Ironside: Hundreds arrested in massive global crime sting

Since 2018, Australian police and the FBI have used the encrypted app, An0m, to keep track of organised crime.

It has led to drug trade arrests in 18 countries across Asia, North and South America, Europe and the Middle East.

To continue reading this BBC News report, go to:
https://www.bbc.com/news/world-57394831

Also see:

The Criminals Thought the Devices Were Secure. But the Seller Was the F.B.I.
The cellphones, procured on the black market, performed a single function hidden behind a calculator app: sending encrypted messages and photos.

For years, organized crime figures around the globe relied on the devices to orchestrate international drug shipments, coordinate the trafficking of arms and explosives, and discuss contract killings, law enforcement officials said. Users trusted the devices’ security so much that they often laid out their plans not in code, but in plain language, mentioning specific smuggling vessels and drop-off points.

Unbeknown to them, however, the entire network was actually a sophisticated sting run by the F.B.I., in coordination with the Australian police.
https://www.nytimes.com/2021/06/08/world/australia/operation-trojan-horse-anom.html

Down Under criminals tricked into using FBI-run message app
Authorities in Australia and New Zealand said Tuesday they’ve dealt a huge blow to organized crime after hundreds of criminals were tricked into using a messaging app that was being secretly run by the FBI.

Police said criminal gangs thought the encrypted app called ANOM was safe from snooping when, in fact, authorities for months had been monitoring millions of messages about drug smuggling, money laundering and even planned killings.
https://apnews.com/article/europe-technology-a6ac691e26be2efc6e2f4a6974117536

‘An0m’ Encrypted-Chat Sting Leads to Arrest of 800
Law enforcement agencies have been selling encrypted phones to organized crime gangs for years, monitoring their conversations in what’s being called the biggest law enforcement sting ever.

Since 2018, agencies have been overseeing the distribution of hardened, encrypted devices that have enabled them to eavesdrop on crooks. The monitoring of the devices, which are called Anøm, Anom or An0m, has led to a dizzying array of actions.
https://threatpost.com/an0m-encrypted-chat-sting-arrest-800/166716/

AFP-led Operation Ironside smashes organised crime [AFP news release]

An Australian Federal Police-led operation has charged more than one hundred organised crime members after developing a world-leading capability to see encrypted communications used exclusively by organised crime.

The encrypted communications – which allegedly included plots to kill, mass drug trafficking and gun distribution – were decrypted from a platform covertly run by the FBI.

More than 4,000 members from the AFP and state and territory police have been involved in the execution of hundreds of warrants since 7 June, 2021, under Operation Ironside, which covertly began three years ago.

Operation Ironside has led to the arrest of 224 offenders on 526 charges in every mainland Australian state.

3.7 tonnes of drugs, 104 number of weapons, $44,934,457 million in cash, and assets expected to run into the millions of dollars, have been seized under Operation Ironside since 2018.

The AFP also acted on 20 threats to kill, potentially saving the lives of a significant number of innocent bystanders, with intelligence referred to state police agencies which took immediate action.

More arrests are expected domestically and offshore under a coordinated global response connected to Operation Ironside.

The AFP is also likely to seek extradition requests of a number of persons of interest living overseas. It comes as there have been tonnes of drugs and hundreds of arrests overseas.

The AFP will allege offenders linked to Australian-based Italian mafia, outlaw motorcycle gangs, Asian crime syndicate and Albanian organised crime are among those charged under Operation Ironside.

Operation Ironside began almost three years ago and is the Australian component of a long-term, international, covert investigation. The FBI and AFP targeted the dedicated encrypted communications platform, which was used exclusively by organised crime.

After working in close partnership on Operation Safe Cracking to take down the encrypted platform provider Phantom Secure, the AFP and FBI worked together to fill the vacuum.

The FBI had access to a new app, named AN0M, and began running it without the knowledge of the criminal underworld.

The AFP provided the highly skilled-technical staff, and capability to decrypt and read encrypted communications in real time, giving law enforcement an edge it had never had before.

AFP Commissioner Reece Kershaw thanked the FBI for its cooperation, along with the 18 countries that worked with the AFP to maintain the integrity of the platform.

As part of the global operation more than 9000 officers from law enforcement have deployed to the international efforts. Commissioner Kershaw acknowledged the significant resources provided by Australia’s state and territory police during the days of resolution.

“Today, Australia is a much safer country because of the extraordinary outcome under Operation Ironside,” Commissioner Kershaw said.

“It highlights how devastatingly-effective the AFP is when it works with local and global partners, and takes its fight against transnational organised crime offshore.

“This world-first operation will give the AFP, state and territory police years of intelligence and evidence.

“There is also the potential for a number of cold cases to be solved because of Operation Ironside.

“However, tomorrow, and in the future, law enforcement will come up against serious challenges.

