The loosely organized hacking collective known as Anonymous has recently expressed an interest in targeting industrial control systems (ICS). This product characterizes Anonymous’ capabilities and intent in this area, based on expert input from DHS’s Control Systems Security Program/Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) in coordination with the other NCCIC components.
Department of Homeland Security
Department of Homeland Security
(U//FOUO) DHS Bulletin: “Anonymous” and Associated Hacker Groups Deploying New Cyber Attack Tools
The hacker collective known as ‘Anonymous’ has successfully attacked a wide range of public and private sector entities since 2003 with relatively crude tools. Historically, they rely on tools such as the Low Orbit Ion Cannon (LOIC) or Botnets to deny access to websites, or hijack or deface web pages and post quasi-political statements, or perform other malicious activity. Since many of these older tools made it relatively easy for law enforcement and other government forces to identify the source of an attack and then arrest the perpetrator, Anonymous members may have recognized a need to have more advanced tools that offered a lesser degree of exposure. They recently claimed to have developed and possibly employed several new cyber attack tools for use in their self-proclaimed ‘internet civil disobedience’ campaigns. The NCCIC, coordinating with several of its partners, believes there are at least four new tools being shared among and employed by Anonymous members: #RefRef, Apache Killer, Anonware, and Universal Rapid Gamma Emitter (URGE).
California, Intelligence Fusion Centers
Northern California Regional Intelligence Center (NCRIC) Overview Presentation
Northern California Regional Intelligence Center presentation on “Fusion Centers Information Sharing, Analysis and Coordination” from October 2011.
Intelligence Fusion Centers, Texas
(U//LES) El Paso Intelligence Center Bulletins: Drug-Smuggling Ambulance, Cocaine in Tin Cans, Contaminated Pot
Three bulletins from the El Paso Intelligence Center on a drug-smuggling ambulance, cocaine hidden in tin cans and pot contaminated with Halon.
Department of Homeland Security
DHS Social Network Analysis, Behavioral Threat Detection, Biometrics Presentation
DHS Human Factors/Behavioral Sciences Division presentation on social network analysis, behavioral threat detection and biometrics programs as of May 2009.
Department of Homeland Security
DHS Future Attribute Screening Technology Mobile Module (FAST M2) Overview
Overview presentation from 2007 regarding the Future Attribute Screening Technology Mobile Module (FAST M2), a system for identifying potential threats via behavioral analysis.
Customs and Border Protection
(U//FOUO/LES) Customs and Border Protection Bandidos Motorcycle Club Global Map
Customs and Border Protection Bandidos Motorcycle Club global distribution map produced in May 2010.
Department of Homeland Security
DHS Bomb-Making Materials Awareness Program (BMAP) Law Enforcement and Private Sector User Guides
Department of Homeland Ssecurity Bomb-Making Awareness Program (BMAP) Law Enforcement and Private Sector User Guides along with accompanying promotional posters from 2009.
Department of Homeland Security
(U//FOUO) DHS HUJI Claims Responsibility for India High Court Bombing
According to multiple media reports, on 7 September an explosion occurred inside the reception area of the Delhi High Court in New Delhi, India at approximately 10:00am local time. The blast killed at least 11 people and injured some 76 others. Indian authorities reported to the press that the explosives were inside a briefcase left in a reception area in between the security gates of the High Court. India’s National Security Guard Director indicated that the device contained ammonium nitrate, which was also used in the most recent bomb against the court complex on 25 May. Harakat-ul-Jihad al-Islami (HUJI) claimed responsibility for the blast in an e-mail message and demanded that India repeal the death sentence of Afzal Guru, who was convicted of attacking the Indian Parliament building in 2001 and is awaiting execution.
Customs and Border Protection, Texas
(U//FOUO/LES) Customs and Border Protection $1.7 Million Marijuana School Bus Seizure
U.S. Customs and Border Protection Laredo Sector Intelligence Unit seizure of $1,757,665 of marijuana hidden in a cloned school bus from October 2009.
