Posts

Spy versus Spy: The Two Alleged Agents of Foreign Powers Sitting in the Alexandria Jail, Part Two (Mariia)

In this post, I laid out the difference between two laws criminalizing foreign agents of influence, 22 USC 611 et seq. (FARA) and 18 USC 951. Paul Manafort is charged with the former; Rick Gates, Mike Flynn, and Sam Patten have also all pled guilty to FARA related crimes; Mariia Butina is accused of the latter.

I think, particularly as Mueller’s investigation begins to put real teeth in FARA (and as nation-state spying hides under new kinds of cover and funding arrangements), the border between the two crimes will become increasingly tenuous. A comparison of Butina and Manafort shows some of the ways that’s clear.

Butina’s lawyer pitches her actions as lobbying

In response to her charges, her attorney Robert Driscoll has repeatedly denied she’s an agent of Russia, not by denying she did what Aleksandr Torshin instructed her to, but by claiming that hers is just a regulatory filing case.

“This is not an espionage case, this is not a spy case, this is a regulatory filing case,” in which Butina didn’t file the correct paperwork with the Justice Department, Driscoll told Robnson in arguing why she should be freed pending trial.

“She’s not an agent of the Russian Federation,” Driscoll told reporters after the hearing.

In a bid to overturn Magistrate Deborah Robinson’s decision to deny Butina bail, Driscoll minimizes the Russian’s activities as “going to dinners among intellectuals and foreign policy wonks to discuss U.S.-Russia relations, attending two National Prayer Breakfasts, and booking hotel rooms at the Washington Hilton, if true, is anything but an ‘obvious’ danger to the public.” He argues, “the allegations do not involve spying, tradecraft, classified information, or any other hallmarks of an espionage case.” To rebut any claim of covert operation, Driscoll points to the fact that one of the actions in her indictment — a dinner hosted by her unindicted co-conspirator, George O’Neill, just after the National Prayer Breakfast — was hosted by O’Neill and written up in the press (one of two stories he cited was written by O’Neill).

She is accused of arranging dinners to promote better relations between Russia and the United States although the very dinner that is listed as a predicate act for her alleged crimes was written about in Time Magazine and the American Conservative—hardly covert activity—and, in actuality, was initiated, organized, and directed by an American citizen, not the Russian government.3

He argues that the government charged Butina with section 951 as a tactical move, to make it easier to prosecute political activity (I’m not a lawyer, but I’m virtually certain he mis-states what the materials say about exempting political activity, not least because, per other materials, section 611 can be a subset of a section 951 violation).

To distract from the frailty of its charges, the government reprises that Ms. Butina is charged under section 951 and not FARA. However, that charging decision alone contradicts the Justice Department’s own policies, and perhaps was made as an attempt to aggrandize her conduct and mischaracterize her innocent political interest as nefarious.

That is, the Department of Justice (“DOJ”) Criminal Resource Manual makes a distinction between section 951 and a FARA violation. It describes FARA under section 611 et seq. as requiring an agent of a foreign principal engaged in political activities to register. See U.S. Dep’t of Justice, United States Attorneys’ Manual 9-90.700 and 9-90.701; and see Criminal Resource Manual at 2062. It also discusses other federal statutes like section 951, which is “aimed at persons loosely called foreign agents” but specifically exempts section 951 from applying to “foreign agents engaged in political activities.” Id. In plain English, DOJ further notes among frequently asked questions that section 951 is only “aimed at foreign government controlled agents engaged in non-political activities.”5

The government’s April, 2018 search warrant sought evidence of a potential violation under FARA.

[snip]

[A]lthough such allegations are unfounded and untrue, and although the government’s searches revealed no hidden transmitters, wads of cash, counterfeit passports, and plane tickets back to Moscow, the government still decided to paper a case against Ms. Butina under section 951. This decision shows that the government desired to overcharge and inflate her conduct for tactical advantages versus act with restraint or, at a minimum, be consistent with the DOJ and National Security Division’s own publicized understanding of appropriate charges.

And Driscoll doesn’t even concede she violated FARA.

[F]or reasons only it is aware, the government has charged Ms. Butina under 18 U.S.C. § 951 rather than the Foreign Agent Registration Act (“FARA”), 22 U.S.C. § 611 et seq., which generally carries civil penalties and much less severe criminal penalties (for circumstances far more egregious than the facts alleged here). Much like a FARA case, the government does not allege that Ms. Butina undertook any independently illegal activities in the United States. The only thing that made her alleged conduct illegal, if true, is that she did not notify the Attorney General prior to undertaking it.

[snip]

At bottom, the government’s case appears to be a novel attempt to stretch 18 U.S.C. § 951 to cover the activities of a foreign national student under the theory that her communications (about non-classified public source material) with contacts in her home country made her an “agent” of that country. The serious charges against her should be viewed in that context, which makes this case distinctly different from a typical section 951, “espionage-like or clandestine behavior” case.4

The lobbying included in Butina’s alleged crimes

To some extent, Driscoll is right: the government’s description of the allegations against Butina does focus closely on activity that might fall under FARA’s political activities (though, as noted, he cites a DOJ statement that suggests sections 611 and 951 are mutually exclusive, when by my understanding sections 611 can be a part of 951).

