susceptibility to ransomware attacks. Recovering from a Ransomware Infection – If infected, immediately disconnect from the Internet. The ransomware can be deleted from an infected system through malware removal by an information technology professional, but the victim could still be susceptible if computer security measures are unchanged. Ransomware incidents should be reported to FBI’s Internet Crime Complaint Center (IC3) at - http://www.ic3.gov/default.aspx. (DHS/FBI/30 AUG 13)
b. REGIONAL. (U)
1. (U//FOUO) Planned "Million American March Against Fear“: A Muslim advocacy political action group is planning a “Million American March Against Fear” in Washington, D.C., on 11 SEP 13 to demand social justice by the US government. The known group is demanding “that laws be enacted protecting our 1st amendment.” The organizers scheduled a Rally Against Fear at 12 noon on The National Mall, then the Congress, the Supreme Court, and the White House, to hold truth to power at the three major branches of American government. According to the group’s website, the attendees interested in working for peace will tell the Government about a desire for transparency and policies of peace. The group claims in the past 12 years (since 9/11) the United States government failed to protect and promote Constitutional liberties and human life, here and abroad. The organization feels accountability in government has been ignored and the time has arrived to collectively speak truth to power. Experts and individuals will speak on the lack of transparency and questions plaguing 9/11, steady erosion of domestic civil liberties, drone policy and the very dire effect of these on of plight of American Muslims here at home, and Muslim communities globally in the scope of US imperialism, and the modern face of resistance to unmanned aerial surveillance and warfare. At 2:00 pm, the marchers will embark from the Rally Against Fear, and onto the March Against Drones. The march will go from the rally point between 7th and 14th Streets on the National Mall to the Capitol building, around the Capitol, and onto the street between the Supreme Court and Congress. Attendees will rally there, in the streets, for about 15 minutes, and then will continue to Pennsylvania Avenue and down to the White House, where they will rally again in the street between Lafayette Park and the North Lawn. The group is calling for a professional, positive, and proactive event for the whole family. USARNORTH LEIB ANALYSIS: If this gathering and demonstration takes place (as planned) it is anticipated counter-protests will occur at each of the venues listed in the itinerary. It should be noted this organization has a legitimate right to demonstrate. This TTA is not intended to suggest any interference with or disruption of legal activity. During these activities, tempers may flare, and confrontations could occur. While there is no direct threat to DOD equities, the possibility of a protest escalating may exist. Also, a large turnout near any of the gathering points, or major intersections, could impede traffic or delay access to nearby government facilities. Non-participating DOD personnel are advised to avoid these events and any potential confrontation. (UASRNORTH; 27 AUG 13) IOC COMMENT: Based on currently available information, it is questionable whether the "Million American March Against Fear“ will be organized to the point where they qualify for a permit for their gathering. If they do manage to meet all the requirements, estimated attendance at this point would most likely peak between 3,000 and 4,000 persons. Even including other affinity groups joining in estimated attendance would not be projected, at this point, to exceed 6,000 persons.
