Posts

The Shiny Object of the May 2017 Russian Investigation: The Evidence Mostly Came in after August 1

There’s a reason today’s NYT story so infuriates me — to say nothing of Trump’s efforts to declassify documents from the Russia investigation that, because of the personnel moves of virtually everyone involved, would mostly end by August 1, 2017.

That’s because it’s clear that — because Peter Strzok lost an August 2016 battle to investigate more aggressively in summer and fall 2016 — DOJ, FBI, and then Mueller were only obtaining key information around about August 1, 2017, a year later. It’s no surprise, then, that (as the frothy right has been obsessing about recently) Lisa Page and Strzok weren’t sure if there was evidence of “collusion” on May 17, 2017. Of course they weren’t. The government hadn’t started collecting the evidence in earnest yet.

Consider the following investigative steps:

FBI appears not to have sent a preservation request to Government Services Administration for George Papadopoulos’ material until March 9, 2017, and they appear not to have pursued his privately held call records (especially the Facebook ones that would have revealed the existence of Ivan Timofeev) until some time later.

On June 6, 2017, the Mueller team was still debating whether they would access Section 702 materials, something they otherwise do routinely with assessments, to say nothing of fully predicated national security investigations.

The John Dowd letter wrongly claiming unprecedented cooperation reveals that Mueller started to receive the documents requested by congressional committees on July 21; that would presumably be the first that the government obtained the version of the June 9 emails that included Paul Manafort’s replies.

Copies of all documents provided to the committees by the Campaign, and all search term lists and the privilege log, were also provided to the Special Counsel.

  • By letter dated May 17, 2017, the Campaign received a request for documents from the Senate Select Committee on Intelligence (SSCI).
  • By letter dated June 7, 2017, the Campaign received a request for documents from the House Permanent Select Committee on Intelligence (HPSCI). The records requested included records generated from June 16, 2015, to 12pm on January 20, 2017, and hence, included the transition period.
  • The Campaign voluntarily responded to these requests by providing 840 documents on July 21, 2017, and another set of 4,800 documents on July 31, 2017. By letter dated July 19, 2017, the Campaign received a request for documents from the Senate Judiciary Committee (SJC).

Mueller sent a preservation request for Transition materials on June 22. He obtained all the emails and devices from 13 transition staffers in late August.

Specifically, on August 23, 2017, the FBI sent a letter (i.e., not a subpoena) to career GSA staff requesting copies of the emails, laptops, cell phones, and other materials associated with nine PTT members responsible for national security and policy matters. On August 30, 2017, the FBI sent a letter (again, not a subpoena) to career GSA staff requesting such materials for four additional senior PTT members.

The list of documents the White House provided, organized by Bates number, show that some key documents couldn’t have come in until July 2017. Indeed, documents pertaining to Comey’s firing appear to be the last of the document sets obtained, sometime after the disclosure of the June 9, 2016 meeting in July 2017.

BuzzFeed’s big scoop on financial transfers between Aras Agalarov and Ike Kaveladze around the time of the June 9 meeting shows banks didn’t start looking for such suspicious transfers until after the June 9 meeting was disclosed on July 8, 2017.

None of these transactions was discovered until 2017, after the New York Times revealed the Trump Tower meeting. Shortly after that report, investigators asked financial institutions to look back at their accounts to learn how money flowed among the people who planned and attended the meeting: Agalarov; Kaveladze; Agalarov’s pop star son, Emin; their employee, Rob Goldstone, who sent the original email to Trump Jr.; and others.

To unearth connections between some of their accounts, banks took an extraordinary step: They invoked a provision of the Patriot Act — a post-9/11 law that included new tools to track money laundering and terrorist financing. That provision, rarely used in the Trump-Russia investigation, allowed the banks to share information about customers with one another.

Three financial institutions — Citibank, JP Morgan Chase, and Morgan Stanley — discovered the $3.3 million that flowed from Agalarov to Kaveladze.

My interview with the FBI (I believe I was the second source about one aspect of what I shared, but believe I was the first about the stuff that tied more obviously to the campaign) was July 14. I believe my materials were moved under Mueller when Ryan Dickey got moved under Mueller in November, 2017.

So the constant six-year old soccer chases by journalists trying to learn what happened in May 2017 — when things were chaotic because Trump was breaking all norms and firing people who actually weren’t investigating that aggressively — to the detriment of attention on what happened in the months thereafter really does a huge disservice to the truth. The investigation into Trump’s conspiracy with Russia started in earnest around about August 1, 2017. Once the government actually started looking for evidence, I imagine the evidence of conspiracy was pretty obvious.

As I disclosed in July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

Those Sexy Details in the Papadopoulos Sentencing Memo Aren’t Intended for Your Consumption

In this post, I argued that George Papadopoulos’ sentencing memo was written to make a case to Donald Trump for a pardon, not to judge Randolph Moss for no prison time (even though that’s what he asks for).

It would follow logically, then, that the details of his testimony Papapdopoulos chose to highlight in a claim that “George provided investigators with critical information” — details that have attracted much of the press coverage of this memo — also aren’t intended for our benefit, but for Trump and other co-conspirators.

Jeff Sessions lies as much as “young George” Papadopoulos

Consider the one that has attracted the most attention, revealing that (according to Papadopoulos), he told the government that Trump approved of his plan to pursue a meeting with Putin and — even more importantly — Jeff “Sessions … appeared to like the idea.”

On March 31, 2016, he joined Mr. Trump, Senator Jeff Sessions, and other campaign officials for a “National Security Meeting” at the Trump Hotel. George’s photograph at this meeting flashed around the world via Twitter. Eager to show his value to the campaign, George announced at the meeting that he had connections that could facilitate a foreign policy meeting between Mr. Trump and Russian President Vladimir Putin. While some in the room rebuffed George’s offer, Mr. Trump nodded with approval and deferred to Mr. Sessions who appeared to like the idea and stated that the campaign should look into it.

At a minimum, after 11 months of being prevented from sharing this detail, including it here tells all the other co-conspirators what Papadopoulos said. The allegation is not new; at least two other participants in the meeting offered a similar version to Reuters in March (and presumably to the FBI before that). Still, Papadopoulos provides the detail in such a way and at such a time that it’s sure to generate pressure on Sessions, just as Trump is trying to convince Republican members of Congress he should fire the Attorney General. Not to mention that Papadopoulos raises an example of a person who has thus far avoided all consequences for lying in official settings.

The offer of emails came during a discussion finalizing a meeting

An even more delicious mention is the specific description Papadopoulos gives of the meeting at which Joseph Mifsud told him the Russians had Hillary emails they planned to release to help Trump.

George strived to organize a meeting with the Russian government and help the Trump campaign promote its foreign policy objective: improve U.S. and Russian relations. He believed that such a meeting would be a boon for the campaign as Mr. Trump had not yet hosted any major foreign policy events with officials from other countries.

George joined Professor Mifsud for breakfast in London on April 26, 2016, with the intention of finalizing plans for the foreign policy meeting. It was during this breakfast meeting, however, that Professor Mifsud told George that individuals in Moscow possessed “dirt” on candidate Hillary Clinton in the form of “thousands of emails.” Not knowing what to make of this comment, George continued his efforts to make the Trump – Russia meeting a reality. [my emphasis]

Papadopoulos’ statement of the offense had made it clear that Mifsud mentioned the emails in the context of Papadopoulos’ efforts to set up a meeting.

On or about April 25, 2016, defendant PAPADOPOULOS emailed [Stephen Miller — see this story confirming Miller as the “Senior Policy Advisor” in the document]: “The Russian government has an open invitation by Putin for Mr. Trump to meet him when he is ready []. The advantage of being in London is that these governments tends to speak more openly in “neutral” cities.

On or about April 26, 2016, defendant PAPADOPOULOS met the Professor for breakfast at a London hotel. During this meeting, the Professor told defendant PAPADOPOULOS that he had just returned from a trip to Moscow where he had met with high-level Russian government officials. The Professor told defendant PAPADOPOULOS that on that trip he (the Professor) learned that the  Russians had obtained “dirt” on then-candidate Clinton. The Professor told defendant PAPADOPOULOS, as defendant PAPADOPOULOS later described to the FBI, that “They [the Russians] have dirt on her”; “the Russians had emails of Clinton”; “they have thousands of emails.”

[snip]

[T]he day after his meeting at the hotel with the Professor, on or about April 27, 2016, defendant PAPADOPOULOS emailed [Miller]: “Have some interesting messages coming in from Moscow about a trip when the time is right.”

Also on or about April 27, 2016, defendant PAPADOPOULOS emailed a [Corey Lewandowski] “to discuss Russia’s interest in hosting Mr. Trump. Have been receiving a lot of calls over the last month about Putin wanting to host him and the team when the time is right.”

The Schiff memo and Alexander Downer have subsequently added the detail that Mifsud specifically told Papadopoulos that, “the Russians might use material that they have on Hillary Clinton in the lead-up to the election, which may be damaging,” to assist Trump’s campaign.

Remember, Papadopoulos worked with Lewandowski to draft Trump’s first foreign policy speech, delivered on April 27, which Papadopoulos reportedly told Ivan Timofeev (whose entire existence Papadopoulos’ lies had managed to hide from the FBI at first) was a signal to meet. That speech included these lines:

I believe an easing of tensions, and improved relations with Russia from a position of strength only is possible, absolutely possible. Common sense says this cycle, this horrible cycle of hostility must end and ideally will end soon. Good for both countries.

Some say the Russians won’t be reasonable. I intend to find out. If we can’t make a deal under my administration, a deal that’s great — not good, great — for America, but also good for Russia, then we will quickly walk from the table. It’s as simple as that. We’re going to find out.

Obviously, the tie between Russia releasing stolen emails and foreign policy meetings was always implicit. But Papadopoulos has just revealed that Mifsud said Russia might release emails in the context of setting up a meeting, after having floated such a meeting with Miller the day before.

The breakfast meeting ties the release of the stolen emails to help the Trump campaign and foreign policy meetings together directly. And having just sat through such a meeting, Papadopoulos worked with Stephen Miller and Corey Lewandowski to send a message to Russian that Trump was willing to meet — and would pursue improved relations with Russia.

Papadopoulos tells the Greeks of the dirt offer just in time to pass Putin a message

I’m most interested, however, in the inclusion of Papadopoulos’ admission he told the Greek Foreign Minister about the Russian offer of dirt just before Putin came to town on May 27, 2016.

George provided investigators with critical information. George told investigators about his interactions and meetings with other members of the campaign. He detailed a meeting in late May 2016 where he revealed to the Greek Foreign Minister that the Russians had “dirt” on Hillary Clinton. He explained that this meeting took place days before President Vladimir Putin traveled to Greece to meet with Greek officials.

Remember, Natalia Veselnitskaya dates the idea for the June 9 meeting to a conversation she had with Aras Agalarov at “the end of May” 2016.

