Month: October 2021

U.S. federal law enforcement agencies and Europol announced dozens of arrests to break up a global operation that sold illegal drugs using a shadowy realm of the internet. 

At a Department of Justice news conference Tuesday in Washington, officials said they arrested 150 people for allegedly selling illicit drugs, including fake prescription opioids and cocaine, over the so-called darknet. Those charged are alleged to have carried out tens of thousands of illegal sales using a part of the internet that is accessible only by using specialized anonymity tools. 

The 10-month dragnet called “Operation HunTor” — named after encrypted internet tools — resulted in the seizure of 234 kilograms of drugs, including amphetamines, cocaine and opioids worth more than $31 million. Officials said many of the confiscated drugs were fake prescription pills laced with the powerful synthetic opioid fentanyl. The counterfeit tablets are linked to a wave of drug overdoses.

“This international law enforcement operation spanned across three continents and sends one clear message to those hiding on the darknet peddling illegal drugs: there is no dark internet,” said U.S. Deputy Attorney General Lisa Monaco. 

Investigators rounded up and arrested 65 people in the United States. Other arrests occurred in Australia, Bulgaria, France, Germany, Italy, the Netherlands, Switzerland, and the United Kingdom. In addition to counterfeit medicine, authorities also confiscated more than 200,000 ecstasy, fentanyl, oxycodone, hydrocodone, and methamphetamine pills. 

“We face new and increasingly dangerous threats as drug traffickers expand into the digital world and use the darknet to sell dangerous drugs like fentanyl and methamphetamine,” said Anne Milgram, administrator of the Drug Enforcement Administration (DEA). “We cannot stress enough the danger of these substances.” 

The international police agency Europol worked alongside the U.S. Justice Department’s Joint Criminal Opioid and Darknet Enforcement team.

“No one is beyond the reach of the law, even on the dark web,” said Jean-Philippe Lecouffe, Europol’s deputy executive director.

The dark web is preferred by criminal networks who want to keep their internet activities private and anonymous. In this case, it served as a platform for illegal cyber sales of counterfeit medication and other drugs that were delivered by private shipping companies. 

Investigators said the fake drugs are primarily made in laboratories in Mexico using chemicals imported from China. Prosecutors also targeted drug dealers who operated home labs to manufacture fake prescription pain pills. 

“Those purchasing drugs through the darknet often don’t know what they’re getting,” Associate Deputy FBI Director Paul Abbate said. The joint investigation followed enforcement efforts in January in which authorities shut down “DarkMarket,” the world’s largest illegal international marketplace on the dark web. 

Last month, the DEA warned Americans that international and domestic drug dealers were flooding the country with fake pills, driving the U.S. overdose crisis. The agency confiscated more the 9.5 million potentially lethal pills in the last year.

More than 93,000 Americans died from drug overdoses in 2020, the highest number on record, according the U.S. Centers for Disease Control. U.S. health officials attribute the rise to the use of fentanyl, which can be 100 times more potent than morphine. 

U.S. officials said investigations are continuing and more arrests are expected.

 
…

A popular new music app uses artificial intelligence to “democratize” how musicians of all skill levels learn and play music. VOA’s Julie Taboh has more.
…

Car rental company Hertz says it will buy 100,000 electric cars from Tesla. 

Hertz interim CEO Mark Fields said the Model 3 cars could be ready for renters as early as November, The Associated Press reported. 

Fields said the reason for the move was that electric cars are becoming mainstream, and consumer interest in them is growing.

“More are willing to try and buy,” he told AP. “It’s pretty stunning.” 

All of the cars should be available by the end of 2022, the company said. When all are delivered, they will make up 20% of the company’s fleet.

Hertz, which emerged from bankruptcy in June, did not disclose the cost of the order, but it could be valued at as much as $4 billion, according to some news reports. 

The company said it plans to build its own charging station network, with 3,000 in 65 locations by the end of 2022 and 4,000 by the end of 2023. Renters will also have access to Tesla’s charging network for a fee. 

Tesla stock jumped as much as 12% on the news 

Some information in this report came from The Associated Press. 

 
…

The U.S. State Department plans to establish a bureau of cyberspace and digital policy in the face of a growing hacking problem, specifically a surge of ransomware attacks on U.S. infrastructure. 

State Department spokesperson Ned Price said a Senate-confirmed ambassador at large will lead the bureau. 

Hackers have struck numerous U.S. companies this year. 

One such attack on pipeline operator Colonial Pipeline led to temporary fuel supply shortages on the U.S. East Coast. Hackers also targeted an Iowa-based agricultural company, sparking fears of disruptions to Midwest grain harvesting. 

Two weeks ago, the Treasury Department said suspected ransomware payments totaling $590 million were made in the first six months of this year. It put the cryptocurrency industry on alert about its role fighting ransomware attacks. 