“AN0M was an influential encrypted communications app but there are even bigger encrypted platforms that are being used by transnational and serious organised criminals targeting Australia.

“They are almost certainly using those encrypted platforms to flood Australia with drugs, guns and undermine our economy by laundering billions of dollars of illicit profit.

“Organised crime syndicates target Australia, because sadly, the drug market is so lucrative. Australians are among the world’s biggest drug takers.

“One of the causes behind domestic violence, sexual assault, neglect of children and unspeakable tragedy, is illicit drugs.

“Our first responders, our teachers and every Australian should be able to go to work and live in our communities without being harmed by an individual under the influence of dangerous drugs.

The app AN0M was installed on mobile phones that were stripped of other capability. The mobile phones, which were bought on the black market, could not make calls or send emails. It could only send messages to another device that had the organised crime app. Criminals needed to know a criminal to get a device.

The devices organically circulated and grew in popularity among criminals, who were confident of the legitimacy of the app because high-profile organised crime figures vouched for its integrity.

“These criminal influencers put the AFP in the back pocket of hundreds of alleged offenders.

“Essentially, they have handcuffed each other by endorsing and trusting AN0M and openly communicating on it – not knowing we were watching the entire time,” Commissioner Kershaw said.

FBI International Operations Division Legal Attaché for Canberra Anthony Russo said criminals around the world had long used encrypted criminal communications platforms to avoid law enforcement detection.

“The FBI, with our international partners, will continue to adapt to criminal behaviour and develop novel approaches to bring these criminals to justice,” said the FBI’s Anthony Russo.

“We appreciate our long standing partnership with the Australian Federal Police in the fight against transnational organised crime.”

• Operation Ironside national overview video
• Northern Command footage and images
• Eastern Command footage and images
• Southern Command footage and images
• Western Command footage and images

https://www.afp.gov.au/news-media/media-releases/afp-led-operation-ironside-smashes-organised-crime

800 criminals arrested in biggest ever law enforcement operation against encrypted communication [Europol news release]

The US Federal Bureau of Investigation (FBI), the Dutch National Police (Politie), and the Swedish Police Authority (Polisen), in cooperation with the US Drug Enforcement Administration (DEA) and 16 other countries have carried out with the support of Europol one of the largest and most sophisticated law enforcement operations to date in the fight against encrypted criminal activities.  

Since 2019, the US Federal Bureau of Investigation, in close coordination with the Australian Federal Police, strategically developed and covertly operated an encrypted device company, called ANOM, which grew to service more than 12 000 encrypted devices to over 300 criminal syndicates operating in more than 100 countries, including Italian organised crime, outlaw motorcycle gangs, and international drug trafficking organisations. 

The goal of the new platform was to target global organised crime, drug trafficking, and money laundering organisations, regardless of where they operated, and offer an encrypted device with features sought by the organised crime networks, such as remote wipe and duress passwords, to persuade criminal networks to pivot to the device. 

The FBI and the 16 other countries of the international coalition, supported by Europol and in coordination with the US Drug Enforcement Administration, then exploited the intelligence from the 27 million messages obtained and reviewed them over 18 months while ANOM’s criminal users discussed their criminal activities. 

This operation, known as OTF Greenlight/Trojan Shield, is one of the largest and most sophisticated law enforcement operations to date in the fight against encrypted criminal activities.  A series of large-scale law enforcement actions were executed over the past days across 16 countries resulting in more than 700 house searches, more than 800 arrests and the seizure of over 8 tons of cocaine, 22 tons of cannabis and cannabis resin, 2 tons of synthetic drugs (amphetamine and methamphetamine), 6 tons of synthetic drugs precursors, 250 firearms, 55 luxury vehicles and over $48 million in various worldwide currencies and cryptocurrencies. Countless spin-off operations will be carried out in the weeks to come.  Operation Trojan Shield/Greenlight will enable Europol to further enhance the intelligence picture on organised crime affecting the EU due to the quality of the information gathered. This enhanced intelligence picture will support the continued effort in identifying operating high-value criminal targets on a global scale.

Criminal demand for encrypted platforms and past takedowns

Criminal networks have a huge demand for encrypted communication platforms to facilitate their criminal activities. However, the market for encrypted platforms is considered to be volatile. In July 2020, the EncroChat encrypted platform was dismantled by the Operational Taskforce EMMA (France, the Netherlands). This international operation sent shockwaves in the criminal underworld across Europe and was followed in 2021 with another takedown of a similar nature: an international group of judicial and law enforcement authorities (Belgium, France, the Netherlands) successfully blocked the further use of encrypted communications by organised crime networks via the Sky ECC communication service tool (Operational Task Force Limit). 