Many of the activities Butina is alleged to have done involve things that might be classified as lobbying. In her arrest affidavit, DOJ describes how Butina, with help from Paul Erickson, identified a network of influential Americans, including the NRA, to whom she could pitch closer relations with Russia. George O’Neill helped Butina set up a series of “friendship and dialogue” dinners. A number of her activities, such a publishing an article in The National Interest, are precisely the kinds of things FARA attempts to provide transparency on. This is where Driscoll gets his claim that Butina only “arrang[ed] dinners to promote better relations between Russia and the United States.”

Butina was directed by Aleksandr Torshin

A number of the allegations would support either a FARA or 951 violation.

The affidavit makes it clear she was following the directions of Aleksandr Torshin, the Deputy Governor of Russia’s Central Bank and as such an official representative of the government.

On the night of the election, for example, she asked for orders from Torshin, “I’m going to sleep. It’s 3 am here. I am ready for further orders.” The two moved to WhatsApp out of Torshin’s concern “all our phones are being listened to.” It’s clear, too, she and Torshin were hiding the role of the Russian government behind her actions. When she sent a report on a conference to establish a dialogue with US politicians, she said it “must be presented as a private initiative, not a government undertaking.”

The government even presented proof that Butina’s actions were approved by people close to Putin himself.

On March 14, 2016, Butina wrote O’Neill that what DOJ calls a  “representative of the Russian Presidential administration” had expressed approval “for building this communication channel,” suggesting she and Torshin had direct approval from Putin. “All we needed is <<yes>> from Putin’s side,” Butina explained to O’Neill.

With one exception, Driscoll largely offers bullshit in response to the government’s evidence she operated as a Russian government agent (indeed, his recognition that Butin advertised being Torshin’s special assistant on one of her business cards confirms that she continued to work for Torshin). He includes a letter of grad school recommendation for Butina for Columbia as proof of … it’s not clear what, particularly since Torshin includes his government affiliation on the letter.

Still: Paul Manafort was operating on behalf of a foreign government while Viktor Yanukovych remained in power, yet DOJ charged him with FARA, not section 951. The bar to meet foreignness under FARA is broader than it is under section 951, but lobbying for a foreign government can be sufficient to it. Yet Butina got charged under section 951, not FARA.

Paid by an oligarch

The exception to my claim that Driscoll offers little to rebut (in court filings — his statements to the press are another issue) that Butina was directed by the Russian government is the issue of her funding, which the government notes comes from an oligarch that Butina identified to the Senate Intelligence Committee as Konstantin Nikolaev.

Her Twitter messages, chat logs, and emails refer to a known Russian businessman with deep ties to the Russian Presidential Administration. This person often travels to the United States and has also been referred to as her “funder” throughout her correspondence; he was listed in Forbes as having a real-time net worth of $1.2 billion as of 2018. Immediately prior to her first trip to the United States in late 2014, Butina engaged in a series of text messages with a different wealthy Russian businessman regarding budgets for her trip to the United States and meetings with the aforementioned “funder.”

Driscoll points to this to disclaim a tie between her and the Russian state.

[T]he Russian Federation did not pay for her travel to the United States, her tuition, her living expenses, or make any payments to her at all.

This is actually an interesting point, because while FARA requires only that a person be working as an agent of a foreign principal (which might include, for example, an oligarch), section 951 requires that the agent be working on behalf of a foreign government. Butina no doubt still qualifies, given her tie to Torshin.

But particularly when comparing Manafort and Butina, both of whom worked at the border between laundered oligarch cash and government officials, the detail is of particular interest. If Russia outsources its intelligence operations to oligarchs (the Internet Research Agency’s Yevgeniy Prigozhin is another example), will that intelligence still qualify as spying under section 951?

In any case, thus far, the allegations against Butina and Manafort are fairly similar: both were hiding the fact that their political activities were backed by, and done in the interest of, Russian or Russian-backed entities.

The evidence for covert action

One area where Butina may go further than Manafort (at least for his pre-election work) is in the means by which she was trying to hide her work.

In spite of the great deal of publicity Butina made of her own actions — with all the pictures of her and powerful Republican men — the government affidavit also described Butina trying to set up (in her words) a “back channel” of communication with influential Americans.  On October 4, 2016, Erickson emailed a friend admitting he had “been involved in security a VERY private line of communication between the Kremlin and key [Republican] leaders through, of all conduits, the [NRA]. The affidavit describes Butina telling Torshin that her Russia-USA friendship society” is “currently ‘underground’ both here and there.” When discussing the list of delegates to the 2017 National Prayer Breakfast with Erickson in late November, she said the attendees were seeking to establish a “back channel of communication.”

Manafort was trying to hide that the lobbying he paid for was done for Yanukovych’s benefit, but there’s no allegation his pre-election work aimed to set up a secret channel of communication between Yanukovych and Congress.

Of particular interest, given the parallel efforts on voter suppression from Roger Stone and the Russians, Butina floated serving as an election observer. Torshin argued that “the risk of provocation is too high and the ‘media hype’ which comes after it.” But Butina argued she’d only do it incognito.

The honey pot claim

Then there’s the specific government insinuation that Butina was engaged in a honey pot operation. It substantiates this two ways — first, by suggesting she’s not that into Erickson.

Further, in papers seized by the FBI, Butina complained about living with U.S. Person 1 and expressed disdain for continuing to cohabitate with U.S. Person 1.

It also alleges she offered sex for favors.

For example, on at least one occasion, Butina offered an individual other than U.S. Person 1 sex in exchange for a position within a special interest organization.

Driscoll pretty convincingly argues the government misinterpreted this last bit.