Around the end of May 2016, during a conversation with a good acquaintance of mine, being my client, Aras Agalarov on a topic that was not related to the United States, I shared the story faced when defending another client, Denis Katsyv, about how terribly misled the US Congress had been by the tax defrauder William Browder, convicted in Russia, who, through his lobbyists and his close-minded rank-and-file Congress staffers, succeeded in adopting the Act in the name of a person whom Browder practically hardly ever knew. I considered it my duty to inform the Congress people about it and asked Mr. Agalarov if there was any possibility of helping me or my colleagues to do this. I do not remember who of us was struck by the idea that maybe his son could talk about this with Donald Trump, Jr., who, although a businessman, was sure to have some acquaintances among Congress people.

But it’s not just the tantalizing possibility that Papadopoulos left some kind of message for Putin just before Aras Agalarov started setting up the June 9 meeting.

Papadopoulos’ statement of the offense describes him emailing Paul Manafort about Russia’s desire to set up a meeting, which Manafort forwarded to the government’s most important now cooperating witness, Rick Gates, telling him that the candidate wasn’t going to do such meetings himself — someone else in the campaign would.

On or about May 21, 2016, defendant PAPADOPOULOS emailed another high-ranking Campaign official, with the subject line “Request from Russia to meet Mr. Trump.” The email included the May 4 MFA Email and added: “Russia has been eager to meet Mr. Trump for quite sometime and have been reaching out to me to discuss.”2

2 The government notes that the official forwarded defendant PAPADOPOULOS’s email to another Campaign official (without including defendant PAPADOPOULOS) and stated:

“Let[‘]s discuss. We need someone to communicate that DT is not doing these trips. It should be someone low level in the campaign so as not to send any signal.”

The House Intelligence Majority Report, however, reveals that that Papadopolous sent that email from Greece.

(U) While on a trip to Athens, Greece in May 2016, Papadopoulos sent an email to Manafort stating that he expected to soon receive “an official invitation for Mr. Trump to visit Greece sometime this summer should his schedule allow.”183 In the same email to Manafort, Papadopoulos also forwarded a meeting Invitation from Ivan Timofeev, Director or [sic] Programs for the Russian International Affairs Council, and claimed that “Russia has been eager to meet Mr. Trump for quite sometime and have been reaching out to me to discuss. thought it would be prudent to send to you.”184

(U) As of May 2016, Manafort had not yet been elevated to campaign chairman, but had a long track record of work abroad. Manafort forwarded Papadopoulos’ email to his business and campaign deputy [Rick Gates] noting that we need someone to communicate that D[onald] T[rump] is not doing these trips.” 185 Manafort and [Gates] agreed to assign a response of a “general letter” to “our correspondence coordinator.” the person responsible for “responding to all mail of non-importance.”186

While it’s clear nothing in that email could have reflected a discussion of passing a message to Putin via Papadopoulos’ Greek contacts, it does show that Papadopoulos used the opportunity of a verbal offer from Greece to raise a Russian meeting with Manafort directly. Manafort responded by saying other campaign aides would do such meetings. Papadopoulos then somehow saw reason to tell Greece’s Foreign Minister that the Russians were offering dirt to help Trump just before Putin arrived. And that’s precisely the timeframe when the June 9 meeting setting up a Russian meeting with Trump’s senior-most campaign officials, including Manafort, got born.

Maybe it’s all a big fat coinkydink, but Papadopoulos seems to believe it important enough to tell all his co-conspirators (even while it makes his repeated claims not to have told the campaign itself laughable), possibly because he knows the FBI has evidence from the Greeks as well.

As I disclosed in July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

The Mueller Investigation: What Happens on September 7?

I hesitate to write this post, partly because I think it’s a good idea to dismiss every single thing that Rudy Giuliani says, and partly because we’ve all learned that it is sheer folly to pretend anyone can anticipate what Mueller will do, much less when.

Nevertheless, I wanted to address questions about what might happen in the next two weeks, as we approach the 60-day mark before midterm elections.

Rudy G is wrong about everything

The aforementioned Rudy G, who has been saying that Mueller has to shut down his entire investigation (or even finish up and go home) on September 1 on account of DOJ’s policy against overt investigative action close to an election.

As I said, the policy only prohibits overt acts, and only 60 days before the election. Mueller might argue that it’s entirely irrelevant, given that none of his known targets (save, perhaps, Dana Rohrabacher) are on the ballot. But enough credible journalists have suggested that DOJ is taking this deadline seriously with respect to Trump’s associates (including Michael Cohen in SDNY, where DOJ actually leaks), that it’s probably correct he’ll avoid overt acts in the 60 days before the November 6 election.

But that timeline starts on September 7, not September 1.

Paul Manafort’s stall

One thing we know will dominate the press in that pre-election period is Manafort’s DC trial, scheduled to start on September 17.

Unless he flips.

While I still don’t think he will flip, he is stalling in both his trials. In EDVA, he asked for and got a 30-day deadline to move for an acquittal or mistrial. He may have done so to provide extra time to consider the complaints raised by one juror that others were deliberating before they should have, which Manafort had asked for a mistrial over. If that’s right, juror Paula Duncan’s comments, describing the one holdout and explaining that even she, a Trump supporter, found the case a slam dunk, may persuade Manafort that challenging this trial won’t bring about any other result and may mean he gets convicted on the remaining 10 counts.

In any case, however, by getting 30 days to decide, Manafort moved the deadline from (by my math) September 3 to September 21, when he’s scheduled to be deep into the DC case (and therefore too busy to submit such a motion). It did, however, move the decision date past that September 7 date.

Speaking of the DC case, after getting an extension on the pre-trial statement in that case, Manafort basically punted on many of the substantive issues, effectively saying he’ll provide the required input later.

He may not be flipping, but he’s not prepared to start this trial.

Is it Roger Stone’s time in the barrel?

The big question, for me, is whether Mueller has finished his six month effort to put together a Roger Stone indictment.

Tantalizingly, back on August 10, Mueller scheduled Randy Credico to explain to the grand jury how Stone threatened him about his testimony. That appearance is for September 7. Given how far out Mueller scheduled this, I wondered at the time whether Credico was being slated to put the finishing touches on a Stone indictment.

What might prevent Mueller from finalizing Stone’s indictment, however, is Stone associate Andrew Miller, from whom Mueller has been trying to get testimony since May 9. Miller is challenging his grand jury subpoena; he’s due to submit his opening brief in his appeal on September 7. That might mean that Mueller has to wait. But two filings (District, Circuit), the docket in his subpoena challenge, and this CNN report may suggest they can move forward without first getting Miller’s testimony.

Both the Circuit document and CNN provide more details about a May 9 interview with two FBI Agents, with no attorney present (no offense to Miller, but what the fuck kind of self-described libertarian, much less one in Roger Stone’s immediate orbit, agrees to an FBI interview without a lawyer present)?

Mr. Miller was first interviewed by two agents of the Federal Bureau of Investigation who visited him unannounced on or about May 9, 2018, in Saint Louis, MO, where he resides. He was cooperative, answering all their questions for approximately two hours, and at the conclusion of the interview, was handed a subpoena to produce documents and testify as a witness before the grand jury.

CNN describes that’s what poses a perjury concern for Miller with regards to his testimony before the grand jury because of that original interview.

Miller’s case is complicated by the fact that he initially cooperated with the special counsel’s investigation. When FBI agents first approached him in May, he spoke with them at his home in St. Louis for two hours without an attorney.

[snip]

Dearn said in an interview that she was just being “carefully paranoid” and protecting her client from accidentally committing perjury if he testifies and contradicts something he told investigators back in May without a lawyer present.

As the District filing seems to suggest, Miller got not one but two subpoenas (???), just one of which called for document production:

Mr. Miller was served with two subpoenas dated June 5, 2018, both requiring his appearance before the Grand Jury on June 8, but only one of which required that he search and bring with him the documents described in the Attachment to one of the subpoenas. See Exhibits 1 and 2. After a filing a motion to quash on grounds not raised herein, this Court issued a Minute Order on June 18 requiring Mr. Miller’s appearance before the Grand Jury on June 29 and to produce the documents requested as limited by agreement of the parties by June 25.

Miller turned over 100MB of documents on June 25, but shortly thereafter, Mueller prosecutor Aaron Zelinsky asked for more.

Mr. Miller has since complied with that part of the order producing voluminous documents in a file that is 100MB in size to government counsel on Monday, June 25. In her cover email to government counsel, Aaron Zelinsky, Miller’s counsel stated in pertinent part: “Mr. Miller does not waive and hereby preserves all rights he has to object to the subpoena requiring his appearance before the Grand Jury this Friday…and from any continuing duty or obligation to supply additional documents subject to the subpoena.” See Exhibit 6. Nevertheless, Mr. Zelinsky recently informed counsel that he is not satisfied with this production and is unreasonably requesting additional documents from Mr. Miller.

CNN reported that those documents pertained to WikiLeaks and Guccifer 2.0.

After a protracted back and forth between Dearn and Mueller’s team, Miller handed over a tranche of documents. In turn, the government had agreed to limit its search to certain terms such as Stone, WikiLeaks, Julian Assange, Guccifer 2.0, DCLeaks and the Democratic National Committee, according to court filings and interview with attorneys.

So at the very least, Mueller has 100MB of documents that relate to Wikileaks and Guccifer 2.0 (which raises real questions about how Miller can say he knows nothing about the topic), and 2 hours of testimony that Miller may not want to tell the grand jury now that he has lawyers who might help him avoid doing so.

Meanwhile, there are some filings from the end of his District Court docket.

The Circuit document mostly explains what filings 33, 34, 35, and 37 are (though doesn’t explain why Mueller refused to stipulate that Miller be held in contempt): they’re the process by which he was held in contempt and therefore legally positioned to appeal.

6. Because Mr. Miller desired to appeal the order denying his motion, ensuing discussions with Special Counsel to stipulate that Mr. Miller be held in contempt for not appearing on the upcoming appearance before the grand jury on August 10, 2018, and to stay the contempt pending appeal did not succeed.

7. Consequently, two days before his appearance, on the evening of August 8, 2018, counsel emailed government counsel and Judge Howell’s clerk (and on the following morning of August 9, hand-filed with the clerk’s office), a Motion By Witness Andrew Miller To Be Held In Civil Contempt For Refusing To Testify Before The Grand Jury And To Stay Such Order To Permit Him To Appeal It To The U.S. Court Of Appeals For The District Of Columbia Circuit and citing authorities for granting a stay of contempt. ECF No. 33. The government served and a response on the evening of August 9 ( ECF. No. 35) and Mr. Miller served a reply early morning on August 10. ECF No. 37.

8. On August 10, undersigned counsel for Mr. Miller met government counsel at 9:00 a.m. as previously agreed to at the entrance to the grand jury offices, and was advised by government counsel that a motion to show cause was filed shortly before 9:00 a.m. ECF No. 34.

9. Approximately two hours later, the court held the show cause hearing, with the Mr. Miller and local counsel appearing telephonically from Saint Louis, MO.

10. The court granted Mr. Miller’s and the government’s request that he be held in contempt and stayed the order if the notice of appeal were filed by 9:00 a.m. August 14, 2018. ECF No. 36.

