Defense News in Brief: USS Kearsarge (LHD 3) Arrives in Tromsø

Source: United States Navy

The ship’s presence in the High North is a demonstration of the U.S. Navy’s continued commitment to NATO Allies and Partners and the strong bond between the United States and Norway.

“The Kearsarge ARG and 22nd MEU are grateful to the Kingdom of Norway for supporting our port visit in Tromsø,” said Capt. David Guluzian, commander of the Kearsarge ARG and Amphibious Squadron SIX. “As we work toward mutual goals of peace and security throughout the region, the ARG-MEU team looks forward to strengthening the bonds between the U.S., Norway, and our NATO Allies and Partners.”

While in port in the northern Norwegian city of Tromsø, Kearsarge will off-load U.S. Marine Corps equipment and vehicles in support of a bilateral Norway training exercise strengthening the long-standing relationship between the U.S. and Norway.

As part of its port visit above the Arctic Circle, the group’s leadership will participate in visits and office calls with local community and military leadership while the crew partakes in several local tours of historical sights and experiences Norway’s rich culture.

The ARG-MEU team recently departed homeports in Virginia and North Carolina for its scheduled deployment in the U.S. Sixth Fleet area of operations conducting global maritime and security operations in support of Allied and partner interests in Europe and Africa.

The Kearsarge ARG and embarked 22nd MEU are under the command and control of Task Force 61/2. The ARG consists of USS Kearsarge; the San-Antonio class amphibious transport dock ship USS Arlington (LPD 24); and the Whidbey Island-class dock landing ship USS Gunston Hall (LSD 44).

Embarked commands with the Kearsarge ARG include Amphibious Squadron SIX, 22nd MEU, Fleet Surgical Team 2, Tactical Air Control Squadron 22, Helicopter Sea Combat Squadron 28, Assault Craft Unit 2, Assault Craft Unit 4, Naval Beach Group 2, and Beach Master Unit 2.

Amphibious ready groups and larger amphibious task forces provide military commanders a wide range of flexible capabilities including maritime security operations, expeditionary power projection, strike operations, forward naval presence, crisis response, sea control, deterrence, counter-terrorism, information operations, security cooperation and counter-proliferation, and humanitarian assistance and disaster relief.

U.S. Sixth Fleet, headquartered in Naples, Italy, conducts the full spectrum of joint and naval operations, often in concert with Allied and interagency partners, to advance U.S. national interests, security, and stability in Europe and Africa.

Defense News in Brief: Navy, Marine Corps Support Fixed Wing Refueling Operations in Iceland

Source: United States Navy

One of those teams, comprised of Sailors from Navy Cargo Handling Battalion (NCHB) 1 and Marines from Marine Wing Support Squadron (MWSS) 271, trained to support, refuel, rearm and build infrastructure for military aircraft, is currently supporting the 22nd Naval Construction Regiment (NCR) for exercise Northern Viking 22 onboard Keflavik Air Base, Iceland. To support Northern Viking – a military exercise designed to refine and showcase the benefits of partnership between Iceland, the United States, and other allies in the high north – this team adapted their usual operations and built a Fixed Wing Refueling Point onboard the air base to refuel U.S. P-8A Poseidon aircraft.

In real-world operations, the deployable unit is a force multiplier that increases U.S. and Allied refueling capabilities; in the exercise environment, it was established in response to a simulated attack on Keflavik Air Base’s refueling infrastructure. The simulated attack grounded any aircraft requiring support in the immediate region, and the fuels team quickly established their position as a secondary refueling option. Establishing the refueling point also accomplished a secondary mission; extending the reach of allied aircraft across the Baltic and North Sea and allowing that reach to be sustained indefinitely. 
But a mobile, deployable refueling center isn’t manifested – it’s built.