The only evidence the government relied on for its explosive claim was an excerpt from an innocuous three-year-old text exchange (attached as Exhibit 3) sent in Russia between Ms. Butina and DK, her longtime friend, assistant, and public relations man for The Right to Bear Arms gun rights group that she founded.

DK, who often drove Ms. Butina’s car and thus was listed on the insurance, took the car for its annual government-required inspection and insurance renewal, and upon completion, texted (according to government translators), “I don’t know what you owe me for this insurance they put me through the wringer.” Ms. Butina jokingly replied, “Sex. Thank you so much. I have nothing else at all. Not a nickel to my name.” DK responded: “Ugh . . . ( ”—that is, with a sad face emoticon.

Aside from the fact that Maria is friends with DK’s wife and child and treats DK like a brother, the reference to sex is clearly a joke.

We still haven’t seen the government response to this, but what Driscoll presents does support his claim this is a “sexist smear.”

But Driscoll’s dismissal of the other claim — that Butina disdained living with Erickson — is far less convincing.

[I]n response to her girlfriend’s own complaints about her boyfriend’s failure to call in three weeks (accompanied by an angry face emoji) that Maria responds that her own boyfriend (Mr. Erickson) has been “bugging the sh*t out of me with his mom” and that she has “a feeling that I am residing in a nursing home.” “Send a link to the dating app[,]”

Driscoll spins this as an attack on Erickson’s now late mother, but doesn’t address the central allegation that she likened living with her much older boyfriend to living in a nursing home. Nor that she started the exchange by saying “let’s go have some fun with guys!!!” because she was “Bored. So there.” Furthermore, Butina seemed concerned that her use of Tinder would become public because she logged in using Facebook.

Though he has been sharing schmaltzy videos of Butina and Erickson with ABC, Driscoll also doesn’t address the fact that as early as May, Butina was proffering to flip on Erickson in fraud charges in South Dakota, which would have the effect of putting her in a position to negotiate permanent visa status independent of him, while limiting her own legal exposure.

A student visa or tourist one?

One key distinction between Manafort and Butina stems from the fact that she’s not a citizen.

The government’s detention motion also notes that Butina “use[d] deceit in a visa application.” They describe her attendance at American University as her cover, one she chose after rejecting carrying out the operation on tourist visas.

Butina chose a student visa from a range of options for her ultimate application, but not before a lengthy discussion of the risks associated with traveling to the United States repeatedly on a tourist visa. The FBI has discovered text messages and emails between U.S. Person 1 and Butina in which Butina would routinely ask U.S. Person 1 to help complete her academic assignments, by editing papers and answering exam questions. In other words, although she attended classes and completed coursework with outside help, attending American University was Butina’s cover while she continued to work on behalf of the Russian Official.

The government also notes that Butina claimed she was no longer employed by Torshin on her visa application. It points to her visa fraud as additional support that she did not intend to register as required by the law.

Butina entered the United States with the express purpose of working as part of a covert Russian influence campaign and did not disclose that fact—not on her visa application and not to the Attorney General.

Driscoll offers a narrow (and to my mind, unconvincing) defense, arguing the government hasn’t shown proof she lied on her form, when the claim is, instead, that intercepts show she applied for a student visa over a tourist visa because of the immigration advantages it offers.

[T]he government has also failed to provide any evidence to support its claim that Maria affirmatively lied on her application for a student visa should give this Court pause.

To be clear: this doesn’t mean Americans can’t be charged under section 951. In June, for example, DOJ charged Ron Rockwell Hansen under section 951 for spying for China.

But because Butina had to find a way to get and stay in the US, she had to game out the best way to do so, and that adds to the evidence that her entire purpose for being in the US is to push Russian policies. That is, it may be easier to charge a foreigner under section 951 because it often involves lying on visa forms.

Ongoing ties with Russian intelligence

Finally, there are ties with spooks.

The government alleges that Butina had ongoing ties with the Russian intelligence agencies, including a private meal with a suspected Russian intelligence operator, Oleg Zhiganov (whom Driscoll identified, to the government’s displeasure, to Politico).

FBI surveillance observed Butina in the company of a Russian diplomat in the weeks leading up to that official’s departure from the United States in March 2018. That Russian diplomat, with whom Butina was sharing a private meal, was suspected by the United States Government of being a Russian intelligence officer.

The government also cites from pointed to a conversation where Torshin likened Butina to Anna Chapman (see below) and argued that showed that Torshin treated her a covert spy. The government further points to a document suggesting she considered a job with FSB (though remains murky about other evidence that supports the claim).

Another document uncovered during the execution of a search warrant contained a hand-written note, entitled “Maria’s ‘Russian Patriots In-Waiting’ Organization,” and asking “How to respond to FSB offer of employment?” Based on this and other evidence, the FBI believes that the defendant was likely in contact with the FSB throughout her stay in the United States.

That said, the government also alleges that Manafort has had ongoing ties with Russian intelligence, in the form of Konstantin Kiliminik. So it’s not like ties to intelligence officers by itself merits a section 951 charge.

Recruiting assets

I suspect a key feature that may distinguish Butina from Manafort is that she had two Americans, Erickson and O’Neill, working with her. There’s even the allegation that she was seeking out time with JD Gordon in the lead-up to the election, suggesting she may have been recruiting assets within the new administration, an action akin to a formal spook. That is, she seems to have been recruiting agents.