That doesn’t explain what Document 38 is, to which Miller didn’t respond, and in response to which Beryl Howell issued an order.

CNN’s description of Miller’s attorney’s concern seems to split his testimony into two topics: Guccifer and Wikileaks, and Stone’s PACs. Miller’s only worried about legal jeopardy in the latter of those two. (For some details on what the legal exposure might pertain to, see this post.)

[Alicia] Dearn was adamant that Miller not be forced to testify to the grand jury about one topic in specific: Stone. She asked that her client be granted immunity, “otherwise he’s going to have to take the Fifth Amendment,” she said in a court hearing in June.

Aaron Zelinsky, one of Mueller’s prosecutors, noted Miller’s lawyer was making two seemingly contradictory arguments: “On the one hand, that the witness knows nothing, has nothing to hide, and has participated in no illegal activity. On the other hand, that there is a Fifth Amendment concern there.”

In the hearing, Dearn said she was concerned Miller would be asked about his finances and transactions related to political action committees he worked on with Stone.

Miller “had absolutely no communication with anybody from Russia or with Guccifer or WikiLeaks,” Dearn said in an interview.

By process of elimination, the only thing she believes her client could get caught up on are questions about his financial entanglements with Stone and his super PAC.

The Circuit document concedes that Miller may be the subject — but not target — of this grand jury investigation.

12. Lest there be any misunderstanding, Mr. Miller was not a “target of grand jury subpoenas” (Concord Mot. at 1), but rather a fact witness or at most a subject of the grand jury; nor was he a “recalcitrant witness.” Id. at 13. As the foregoing background demonstrates, Mr. Miller has been a cooperative witness in this proceeding.

It would be really weird if Miller really did get two subpoenas, and that’s not consistent with the Circuit document. So it may be there were two topics or crimes described in the subpoena: conspiring with Russia, and running a corrupt PAC. And if Miller’s only personally legally exposed in the latter of those, then it’s possible Mueller would treat these differently.

So it’s possible Mueller got what they need to move forward on the main conspiracy case against Stone, while it has to wait on Miller’s own involvement in Stone’s corrupt PACs until after the DC Circuit reviews things.

Other September deadlines

The September 7 timing is interesting for two other reasons. First, that’s also the day that George Papadopoulos — whose plea deal covers his lies and obstuction but not any conspiracy case — is due to be sentenced.

Just 10 days later Mike Flynn (whose plea deal was also limited to his lies) has a status report due, just a 24-day extension off his previous one. That timing suggests he’s about done with his cooperation. Perhaps that shortened time frame is only due to his team’s push to get him back earning money to pay for his lawyers again. Perhaps there’s some other explanation.

Timeline

August 24: Revised deadline for Manafort pre-trial statement — Manafort punted on many issues.

August 28: Hearing in DC Manafort case.

September 3: Current deadline for motions in EDVA Manafort trial

September 4: Brett Kavanaugh confirmation hearings scheduled to begin (projected to last 3-4 days)

September 7: Randy Credico scheduled to testify before grand jury; George Papadopoulos scheduled for sentencing; Andrew Miller brief due before DC Circuit; 60 days before November 6 mid-terms

September 17: DC Manafort trial starts, status report due in Mike Flynn case

September 21: Requested deadline for motions in EDVA Manafort trial

September 28: Government brief due in DC Circuit appeal of Andrew Miller subpoena

October 9: Miller reply due in DC Circuit

November 6: Mid-term election

November 10: Status report due in Rick Gates case

As I disclosed in July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

Sometimes a Plea Is Just a Plea: The Ongoing Criminal Exposure of Mueller’s “Cooperating” Witnesses

One of the most interesting details from the government’s George Papadopoulos Sentencing Memo released last night is this passage, stating that Papadopoulos’ plea was not a standard cooperation agreement.

The plea agreement entered into by the government and the defendant was not a standard cooperation agreement, and the government did not agree to make a motion under U.S.S.G. § 5K1.1 based on cooperation by the defendant. Nevertheless, the government agreed to “bring to the Court’s attention at sentencing the defendant’s efforts to cooperate with the Government, on the condition that [the defendant] continues to respond and provide information regarding any and all matters as to which the Government deems relevant.” (Plea Agreement p. 4). Pursuant to this agreement, the Government provides the Court with the following information.

[snip]

The defendant did not provide “substantial assistance,” and much of the information provided by the defendant came only after the government confronted him with his own emails, text messages, internet search history, and other information it had obtained via search warrants and subpoenas well after the defendant’s FBI interview as the government continued its investigation. The defendant also did not notify the government about a cellular phone he used in London during the course of the campaign – that had on it substantial communications between the defendant and the Professor – until his fourth and final proffer session.

While there had been some discussion about what kind of plea deal Papadopoulos got, this statement seems to say that Papadopoulos didn’t offer up any specific cooperation against co-conspirators. Rather, the deal was simply that if he offered up his cooperation about his own actions, the government would tell the court that he did so, with no obligation to ask the court for any downward sentencing. The deal, then, was to limit his exposure to just one false statements charge, rather than the multiple false statements and obstruction charge he could have gotten for trying to confuse the FBI.

Importantly, the deal only applied to conduct specified in the offense — that is, the lies to the FBI and the obstruction of justice by hiding his Facebook and cell phone data. While his statement of offense includes much of his discussion with Russian assets about setting up a meeting, it says nothing about other conduct, such as accepting $10,000 from a suspected Israeli asset, or his ongoing negotiations with Sergei Millian, basically to spy on the Trump administration in exchange for a monthly payment (which was conditioned on getting a job in the administration, which is one of the reasons — the government suggests in the memo — why Papadopoulos may have lied to the FBI in January 2017).

That is, Papadopoulos not only faces prison time if the court accepts the government’s recommended sentence, but he may have ongoing exposure for foreign agent or conspiracy charges not covered by this plea agreement.

He made a deal to get several false statements and obstruction charges turned into one, but he didn’t even capitalize on that deal, and may still face additional legal risk tied to the Russian tampering.

That led me to compare the language for all the other plea deals Mueller’s team has made (something NYCSouthpaw started to do in this thread in February). It’s clear that Alex van der Zwaan got the least out of his plea deal (though he may have cooperated more in getting to that deal, which would have been important given his foreign status). That’s significant, because the prosecutor compared van der Zwaan to Papadopoulos in their memo.

The other three plea deals — Mike Flynn, Richard Pinedo (for identity theft tied to the Internet trolls), and Rick Gates — do obligate the government to submit a 5K statement for downward departure on sentencing if the person provides substantial cooperation.

But Pinedo and Flynn’s deals are limited just to the statement of offense. In Flynn’s case, his statement includes several lies to the FBI and his failure to register under FARA, but not a lot of other known conduct, even aside from any conspiracy involving Russia.

Only Gates’ plea includes broad forgiveness for criminal conduct (though the charges he pled to also include more significant penalties than Flynn and Papadopoulos). That’s yet another sign that he offered quite a bit in his proffer, well beyond incriminating Paul Manafort.

I’ve been nudging the attentive lawyers to explain what this means in terms of ongoing exposure. But if I were Mike Flynn, the Papadopoulos example might really incentivize me to be more cooperative.


George Papadopoulos:

In consideration of your client’s guilty plea to the above offense, your client will not be further prosecuted criminally by this Office for the conduct set forth in the attached Statement of the Offense.

No government obligation section beyond,

agreeing to bring to the Court’s attention at sentencing the defendant’s efforts to cooperate with the Government, on the condition that your client continues to respond and provide information regarding any and all matters as to which the Government deems relevant.

Mike Flynn:

In consideration of your client’s guilty plea to the above offense, your client will not be further prosecuted criminally by this Office for the conduct set forth in the attached Statement of the Offense.

5K language included.

Alex van der Zwaan:

In consideration of your client’s guilty plea to the above offense, your client will not be further prosecuted criminally by this Office for the conduct set forth in the attached Statement of the Offense, for any other false statements made by him to the Office on November 3 and December 1, 2017, any destruction, deletion, and withholding of documents and evidence in connection with requests by this Office or his law firm, and any violations of the Foreign Agent Registration Act or other law arising from the preparation and/or roll out of the Tymoshenko report for the Ukraine Ministry of Justice.

No government obligation section.

Richard Pinedo:

In consideration of your client’s guilty plea to the above offense, your client will not be further prosecuted crininally by this Office for the conduct set forth in the attached Statement of the Offense.

5K language included.

Rick Gates:

In consideration of your client’s guilty plea to the above offenses, and upon the completion of full cooperation as described herein, no additional criminal charges will be brought against the defendant for his heretofore disclosed participation in criminal activity, including money laundering, false statements, personal and corporate tax and FBAR offenses, bank fraud, and obstruction of justice. In addition, subject to the terms of this Agreement, at the time of sentence, the Government will move to dismiss the remaining counts of the Indictment in this matter. In addition, the Office will move promptly to dismiss without prejudice the charges brought against your client in the Eastern District of Virginia and your client waives venue as to such charges in the event he breaches this Agreement.

5K language included.

Government Claims George Papadopoulos Helped Joseph Mifsud Get Away

The government has released its sentencing memo for George Papadopoulos. They recommend he serve time somewhere between 0 and 6 months, with a fine of $9,500 (which is most but not all of the payment he got from a suspected Israeli spy). And given their description, he got off easy (though I do wonder whether he faces additional exposure in the conspiracy in chief).

While the most newsy bit of the memo is a footnote debunking a lot of what Simona has been telling the gullible Chuck Ross since May (which I’ll get to), the most interesting detail is that the government claims that Papadopoulos’ lies and obstruction helped Joseph Mifsud skip the country without being detained, as the government explains by way of describing the damage Papadopoulos did to the investigation.

The defendant’s lies to the FBI in January 2017 impeded the FBI’s investigation into Russian interference in the 2016 presidential election. Most immediately, those statements substantially hindered investigators’ ability to effectively question the Professor when the FBI located him in Washington, D.C. approximately two weeks after the defendant’s January 27, 2017 interview. The defendant’s lies undermined investigators’ ability to challenge the Professor or potentially detain or arrest him while he was still in the United States. The government understands that the Professor left the United States on February 11, 2017 and he has not returned to the United States since then.

This claim is overly dramatic, but it makes the frothy right’s conspiracy about Mifsud being an FBI plant all the more interesting — if he’s an FBI plant, then why did Papadopoulos cover for him while he was in the US? (Yeah, I know the premise is insane but that’s what conspiracy theories do to sanity.)

And, as the government’s debunking footnote makes clear, either because George lied to her or because she’s lying, Simona hasn’t been telling the gullible Chuck Ross the truth about Papadopoulos offering up Mifsud’s name.