 
…

Facebook whistleblower Frances Haugen told British lawmakers Monday that the social media giant “unquestionably” amplifies online hate. 

In testimony to a parliamentary committee in London, the former Facebook employee echoed what she told U.S. senators earlier this month.

Haugen said the media giant fuels online hate and extremism and does not have any incentive to change its algorithm to promote less divisive content.

She argued that as a result, Facebook may end up sparking more violent unrest around the world.

Haugen said the algorithm Facebook has designed to promote more engagement among users “prioritizes and amplifies divisive and polarizing extreme content” as well as concentrates it. 

Facebook did not respond to Haugen’s testimony Monday. Earlier this month, Haugen addressed a Senate committee and said the company is harmful. Facebook rejected her accusations. 

“The argument that we deliberately push content that makes people angry for profit is deeply illogical,” said Facebook CEO Mark Zuckerberg. 

Haugen’s testimony comes as a coalition of new organizations Monday began publishing stories on Facebook’s practices based on internal company documents that Haugen secretly copied and made public. 

Haugen is a former Facebook product manager who has turned whistleblower. 

Earlier this month when Haugen addressed U.S. lawmakers, she argued that a federal regulator was needed to oversee large internet companies like Facebook. 

British lawmakers are considering creating such a national regulator as part of a proposed online safety bill. The legislation also proposes fining companies like Facebook up to 10% of their global revenue for any violations of government policies. 

Representatives from Facebook and other social media companies are set to address British lawmakers on Thursday. 

Haugen is scheduled to meet with European Union policymakers in Brussels next month.

Some information in this report came from the Associated Press and Reuters. 

 
…

The U.S. technology giant Microsoft says that the same Russia-backed hackers responsible for the 2020 SolarWinds breach of corporate computer systems is continuing to attack global technology systems, this time targeting cloud service resellers.

Microsoft said the group, which it calls Nobelium, is employing a new strategy to take advantage of the direct access resellers have to their customers’ IT systems, hoping to “more easily impersonate an organization’s trusted technology partner to gain access to their downstream customers.”

Resellers are intermediaries between software and hardware producers and the eventual technology product users.

In a statement Sunday, Microsoft said it has been monitoring Nobelium’s attacks since May and has notified more than 140 companies targeted by the group, with as many as 14 of the companies’ systems believed to have been compromised.

“This recent activity is another indicator that Russia is trying to gain long-term, systematic access to a variety of points in the technology supply chain and establish a mechanism for surveilling — now or in the future — targets of interest to the Russian government,” Microsoft wrote in a blog post.

“Fortunately, we have discovered this campaign during its early stages, and we are sharing these developments to help cloud service resellers, technology providers, and their customers take timely steps to help ensure Nobelium is not more successful,” the company said.

Charles Carmakal, senior vice president and chief technology officer at cybersecurity firm Mandiant, said this attack was different from the SolarWinds attack that used malicious code inserted into legitimate software, saying this involves “leveraging stolen identities” to access systems.

“This attack path makes it very difficult for victim organizations to discover they were compromised and investigate the actions taken by the threat actor,” he said. “This is particularly effective for the threat actor for two reasons: First, it shifts the initial intrusion away from the ultimate targets, which in some situations are organizations with more mature cyber defenses, to smaller technology partners with less mature cyber defenses.

“And second, investigating these intrusions requires collaboration and information-sharing across multiple victim organizations, which is challenging due to privacy concerns and organizational sensitivities,” Carmakal said.

When asked about the attack, White House Principal Deputy Press Secretary Karine Jean-Pierre said Monday companies “can prevent these attempts if the cloud service providers implement baseline cybersecurity practices, including multifactor authentication.”

“Broadly speaking, the federal government is aggressively using our authorities to protect the nation from cyber threats, including helping the private sector defend itself through increased intelligence sharing, innovative partnership to deploy cybersecurity technologies, bilateral and multilateral diplomacy, and measures we do not speak about publicly for national security reasons,” she told reporters aboard Air Force One on route to New Jersey.

Microsoft said Nobelium had made 22,868 attacks since July but had only been successful a handful of times. Most of the attacks have targeted U.S. government agencies and think tanks in the United States, followed by attacks in Ukraine, the United Kingdom and in other NATO countries.

A U.S. government official downplayed the attacks in a statement to The Associated Press, saying, “The activities described were unsophisticated password spray and phishing, run-of-the mill operations for the purpose of surveillance that we already know are attempted every day by Russia and other foreign governments.”

Washington blamed Russia’s SVR foreign intelligence agency for the 2020 SolarWinds hack, which compromised several federal agencies and went undetected for much of last year. Russia has denied any wrongdoing.​

Some information for this report comes from AP and Reuters.
…