Both operations provided invaluable insights into an unprecedented amount of information exchanged between criminals. After the takedown of Sky ECC in March 2021, many organised crime networks sought a quick encrypted replacement for a communication platform that would allow them to evade law enforcement detection. This was a deliberate and strategic aspect of OTF Greenlight / Operation Trojan Shield resulting in the migration of some of the criminal Sky ECC customer base to the FBI-managed platform Anom. 

Europol’s Deputy Executive Director Jean-Philippe Lecouffe: “This operation is an exceptional success by the authorities in the United States, Sweden, the Netherlands, Australia, New Zealand and the other European members of the Operational Task Force. Europol coordinated the international law enforcement community, enriched the information picture and brought criminal intelligence into ongoing operations to target organised crime and drug trafficking organisations, wherever they are and however they choose to communicate. I am very satisfied to see Europol supporting this operation and strengthen law enforcement partnerships by emphasizing the multi-agency aspect of the case.”

Calvin Shivers, Assistant Director, Criminal Investigative Division, US Federal Bureau of Investigation: “Encrypted criminal communications platforms have traditionally been a tool to evade law enforcement and facilitate transnational organized crime. The FBI and our international partners continue to push the envelope and develop innovative ways to overcome these challenges and bring criminals to justice,” said the FBI’s Criminal Investigative Division Assistant Director Calvin A. Shivers. “We are grateful to Europol for their commitment to fighting transnational organized crime and their partnership with the FBI. ”

Linda H Staaf, Police Commissioner, Head of Intelligence of the Swedish Police (Polisen): “This operation, with an extensive strike yesterday, is one of the largest intelligence-led police operations against violent crime and drug networks ever in Sweden. From the Swedish police’s point of view there were no doubt to be the leading part in Europe together with the Netherlands and Europol. We highly appreciate this type of cooperation between law enforcement agencies. The criminality spreads across borders and international cooperation is crucial to fight serious crime. ”

Jannine van den Berg, Chief Constable of the Netherlands Police’s Central Unit: “Operation Trojan Shield is a fine example of innovative and daring police work that is unparalleled. Each partner provided its own unique expertise and together we delivered a fantastic international performance. Thanks to the excellent technical skills of the Dutch police, the millions of messages could be analyzed and interpreted. Just like the investigations into EncroChat and Sky, Operation Trojan Shield also shows that serious criminals wrongly believe that they can operate anonymously and out of sight of the police and that they cannot be caught. Nothing turns out to be less true. My compliments and thanks go to all participants of Operation Trojan Shield.”

Australian Federal Police Commissioner Reece Kershaw APM: “The AFP and FBI have been working together on a world-first operation to bring to justice the organised crime gangs flooding our communities with drugs, guns and violence. Europol has been a trusted and committed partner during this time. Very few matters unite law enforcement like bringing to justice those who seek to do our citizens harm. The FBI provided an encrypted communications platform while the AFP deployed the technical capability that helped unmask some of the biggest criminals in the world. The intelligence shared by Europol has helped to ensure this is one of the most significant global taskforces for law enforcement. This week the AFP will execute hundreds of warrants and is expected to arrest hundreds of offenders who were linked to the platform. This is the culmination of hard work, perseverance and an invaluable, trusted relationship with Europol. We thank Europol for their long and integral partnership with the AFP. Crime is local but when we work together our reach is global.”

Drug Enforcement Administration Deputy Chief of Operations Matthew Donahue said: “Operation Trojan Shield and Europol Operation Greenlight not only reveal how transnational criminal organizations continue to exploit encrypted communication services for their own illicit gain, but also show the commitment of the law enforcement community to develop innovative strategies to counter this activity. These operations underscore the seriousness of the international drug threat and provide a strong foundation from which future investigations can be built.  As clearly shown in this operation, transnational organized crime is a global problem that requires a global solution, strong international partnerships and timely information sharing which are critical tools in this fight.”  

Europol’s role and contribution

Europol set up an Operational Task Force (OTF) for Operation Trojan Shield / Greenlight and provided operational support for the participating countries by acting as a criminal intelligence hub, facilitating the exchange of information and coordinating with other investigations supported by Europol. Overall, 16 countries took part in this OTF and sent representatives to Europol in The Hague, the Netherlands, to coordinate their activities at the national and international levels. The large system of international liaison officers at Europol ensures that the interests of law enforcement agencies in the EU Member States and non-EU partners are represented at Europol’s headquarters. Europol supported OTF Greenlight / Operation Trojan Shield, which was led by the US FBI, Sweden, the Netherlands and Australia.

The following countries participated in the international coalition: Australia, Austria, Canada, Denmark, Estonia, Finland, Germany, Hungary, Lithuania, New Zealand, the Netherlands, Norway, Sweden, the United Kingdom incl. Scotland, and the United States.

https://www.europol.europa.eu/newsroom/news/800-criminals-arrested-in-biggest-ever-law-enforcement-operation-against-encrypted-communication