In several recent media appearances, the defendant’s spouse has claimed that the defendant “voluntarily reported” to the FBI the Professor’s conversation with him about the “dirt” on Clinton. See CNN, Papadopoulos’ Wife Asks Trump to Pardon Him, Says He’s ‘Loyal to the Truth,’ June 6, 2018 (claiming at approximately 4:08 that the defendant “actually volunteered – he reported to the FBI about this meeting”); Fox News, Rethinking ‘Collusion’ and the George Papadopoulos Case, June 4, 2018, (claiming at approximately 2:11 that the defendant “voluntarily reported to the FBI at the time of their interview”); Chuck Ross, Papadopoulos’ Wife: Trump Aide Was ‘Absolutely Not’ Involved in Russian Collusion, June 4, 2018, available at http://dailycaller.com/2018/06/04/mangiante-papadopoulos-collusion/ (stating that it was the “defendant who brought up” the matter).

To the contrary, the defendant identified the Professor only after being prompted by a series of specific questions about when the defendant first learned about Russia’s disclosure of information related to the campaign and whether the defendant had ever “received any information or anything like that from a [] Russian government official.” In response, while denying he received any information from a Russian government official, the defendant identified the Professor by name – while also falsely claiming he interacted with the Professor “before I was with Trump though.” Over the next several minutes in the interview, the defendant repeatedly and falsely claimed that his interactions with the Professor occurred before he was working for the Trump campaign, and he did not mention his discussion with the Professor about the Russians possessing “dirt” on Clinton. That fact only came up after additional specific questioning from the agents. The agents asked the defendant: “going back to the WikiLeaks and maybe the Russian hacking and all that, were you ever made aware that the Russians had intent to disclose information [] ahead of time? So before it became public? Did anyone ever tell you that the Russian government plans to release some information[,]
like tell the Trump team ahead of time[,] that that was going to happen?” The defendant responded, “No.” The agents then skeptically asked, “No?” The defendant responded: “No, not on, no not the Trump [campaign], but I will tell you something and – and this is . . . actually very good that we’re, that you just brought this up because I wasn’t working with Trump at the time[.] I was working in London . . . with that guy [the Professor].” Only then, after acknowledging that the agents had “brought this up” and lying about when he received the information, did the defendant admit that the Professor had told him “the Russians had emails of Clinton.”

Interestingly, the government suggests that Papadopoulos may have lied because he was still trying to get a job in the Trump administration — a job, we’ve since learned, that might have also come with a payoff from Sergei Millian.

But the record shows that at the time of the interview, the defendant was attempting to secure a job with the Trump Administration and had an incentive to protect the Administration and minimize his own role as a witness. (PSR ¶ 50). In January 2017, the defendant had several communications with officials of the incoming Administration in an effort to obtain a high-level position with the National Security Council, the State Department, or the Energy Department. On January 27, 2017, in the hours after being interviewed by the FBI, the defendant submitted his biography and a description of work he did on the campaign in an effort to obtain a position as a Deputy Assistant Secretary in the Energy Department. (PSR ¶ 50).

And Papadopoulos didn’t provide much assistance at all — significantly, hiding a phone he used in the campaign until the last proffer session (at which point the government had probably identified it by correlating his identities).

The defendant did not provide “substantial assistance,” and much of the information provided by the defendant came only after the government confronted him with his own emails, text messages, internet search history, and other information it had obtained via search warrants
and subpoenas well after the defendant’s FBI interview as the government continued its investigation. The defendant also did not notify the government about a cellular phone he used in London during the course of the campaign – that had on it substantial communications between the defendant and the Professor – until his fourth and final proffer session. This cell phone was not among the devices seized at the airport because it was already in the defendant’s family home in Chicago. Upon request, the defendant provided that phone to the government and consented to the search of that device.

And he didn’t provide much help thereafter.

Following the proffer sessions in August and September 2017, the government arranged to meet again with the defendant to ask further questions in late December 2017. However, upon learning that the defendant had participated in a media interview with a national publication concerning his case, the government canceled that meeting.

All of which leaves you with the sense that Papadopoulos would have happily served as a spy, had the FBI not come knocking on his door at precisely the same time as the White House was first dealing with the Mike Flynn investigation.

Again, the government is letting Papadopoulos off easy. Which makes me wonder whether he’s still exposed in the case in chief.

If You Have Rick Gates (and Omarosa) You Don’t Need George Papadopoulos

The Trumpian bubble — likely led by right wing legal talking head Victoria Toensing — may be about to lead a young couple to do something insanely stupid.

Yesterday, Simona Mangiante Papadopoulos, George’s wife, tweeted out a request for a pro bono lawyer for her spouse.

A few hours later, she tweeted out notice that she would follow up with those who have specific expertise.

Simona Papadopoulos wants to ditch George’s plea deal at the stupidest possible moment

As she explained to Chuck Ross, who reports from deep within that Trumpian bubble, she and George are thinking of backing out of his plea deal (at the stupidest imaginable time), and instead suing the government and taking their chances with the evidence the government had in hand when Papadopoulos pled guilty to charges that undercharged his conduct, as well as the evidence the government obtained over the course of a year of Papadopoulos pitching for and then engaging in a plea deal.

“George should drop off his plea agreement, in my opinion,” Mangiante Papadopoulos told The Daily Caller News Foundation when contacted after her tweet.

“The idea is to find a lawyer to drop off his plea agreement and sue the government,” she added, noting that she and her husband plan to wait until after a court hearing on Friday to make a final decision.

[snip]

Papadopoulos faces sentencing in the case on Sept. 7. The special counsel’s office will submit its recommendations for sentencing this Friday. While lying to the FBI carries a maximum sentence of five years in prison, defendants in similar cases often receive six months or less in jail.

Remember: one reason Papadopoulos, relying on the advice of some of the more competent attorneys in this matter, pled guilty is because the FBI had evidence he had accepted payment from an Israeli asking for covert assistance. That’s on top of the lies to the FBI he already pled guilty to, not to mention the clear obstruction of deleting his Facebook account, and a key early role in setting up a conspiracy with Russia. When Stefan Halper (working for the FBI and therefore likely recording conversations) discussed these matters with Papadopoulos in September 2016, Papadopoulos admitted that being involved in them would amount to treason (it’s not treason, but his opinion that it might be makes his later actions far more damning).

This is what the Papadopouloses are reportedly entertaining, due no doubt to an entirely mistaken understanding of their status, one obtained by listening to people like Victoria Toensing and Chuck Ross.

Several things seem to have happened to get us to this point.

Mueller almost certainly has several other witnesses who can attest to knowledge Russians were offering emails

Consider: along with whatever else Rick Gates gave Mueller’s team in February when he became state’s evidence, he also probably described what Paul Manafort (and possibly, Don Jr) understood about the dirt Russians were offering to the Trump campaign when both attended the June 9 Trump Tower meeting. Indeed, one of the details included in Papadopoulos’ plea deal is that Gates and Manafort discussed how to respond to Russian (and Greek) offers for a meeting.

On or about May 21, 2016, defendant PAPADOPOULOS emailed another highranking Campaign official, with the subject line “Request from Russia to meet Mr. Trump.” The email included the May 4 MFA Email and added: “Russia has been eager to meet Mr. Trump for quite sometime and have been reaching out to me to discuss.”2

2 The government notes that the official forwarded defendant PAPADOPOULOS’s email to another Campaign official (without including defendant PAPADOPOULOS) and stated: “Let[‘]s discuss. We need someone to communicate that OT is not doing these trips. It should be someone low level in the campaign so as not to send any signal.”

We’ve also just learned that Omarosa also provided evidence to Mueller’s team in February, including her claim that Don Sr knew the Russians were offering emails before WikiLeaks released them.

That detail — that the campaign knew Russians were offering emails as dirt to help Trump — was one of the things that might have helped Papadopoulos avoid a prison sentence. But since he pled, others have almost certainly provided substantially the same information, based both on what Papadopoulos told them, and on what they in turn told their superiors on the campaign or what their superiors told them.

That is, Papadopoulos has served his purpose, and there are now better placed or more credible witnesses for any conspiracy trial.

Victoria Toensing likely recruited the Papadopouloses for her propaganda mission

Then there’s the most likely explanation for how the Papadopouloses got themselves in this position, considering ditching a plea deal and instead taking their chances with the evidence George participated in the case in chief.

Back in March, Chuck Ross started a series of articles — for which one or both of the Papadopouloses, Sam Clovis, and probably Clovis’ (and briefly, Trump’s) lawyer Toensing, were sources — naming lifetime GOP operative Stefan Halper as an informant (presenting evidence he sought to find out what Papadopoulos knew about the emails, possibly cultivated Carter Page, and got a meeting with Clovis to get an introduction to Papadopoulos). If you didn’t look too closely (as Ross did not) the stories served the Devin Nunes effort to suggest the investigation into Trump’s conspiracy with the Russians was based on a rocky foundation. If you looked closely, however, Ross’ series was actually quite damning. It confirmed Adam Schiff’s revelation that the Russians had specified that they intended to leak the dirt they were dealing to help Trump and that Papadopoulos believed, at the time he lied to the FBI about his interactions with Joseph Mifsud, that if he were involved in “hacking” emails it would amount to treason.

To those trying to rescue Trump from his own conspiracy exposure, the Papadopouloses were an easy mark. Perhaps offering a promise of a pardon, they got the two to break one of the requirements of George’s plea: that he not communicate with any of a list of co-conspirators, directly or indirectly. Surely Sam Clovis was on that list, not to mention the President.

That may explain why, as Nunes and his cronies started demanding every record pertaining to Halper, the government moved towards sentencing Papadopoulos, without waiting for him to testify in any trial.

There have been signs before yesterday that the government was not going to agree that Papadopoulos fulfilled his end of the plea deal. But yesterday is a pretty good sign that George doesn’t expect to get the sweet deal he might once have gotten, probably no prison time, had Papadopoulos not bought into conspiracy theories offered by people representing other clients.

The misleading mirror Papadopoulos would see in the Trumpian bubble

Much of this seems to be driven by Simona. I don’t have any reason to credit the rampant speculation she’s actually part of Russia’s influence operation. Rather, I just think she’s naive, working in a foreign country, and vastly underestimating the legal jeopardy the life she married into is in, in part because she is consuming shitty reporting from people within the Trumpian bubble.

Of which the Chuck Ross article reporting all this is a splendid example.

On top of omitting the fact that Papadopoulos obstructed the Russian investigation by deleting his Facebook and cell phone, and omitting Papadopoulos’ very damning comment about treason, Ross spins everything so as to totally misinform the frothy right, much to Simona’s misfortune.

For example, Ross offers Simona’s explanation up, as if it helps the legal case.

Mangiante Papadopoulos told TheDCNF that Papadopoulos believed Mifsud was referring to emails Clinton deleted from her private email server.

While this line has managed to confuse the frothy right about whether, in accepting dirt leading into the June 9 meeting, it would still amount to accepting a thing of value from a foreigner, it doesn’t much matter what Papadopoulos believed, either on April 26, 2016 or on January 27, 2017 (and repeated again a month later). What matters is after having learned the Russians wanted to release some emails that would help the Trump campaign, the campaign took overt actions accordingly.

