[iwar] [fc:Al-Qaeda.hid.coded.messages.on.porn.websites]

From: Fred Cohen (fc@all.net)
Date: 2001-10-10 18:39:39


Return-Path: <sentto-279987-2855-1002764380-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Wed, 10 Oct 2001 18:41:07 -0700 (PDT)
Received: (qmail 11860 invoked by uid 510); 11 Oct 2001 01:39:31 -0000
Received: from n25.groups.yahoo.com (216.115.96.75) by 204.181.12.215 with SMTP; 11 Oct 2001 01:39:31 -0000
X-eGroups-Return: sentto-279987-2855-1002764380-fc=all.net@returns.onelist.com
Received: from [10.1.4.52] by n25.groups.yahoo.com with NNFMP; 11 Oct 2001 01:39:40 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_4_1); 11 Oct 2001 01:39:39 -0000
Received: (qmail 80248 invoked from network); 11 Oct 2001 01:39:39 -0000
Received: from unknown (10.1.10.26) by m8.onelist.org with QMQP; 11 Oct 2001 01:39:39 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta1 with SMTP; 11 Oct 2001 01:39:39 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id SAA09404 for iwar@onelist.com; Wed, 10 Oct 2001 18:39:39 -0700
Message-Id: <200110110139.SAA09404@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Wed, 10 Oct 2001 18:39:39 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] [fc:Al-Qaeda.hid.coded.messages.on.porn.websites]
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Al-Qaeda hid coded messages on porn websites 
Daniel McGrory, Times Newspapers Limited, 10/10/2001
No URL available. 

A SCRIBBLED notebook belonging to a suspected master bomber is thought
to contain secret codes that could help intelligence agencies to
decipher messages sent by Osama bin Laden's al-Qaeda network. 

FBI and French computer experts are studying the Arabic script found
hidden in the Paris apartment of Kamel Daoudi, a gifted computer student
who was allegedly plotting suicide bomb attacks on the US Embassy in the
city and Nato headquarters. 

A security expert said that if it proved to be an al-Qaeda codebook then
its value could be compared with the discovery of the Germans' Enigma
code in the Second World War.  FBI chiefs think terrorist cells have
been using codes to disguise their electronic mail and to hide maps and
instructions on sports chat rooms, pornographic websites and photographs
sent over the Internet. 

Intelligence agencies have no doubt that al-Qaeda uses electronic
camouflage to keep in touch with its network of agents. 

Pornographic websites were used to send messages because there are so
many and that is the last place Islamic fundamentalists would visit. 
Al-Qaeda uses what is known as steganography to bury secret information
inside other messages. 

Several of the September 11 hijackers were frequent visitors to
libraries and Internet cafes in Florida where it is believed they were
sent their coded final orders. 

They bought tickets online for the aircraft they seized, used the
Internet to study whether crop-dusting aircraft could be used to deliver
a chemical attack and sent hundreds of e-mails. 

One woman remembers Mohammed Atta, the hijack leader, spending a long
time at a computer terminal in a public library downloading what looked
like holiday photographs but which are now suspected of containing
hidden messages. 

Alexis Debat, a former French Defence Ministry official who disclosed
the book's discovery yesterday, said that intelligence teams "may be
able to go back to the messages that they may have intercepted already
but couldn't do anything with". 

British security agencies are understood to be investigating whether Mr
Daoudi had access to computers while he was in hiding in Leicester for a
week.  He fled there from Paris hours after the US attacks when he was
tipped off that he faced imminent arrest. 

The electronic traffic used by terrorists was already troubling the FBI
in the months leading up to September 11.  Militant groups have been
using websites for recruitment and fundraising. 

More worrying is the suspicion that they are using message-scrambling
techniques to plan and communicate in relative anonymity. 

Subpoenas and search warrants have been handed to major Internet
companies such as AOL, Microsoft, Earthlink, Yahoo!, Google, NetZero,
Travelocity and many smaller providers. 

Dan Greenfield, vice-president of Earthlink, said that a warrant issued
under the Foreign Intelligence Surveillance Act allowed authorities to
monitor e-mail, chatrooms and websites of one of their users. 

The most solid evidence may lie buried in the Internet providers' log
files.  These can be used to track the dates and times of log-ins for
each account and may be able to help the FBI to locate the computers
used. 

So many "digital clues" have been sent to the FBI that its computer
forensic team working on the 11th floor of their headquarters on
Pennsylvania Avenue have had to draft in an extra 50 experts from other
government agencies. 

Their role is to uncover on-line clues as to how al-Qaeda operates and
who its remaining "sleepers" might be in the West, but also to guard
against electronic mail being used to launch another suicide attack. 
Al-Qaeda's agents are believed to use encrypted e-mails where the person
receiving the message alone has the electronic key to open it.  That
agent would pass on that electronic key only to those he wanted to
contact through encrypted e-mail. 

During the past three weeks federal officials have visited libraries
from Florida to Virginia, culling log-in sheets and seizing computer
equipment on which the hijackers and their associates logged time.  Mr
Daoudi, 27, who has been deported to France from England, is thought to
have spent time in training camps in Afghanistan before returning to
France this summer. 

Police searching his apartment where the codebook was hidden are said to
have found the frames of cellular phones and dismantled alarm clocks,
leading them to believe that someone there was working on a detonation
mechanism. 

His apartment in Essonne was previously occupied by Djamel Beghal, a
suspect arrested in Dubai, whom French investigators say revealed the
names of Mr Daoudi and other accomplices. 


------------------------ Yahoo! Groups Sponsor ---------------------~-->
Pinpoint the right security solution for your company- Learn how to add 128- bit encryption and to authenticate your web site with VeriSign's FREE guide!
http://us.click.yahoo.com/yQix2C/33_CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-12-31 20:59:54 PST