2. (U//FOUO) Remote-Controlled (RC) Aircraft/Possible Surveillance at Fort McNair – Washington, DC: On 29 AUG 13, employees discovered a RC aircraft on the roof of Building 32 at Fort McNair Joint Base Myer-Henderson Hall (JBMHH) police detectives responded to the scene and noticed a camera attached to the bottom of the RC aircraft. A review of the footage revealed 17 minutes of images covering the general vicinity of Fort McNair (very little footage was of Fort McNair proper) and the possible operator of the RC aircraft. The JBMHH police notified US Army Criminal Investigation Division and the 902nd Military Intelligence Group at Fort Belvoir of the incident.LEIB Comment: This incident highlights the relative ease in which an adversary could use a RC aircraft to bypass physical security to conduct surveillance against secured Department of Defense (DOD) facilities. The payload capabilities of the RC aircraft are unknown, but open source reporting indicates individuals have planned to use RC aircraft with explosives to conduct attacks; a possibility that would have been successful in this case. In JUN 13, German authorities stopped an Islamic extremist plot to use multiple RC aircraft filled with explosives to conduct attacks in that country. In SEP 11, a US federal grand jury indicted a US person on charges of planning to use several RC aircraft to attack the US Capitol building as well as the Pentagon. There is the potential in this instance that this RC aircraft operator was conducting a dry run/surveillance in preparation for a RC aircraft attack against targets on Fort McNair. (USARNORTH; 4 SEP 13)
c. CONUS. (U)
1. (U//OS) 'Syrian Electronic Army' Hacks Marines Website: Pro-Assad computer hackers on 2 SEP broke into the Marine Corps recruiting website, redirecting visitors to a screed that called President Barack Obama "a traitor who wants to put your lives in danger to rescue al- Qaida insurgents." A Marine Corps spokesman confirmed that the site, marines.com, was tampered with and redirected temporarily, but no information was put at risk. Capt. Eric Flanagan wouldn't say who was responsible for the hacking, but the site was redirected to a message from the Syrian Electronic Army, a hacker group that's claimed responsibility for disrupting the New York Times website, Twitter and other media sites the group sees as sympathetic to Syria's rebels. The message to the Marine Corps was a plea for Americans to fight alongside the Syrian army and not aide the rebels. President Barack Obama is seeking congressional approval for U.S. military intervention in Syria in response to the suspected August chemical weapons attack on Syrian rebels who are trying to oust Syrian President Bashar Assad from power. The full message as it appeared on the redirected site is below: “This is a message written by your brothers in the Syrian Army, who have been fighting al-Qaida for the last 3 years. We understand your patriotism and love for your country so please understand our love for ours. Obama is a traitor who wants to put your lives in danger to rescue al- Qaida insurgents. Marines, please take a look at what your comrades think about Obama's alliance with al-Qaida against Syria. Your officer in charge probably has no qualms about sending you to die against soldiers just like you, fighting a vile common enemy. The Syrian army should be your ally not your enemy. Refuse your orders and concentrate on the real reason every soldier joins their military, to defend their homeland. You're more than welcome to fight alongside our army rather than against it. Your brothers, the Syrian army soldiers. A message delivered by the SEA” (MTA; 3 SEP 13) LEIB Comment: Several DOD individuals also had the identical message directly emailed to them. The USMC website affected by this action was their commercial site, not the official .mil site. As non-DOD entities (i.e., the aforementioned computer hackers) urge active duty service members to refute orders, or make seditious statements, DOD may observe an increase in insider threats. (USARNORTH; 5 SEP 13)
2. (U//FOUO) Suspicious E-mail Attempting to Recruit US Coast Guard Member – Savannah, GA: On 30 AUG 13, a possible member of an identified cyber activist group sent an e-mail to an identified US Coast Guard member’s uscg.mil e-mail address. The e-mail advised the Coast Guard member of possible impending US military action against Syria and possibly Iran, and warned the Coast Guard member he would have to choose between serving the military or serving the people of the US. Ultimately, the e-mail encouraged the Coast Guard member to voice dissent against the US military to be used by the cyber activist group as propaganda. LEIB Comment: This is the first suspicious cyber activity reported to the LEIB where an identified cyber activist group solicited potentially seditious remarks from a Department of Defense member in response to a current event. The Coast Guard member reported the suspicious e-mail and does not appear to be an insider threat. It is currently unknown how the cyber activist group obtained the Coast Guard member’s .mil e-mail address or if they sent the same e-mail to other DOD members. (USARNORTH; 4 SEP 13)