To successfully create a refueling point in the frigid conditions of the high north, the team had to learn what aircraft they would be supporting; what mission they would be supplementing; request the relevant logistical and technical requirements from the U.S,; fly to Norway (which a logistics contact determined to be the closest location to pick up the correct equipment); assess and verify the gear on-site in Norway; load the gear and ship it to Iceland; send an advanced party to Iceland to receive the gear; stage it in the refueling area until the main party arrives; inspect and inventory the gear; recirculate and purify the fuel in the truck; test the pump and verify the flow; check the filters and examine the meter; work the hoses and clean the gear; roll up the gear, stow it in the truck, clear the site and transition to an on-call unit. What feels like weeks of work is reduced to 72 hours – a mobile, deployable and highly versatile refueling site capable of operating throughout Iceland.

But the laundry list of minor evolutions comes with unique challenges when operating in temperatures that average 30 degrees Fahrenheit and often feature high winds with accompanying rain, snow and hail. Steelworker Constructionman Austin Leisure explained how the fuels team overcomes these challenges on a daily basis. 
“When you get into colder environments – especially with aircraft flying at higher altitudes – you have to ensure your fuel tests-out proper,” Leisure said. “We check for proper levels of FSII (Fuel System Icing Inhibitor), which prevents the fuel from freezing, as well as ensuring there’s not an excessive amount of water in it. As far as the instrumentation that we use for testing, we may have to calibrate it differently for the cold. For the fuel that we’re using here – all of our equipment is calibrated, it’s good to go – we’re just checking for water, sediment, and FSII to ensure the fuel is good and that at a higher altitude the fuel doesn’t freeze and that the fuel doesn’t freeze in our system either.”

A large component of Northern Viking is taking new lessons from the environment and building new relationships within the U.S. services themselves. The fuels team, comprised of Sailors and Marines from geographically disparate locations working together in Iceland, is a demonstration of the skill and capability of the Blue-Green team. Leaders like Gunnery Sergeant Joshua Layne, a bulk fuel specialist and the Marine Corps advisor to Navy Expeditionary Logistics Support Group, ensure that this melting pot of experience pays dividends for the exercise and in real-world applications. 

“There’s different terminology, different standards and different aircraft [between the services],” Layne said. “Some of the terminology is different, some of the gear is different – NCHB 1 actually ordered [Marine equipment], so they are very familiar with it now. But then they come out and work alongside the Marines with the same gear, and the Marines with their experience are able to pass down some tricks-of-the-trade. Meanwhile the Navy can jump in and say, ‘Well we have this gear, and this is what we learned,’ so we’re seeing different types of training through two different sets of eyes. Now we can learn from each other.” 

However, this is far from the final event for this team during Northern Viking. As the exercise continues to unfold, they will continue to refuel P-8A Poseidon aircraft as they launch and land from Keflavik Air Base, maintain the hot-pad – the launch and land area for allied aircraft – support repairs and improvements for allied infrastructure damage, as well as augmenting any land-based support for other expeditionary events.

“This exercise has already paid dividends for our combined Blue-Green team,” said Cmdr. Austin Rasbach, 22nd NCR’s Operations Officer. “I look forward to this team continuing to build their capacity and capability through a variety of exercise events, with an eye toward improving processes for real world operations.”
Northern Viking 22 strengthens interoperability and force readiness between the U.S., Iceland and Allied nations, enabling multi-domain command and control of joint and coalition forces in the defense of Iceland and Sea Lines of Communication in the Greenland, Iceland, United Kingdom (GIUK) gap.

U.S. Sixth Fleet, headquartered in Naples, Italy, conducts the full spectrum of joint and naval operations, often in concert with Allied and interagency partners, in order to advance U.S. national interests and security and stability throughout Europe and Africa.

For imagery and other products related to exercise Northern Viking, please visit www.dvidshub.net/feature/northernviking2022.

Defense News in Brief: International Coalition Hosts Stakeholders Conference

Source: United States Navy

The theme of the industry-focused biannual conference was “The Evolution of International Maritime Security Construct.” The event involved distinguished speakers and panelists who addressed a range of topics including safety measures, best practices, communication and strengthening collaboration.

“IMSC has been on watch to assure freedom of navigation and safeguard the free flow of international merchant shipping,” said Commodore Don Mackinnon, commander of IMSC and Coalition Task Force Sentinel. “This stakeholders conference was an ideal forum for all of our partners, both international and commercial, to share their ideas, information, assessments and best practices to help us further refine and develop the mission.