That’s different from Manafort, employing a bunch of lobbyists (even while hiding some aspects of those engagements), because Manafort was hiring established professionals (or former European government officials).

I guess one question I have is whether the awareness of the recruitment targets is different.

Flight risk

While it matters little for the distinction between FARA and section 951, Driscoll suggests the fact that Butina hasn’t fled yet — notably did not in response to a report on her work — is proof she’s not an agent.

First, in February, 2017, the Daily Beast published an article about Maria, her connection to Aleksandr Torshin, her love of guns, and her activities in the United States, essentially alleging that her purpose in the United States might be to “infiltrate” American conservative political groups.13 If the government’s fanciful theory were correct, almost 18 month ago, Maria Butina was exposed, her handler identified, and her purpose in the United States published on the internet. She did not flee, visit the Russian Embassy, or make any effort to change her status as a student.

Curiously, he doesn’t address an intercept excerpted in the government’s detention motion, suggesting that in March 2017 there was an order against arresting her.

Specifically, in March 2017, after a series of media articles were published about Butina, the following conversation ensued:

Russian Official: Good morning! How are you faring there in the rays of the new fame?[] Are your admirers asking for your autographs yet? You have upstaged Anna Chapman. She poses with toy pistols, while you are being published with real ones. There are a hell of a lot of rumors circulating here about me too! Very funny!

[snip]

Butina: It’s the other thing that is important: evidently, there is an Order not to touch us. I believe it is a good sign.

Russian Official: For now – yes, but should things shift, then we are guaranteed a spot on the list of ‘agents of influence.” . . .

But as I noted, Butina’s flight risk would remain the same regardless of whether she had been charged with FARA or section 951.

Why Maria and not Manafort (yet)?

All of which raises a series of questions about what might distinguish Butina from Manafort:

  • How important is citizenship in this? And would dual citizenship — dual Russian Federation and US — change that? The government’s reliance on Butina’s alleged visa fraud would (and in other 951 cases has) have important repercussions for any subjects of the investigation who lied but have since obtained US citizenship.
  • Does who is paying for a person’s defense matter? Driscoll won’t say who is paying his bills, but neither do we know who is funding Manafort’s (thus far) much more expensive defense. In similar cases (such as Evgeny Buryakov, one of the spies who recruited Carter Page), the government filed for a Curcio hearing to make sure a person’s lawyer wasn’t representing the interests of the people paying his bills rather than the defendant, but in so doing proved that Buryakov was not a government agent. If a close Putin ally is paying for Manafort’s defense, does that change the calculus of who he’s working for?
  • At what point would obtaining useful information on political process in the US count as collecting intelligence? Manafort knows US politics better than almost anyone — he doesn’t need to recruit a source to learn that. Butina did. Does recruiting Erickson to learn about US politics amount to collecting intelligence?
  • Is beefed up FARA enforcement the proper tool to combat foreign influence operations, or is section 951, absent more covert operations, the way to go after foreign nationals engaging in influence operations?
  • Given how these two crimes might bleed into each other, are prosecutors threatening charges under section 951 to get pleas under FARA?
  • All this analysis is based off stuff Manafort did years ago, going back over a decade. It doesn’t address the stuff he is suspected of doing in during the 2016. For example, if Manafort was reporting back on an active Presidential campaign to Oleg Deripaska via suspected Russian intelligence agent Konstantin Kilimnik, is that a FARA violation, or a section 951 one? He got charged under FARA for his historic work. But I’m not sure his election-related work doesn’t pass the bar for a section 951 charge.

As I disclosed July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

Yevgeniy Prigozhin Doubles Down on Lawfare as Intelligence Collection

I realize that the Concord Management defense in the Mueller indictment is intended to be nuisance lawfare. As noted, Mueller even moved four DOJ attorneys onto the team to manage with an onslaught of such nuisance filings.

But I am rather fascinated by the fight over the protective order.

As I noted, back on June 13, Mueller’s team objected to Concord’s demands that they get to share information with Yevgeniy Prigozhin without first requiring him to come to the US to get the intelligence. In a typically snotty response, Concord not only demanded that they get to share the information, but specifically requested they not receive all the personal identifying information in discovery; they just want the more substantive stuff showing informants and networks of communication. I took it as a concession that Prigozhin didn’t need the PII, because he already stole it, so the only thing new he would need is the stuff with intelligence value.

The two sides have just submitted a draft protective order with a brief laying out their disagreements. As this passage makes clear, the key dispute is whether Reed Smith can share sensitive information with nationals of the US and individual officers of Concord, and whether Reed Smith can share sensitive information with a co-defendant who refuses to show up before the court.

As Reed Smith has already made clear, there are only two people at Concord they want to share information with. One is Prigozhin, a co-defendant.

Finally, during the June 15, 2018 hearing, the Court asked defense counsel for information regarding the number of officers and employees of Defendant Concord. Concord has two statutory officers as required under Russian law, a General Manager and a Chief Accountant. The General Manager is co-defendant Yevgeniy Prigozhin, who has decision making authority. The Chief Accountant is not responsible for the day-to-day activities of the company and does not have decision-making authority. Undersigned defense counsel has represented to the Special Counsel’s Office, at present defense counsel needs to disclose discovery materials to only two individuals at Concord, Mr. Prigozhin, and the Head of the Legal Department (who is not a co-defendant and does not have decision making authority).