3. (U//OS) AZ Man With Weapons Cache Talked Of Doomsday: Two men are in custody and a cache of assorted weapons seized after authorities saw their vehicle nearly collide with a cement barrier in Phoenix. The driver, Michael Doyle, 30, and his passenger, Christopher Dewey, 26, were placed in handcuffs, searched and booked into jail on 14 counts of misconduct with explosives, according to the Arizona Department of Public Safety When the DPS officer approached the vehicle near U.S. 60 and 91st Avenue on 27 AUG, the lawman saw Doyle was wearing a ballistic vest and had large bulges in his pockets, DPS said. A large number of weapons and explosives were discovered inside the vehicle. They included: A fully loaded AK-47 rifle; Pipe bombs; Bomb components; A steel plate converted into a shield; A copy of the Anarchist Cookbook and a copy of the Improvised Munitions Handbook; A machete; Five magazines with 159 rounds of ammunition; A steel shank. Officers said they also found a set of handcuffs in Doyle's back pocket, a pipe bomb with a red fuse in his front pants and a ballistic vest. Seven complete improvised explosive devices were discovered and rendered safe by the State DPS Bomb Squad. Detectives, working with the Yavapai County Sheriff's Office and the Northern Narcotics task force, located Doyle's estranged wife. During a police interview, she said that Doyle considers himself a sovereign citizen, DPS said. During a search of the home, detectives said they found a cassette tape with Doyle talking about killing and doomsday. They also found Molotov cocktail devices and a 30-06 scoped rifle. Doyle and Dewey also face two counts of misconduct with a weapon and use of body armor during commission of a felony. A records check showed Doyle's license was suspended, DPS said. They were booked into the Maricopa County Jail. (CBS; 4 SEP 13; NYCTC; 5 SEP 13)
d. OCONUS (U)
1. (U//OS) Al-Amriki Alive, Severs Ties With Al-Shabaab and al-Qaeda: American-born jihadist Omar Hammami, better known as Abu Mansour al-Amriki, resurfaced 3 SEP and announced his severance from al-Shabaab and al-Qaeda. Al-Amriki said in an interview with Voice of America that he is hiding somewhere in the Bay and Bakool jungles of southern Somalia. News outlets reported that he was killed by fighters loyal to top al-Shabaab commander Ahmed Abdi Godane in MAY, but al-Amriki contacted Voice of America (VOA) Somali Service 3 SEP after two of his wives were arrested in Dinsor by members from al-Shabaab's Amniyat unit. In an interview with VOA, he announced that he was finished with al-Shabaab and al-Qaeda, and said Godane had turned into a dictator. "The cause of the problem is that basically he has left the principles of our religion," al-Amriki said, calling Godane an oppressive leader the likes of former Somali President Moahmed Siad Barre. He again accused Godane, who is commonly referred to as Mukhtar Abu Zubayr, of attempting to kill him and of murdering the person who offered shelter to al-Amriki's two wives. Al-Amriki said he has been travelling with a small group of fighters and is hiding out in the jungles of Bay or Bakol. Following an unprecedented battle in Barawe in JUN between rival al-Shabaab factions -- in which Godane loyalists executed two well respected al-Shabaab commanders, Ibrahim al-Afghani and Sheikh Maalim Burhan -- al-Amriki reportedly fled Barawe to join senior al-Shabaab leader Mukhtar Robow Ali in Bakol. Losing faith in al-Qaeda - al-Amriki's defection from al-Shabaab and al-Qaeda came after he lost hope that al-Qaeda would take steps to rescue him from Godane and his loyalists, according to Omar Sheikh Abdirahman, a security analyst and director of the Mogadishu-based Center for Moderation and Dialogue. "Hammami has been desperately calling on al-Qaeda for a while and it has failed to help him, so it became clear to him that al-Qaeda did not have any use for him, and al-Shabaab was searching for him, so he abandoned both," Abdirahman told Sabahi. "It is possible that Hammami thinks al-Qaeda has taken Ahmed Godane's side and that might be the reason he left, but al-Qaeda recently seems as though it is not as united as it used to be, which means that it is unable to do anything even if it wanted to take steps against Godane in light of how weak it has become," he said. Al-Amriki's current