IMSC was formed in July 2019 in response to increased threats to freedom of navigation for merchant mariners transiting international waters in the Middle East. Coalition Task Force Sentinel was established four months later to deter state-sponsored malign activity and reassure the merchant shipping industry in the Bab al-Mandeb and Strait of Hormuz.

This coalition is comprised of nine member nations: the Republic of Albania, the Kingdom of Bahrain, the Republic of Estonia, the Republic of Lithuania, Romania, the Kingdom of Saudi Arabia, the United Arab Emirates, the United Kingdom, and the United States.

Security News: U.S. Leads Seizure of One of the World’s Largest Hacker Forums and Arrests Administrator

Source: United States Department of Justice News

ALEXANDRIA, Va. – The U.S. Department of Justice today announced the seizure of the RaidForums website, a popular marketplace for cybercriminals to buy and sell hacked data, and unsealed criminal charges against RaidForums’ founder and chief administrator, Diogo Santos Coelho, 21, of Portugal. Coelho was arrested in the United Kingdom on January 31, at the United States’ request, and remains in custody pending the resolution of his extradition proceedings.

“Our interagency efforts to dismantle this sophisticated online platform – which facilitated a wide range of criminal activity – should come as a relief to the millions victimized by it, and as a warning to those cybercriminals who participated in these types of nefarious activities,” said Jessica D. Aber, U.S. Attorney for the Eastern District of Virginia. “Online anonymity was not able to protect the defendant in this case from prosecution, and it will not protect other online criminals either.”

“The takedown of this online market for the resale of hacked or stolen data disrupts one of the major ways cybercriminals profit from the large-scale theft of sensitive personal and financial information,” said Assistant Attorney General Kenneth A. Polite, Jr. of the Justice Department’s Criminal Division. “This is another example of how working with our international law enforcement partners has resulted in the shutdown of a criminal marketplace and the arrest of its administrator.”

“The seizure of the RaidForums website — which facilitated the sale of stolen data from millions of people throughout the world — and the charges against the marketplace’s administrator are a testament to the strength of the FBI’s international partnerships,” Assistant Director in Charge Steven M. D’Antuono of the FBI Washington Field Office said. “Cybercrime transcends borders, which is why the FBI is committed to working with our partners to bring cybercriminals to justice — no matter where in the world they live or behind what device they try to hide.”

“This global investigation signifies the remarkable dedication of the U.S. Secret Service and highlights our partnerships with our foreign law enforcement counterparts essential to disrupting sophisticated networks of cyber criminals,” said Jason D. Kane, Special Agent In Charge, Criminal Investigative Division of the U.S. Secret Service; “This case exemplifies teamwork at all levels of law enforcement to stop these cyber criminals from defrauding citizens of the United States and in our partner countries.”

Court records unsealed yesterday indicate that the United States recently obtained judicial authorization to seize three domains that long hosted the RaidForums website. These domains were “Raidforums.com,” “Rf.ws,” and “Raid.lol.” According to the affidavit filed in support of these seizures, from in or around 2016 through February, RaidForums served as a major online marketplace for individuals to buy and sell hacked or stolen databases containing the sensitive personal and financial information of victims in the United States and elsewhere, including stolen bank routing and account numbers, credit card information, login credentials, and social security numbers. Prior to its seizure, RaidForums members used the platform to offer for sale hundreds of databases of stolen data containing more than 10 billion unique records for individuals residing in the United States and internationally. At the time of its founding in 2015, RaidForums also operated as an online venue for organizing and supporting forms of electronic harassment, including by “raiding”—posting or sending an overwhelming volume of contact to a victim’s online communications medium—or “swatting”—the practice of making false reports to public safety agencies of situations that would necessitate a significant, and immediate armed law enforcement response.

The seizure of these domains by the government will prevent RaidForums members from using the platform to traffic in data stolen from corporations, universities, and governmental entities in the United States and elsewhere, including databases containing the sensitive, private data of millions of individuals around the world. 