It’s the two other details that give up the game though. First, the defense not only wants to share information with someone who won’t show up to face his charges, but they also want to explicitly avoid being bound by the jurisdiction of the court.

That is, Reed Smith is saying they want to share information with the Head of Concord’s Legal Department and Prigozhin without either having to be bound by the jurisdiction of the court, which would make the order virtually unenforceable.

And then Reed Smith wants to dodge jurisdiction of the court themselves, by refusing to babysit those who won’t be bound by jurisdiction of the court when they review sensitive material. They deem that “onerous.”

Reed Smith has made a show of agreeing that none of this stuff will leave the country. They’re just refusing to sign a document that will prevent, say, the unnamed Head of the Legal Department from sticking stuff in his socks and taking it back to Prigozhin (who’s not going to show up to the US to read any of this), and with him, Putin.

Honestly, I think the question of whether Prigozhin can be prohibited from helping to defend his corporation without showing up to the US to be arrested will be an interesting legal fight.

Here’s the thing: First, I don’t think Dabney Friedrich is dumb enough to fall for the two little moves at the end, and I assume she’ll guard her own authority enough not to invite some Russian lawyer to abuse her authority.

Moreover, given that her interim protective order limited all review of sensitive materials to the defense counsel, see seems inclined to side with Mueller’s team.

 

Shorter Yevgeniy Prigozhin: Don’t Send the PII We Already Stole — Just Send the Intelligence

In this post, I described the Mueller team’s motion for a protective order that would keep sensitive information from the case against Concord Management away from its owner, Vladimir Putin crony Yevgeniy Prigozhin.

Concord’s lawyers have now responded with the performative aspect that has characterized their filings in this case. From a legal standpoint, they argue both that protective orders are an unusual thing (which seems utterly absurd on its face) and that withholding information from a co-defendant who has not presented himself before the court is not supported by case law (a proposition I await Mueller’s answer to judge).

For now, though, note that their demands have actually gotten worse than what, according to Mueller at least, they had already agreed to.

Mueller, as I noted, contended that Concord had agreed to keep all discovery in the United States, but objected to Mueller’s request to withhold it from Prigozhin. The US-restrictions showed up on their protective order this way:

Neither defense counsel nor any person authorized by this Court is permitted at any time to inspect or review Sensitive materials outside of the U.S. offices of Reed Smith LLP, without prior permission from of this Court. Defense counsel or a designated and identified employee of Reed Smith LLP must accompany any person at all times while he or she is reviewing Sensitive materials at U.S. offices of Reed Smith LLP, unless otherwise authorized by this Court.

[snip]

Sensitive materials shall not be viewed or stored on any device that is connected to or accessible from the Internet.

Sensitive materials may under no circumstances be transported or transmitted outside the United States.

But Concord has now changed its mind about the US restrictions.

Further, the Special Counsel attests to the Court that the defense has agreed “on many procedures designed to enable the government to turn over discovery,” Mot. at 2, while failing to tell the Court the truth; that any such concessions were made as part of a concerted effort by undersigned counsel to reach a stipulated agreement of this issue, and absent that stipulation there is in fact no agreement at all. Despite this fact, and as a courtesy to the Court only, Defendant Concord represents that it is willing to accept the draft protective order attached hereto as Exhibit A, which will permit it to protect its constitutional rights in defending this criminal case.

It calls the requirement that discovery remain in the US (it doesn’t address the demand that it remain firewalled from the Internet) a hostage situation.

The Special Counsel seeks the unprecedented process of prohibiting defense counsel from sharing or discussing any discovery with any co-defendant—including the only person affiliated with Concord named in the Indictment—unless those individuals come to the United States to become hostages in this political game of tit-for-tat. See ECF 24-1, proposed Protective Order at ¶ 2.

Perhaps even more interesting, having been told that Mueller will hand over everything because it is too unwieldy to strip Personal Identifying Information of victims and others, Concord not only says they don’t want it (though they caveat about whether they’ll eventually release it at trial), but that they refuse to accept it.

Not yet ashamed, the Special Counsel plays the personal identifying information (“PII”) card. See Mot at p. 9. However, undersigned counsel has already advised the Special Counsel that Defendant does not seek any personal identifying information that is irrelevant to the defense. The Special Counsel stated to undersigned counsel that it would not be possible to remove any such information from the discovery. But that is the Special Counsel’s problem, not Concord’s. And undersigned counsel will not accept any such information unless the Special Counsel can demonstrate that, in fact: 1) it is relevant to the defense of the case; 2) the Special Counsel intends to use the item in its case-in-chief at trial; or 3) the information was obtained from or belongs to Defendant. See Fed. R. Crim. P. 16(a)(1)(E). The Special Counsel’s reliance on the out of circuit case United States v. Johnson, 191 F. Supp. 3d 363 (M.D. Pa. 2016) provides no cover. To the contrary, Johnson, a drugs and firearms case, returns to the concept of an umbrella protective order that is unheard of in published opinions in this district, and further addresses PII which we are not seeking unless it is relevant to the defense.7

7 The Special Counsel’s description of the PII to undersigned counsel makes it difficult to understand how it could be relevant to the defense. The Special Counsel generally noted that some of the discovery contains financial account numbers of innocent individuals. As noted above, undersigned counsel refuses to accept or be responsible for any such irrelevant data. As to names, addresses and other personal information of the same or other individuals, undersigned counsel has no intention of making any such information public prior to trial.

Of course, Russia has already stolen a lot of this PII.