Then Ross suggests that because some late summer meetings didn’t take place, it absolves Papadopoulos of initiating an effort that led to other meetings taking place.

Papadopoulos also attempted to set up meetings between campaign officials and Russian government officials, but according to the statement of offense submitted by the special counsel’s office, the meetings never took place.

Nope! George still took overt actions as part of a conspiracy, to say nothing of agreeing to join the conspiracy over and over.

Ross then suggests that because Papadopoulos didn’t have a lawyer at the first of two meetings at which he lied to the FBI, it means he didn’t commit a crime.

Prosecutors claim that during a Jan. 26, 2017 [sic], interview, Papadopoulos, who did not have a lawyer present, falsely claimed he met Mifsud prior to joining the campaign in March 2016. But Papadopulos first met Mifsud about a week after learning he would join the Trump team.

Remember, Papadopoulos not only repeated this lie a month later, with the benefit of counsel, but also swore that it was a lie when he pled guilty.

Ross then repeats a canard he has repeated earlier, that by offering up Mifsud’s name (but hiding Ivan Timofeev, the Russian he was engaging in call and response with) it’s exonerating for George.

As evidence that Papadopoulos did not intend to deceive the FBI, Mangiante Papadopoulos claims Papadopoulos volunteered Mifsud’s name to the agents who interviewed him.

Ross pretends that Mueller has questions, regarding Alexander Downer’s testimony, that only a bunch of frothy congressmen have questions about.

Details remain vague, but Downer allegedly claimed Papadopoulos mentioned Russia had derogatory information about Clinton.

Republican lawmakers have also questioned the premise of the FBI investigation and Downer’s role in the matter. One question has been why the information from Downer took over two months to reach the FBI.

Ross then repeats a whole bunch of baseless conspiracies about Stefan Halper — the very conspiracies that contributing to likely got the Papadopouloses in trouble — as if they were true because Devin Nunes said they were.

She also believes that government officials attempted to set up her husband with a series of approaches by government informants, including former Cambridge professor Stefan Halper.

[snip]

Halper, a veteran of four Republican presidential administrations, also made contact with Trump campaign advisers Carter Page and Sam Clovis.

The FBI may use informants at an assessment level. By the time Halper approached Papadopoulos, the investigation into the Trump campaign was a predicated full investigation. Ergo, it doesn’t help Papadopoulos’ case that the FBI used an informant, because that’s what the FBI does, with the long-time explicit knowledge of Devin Nunes and everyone else who oversees the FBI.

And finally, Ross indulges Simona’s fantasy of spinning the approach from Sergei Millian (pretending this approach was out of the blue, rather than something discussed with Ivan Timofeev in one of the Facebook communications Papadopoulos tried to hide) as a second use of an informant rather than a pretty obvious part of Russia’s outreach to Trump and his surrogates, dangling a Trump Tower deal.

Millian contacted Papadopoulos out of the clear blue on LinkedIn on July 22, 2016. The pair became fast friends, meeting several times during the course of the campaign. Mangiante Papadopoulos says George claimed Millian offered him $30,000 a month to work on Russian energy issues from inside the Trump administration.

I get that Chuck Ross’ job is to feed the frothy right, to present conspiracies in isolation from the public information that would pop those conspiracies.

But it seems like these two are feeding each other, Simona giving Ross the latest scoop on his serial conspiracy theory, and Ross feeding her insane plan to ditch a plea deal and face what are likely to be foreign agent and conspiracy charges instead of whatever sentence Mueller pitches tomorrow.

I mean, George is a self-important little shit who showed willingness to sell out his country (to at least two other countries) for a bit of fast money.

But he’s being used, badly, here.

As I disclosed last month, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

The Dossier as Disinformation: Why It Would Matter

As I disclosed last month, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

When I wrote this post suggesting that Oleg Deripaska may have been in a position to make sure Christopher Steele’s Trump oppo research was filled with disinformation, a lot of people not only doubted that the dossier includes disinformation, but scoffed that even if it did it would matter. (See this post for more expert people talking about the possibility the dossier was seeded with disinformation.)

In his testimony to the House Intelligence Committee, Fusion GPS’ founder Glenn Simpson said that the Democrats used the Steele dossier in an effort, “to help [] manage a, you know, exceptional situation and understand what the heck was going on.” The same, we know from an endless series of Devin Nunes-led stunts to conflate the dossier with the FBI investigation, was true of the FBI.

The Democrats and the FBI used the dossier to figure out what was going on.

So to the extent information in the dossier was deliberately inaccurate — particularly in cases where it conflicted with publicly known or (given geographic location and known Steele network) knowable, more accurate information — it would lead the Democrats and the FBI to make incorrect decisions about how to prepare against or investigate the Russian attack.

And while I can’t tell whether the following examples arose from disinformation or some lack of due diligence or plain old hazards of human intelligence, all are examples where using the dossier to make decisions would have led the Democrats or the FBI to waste resources or act with less urgency than they should have.


How accomplished were the Russians at hacking

Steele claim, July 26, 2016:

In terms of the success of Russian offensive cyber operations to date, a senior government figure reported that there had been only limited success in penetrating the “first tier” foreign targets. The comprised western (especially G7 and NATO) governments, security and intelligence services and central banks, and the IFIs. To compensate for this shortfall, massive effort had been invested, with much greater success, in attacking the “secondary targets”, particularly western private banks and the governments of smaller states allied to the West. S/he mentioned Latvia in this regard.


Kaspersky Labs claim, April 21, 2015 (including links to older reporting attributing the attacks to Russia):

CozyDuke (aka CozyBear, CozyCar or “Office Monkeys”) is a precise attacker. Kaspersky Lab has observed signs of attacks against government organizations and commercial entities in the US, Germany, South Korea and Uzbekistan. In 2014, targets included the White House and the US Department of State, as believed.

The operation presents several interesting aspects

  • extremely sensitive high profile victims and targets
  • evolving crypto and anti-detection capabilities

[snip]

Recent CozyDuke APT activity attracted significant attention in the news:

Sources: State Dept. hack the ‘worst ever’, CNN News, March 2015
White House computer network ‘hacked’, BBC News, October 2014
Three Months Later, State Department Hasn’t Rooted Out Hackers, Wall Street Journal, February 2015
State Department shuts down its e-mail system amid concerns about hacking, Washington Post, November 2014

Note: FBI probably intended the DNC to consult to this report, describing “7 years of Russian cyberespionage,” when they first warned the DNC they were being hacked in September 2015, which would have also alerted the Democrats to the sophistication of Russian hacking.

Actions Democrats might have taken

The incorrect information, neglecting to mention known attacks on Germany’s parliament and US national security agencies, might have led Democrats to dismiss the persistence of the hackers targeting them.


What were Russians doing with social media and how social media was driving polarization

Steele claim, December 13, 2016:

[redacted] reported that over the period March-September 2016 a company called [Webzilla] and its affiliates had been using botnets and porn traffic to transmit viruses, plant bugs, steal data and conduct “altering operations” against the Democratic Party leadership.


Adrian Chen, The Agency, June 2, 2015,:

It has gone by a few names, but I will refer to it by its best known: the Internet Research Agency. The agency had become known for employing hundreds of Russians to post pro-Kremlin propaganda online under fake identities, including on Twitter, in order to create the illusion of a massive army of supporters; it has often been called a “troll farm.” The more I investigated this group, the more links I discovered between it and the hoaxes. In April, I went to St. Petersburg to learn more about the agency and its brand of information warfare, which it has aggressively deployed against political opponents at home, Russia’s perceived enemies abroad and, more recently, me.

Update: at 35:00 in this December 9, 2015 podcast, Chen describes the Russian trolls “only tweeting about Donald Trump and stuff … maybe it’s some kind of opaque strategy of like electing Donald Trump to undermine the US or something, you know like false flag kind of thing.” (h/t JL)

BuzzFeed, Hyperpartisan Facebook Pages Are Publishing False And Misleading Information At An Alarming Rate, October 20, 2016 (and virtually everything else Craig Silverman wrote in the months leading up to it):

Hyperpartisan political Facebook pages and websites are consistently feeding their millions of followers false or misleading information, according to an analysis by BuzzFeed News. The review of more than 1,000 posts from six large hyperpartisan Facebook pages selected from the right and from the left also found that the least accurate pages generated some of the highest numbers of shares, reactions, and comments on Facebook — far more than the three large mainstream political news pages analyzed for comparison.

[snip]

The rapid growth of these pages combines with BuzzFeed News’ findings to suggest a troubling conclusion: The best way to attract and grow an audience for political content on the world’s biggest social network is to eschew factual reporting and instead play to partisan biases using false or misleading information that simply tells people what they want to hear. This approach has precursors in partisan print and television media, but has gained a new scale of distribution on Facebook. And while it isn’t a solely American phenomenon — the British Labour party found powerful support from a similar voice — these pages are central to understanding a profoundly polarized moment in American life.

Actions Democrats might have taken

It’s hard to believe this December report is anything but pure disinformation. And, particularly given that it came just weeks before Manafort counseled Trump to discredit the investigation by discrediting the dossier, it’s easy to imagine that the point of this was to provide easily falsifiable information, seed politically and financially expensive lawfare, and protect Putin crony Yevgeniy Prigozhin’s contribution to the election operation.

In any case, intelligence about the publicly known trolling efforts earlier in campaign season might have led Hillary to pressure her close ally, Facebook COO Sheryl Sandberg, to take the threat more seriously — or at least to pay more attention to Facebook’s optimization program, both in her own and her opponent’s campaign. But a late report blaming a completely different company has only helped to discredit efforts to collect information on Trump’s ties to Russia.


What kompromat did Russia plan to leak on Hillary

Steele claim, June 20, 2016:

Asked about the Kremlin’s reported intelligence feed to TRUMP over recent years and rumours about a Russian dossier of “kompromat” on Hillary CLINTON (being circulated), Source B confirmed the file’s existence. S/he confided in a trusted compatriot that it had been collated by Department K of the FSB for many years, dating back to her husband Bill’s presidency, and compromised mainly eavesdropped conversations of various sorts rather than details/evidence of unorthodox or embarrassing behavior. Some of the conversations were from bugged comments CLINTON had made on her various trips to Russia and focused on things she had said which contradicted her current position on various issues. Others were probably from phone intercepts.


Josef Mifsud to George Papadopoulos, April 26, 2016, over breakfast in a London hotel: the Russians “had emails of Clinton … they have dirt on her … they have thousands of emails.”

Papadopoulos, May 10, 2016, over a drink to Australia’s Ambassador to the UK, in Kensington’s Wine Room, 2.5 miles from Orbis’ office:

During that conversation he (Papadopoulos) mentioned the Russians might use material that they have on Hillary Clinton in the lead-up to the election, which may be damaging.

[snip]

He didn’t say dirt, he said material that could be damaging to her. No, he said it would be damaging. He didn’t say what it was.