In addition, a six-count indictment against Coelho was unsealed in the Eastern District of Virginia charging him with conspiracy, access device fraud, and aggravated identify theft in connection with his role as the chief administrator of RaidForums. According to the indictment, between January 1, 2015, and on or about January 31, 2022, Coelho allegedly controlled and served as the chief administrator of RaidForums, which he operated with the help of other website administrators. As administrators, Coelho and his co-conspirators are alleged to have designed and administered the platform’s software and computer infrastructure, established and enforced rules for its users, and created and managed sections of the website dedicated to promoting the buying and selling of contraband, including a subforum titled “Leaks Market” that described itself as “[a] place to buy/sell/trade databases and leaks.” 

To profit from the illicit activity on the platform, RaidForums charged escalating prices for membership tiers that offered greater access and features, including a top-tier “God” membership status. RaidForums also sold “credits” that provided members access to privileged areas of the website and enabled members to “unlock” and download stolen financial information, means of identification, and data from compromised databases, among other items. Members could also earn credits through other means, such as by posting instructions on how to commit certain illegal acts. 

According to the indictment, Coelho also personally sold stolen data on the platform, and directly facilitated illicit transactions by operating a fee-based “Official Middleman” service. For the Official Middleman service, Coelho allegedly acted as a trusted intermediary between RaidForums members seeking to buy and sell contraband on the platform, including hacked data. Notably, to create confidence amongst transacting parties, the Official Middleman service enabled purchasers and sellers to verify the means of payment and contraband files being sold prior to executing the transaction.

Jessica D. Aber, U.S. Attorney for the Eastern District of Virginia; Kenneth A. Polite Jr., Assistant Attorney General of the Justice Department’s Criminal Division; Jason D. Kane, Special Agent In Charge, Criminal Investigative Division of the U.S. Secret Service; and Assistant Director in Charge Steven M. D’Antuono of the FBI Washington Field Office, made the announcement.

Assistant U.S. Attorney Carina A. Cuellar and Senior Trial Attorney Aarash Haghighat of the Criminal Division’s Computer Crime and Intellectual Property Section (CCIPS) of the Justice Department are prosecuting the case against Coelho. The Justice Department’s Office of International Affairs has also provided significant assistance throughout the criminal investigation.

The law enforcement actions against RaidForums and Coelho are the result of an ongoing criminal investigation by the FBI’s Washington Field Office and the U.S. Secret Service. The Department also thanks the support provided by Joint Cybercrime Action Taskforce (Europol), National Crime Agency (UK), Swedish Police Authority (Sweden), Romanian National Police (Romania), Judicial Police (Portugal), Internal Revenue Service Criminal Investigation, Federal Criminal Police Office (Germany), and other law enforcement partners.

Anyone that has any information regarding Coelho, RaidForums or other RaidForums administrators should file a complaint at ic3.gov with #raidforums in the description.

A copy of this press release is located on the website of the U.S. Attorney’s Office for the Eastern District of Virginia. Related court documents and information are located on the website of the District Court for the Eastern District of Virginia or on PACER by searching for Case No. 1:21-cr-114.

coelho_affidavit.pdf  coelho_indictment.pdf

An indictment is merely an allegation, and all defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law.

Security News: Ashland Man Sentenced to 108 Months for Methamphetamine Trafficking

Source: United States Department of Justice News

ASHLAND, Ky. An Ashland man, Jamaal A. Stokes, 31, was sentenced to 108 months in federal prison on Monday, by U.S. District Judge David Bunning, after pleading guilty to possession with intent to distribute 500 grams or more of methamphetamine.           

According to Stokes plea agreement, in September 2021, law enforcement conducted a search of Stokes’ residence and found him in possession of between one and two pounds of methamphetamine, a large amount of marijuana, a large amount of cash, a digital scale, and plastic baggies.

Stokes pleaded guilty in December 2021.

Under federal law, Stokes must serve 85 percent of his prison sentence.  Upon his release from prison, he will be under the supervision of the U.S. Probation Office for five years.

Carlton S. Shier, IV, United States Attorney for the Eastern District of Kentucky, and J. Todd Scott, Special Agent in Charge, DEA, Louisville Field Division, jointly announced the sentence.

The investigation was conducted by the DEA.  The United States was represented by Assistant U.S. Attorney Cynthia Rieker.

– END –