So effectively, what Prigozhin is saying is that he doesn’t want any of the PII he already stole; he just wants the intelligence showing what the US government knows about how he stole it.

Don’t get me wrong: the underlying legal issues here will be an interesting question. But the message — don’t send the PII we already stole, just send the intelligence — is quite simple.

Update: In a hearing on Friday, Friedrich expressed impatience that discovery hadn’t begun yet, but generally showed great deference to the government’s concerns about security. She set a deadline for the parties to agree on a protective order, but if the interim one she drew up until they agree on something is any indication, the Mueller team will generally get what they want. In particular, she prohibited the sharing of discovery with anyone not in Concord’s law firm, meaning they can’t share it with Prigozhin.

Pursuant to this interim order, the government shall initially produce the materials to defense counsel. In the first instance, and unless and until further order from this Court, defense counsel shall not further disclose the materials or their contents directly or indirectly to anyone except defense counsel, as defined above.

And she required sensitive materials to be firewalled from the Internet, and prohibited sensitive materials being transmitted outside the US.

The government shall provide Sensitive materialsto defense counsel in a password protected, electronic format. Sensitive materials shall not be copied or reproduced without prior permission from this Court, except that defense counsel may make copies for use exclusively by defense counsel in connection with this criminal case. Sensitive materials shall be maintained in a locked room at Reed Smith’s offices within the United States, when they are not in the actual possession of defense counsel. Sensitive materials shall not be viewed or stored on any device that is connected to or accessible from the Internet.

Sensitive materials may under no circumstances be transported or transmitted outside the United States.

She also endorsed the idea of a firewall counsel who could raise objections on sharing, and even suggested a special master for discovery here.

Update: Fixed protection for protective. h/t mw.

Mueller to Yevgeniy Prigozhin: Sure You Can Have Discovery … If You Come to the United States to Get It

This Concord Management filing, from Mueller’s team, is attracting a lot of attention because Mueller predictably asked for a protective order and said Russians are still engaging in information operations (so are we!!). Since we covered the certainty that there’d be a protective order in this case over a month ago, I’m going to focus on some other interesting tidbits about this filing.

As a reminder, Concord Management is a company owned by close Putin ally Yevgeniy Prigozhin. Concord is accused in the Internet Research Agency indictment of funding the troll operation.

Defendants CONCORD MANAGEMENT AND CONSULTING LLC (Конкорд Менеджмент и Консалтинг) and CONCORD CATERING are related Russian entities with various Russian government contracts. CONCORD was the ORGANIZATION’s primary source of funding for its interference operations. CONCORD controlled funding, recommended personnel, and oversaw ORGANIZATION activities through reporting and interaction with ORGANIZATION management.

[snip]

To conceal its involvement, CONCORD labeled the monies paid to the ORGANIZATION for Project Lakhta as payments related to software support and development. To further conceal the source of funds, CONCORD distributed monies to the ORGANIZATION through approximately fourteen bank accounts held in the names of CONCORD affiliates, including Glavnaya Liniya LLC, Merkuriy LLC, Obshchepit LLC, Potentsial LLC, RSP LLC, ASP LLC, MTTs LLC, Kompleksservis LLC, SPb Kulinariya LLC, Almira LLC, Pishchevik LLC, Galant LLC, Rayteks LLC, and Standart LLC.

The indictment accuses Prigozhin of supervising the operation closely enough to have been saluted by troll operations in the US.

PRIGOZHIN approved and supported the ORGANIZATION’s operations, and Defendants and their co-conspirators were aware of PRIGOZHIN’s role.

For example, on or about May 29, 2016, Defendants and their co-conspirators, through an ORGANIZATION-controlled social media account, arranged for a real U.S. person to stand in front of the White House in the District of Columbia under false pretenses to hold a sign that read “Happy 55th Birthday Dear Boss.” Defendants and their co-conspirators informed the real U.S. person that the sign was for someone who “is a leader here and our boss . . . our funder.” PRIGOZHIN’s Russian passport identifies his date of birth as June 1, 1961.

When Concord moved to defend itself, it presented the possibility that it and Prigozhin would obtain discovery, and via Prigozhin, everyone else in Russia who was part of this operation, up to and including Putin. Indeed, the Mueller filing makes it quite clear that is the intent of the defense attorneys. They explicitly asked to share information with co-defendants that serve as officers of Concord, which can only mean they want to share information with Prigozhin.

In its initial proposed protective order, the government proposed a complete prohibition on sharing discovery with any co-defendant charged in this criminal case, whether individual or organizational. Defense counsel proposed that they be permitted to share discovery with a codefendant if that co-defendant is an officer or employee of Concord Management. To the government’s knowledge, the only charged defendant in this category is Yevgeniy Viktorovich Prigozhin, who was charged individually for conspiring to defraud the United States, in violation of 18 U.S.C. § 371.

So this dispute over the protective order is an effort to continue with the prosecution, while ensuring that Russia doesn’t obtain important information on the investigation into the operation by doing so.

Before I get into how Mueller’s team proposes to resolve the dispute, it’s worth reviewing the data in question, because that’s actually one of the most interesting parts of this filings. Apparently, the government used no classified information in the investigation of social media trolling (or parallel constructed whatever they did use).

As described further in the government’s ex parte affidavit, the discovery in this case contains unclassified but sensitive information that remains relevant to ongoing national security investigations and efforts to protect the integrity of future U.S. elections. [my emphasis]

Later, the filing makes it clear that much of the evidence in the case came from US providers — surely Facebook and Twitter and others.