Actions Democrats might have taken

At least some of the very first documents Guccifer 2.0 released starting in June were obtained via the Podesta hack. Had the Democrats been worried about “thousands of emails” as kompromat rather than “bugged comments [and] phone intercepts … collated by Department K of the FSB for many years, dating back to her husband Bill’s presidency,” the Democrats might have prepared for an assault more directly targeting Hillary. At the very least, the Guccifer 2.0 releases would have alerted the Democrats that Crowdstrike’s advice — that usually such emails weren’t publicly released — didn’t apply in this case.


Who managed outreach to Russia

Steele claim, undated (after July 22, 2016):

This was managed on the TRUMP side by the Republican candidate’s campaign manager, Paul MANAFORT, who was using foreign policy advisor, Carter PAGE, and others as intermediaries.


Fusion GPS client Natalia Veselnitskaya, before June 9, 2016 Prevezon hearing attended by Simpson:

Around the end of May 2016, during a conversation with a good acquaintance of mine, being my client, Aras Agalarov on a topic that was not related to the United States, I shared the story faced when defending another client, Denis Katsyv, about how terribly misled the US Congress had been by the tax defrauder William Browder, convicted in Russia, who, through his lobbyists and his close-minded rank-and-file Congress staffers, succeeded in adopting the Act in the name of a person whom Browder practically hardly ever knew. I considered it my duty to inform the Congress people about it and asked Mr. Agalarov if there was any possibility of helping me or my colleagues to do this. I do not remember who of us was struck by the idea that maybe his son could talk about this with Donald Trump, Jr., who, although a businessman, was sure to have some acquaintances among Congress people.

[snip]

But upon arrival in New York in the evening of June 8, 2016, in my e-mail box I found a letter from a certain Goldstone, who notified me of the time and place of the meeting with Donald Trump, Jr. In this correspondance Aras Agalarov’s colleague, Irakli Kaveladze, who had been living in the United States for a long time and to whom I left my mail for contacts, was mentioned in the copy.

Veselnitskaya to Rob Goldstone, June 9, 9:24AM, requesting the inclusion of another Fusion client:

I am writing to ask you to pass by Mt. Trump my request to include our trusted associate and lobbyist Mr. Rinat Akhmetshin, who is working to advance these issues with several congressmen.

Paul Manafort to deputy of likely Steele contact Oleg Deripaska, Konstantin Kilimnik, July 7, 2016, of Deripaska:

If he needs private briefings we can accommodate.

Actions Democrats might have taken

On this point, the dossier proved absolutely correct. Manafort was managing the conspiracy with the Russians, at least until he was fired and his hand-picked replacement Steve Bannon took over. But the dossier’s focus on Carter Page — who was part of Russia’s outreach but a marginal figure — served to distract from the far more central figures that Fusion and its contractor Steele had no business missing: Fusion’s clients Natalia Veselnitskaya and Rinat Akhmetshin, and through them the President’s son and son-in-law, along with Manafort. And Steele contact Oleg Deripaska’s deputy, Konstantin Kilimnik.

Whether intentionally or not, the Page focus in the dossier distracted from the more central players, the ones who interacted directly with the candidate, the ones being run by Steele contact Deripaska.


Whether both sides were comfortable with ongoing operations

Steele claim, July 30, 2016, based off “late July” reporting:

The émigré said there was a high level of anxiety within the TRUMP team as a result of various accusations levelled agains them and indications from the Kremlin that President PUTIN and others in the leadership thought things had gone too far and risked spiralling out of control.

Continuing on this theme, the émigré associate of TRUMP opined that the Kremlin wanted the situation to calm but for “plausible deniability” to be maintained concerning its (extensive) pro-TRUMP and anti-CLINTON operations. S/he therefore judged that it was unlikely these would be ratcheted up, at least for the time being.


July 27, 2016, Donald Trump:

Russia, if you’re listening, I hope you’re able to find the 30,000 emails that are missing. I think you will probably be rewarded mightily by our press.

July 27, 2016:

For example, on or about July 27, 2016, the Conspirators attempted after hours to spearphish for the first time email accounts at a domain hosted by a third-party provider and used by Clinton’s personal office. At or around the same time, they also targeted seventy-six email addresses at the domain for the Clinton Campaign.

[Note: I’ve spoken with someone involved in the effort to repel this attack, and he described it as a new “wave” of attacks launched seemingly in response to Trump’s comments.]

Actions Democrats might have taken

Because the targeting here was Hillary herself and not the feckless DNC, the Democrats weren’t going to be lulled by this claim that Trump and Russia were laying low. But if the report were disinformation, it may have been intended to disavow the seemingly clear tie between Trump’s requests and GRU’s response.


Who covered up Manafort’s scandals/What Cohen really was doing with Russia

Steele claim, October 19, 2016:

According to the Kremlin insider, [Michael] COHEN now was heavily engaged in a cover up and damage limitation operation in the attempt to prevent the full details of TRUMP’s relationship with Russian being exposed. In pursuit of this aim, COHEN had met secretly with several Russian Presidential Administration (PA) Legal Department officials in an EU country in August 2016. The immediate issues had been to contain further scandals involving MANNAFORT’s [sic] commercial and political role in Russia/Ukraine and to limit the damage arising from exposure of former TRUMP foreign policy advisor, Carter PAGE’s secret meetings with Russian leadership figures in Moscow the previous month.


Starting on August 15, Rick Gates helps Paul Manafort hide their Ukranian consulting by lying to the press and DOJ’s FARA Unit; Deripaska deputy Konstantin Kilimnik would remain closely involved through the next year:

For example, on August 15, 2016, a member of the press e-mailed Manafort and copied a spokesperson for the Trump campaign to solicit a comment for a forthcoming story describing his lobbying. Gates corresponded with Manafort about this outreach and explained that he “provided” the journalist “information on background and then agreed that we would provide these answers to his questions on record.” He then proposed a series of answers to the journalist’s questions and asked Manafort to “review the below and let me know if anything else is needed,” to which Manafort replied, in part, “These answers look fine.” Gates sent a materially identical message to one of the principals of Company B approximately an hour later and “per our conversation.” The proposed answers Gates conveyed to Manafort, the press, and Company B are those excerpted in the indictment in paragraph 26.

An article by this member of the press associating Manafort with undisclosed lobbying on behalf of Ukraine was published shortly after Gates circulated the Manafort-approved false narrative to Company B and the member of the press. Manafort, Gates, and an associate of Manafort’s corresponded about how to respond to this article, including the publication of an article to “punch back” that contended that Manafort had in fact pushed President Yanukovych to join the European Union. Gates responded to the punch-back article that “[w]e need to get this out to as many places as possible. I will see if I can get it to some people,” and Manafort thanked the author by writing “I love you! Thank you.” Manafort resigned his position as chairman of the Trump campaign within days of the press article disclosing his lobbying for Ukraine.

Manafort’s role with the Trump campaign is thus relevant to his motive for undertaking the charged scheme to conceal his lobbying activities on behalf of Ukraine. Here, it would be difficult for the jury to understand why Manafort and Gates began crafting and disseminating a false story regarding their Ukrainian lobbying work nearly two years after that work ceased—but before any inquiry by the FARA Unit—without being made aware of the reason why public scrutiny of Manafort’s work intensified in mid-2016. Nor would Manafort’s motives for continuing to convey that false information to the FARA Unit make sense: having disseminated a false narrative to the press while his position on the Trump campaign was in peril, Manafort either had to admit these falsehoods publicly or continue telling the lie.

Oleg Deripaska deputy Konstantin Kilimnik asks Alex van der Zwaan to call Rick Gates to cover up Yulia Tymoshenko cover-up, September 12, 2016

When confronted with an email dated September 12, 2016, sent by Person A to van der Zwaan, the defendant again lied. The email was sent to the defendant’s email address at his law firm, though the Special Counsel’s Office had obtained the email from another source. The email said, in Russian, that Person A “would like to exchange a few words via WhatsApp or Telegram.” van der Zwaan lied and said he had no idea why that email had not been produced to the government, and further lied when he stated that he had not communicated with Person A in response to the email.

[snip]

Further, van der Zwaan in fact had a series of calls with Gates and Person A—as well as the lead partner on the matter—in September and October 2016. The conversations concerned potential criminal charges in Ukraine about the Tymoshenko report and how the firm was compensated for its work.

Actions Democrats might have taken

I’m particularly interested in how Deripaska contact Christopher Steele told a story that put Michael Cohen at the center of Russia pushback rather than Manafort himself, Rick Gates, and Deripaska deputy Konstantin Kilimnik, because if this is disinformation, it served multiple purposes (not all of which I include here):

  • Distracted from Gates’ actions (and his ongoing ties with Kilimnik) while he remained a central figure on the Trump campaign and transition (effectively, ensuring that a high ranking campaign official with close ties to Deripaska’s deputy remained in place)
  • Distracted from Manafort’s reported ongoing back channel involvement in the campaign
  • Focused attention on Cohen in August, rather than his actions from January to June 2016 to negotiate a Trump Tower deal, something that probably had a more central role in the quid pro quo behind the election operation
  • Shifted focus on ongoing discussions about a Trump Tower deal between reported Steele source Sergei Millian and Russian go-between George Papadopoulos
  • Focused fall attention on Cohen on a Russian cover-up rather than on the sex worker hush payments he facilitated

Again, I don’t know that this line of Steele’s reporting is disinformation (though no evidence Cohen went to Prague has been substantiated). But if it was, it would have been a masterful distraction from a number of key threads that might have been lethal to Trump in the general election if they had become a focus.

In each of these cases, the disinformation would not so much disavow the existence of the election campaign. Indeed, in key respects — the centrality of Paul Manafort and Russia’s desire to end sanctions (though even there, the Steele dossier focused on the Ukrainian sanctions rather than the Magnitsky ones) — the dossier reported what actually happened, though both items were obvious. Rather, the disinformation would include grains of truth but incorrect details that would distract investigators and misinform Democratic decision-makers.

And all that’s before you get into how perfectly the dossier has served to discredit a very real, well-founded counterintelligence investigation and entangled Democrats and the press in expensive lawfare.

GRU’s Alice Donovan Persona Warned of a WannaCry-Like Event a Year before It Happened

As I disclosed last month, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

In this post, I suggested that The Shadow Brokers persona served as a stick to the carrots Vladimir Putin dangled in front of Donald Trump. When Donald Trump took an action — bombing Syria to punish Bashar al-Assad — that violated what I believe to be one of the key payoffs in the election quid pro quo, Shadow Brokers first bitched mightily, then released a bunch of powerful NSA tools that would soon lead to the WannaCry global malware attack.

It turns out GRU warned of that kind of attack a year before it happened.

One of the tidbits dropped into a very tidbit-filled GRU indictment is that GRU ran the Alice Donovan propaganda persona.

On or about June 8, 2016, and at approximately the same time that the dcleaks.com website was launched, the Conspirators created a DCLeaks Facebook page using a preexisting social media account under the fictitious name “Alice Donovan.”

That tidbit has led to some follow-up on the Donovan figure, including this typically great DFRLab piece arguing that Russia had two parallel streams of troll campaigns, the Internet Research Agency one focused on the election, and the GRU one focused on foreign policy.