Intelligence Fusion Centers, Texas
(U//LES) Houston High Intensity Drug Trafficking Area 2011 Threat Assessment
The intent of the Houston HIDTA Threat Assessment, produced by the Houston Intelligence Support Center (HISC), is to identify the potential impact of drug trafficking trends within the Houston HIDTA and to deliver accurate and timely strategic intelligence to assist law enforcement agencies in the development of drug enforcement strategies.
Intelligence Fusion Centers, Vermont
(U//FOUO) Vermont Fusion Center Improvised Chemical Pressure Bomb Warning
An improvised chemical pressure bomb is a device that’s charge comes from a gaseous chemical reaction or phase change (such as when liquid changes to gas) in a confined area; the resulting buildup causes the container to rupture violently. There are several types of improvised chemical pressure bombs that can be constructed from easy to acquire materials.
Department of Homeland Security
(U//FOUO) DHS Interagency Remote Sensing Coordination Cell Brief
DHS Interagency Remote Sensing Coordination Cell (IRSCC) briefing from July 2011.
Department of Homeland Security, Intelligence Fusion Centers
DHS Fusion Center Intelligence Officer and Regional Director Contact Information
Contact list by region including the names and phone numbers of approximately 68 Intelligence Officers and Regional Directors assigned to fusion centers around the United States.
Department of Homeland Security
DHS Federal Interagency Geospatial Concept of Operations (GeoCONOPS) Version 3
Version 3.0 Federal Interagency Geospatial Concept of Operations (GeoCONOPS) final draft from June 2011.
Department of Homeland Security, Intelligence Fusion Centers
(U//FOUO) DHS Fusion Center Network Overview Presentation
DHS presentation titled “The National Network of Fusion Center: Where We Have Been and Where We are Going” containing general overview information on fusion centers from August 1, 2011.
Intelligence Fusion Centers, Pennsylvania
Pennsylvania Criminal Intelligence Center Methamphetamine Labs Safety and Statistics Brief
The growing popularity of methamphetamine over the past 15 years has increased the risk of exposure to the surrounding community and law enforcements personnel. Methamphetamine is a controlled substance that is “cooked” using many common household ingredients which can be volatile and generates by‐products that can be very harmful to humans. When these products are combined, they emit toxic fumes and may cause chemical burns upon contact. Toxic residue from the cooking process saturates every surface and can remain there for months or years if not properly sterilized. Since the chemicals can be inhaled, ingested, or absorbed through the skin, everyone coming in contact with those surfaces is vulnerable. Acute exposure occurs over a relatively short time and produces symptoms that include: shortness of breath, cough, chest pain, dizziness, lack of coordination, chemical irritation, and burns to the skin, eyes, nose, or mouth. If toxicity levels are fairly high or a person is particularly vulnerable (i.e. pre‐existing breathing problems), acute exposure can cause death. Less significant exposure can result in headaches, nausea, dizziness, fatigue, or lethargy, and can lead to other long‐term health problems.
Department of Homeland Security, Federal Bureau of Investigation
(U//FOUO) DHS-FBI Potential Al-Qaeda Threat to New York City and Washington, DC During 9/11 Anniversary Period
We assess that al-Qa‘ida has likely maintained an interest since at least February 2010 in conducting large attacks in the Homeland timed to coincide with symbolic dates, to include the 10-year anniversary of the 9/11 terrorist attacks. We also remain concerned that the May 2011 death of Usama bin Ladin (UBL), coupled with the subsequent removal of several key al-Qa’ida figures, could further contribute to al-Qa’ida’s desire to stage an attack on a symbolic date—such as the 10-year anniversary of 9/11—as a way to avenge UBL’s death and reassert the group’s relevance, although operational readiness likely remains the primary driving factor behind the timing of al-Qa’ida attacks.
Department of Homeland Security, Federal Bureau of Investigation
(U//FOUO) DHS-FBI Al-Qaeda and the Threat to General Aviation
Al-Qa‘ida and its affiliates have maintained an interest in obtaining aviation training, particularly on small aircraft, and in recruiting Western individuals for training in Europe or the United States, although we do not have current, credible information or intelligence of an imminent attack being planned against aviation by al-Qa‘ida or its affiliates.