The evidence includes data related to hundreds of social media accounts, as well as evidence obtained from email providers, internet service providers, financial institutions, and other sources. Additionally, the need to produce much of the data in its original format (formats that include, for example, Excel and HTML files) makes it infeasible to make certain redactions without compromising expeditious review of the data.

These two details confirm a point I made in March: this indictment really doesn’t rely on information as secret as many reporters claimed. It relies on stuff you get from social media providers.

And contrary to what NBC says about the heavy reliance, in the Internet Research Agency indictment, “on secret intelligence gathered by the CIA, the FBI, the National Security Agency (NSA) and the Department of Homeland Security (DHS),” it really wasn’t all that sophisticated from a cybersecurity standpoint. Especially not once you consider the interesting forensics on it (aside from IDing the IRA’s VPNs) would have come from Facebook and Twitter.

That detail — that much of this indictment comes from the social media providers that Russia exploited in 2016 — is important background to this passage (this is the one that has gotten all the press), which asserts that Russia continues to do what Prigozhin’s trolls did in 2016.

Public or unauthorized disclosure of this case’s discovery would result in the release of information that would assist foreign intelligence services, particularly those of the Russian Federation, and other foreign actors in future operations against the United States. First, the substance of the government’s evidence identifies uncharged individuals and entities that the government believes are continuing to engage in interference operations like those charged in the present indictment. Second, information within this case’s discovery identifies sources, methods, and techniques used to identify the foreign actors behind these interference operations, and disclosure of such information will allow foreign actors to learn of these techniques and adjust their conduct, thus undermining ongoing and future national security investigations.

And that, in turn, explains much of the logic for the larger protective order request: the government is trying to prevent Prigozhin and through him Putin from learning what the US is doing to counter its information operations.

The government’s description of what it considers “sensitive” information that it wants to require a special review before sharing with foreign nationals reveals it is also trying to prevent Prigozhin and others from learning about the status of the investigation and its targets.

a. Witness statements provided pursuant to 18 U.S.C. § 3500;

b. Information that could lead to the identification of potential witnesses, including civilian, foreign and domestic law enforcement witnesses and cooperating witnesses;

c. Information related to ongoing investigations, including information that could identify the targets of such investigations; and

d. Information related to sensitive law enforcement or intelligence collection techniques.

Finally, the government is trying to hide what it knows about relationships between parties involved in this operation and “other uncharged foreign entities and governments.”

At a high level, the sensitive-but-unclassified discovery in this case includes information describing the government’s investigative steps taken to identify foreign parties responsible for interfering in U.S. elections; the techniques used by foreign parties to mask their true identities while conducting operations online; the relationships of charged and uncharged parties to other uncharged foreign entities and governments; the government’s evidence-collection capabilities related to online conduct; and the identities of cooperating individuals and, or companies. Discovery in this case contains sensitive information about investigative techniques and cooperating witnesses that goes well beyond the information that will be disclosed at trial. [my emphasis]

So one thing the government wants to protect is what it knows about the relationship between Prigozhin and Putin, and the Russian government’s involvement in this trolling operation more generally.

And to do that, the government is demanding the ability to prohibit Concord’s lawyers from sharing information with Prigozhin (or any other defendant) without prior court review.

Notwithstanding the previous categories of authorized persons, no co-defendant charged in this criminal case, whether individual or organizational, shall be deemed an authorized person for purposes of discovery until the co-defendant appears before this Court. Defense counsel shall not disclose or discuss the material or their contents to any co-defendant charged in this criminal case, whether individual or organizational, until the co-defendant appears before this Court unless otherwise directed by this Court. If defense counsel, after reviewing discovery in this matter, believes it necessary to seek to disclose or discuss any material with a co-defendant who has not appeared before this Court, counsel must first seek permission from this Court and a modification of this Order.

Perhaps more interesting, it is demanding that Concord’s lawyers keep anything deemed sensitive in the US, firewalled from the Internet.

Neither defense counsel nor any person authorized by this Court is permitted at any time to inspect or review Sensitive materials outside of the U.S. offices of Reed Smith LLP, without prior permission from of this Court. Defense counsel or a designated and identified employee of Reed Smith LLP must accompany any person at all times while he or she is reviewing Sensitive materials at U.S. offices of Reed Smith LLP, unless otherwise authorized by this Court.

[snip]

Sensitive materials shall not be viewed or stored on any device that is connected to or accessible from the Internet.

Sensitive materials may under no circumstances be transported or transmitted outside the United States.

The logic here is nifty: even if they lose on the ability to protect all materials from Prigozhin, they’ve already succeeded in requiring that he come to the US if he wants to read it. At which point, he’d be met by authorities at customs and promptly put in custody.

On one point I was mistaken. I thought there would be classified discovery of some sort, that would require the use of the Classified Intelligence Protection Act procedures. It will apparently never get to that. The government will either win on this protective order, which will largely moot much of the logic for Concord to contest the case, or it will lose, which will likely lead it to dismiss the indictment against Concord.

Update: Fixed protective for protection, h/t mw.

Concord Consulting Aims to Make Russian Bots Legal

Remember when they used to say, “they hate us for our freedoms” in the wake of 9/11? The company of Putin’s buddy Yevgeniy Prigozhin is doing the opposite — having a field day with the due process rights his company, Concord Consulting, gets under US law after being charged in the Internet Research Agency indictment.