Donovan was first exposed in December of last year after WaPo reported on and CounterPunch did a review of “her” work after then WaPo reporter Adam Entous contacted CP after learning the FBI believed “she” had some tie to Russia.

We received a call on Thursday morning, November 30, from Adam Entous, a national security reporter at the Washington Post. Entous said that he had a weird question to ask about one of our contributors. What did we know about Alice Donovan? It was indeed an odd question. The name was only faintly familiar. Entous said that he was asking because he’d been leaked an FBI document alleging that “Alice Donovan” was a fictitious identity with some relationship to Russia. He described the FBI document as stating that “Donovan” began pitching stories to websites in early 2016. The document cites an article titled “Cyberwarfare: Challenge of Tomorrow.”

As both pieces emphasize, the first article that Donovan pitched — and “she” pitched it to multiple outlets — pertained to cyberattacks, specifically to ransomware attacks on hospitals.

The article was first published in Veterans Today on April 26, 2016. That’s the same day that Joseph Mifsud first told George Papadopoulos Russia had emails — emails hacked by Donovan’s operators — they planned to leak to help defeat Hillary Clinton.

CounterPunch published the cybersecurity article on April 29. That’s the day the DNC first figured out that GRU (and FSB’s APT 29) had hacked them.

Those dates may well be coincidences (though they make it clear the Donovan persona paralleled the hack-and-leak campaign). I’m less sure about the third publication of the article, in Mint Press, on August 17, 2016, just four days after Shadow Brokers went live. So just days after Shadow Brokers had called out, “!!! Attention government sponsors of cyber warfare and those who profit from it !!!” an article was republished with the penultimate paragraph accusing the US of planning to shut down Iran’s power grid.

Moreover, the U.S. has been designing crippling cyber attack plans targeting the civilian sector. In case its nuclear negotiations with Iran failed, the U.S. was prepared to shut down the country’s power grid and communications networks.

The basis for that accusation was actually this article, but “Donovan” took out the reference (bolded below) to GRU’s attack on Ukraine’s power grid in the original.

Today such ransomware attacks are largely the work of criminal actors looking for a quick payoff, but the underlying techniques are already part of military planning for state-sponsored cyberwarfare. Russia showcased the civilian targeting of modern hybrid operations in its attack on Ukraine’s power grid, which included software designed to physically destroy computer equipment. Even the US has been designing crippling cyberattack plans targeting the civilian sector. In case its nuclear negotiations with Iran failed, the US was prepared to shut down the country’s power grid and communications networks.

Imagine a future “first strike” cyberattack in which a nation burrowed its way deeply into the industrial and commercial networks of another state and deployed ransomware across its entire private sector, flipping a single switch to hold the entire country for ransom. Such a nightmare scenario is unfortunately far closer than anyone might think. [my emphasis]

And “Donovan” adds in this sentence (from elsewhere in the Forbes article).

Government itself, including its most senior intelligence and national security officials are no better off when a single phishing email can redirect their home phone service and personal email accounts.

When this article was first published, the memory was still fresh of the Crackas with Attitude hack, where self-described teenagers managed to hack John Brennan and James Clapper and forward the latter’s communications (among the men serving prison sentences for this attack are two adult Americans, Andrew Otto Boggs and Justin Liverman).

Most of the rest of the article uses the threat of malware attacks on hospitals to illustrate the vulnerability of civilian infrastructure to cyberattack. It cites a Kaspersky proof of concept (recall that Shadow Brokers included a long play with Kaspersky). It cites an FBI agent attributing much of this hacking to Eastern Europe.

Stangl said the hackers, most of them from Eastern Europe, have increasingly targeted businesses, which are often able to pay more than individuals to unlock data. The hackers “scan the Internet for companies that post their contact information,” then send them email phishing attacks. Unsuspecting employees, Stangl said, are asked to click on what seem to be innocuous links or attachments — perhaps something as simple as a .PDF purporting to be a customer complaint — and before they know it, their computers are infected.

And the “Donovan” article explains at length — stealing from this article — why hospitals are especially vulnerable to malware attacks.

Such attacks may all sound like nightmare scenarios, but the experts say they’re becoming almost routine. And hospitals have not made cybersecurity a priority in their budgets. On average hospitals spent about 2 percent on IT, and security might be 10 percent of that. Compare that percentage to the security spending by financial institutions: for example, Fidelity spends 35 percent of its budget on IT.

Moreover, medical facilities are vulnerable to these attacks in part because they don’t properly train their employees on how to avoid being hacked, according to Sinan Eren, who has worked in cybersecurity for government and health-care organizations for two decades.

“It’s not like the financial-services industry, where they train employees how to spot suspicious emails,” said Eren, general manager at Avast Mobile Enterprise. Also, many hospital computer systems are outdated, bulky and in dire need of upgrades or newer software, he said. But such institutions often don’t have — or don’t want to spend — the money to make sweeping changes.

While it’s still unclear which computer WannaCry first infected in May 2017, Britain’s National Health Service was easily the most famous victim, with about a third of the system being shut down. Not long after WannaCry, NotPetya similarly spanned the globe in wiperware designed to appear as ransomware (though the latter’s use of NSA tools was mostly just show). While the US and UK have publicly attributed WannaCry to North Korea (I’m not convinced), NotPetya was pretty clearly done by entities close to GRU.

And a year before those global pseudo-ransomware worms were launched, repeated just days after Shadow Brokers started releasing NSA’s own tools, GRU stole language to warn of “a nation burrow[ing] its way deeply into the industrial and commercial networks of another state and deploy[ing] ransomware across its entire private sector, flipping a single switch to hold the entire country for ransom. Such a nightmare scenario is unfortunately far closer than anyone might think.”

(h/t TC for the heads up on this file and a number of the insights in this piece)

Update: MB noted that the “added” sentence actually also comes from the original Forbes article (it links to an earlier column that notes the Crackas tie explicitly).

Lawfare’s Theory of L’Affaire Russe Misses the Kompromat for the Pee Glee

As I disclosed last month, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

Lawfare has updated a piece they did in May 2017, laying out what they believe are the seven theories of “L’Affaire Russe,” of which just five have withstood the test of time. It’s a worthwhile backbone for discussion among people trying to sort through the evidence.

Except I believe they get one thing badly wrong. Close to the end of the long post, they argue we’ve seen no evidence of a kompromat file — which they imagine might be the pee tape described in the probably disinformation-filled Steele dossier.

On the other hand, the hard evidence to support “Theory of the Case #6: Kompromat” has not materially changed in the last 15 months, though no evidence has emerged that undermines the theory either. No direct evidence has emerged that there exists a Russian kompromat file—let alone a pee tape—involving Trump, despite a huge amount of speculation on the subject. What has changed is that Trump’s behavior at the Helsinki summit suddenly moved the possibility of kompromat into the realm of respectable discourse.

Nevertheless, along the way, they point to evidence of direct ties between Trump’s behavior and Russian response.

The candidate, after all, did make numerous positive statements about Russian relations and Vladimir Putin himself—though how much of this has anything to do with these meetings is unclear. At a minimum, it is no small thing for the Russian state to have gotten a Republican nominee for president willing to reverse decades of Republican Russia-skepticism and commitment to NATO.

[snip]

What’s more, two days before the meeting, Trump promised a crowd that he would soon be giving a “major speech” on “all of the things that have taken place with the Clintons”—but after the meeting turned out to be a dud, the speech did not take place. And notably, the hacking indictment shows that the GRU made its first effort to break into Hillary Clinton’s personal email server and the email accounts of Clinton campaign staff on the same day—July 27, 2016—that Trump declared at a campaign stop, “Russia, if you’re listening, I hope you’re able to find the 30,000 emails that are missing” from Clinton’s email account.

For some reason, they describe Don Jr’s reported disappointment about the June 9 meeting, but not Ike Kaveladze’s testimony that his initial report to Aras Agalarov (the report made in front of witnesses) was positive. Based on Don Jr’s heavily massaged (and, public evidence makes clear, perjurious) testimony, they claim that the Trump Tower meeting was a dud. Then they go on to note that the Russians at the June 9 meeting asked for Magnitsky sanction relief, rather than offering dirt.

In June 2016, Donald Trump, Jr., Jared Kushner and Paul Manafort met with a group of Russian visitors in Trump Tower, including attorney Natalia Veselnitskaya. In the now-infamous email exchange that preceded the meeting, Trump, Jr. wrote, “I love it, especially later in the summer” when informed that the meeting would provide him with documents that “would incriminate Hillary and her dealings with Russia and would be very useful to your father.” Trump, Jr. and other representatives of the Trump campaign were reportedly disappointed when Veselnitskaya failed to provide the promised “dirt” on Clinton and discussed the issue of Russian adoptions under the Magnitsky Act instead.

[snip]

While there is evidence—most notably with respect to the Trump Tower meeting—of Trump campaign willingness to work with the Russians, there’s not a lot of evidence that any kind of deal was ever struck.

To sustain their case that “there’s not a lot of evidence that any kind of deal was ever struck,” they neglect a number of other points. They don’t mention, for example, that a week after the Trump Tower meeting, the Russians released the first of the stolen files. They don’t mention that (contrary to Don Jr’s massaged testimony and most public claims since) there was a significant effort in November 2016 to follow-up on that June 9 meeting. They don’t mention that that effort was stalled because of the difficulty of communicating given the scrutiny of being President-elect. They don’t mention that the same day the Agalarov people discussed the difficulty of communicating with the President-elect, Jared Kushner met the Russian Ambassador in Don Jr’s office (not in transition space) and raised the possibility of a back channel, a meeting which led to Jared’s meeting with the head of a sanctioned bank, which in turn led to a back channel meeting in the Seychelles with more sanctioned financiers. And inexplicably, they make no mention of the December 29, 2016 calls, during which — almost certainly on direct orders from Trump relayed by KT McFarland — Mike Flynn got the Russians to stall any response to Obama’s sanctions, a discussion Mike Flynn would later lie about to the FBI, in spite of the fact that at least six transition officials knew what he really said.

Why does Lawfare ignore the basis for the plea deal that turned Trump’s one-time National Security Advisor into state’s evidence, when laying out the evidence in this investigation?

All of which is to say that even with all the things Lawfare ignores in their summary, they nevertheless lay out the evidence that Trump and the Russians were engaged in a call-and-response, a call-and-response that appears in the Papadopoulos plea and (as Lawfare notes) the GRU indictment, one that ultimately did deal dirt and got at least efforts to undermine US sanctions (to say nothing of the Syria effort that Trump was implementing less than 14 hours after polls closed, an effort that has been a key part of both Jared Kushner and Mike Flynn’s claims about the Russian interactions).

At each stage of this romance with Russia, Russia got a Trump flunkie (first, Papadopoulos) or Trump himself to publicly engage in the call-and-response. All of that led up to the point where, on July 16, 2018, after Rod Rosenstein loaded Trump up with a carefully crafted indictment showing Putin that Mueller knew certain things that Trump wouldn’t fully understand, Trump came out of a meeting with Putin looking like he had been thoroughly owned and stood before the entire world and spoke from Putin’s script in defiance of what the US intelligence community has said.

