Spy bust exposes methods of Putin’s GRU
A saga of incompetence which must make painful reading for Russia’s boss. in London
The exposure of Russian espionage operations by Dutch, UK and US authorities has opened a window into the sometimes sloppy tradecraft of the Kremlin’s GRU military-intelligence service.
For former KGB agent Vladimir Putin, it must make for painful reading. Dutch intelligence caught four alleged Russian agents with specialist equipment for “close access” hacking of wifi networks that was hidden under a coat in the trunk of their hired Citroen C3 car parked next to the headquarters of the Organisation for the Prohibition of Chemical Weapons in The Hague in April. The United Nations body was examining evidence of a nerve-agent attack in the UK in March that British officials have blamed on the Kremlin.
Dutch officials, who expelled the accused agents, found that one of the men had a receipt for a taxi that took him from a GRU barracks to the airport in Moscow on April 10, from where the four had flown to the Netherlands on diplomatic passports. Two of the passports had consecutive serial numbers, and the men were found with €20,000 and US$20,000 in cash (657,000 baht), Dutch officials said.
In Washington, US prosecutors announced indictments of seven Russian military-intelligence operatives on charges of hacking and fraud against targets ranging from Westinghouse Electric Corp to world anti-doping authorities who’d exposed state-backed cheating by Russian athletes. Three of the men were also charged in July for alleged cyber attacks in the 2016 US election.
The coordinated announcements of alleged Kremlin espionage against the OPCW, as well as allegations that Russian agents sought to disrupt international investigations into sports doping and the 2014 downing of a passenger plane over Ukraine, add to tensions between the West and Moscow.
Sanctions Warning
The ruble weakened against the dollar after UK Foreign Secretary Jeremy Hunt told reporters in London that British officials plan to discuss with allies “what further sanctions should be imposed” on Russia. The UK and the US have already imposed sanctions on Russia over the cases.
The Dutch Defence Ministry published copies of the passports of the four alleged agents expelled from the Netherlands, naming them as Oleg Sotnikov, 46, Aleksei Morenets, 41, Evgenii Serebriakov, 37, and Alexey Minin, 46. The men were caught “in flagrante” according to British government officials, who said the UK had played a supporting role in the operation. “For the GRU to get caught in this way would be considered a pretty bad day,” one official said.
The Dutch announcement came just hours after the UK blamed the Kremlin for a spate of “reckless and indiscriminate” cyber attacks, including on the Democratic National Committee during the 2016 US presidential campaign. The UK’s relations with Russia are at their worst since the height of the Cold War in the 1970s after Prime Minister Theresa May accused the Kremlin of responsibility for the nerveagent attack on a former spy, Sergei Skripal.
‘Serious Harm’
The Dutch allegations against Russia are causing “serious harm” to bilateral relations, the Foreign Ministry in Moscow said. Hacking accusations made by the Netherlands and the UK are part of an “orchestrated propaganda campaign against our country,” it said. The OPCW announced on April 12 that a nerve agent of “high purity” was used to poison Mr Skripal after it carried out a technical evaluation of evidence presented by British officials of the first chemical-weapon attack in Europe since World War II.
British police believe two GRU agents, using the aliases Alexander Petrov and Ruslan Boshirov, sprayed the weapons-grade nerve poison Novichok on a door handle at Mr Skripal’s home in Salisbury, southern England. The attack left the former double-agent and his daughter, Yulia, critically ill. Salisbury resident Dawn Sturgess, 44, who was later exposed to the same nerve agent carried into the UK in a counterfeit perfume bottle, died in July.
Phone Data
Dutch officials said on Thursday that data collected from the phones of the alleged agents apprehended outside the OPCW headquarters showed the devices had been used at or near the GRU barracks on Moscow’s Komsomolsky Prospect. A plastic shopping bag in the trunk of their car contained trash the men had swept from their hotel rooms, including empty beer cans and snack wrappers, to hide their trail, according to the officials. Dutch agents who examined the laptop of one of the alleged spies found he’d used public wi-fi services in Kuala Lumpur, Malaysia, and Lausanne in Switzerland prior to the operation in The Hague. His internet search history showed he’d looked up the OPCW, while reconnaissance photos of the headquarters were found on the camera of another of the men.
MH17 Operation
“One of the Russian intelligence officers involved in this operation in the Netherlands was also actively involved in a GRU operation focusing on Malaysia’s investigation of the crash of Malaysia Airlines flight MH17,” Dutch Defence Minister Ank Bijleveld said at a briefing in The Hague. A joint investigation team in May said a BUK missile belonging to the Russian army was responsible for downing the passenger jet in eastern Ukraine, killing 298 people. The expelled agents were also suspected of attempting to hack into an International Olympic Committee meeting in Lausanne on Moscow’s alleged state-sponsored doping programme.
The US accused the seven operatives of working to undermine and retaliate against anti-doping organisations that had exposed Russian-sponsored cheating, and to damage the reputation of clean athletes from other countries by falsely claiming they’d used banned drugs. Media outlets were flooded with the private medical information of more than 250 athletes from 30 countries. Hacking operations extended to the UK, where the GRU attempted to “compromise Foreign and Commonwealth Office computer systems via a spearphishing attack” in March after the Salisbury attack, UK Ambassador to the Netherlands Peter Wilson said.
Russia’s ‘Mess’
GRU hackers in Russia also targeted the computers of the UK Defence and Science Technology Laboratory at Porton Down in April and sent a spearphishing email in May that impersonated Swiss federal authorities to target OPCW employees and computers, he said. “This was the GRU trying to clean up Russia’s own mess,” Mr Wilson said. Russia’s embassy to the Netherlands dismissed the allegations as “disinformation.” Russia denies any involvement in the Skripal attack, which led to a mass expulsion of diplomats by the UK and its western allies and the imposition of sanctions by the US. President Putin this week denounced Skripal as a “scumbag” and a “traitor.”
“The Russians got caught with their equipment with people who were doing it and they have got to pay the piper,” US Defence Secretary James Mattis said.
The Russians got caught and they have got to pay the piper.
US DEFENCE SECRETARY JAMES MATTIS