As I noted, Concord unexpectedly decided to contest its indictment for using Prigozhin’s troll factory to interfere in the 2016 election. Last week it pled not guilty.

In that post, I suggested that the risk posed by the Concord not guilty plea could be deferred, for now, by arguing over a protection order and ensuring that sensitive data be shared under CIA.

[N]either will happen immediately — Mueller’s team will push for a protection order and CIPA process before turning over the requested discovery and defendants almost never get a Bill of Particulars — effectively, Concord signaled its intention to impose real costs on the US government’s use of our criminal justice system to embarrass Russia. They made it clear that one of Putin’s closes allies will be demanding the intelligence behind an indictment naming him and two of his companies. Which is going to pose real discomfort for Mueller’s team (which might explain a bit of their delay here).

Let me clear: Concord is entirely within its right to begin demanding such evidence. That’s the risk of using our criminal justice system, affording due process, in charging a Russian corporate person who can challenge any charges without risking their freedom. I imagine Mueller’s team didn’t sufficiently account for this possibility when charging it this way. And if there are any other known Russian corporations involved in this operation (or fronts, such as the one Joseph Mifsud worked behind), I would imagine Mueller’s team is rethinking their approach to including those fronts. This could be problematic to the extent that proving any “collusion” between Trump’s people and Russians would most easily be demonstrated via conspiracy charges involving Russian entities.

If and when Mueller dismisses the indictment against Concord (but not its 13 paid trolls), it would be an embarrassing PR moment. But the contest thus far only posed a legal risk to any further indictments that relied on corporate entities, which the rest of the Internet Research Agency one does not.

Concord’s latest challenge may pose a greater threat. It requests the judge in the case (which here would be Magistrate Michael Harvey, though Trump appointee Dabney Friedrich is the District judge on the case) to review the grand jury instructions to make sure the prosecutors explained the mens rea required behind the conspiracy to defraud the US charge in the case. It is, as the motion argues, a fairly modest request (the government will argue, rightly, that it asks for grand jury information it is not entitled to, but Concord is asking just for the judge to review it). It’s basically asking the judge to make sure prosecutors explained to the grand jury that they had to find that IRA knew that it was violating US law.

As I noted here, ConFraudUs provides Mueller’s team with a way to argue the abuse of weak parts in our electoral system violates the law, and charging a conspiracy sets up a way to drop in American defendants at a later date. And, as Lawfare laid out in this good legal review of ConFraudUs, ConFraudUs has been used in the electoral context in the past.

Notably for present purposes, §371 has been deployed in the context of election law specifically. The Justice Department’s manual on federal prosecution of election offenses explicitly contemplates bringing charges of conspiracy to defraud based on campaign finance offenses. It explains the theory as follows:

To perform [its] duties, the FEC must receive accurate information from the candidates and political committees that are required to file reports under the Act. A scheme to infuse patently illegal funds into a federal campaign, such as by using conduits or other means calculated to conceal the illegal source of the contribution, thus disrupts and impedes the FEC in the performance of its statutory duties.

Several federal circuit courts have heard cases brought under §371 based on this theory and have not found fault with its application to behavior that may also violate the Federal Election Campaign Act (FECA).

But Concord is arguing the use of ConFraudUs in this case departs from the approach DOJ has previously used to keep foreign influence out of elections (citing cases of Chinese influence peddling under Clinton).

The Court is well aware that heretofore investigations of alleged improper foreign involvement in American elections have been handled by the United States Department of Justice (“DOJ”); specifically the Campaign Finance Task Force created by former Attorney General Reno in 1997, and where the Court worked as a prosecutor from September 1997 to August 1998. Former Attorney General Reno refused to bow to massive political pressure to appoint a special counsel, and instead the Task Force methodically investigated and prosecuted cases through 2000.1 Throughout all of that activity, the DOJ never brought any case like the instant Indictment, that is, an alleged conspiracy by a foreign corporation to “interfere” in a Presidential election by allegedly funding free speech. The obvious reason for this is that no such crime exists in the federal criminal code.

It doesn’t actually prove that use of ConFraudUs in this case would be improper (indeed, after complaining that Janet Reno didn’t appoint a special counsel to investigate funding of Clinton, the motion spends a page complaining about a special counsel in this case). Rather, it argues that the indictment couldn’t charge ConFraudUs because none of the Russians involved knew they had to register with the government before engaging in online trolling (they note they’re going to make similar challenges with respect to other charges in the future).

But violations of the relevant federal campaign laws and foreign agent registration requirements administered by the DOJ and the FEC require the defendant to have acted “willfully,” a word that does not appear anywhere in Count One of the Indictment. See 52 U.S.C. § 30109(d) and 22 U.S.C. § 618(a).

[snip]

Count One of the Indictment appears to be facially invalid because it fails to charge an essential element of the offense of conspiracy to defraud the United States by impairing, obstructing and defeating the functions of the FEC and the DOJ, that is, that the Defendant acted willfully, in this case meaning that Defendant was aware of the FEC and FARA requirements, agreed to violate those requirements, and ultimately acted with intent to violate those requirements.

There’s a two-fold risk here, if Concord is successful (and they could be).

First, there’s a risk that such a ruling would in effect provide foreign corporations more ability to engage in improper election speech than domestic ones. Particularly as social media companies move to require more transparency in online advertising, a foreign company could continue to violate those requirements simply by pleading dumb. