The Mercury News Weekend

Ex-Twitter workers accused of spying on users, taking bribes from Saudis

- By George Kelly gkelly@bayareanew­sgroup.com Contact George Kelly at 510-208- 6488.

SAN FRANCISCO » A federal complaint alleges that two former Twitter employees took bribes from a member of the Saudi royal family in exchange for improperly accessing user informatio­n to help the family and track critics, with one worker alleged to tell a foreign official that “we will delete evil my brother.”

The former employees, identified as Ali Alzabarah, 35, of Saudi Arabia, and Ahmad Abouammo, 41, of Seattle, were charged with acting as illegal agents of a foreign government, along with a 30-year-old Saudi national identified as Ahmed Almutairi. Abouammo was also charged with destroying, altering or falsifying records in a federal investigat­ion.

The federal complaint describes members of the Saudi royal family and government anonymousl­y, referring to “Royal Family Member-1” and “Foreign Official-1.” It describes initial contacts between Abuammo, a media partnershi­ps manager for the company, and a PR firm representi­ng the Kingdom of Saudi Arabia.

FBI Special Agent Letitia Wu notes in the affidavit that the royal family was “cultivat(ing)” employees at Twitter in 2014, when the scheme began to unfold. Through routine verificati­on of a media personalit­y, Abuammo made contact with members of the Saudi government, later hosting a group of Saudi entreprene­urs on a tour of the company’s San Francisco headquarte­rs.

Around the same time, Abouammo met Almutairi, who came to the U.S. on a student visa to study English in the Bay Area but also worked for a Saudi socialmedi­a firm with ties to the Saudi royal family. Almutairi e-mailed, asking for an “urgent meeting” to discuss a “mutual interest.”

As a series of in-person and unofficial communicat­ions unfolded, Wu says, Abuammo helped get Twitter accounts verified on behalf of members of the Saudi royal family and government — and also improperly accessed email and phone informatio­n for an unidentifi­ed critic of the Saudi government, one with more than a million followers.

Eventually, Abuammo opened a bank account linked to a dummy corporatio­n, and the unnamed official wired money both there and to a relative of Abuammo in Beirut.

The affidavit describes one sequence in March 2015 where the foreign official called Abuammo 14 times in two days; two days later, Abuammo sent the official a Twitter direct message stating that “proactive and reactively we will delete evil my brother.” Four days later, Abuammo received a wire transfer of just short of $10,000.

Eventually, Abuammo quit Twitter and moved to Seattle, but continued using his contacts at the company to act on behalf of the Saudis, according to the complaint. When interviewe­d by FBI agents, he lied about a $35,000 watch and about how much money he had gotten in the scheme, also producing forged documents to back up his lies, Wu writes.

In Alzabarah’s case, officials say he accessed informatio­n on thousands of users’ accounts, in many cases seemingly on behalf of Saudi law enforcemen­t, which eventually began using Alzabarah as a workaround to Twitter’s emergency law-enforcemen­t disclosure request process.

Alzabarah, a site engineer, would have had no legitimate reason to access individual users’ accounts in his work, according to the statement. Twitter has since implemente­d changes to internal policies limiting employees’ access to user data.

In early December 2015, Twitter officials confronted Alzabarah about his access. While telling Twitter he only did so out of fascinatio­n and expressing concern about his work-visa status, Alzabarah reached out to the Saudis for help fleeing the United States.

Twitter staff placed Alzabarah on administra­tive leave, seizing his work computer and escorting him from the building. The next day, Alzabarah flew with his wife and young daughter to Los Angeles, then to Saudi Arabia, sending Twitter a resignatio­n letter in an inflight e-mail.

In both cases, Almutairi is accused of acting as an intermedia­ry for the unnamed foreign official; none of the three men had registered as agents of the Saudi government as of Nov. 1 of this year.

Although Alzabarah sought visas to return to the United States and eventually obtained one, he had not returned as of this May, the complaint said.

Authoritie­s arrested Abouammo Tuesday in Seattle, and he was set to appear in a federal court Wednesday afternoon. Federal warrants have been issued for Alzabarah and Almutairi’s arrests.

If convicted, all three face maximum sentences of 10 years in prison and $250,000 fines. Abouammo could face another 20 years in prison and a $250,000 fine for obstructio­n of justice.

A report just this week by Human Rights Watch senior advisor Adam Coogler and intern Aaron Burroughs mentions Saudi officials’ ongoing efforts to target dissidents and critics of the state and royal family, including a former Saudi Federation for Cyber Security and Programmin­g director who started a hashtag for Saudi citizens to suggest targets and bragged that authoritie­s had methods to find Twitter users’ names and IP addresses.

“Such intrigue is no surprise from the Saudis, whose desire to silence critics beyond their borders has been made all too clear,” Summer Lopez, senior director of PEN America’s Free Expression Programs, said in a statement. “It’s frightenin­g to contemplat­e that the platforms that play host to such vast amounts of personal informatio­n and opinion can be infiltrate­d by government­s hell-bent on outing and menacing their critics.

“This sobering wake-up call must prompt considerat­ion of new ways to ensure trust and privacy in our public discourse are not corroded from within the very platforms that host it.”

Twitter emailed a statement Wednesday evening that read in part: “We recognize the lengths bad actors will go to try and undermine our service. Our company limits access to sensitive account informatio­n to a limited group of trained and vetted employees.

“We understand the incredible risks faced by many who use Twitter to share their perspectiv­es with the world and to hold those in power accountabl­e. We have tools in place to protect their privacy and their ability to do their vital work. We’re committed to protecting those who use our service to advocate for equality, individual freedoms, and human rights.”

U. S. Attorney David L. Anderson added in his own statement: “U.S. law protects U.S. companies from such an unlawful foreign intrusion. We will not allow U.S. companies or U.S. technology to become tools of foreign repression in violation of U.S. law.”

Newspapers in English

Newspapers from United States