People are looking in the entirely wrong place for the kompromat that Putin has on Trump, and missing all the evidence of it right in front of their faces.

Vladimir Putin obtained receipts at each stage of this romance of Trump’s willing engagement in a conspiracy with Russians for help getting elected. Putin knows what each of those receipts mean. Mueller has provided hints, most obviously in that GRU indictment, that he knows what some of them are.

For example, on or about July 27, 2016, the Conspirators  attempted after hours to spearphish for the first time email accounts at a domain hosted by a third-party provider and used by Clinton’s personal office. At or around the same time, they also targeted seventy-six email addresses at the domain for the Clinton Campaign.

But Mueller’s not telling whether he has obtained the actual receipts.

And that’s the kompromat. Trump knows that if Mueller can present those receipts, he’s sunk, unless he so discredits the Mueller investigation before that time as to convince voters not to give Democrats a majority in Congress, and convince Congress not to oust him as the sell-out to the country those receipts show him to be. He also knows that, on the off-chance Mueller hasn’t figured this all out yet, Putin can at any time make those receipts plain. Therein lies Trump’s uncertainty: It’s not that he has any doubt what Putin has on him. It’s that he’s not sure which path before him — placating Putin, even if it provides more evidence he’s paying off his campaign debt, or trying to end the Mueller inquiry before repaying that campaign debt, at the risk of Putin losing patience with him — holds more risk.

Trump knows he’s screwed. He’s just not sure whether Putin or Mueller presents the bigger threat.

How to Charge Americans in Conspiracies with Russian Spies?

As I laid out a few weeks ago, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

In general, Jack Goldsmith and I have long agreed about the problems with charging nation-state spies in the United States. So I read with great interest his post laying out “Uncomfortable Questions in the Wake of Russia Indictment 2.0 and Trump’s Press Conference With Putin.” Among other larger normative points, Goldsmith asks two questions. First, does indicting 12 GRU officers in the US expose our own nation-state hackers to be criminally prosecuted in other countries?

This is not a claim about the relative moral merits of the two countries’ cyber intrusions; it is simply a claim that each side unequivocally breaks the laws of the other in its cyber-espionage activities.

How will the United States respond when Russia and China and Iran start naming and indicting U.S. officials?  Maybe the United States thinks its concealment techniques are so good that the type of detailed attribution it made against the Russians is infeasible.  (The Shadow Brokers revealed the identities of specific NSA operators, so even if the National Security Agency is great at concealment as a matter of tradecraft that is no protection against an insider threat.)  Maybe Russia and China and Iran won’t bother indicting U.S. officials unless and until the indictments actually materialize into a trial, which they likely never will.  But what is the answer in principle?  And what is the U.S. policy (if any) that is being communicated to military and civilian operators who face this threat?  What is the U.S. government response to former NSA official Jake Williams, who worked in Tailored Access Operations and who presumably spoke for many others at NSA when he said that “charging military/gov hackers is dumb and WILL eventually hurt the US”?

And, how would any focus on WikiLeaks expose journalists in the United States to risks of prosecution themselves.

There is a lot of anger against WikiLeaks and a lot of support for indicting Julian Assange and others related to WikiLeaks for their part in publishing the information stolen by the Russians.  If Mueller goes in this direction, he will need to be very careful not to indict Assange for something U.S. journalists do every day.  U.S. newspapers publish information stolen via digital means all the time.  They also openly solicit such information through SecureDrop portals.  Some will say that Assange and others at WikiLeaks can be prosecuted without threatening “real journalists” by charging a conspiracy to steal and share stolen information. I am not at all sure such an indictment wouldn’t apply to many American journalists who actively aid leakers of classified information.

I hope to come back to the second point. As a journalist who had a working relationship with someone she came to believe had a role in the attack, I have thought about and discussed the topic with most, if not all, the lawyers I consulted on my way to sitting down with the FBI.

For the moment, though, I want to focus on Goldsmith’s first point, one I’ve made in the past repeatedly. If we start indicting uniformed military intelligence officers — or even contractors, like the trolls at Internet Research Agency might be deemed — do we put the freedom of movement of people like Jake Williams at risk? Normally, I’d absolutely agree with Goldsmith and Williams.

But as someone who has already written extensively about the ConFraudUs backbone that Robert Mueller has built into his cases, I want to argue this is an exception.

As I’ve noted previously, while Rod Rosenstein emphasized that the Internet Research Agency indictment included no allegations that Americans knowingly conspired with Russians, it nevertheless did describe three Americans whose activities in response to being contacted by Russian trolls remain inconclusive.

Rod Rosenstein was quite clear: “There is no allegation in the indictment that any American was a knowing participant in the alleged unlawful activity.” That said, there are three (presumed) Americans who, both the indictment and subsequent reporting make clear, are treated differently in the indictment than all the other Americans cited as innocent people duped by Russians: Campaign Official 1, Campaign Official 2, and Campaign Official 3. We know, from CNN’s coverage of Harry Miller’s role in building a cage to be used in a fake “jailed Hillary” stunt, that at least some other people described in the indictment were interviewed — in his case, for six hours! — by the FBI. But no one else is named using the convention to indicate those not indicted but perhaps more involved in the operation. Furthermore, the indictment doesn’t actually describe what action (if any) these three Trump campaign officials took after being contacted by trolls emailing under false names.

On approximately the same day, Defendants and their co-conspirators used the email address of a false U.S. persona, [email protected], to send an email to Campaign Official 1 at that donaldtrump.com email account, which read in part:

Hello [Campaign Official 1], [w]e are organizing a state-wide event in Florida on August, 20 to support Mr. Trump. Let us introduce ourselves first. “Being Patriotic” is a grassroots conservative online movement trying to unite people offline. . . . [W]e gained a huge lot of followers and decided to somehow help Mr. Trump get elected. You know, simple yelling on the Internet is not enough. There should be real action. We organized rallies in New York before. Now we’re focusing on purple states such as Florida.

The email also identified thirteen “confirmed locations” in Florida for the rallies and requested the campaign provide “assistance in each location.”

[snip]

Defendants and their co-conspirators used the false U.S. persona [email protected] account to send an email to Campaign Official 2 at that donaldtrump.com email account.

[snip]

On or about August 20, 2016, Defendants and their co-conspirators used the “Matt Skiber” Facebook account to contact Campaign Official 3.

Again, the DOJ convention of naming makes it clear these people have not been charged with anything. But we know from other Mueller indictments that those specifically named (which include the slew of Trump campaign officials named in the George Papadopoulos plea, KT McFarland and Jared Kushner in the Flynn plea, Kilimnik in the Van der Zwaan plea, and the various companies and foreign leaders that did Manafort’s bidding, including the Podesta Group and Mercury Public Affairs in his indictment) may be the next step in the investigation.

In the GRU indictment, non US person WikiLeaks is given the equivalent treatment.

On or about June 22, 2016, Organization I sent a private message to Guccifer 2.0 to “[s]end any new material [stolen from the DNC] here for us to review and it will have a much higher impact than what you are doing.” On or about July 6, 2016, Organization 1 added, “if you have anything hillary related we want it in the next tweo [sic] days prefable [sic] because the DNC [DemocraticNationalConvention] is approaching and she Will solidify bernie supporters behind her after.” The Conspirators responded,“0k . . . i see.” Organization I explained,“we think trump has only a 25% chance of winning against hillary . . . so conflict between bernie and hillary is interesting.”

But the activities of other American citizens — most notably Roger Stone and Donald Trump — are discussed obliquely, even if they’re not referred to using the standard of someone still under investigation. Here’s the Roger Stone passage.

On or aboutAugust 15,2016, the Conspirators,posing as Guccifer 2.0,wrote to a person who was in regular contact with senior members of the presidential campaign of Donald J. Trump, “thank u for writing back. . . do u find anyt[h]ing interesting in the docs i posted?” On or about August 17, 2016, the Conspirators added, “please tell me if i can help u anyhow . . . it would be a great pleasureto me.” On or about September 9, 2016,the Conspirators, again posing as Guccifer 2.0, referred to a stolen DCCC document posted online and asked the person, “what do u think of the info on the turnout model for the democrats entire presidential campaign.” The person responded,“[p]retty standard.”

The Trump one, of course, pertains to the response GRU hackers appear to have made when he asked for Russia to find Hillary’s emails on July 27.

For example, on or about July 27, 2016, the Conspirators attempted after hours to spearphish for the first time email accounts at a domain hosted by a third‑party provider and used by Clinton’s personal office. At or around the same time, they also targeted seventy‐six email addresses at the domain for the Clinton Campaign.

Finally, there is yesterday’s Mariia Butina complaint, which charges her as an unregistered Russian spy and describes Aleksandr Torshin as her boss, but which also describes the extensive and seemingly willful cooperation with Paul Erickson and another American, as well as with the RNC and NRA. Here’s one of the Americans, for example, telling Butina that her Russian bosses should take the advice he had given her about which Americans she needed to meet.

If you were to sit down with your special friends and make a list of ALL the most important contacts you could find in America for a time when the political situation between the U.S. and Russia will change, you could NOT do better than the list that I just emailed you. NO one — certainly not the “official” Russian Federation public relations representative in New York — could build a better list.

[snip]

All that you friends need to know is that meetings with the names on MY list would not be possible without the unknown names in your “business card” notebook. Keep them focused on who you are NOW able to meet, NOT the people you have ALREADY met.

Particularly as someone whose communications (including, but not limited to, that text) stand a decent chance of being quoted in an indictment in the foreseeable future, let me be very clear: none of these people have been accused of any wrong-doing.

But they do suggest a universe of people who have attracted investigative scrutiny, both by Mueller and by NSD, as willing co-conspirators with Russian spies.

Granted, there are three different kinds of Russian spies included in these three documents:

  • Uniformed military intelligence officers working from Moscow
  • Civilian employees who might be considered intelligence contractors working from St. Petersburg (though with three reconnaissance trips to the US included)
  • Butina and Torshin, both of whom probably committed visa fraud to engage as unregistered spies in the US

We have a specific crime for the latter (and, probably, the reconnaissance trips to the US by IRA employees), and if any of the US persons and entities in Butina’s indictment are deemed to have willingly joined her conspiracy, they might easily be charged as well. Eventually, I’m certain, Mueller will move to start naming Americans (besides Paul Manafort and Rick Gates) in conspiracy indictments, including ones involving Russian spies operating from Russia (like Konstantin Kilimnik). It seems necessary to include the Russians in some charging documents, because otherwise you’ll never be able to lay out the willful participation of everyone, Russian and American, in the charging documents naming the Americans.

So while I generally agree with Goldsmith and Williams, this case, where we’re clearly discussing a conspiracy between Russian spies — operating both from the US and from Russia (and other countries), wearing uniforms and civilian clothing –and Americans, it seems important to include them in charging documents somewhere.