protectors are former mid-level leaders of al-Shabaab who have also defected from Godane, Abdirahman said, adding that the defectors' clans are helping protect al-Amriki. "Mukhtar Robow Abu Mansur is also in the bush and has abandoned Godane's side, so it possible that he will make the same decision," Abdirahman said, adding that al-Amriki's latest revelation could influence Somali members of al-Shabaab who share his viewpoint to take the same decision and defect from the group. General Yusuf Hussein Dhumal, former commander of the Somali military during the transitional government, has dismissed al-Amriki's comments, saying he is just struggling to stay alive. "He is unable to protect his own [life], so cutting ties with al-Qaeda or al-Shabaab will not do anything to them," he told Sabahi. He said the only thing al-Amriki's decision shows is the continued failure al-Shabaab is slipping into, and it gives the government the morale boost it needs to push al-Shabaab out of the places it still holds. When asked to comment on al-Amriki's interview, Somali government spokesman Abdirahman Omar Osman Yarisow told Sabahi, "The only thing I can say is that we will not negotiate with any internationally recognized terrorist." He did not provide any additional details on if or how the federal government intends to use al-Amriki's defection from al-Shabaab to advance its own fight against the militant group, but said administration officials will hold a press conference to update the public on Somalia's general security situation on 4 SEP. This is not the first time al-Amriki has been reported dead for several months and then reappeared online in a video message or through social media. In early 2012, al-Amriki -- one of al-Shabaab's top propagandists at that time -- posted a series of video messages appealing to al-Qaeda to intervene in the internal strife among al-Shabaab leadership. Al-Amriki also said his life was in danger from fellow al-Shabaab members after he spoke out against the Somali militant group. (SABAHI; 4 SEP 13)
2. CHEMICAL, BIOLOGICAL, RADIOLOGICAL, NUCLEAR, AND EXPLOSIVE (CBRNE). (U)
a. (U//FOUO) Minimal Threat from Explosives-Impregnated Clothing: The Terrorist Explosive Device Analytical Center (TEDAC) assesses with high confidence there is a minimal improvised explosive device (IED) threat from clothing or textiles that have been impregnated with explosive compounds, based on the material characteristics necessary to achieve successful detonation. According to recent Western media reporting, al-Qa’ida in the Arabian Peninsula (AQAP) has the capability to impregnate an undetectable liquid explosive into clothing, which when dried could presumably be worn as a suicide vest (SVEST). TEDAC assesses with high confidence the open-source reporting regarding this threat incorrectly judges the explosive potential from such material. High confidence generally indicates that judgments are based on high-quality information from multiple sources or from a single highly reliable source, or that the nature of the issue makes it possible to render a solid judgment. Material Characteristics Insufficient to Achieve Detonation - TEDAC assesses with high confidence explosives-impregnated clothing does not have the necessary characteristics to achieve detonation. There are several specific requirements necessary to achieve a steady state detonation, most of which are difficult to achieve in a piece of clothing. Further, while it is technically feasible to integrate an explosive compound into a piece of clothing, the physical and visible characteristics of the resulting garment would likely attract attention or be otherwise detectable. All explosive materials have a unique characteristic known as critical diameter, which is the mass below which they will not sustain a detonation. Cloth or fabric impregnated with explosives would create narrow sheets of explosives but would have a critical diameter below that necessary to sustain a detonation. To achieve successful detonation, explosive materials also require a consistent molecular interface throughout their mass. This explosive interface ensures propagation of the detonation wave. Explosives impregnated clothing would contain air gaps and the resulting interruption in the explosive interface throughout the material would likely create a disruption in the detonation. (WSIC; 5 SEP 13)
3. RECENT SURVEILLANCE ACTIVITY. (U) NSTR
4. SIGNIFICANT UPCOMING DATES. (U)
(a) 7 SEP ANSWER- Mass Demonstration (Washington, D.C).- 'No War on Syria
(b) 11 SEP 12th Anniversary of 9/11 Attack
(c) 11 SEP "Million American March Against Fear" (Million Muslim March)
(d) 03 – 14 SEP Yom Kippur
Installation Operations Center
Senior Force Protection Intelligence Analyst
No comments:
Post a Comment