Department of Homeland Security
DHS National Cyber Security Division “Moving Toward Cyber Resilience” Presentation
Department of Homeland Security National Cyber Security Division presentation on “Cyber Resilience” with overviews of recent hacking incidents, including many connected with the hacktivist group Anonymous.
California, Intelligence Fusion Centers
(U//LES) California State Threat Assessment Center: Gangs Seek Training to Enhance Their Skills
This STAC information note is intended to enhance law enforcement community understanding of training venues observed to have been used by gang members and to provide insight into their reasoning for engagement in these observed activities.
Intelligence Fusion Centers, Mississippi
(U//LES) Mississippi Analysis and Information Center Gang Threat Assessment 2010
The following Gang Threat Assessment, prepared by the Mississippi Analysis and Information Center (“MSAIC”), was produced to provide a general outlook of gang presence and criminal activity in the State of Mississippi. Data in this report was obtained from the Mississippi Department of Corrections (“MDOC”) and provides statistics, research and key findings from corrections data, law enforcement reports as well as academic and open source research. This assessment is a follow-up from the Interim Gang Threat Assessment issued by MSAIC in September of 2010. The assessment contains crimespecific and corrections statistics attributed to the four most prevalent gangs (“core” gangs) in the state: Gangster Disciples, Simon City Royals, Vice Lords and Latin Kings. From the four core groups they are attributed to the higher affiliations which are Folk Nation (Gangster Disciples and Simon City Royals) and People Nation (Vice Lords and Latin Kings). The assessment also includes brief descriptions of other gangs including MS-13, Aryan Brotherhood and Outlaw Motorcycle Gangs.
Intelligence Fusion Centers, Texas
(U//LES) Houston High Intensity Drug Trafficking Area Overview of Pharmaceutical Abuse and Diversion
The threat of pharmaceutical drug abuse and diversion in the Houston HIDTA has been dangerously high and increasing for the past several years. Drug investigators report that it is becoming more widespread, addicting abusers from middle school to middle age. Perhaps the most concerning threat related to pharmaceutical abuse is the alarmingly high potential for overdose or accidental death from controlled prescription drugs. In Harris County alone, from 2006 through 2008 pharmaceuticals were present in over 66% of the 1533 cases of toxicity-related deaths.1 In 2009, over 78% involved pharmaceuticals. Not only is diversion a deadly problem, it is incredibly profitable. Pain management clinic owners gross an average of $4,000-$5,000 per day at each location. A successful owner running multiple clinics can easily make $75,000 a week from only three operations, getting paid entirely in cash.
Intelligence Fusion Centers, Minnesota
(U//FOUO) FBI Minnesota Requesting Information on All Upcoming Special Events Before September 11, 2011
The FBI – Minneapolis Field Office is requesting assistance in compiling a list of all known special events planned throughout the state between the dates of September 6-12, 2011, to include but not limited to events in regards to the tenth anniversary of the September 11, 2001 attacks. Information regarding memorials, rallies, celebrations and other public or private events that will attract a large crowd within your jurisdiction would be appreciated, September 11 related or otherwise.
Department of Homeland Security, Federal Bureau of Investigation
(U//FOUO) DHS-FBI Al-Qaeda Interest in Targeting Trains on September 11, 2011
As of February 2010, al-Qa‘ida was allegedly contemplating conducting an operation against trains at an unspecified location in the United States on the tenth anniversary of 11 September 2001. As one option, al-Qa‘ida was looking at the possibility of tipping a train by tampering with the rails so that the train would fall off the track at either a valley or a bridge. Al-Qa‘ida noted that an attack from tilting the train would only succeed one time because the tilting would be spotted. Al-Qa‘ida also noted that newer train cars each have their own braking system, and that movement in a specific direction would derail it, but would not cause it to fall off the track.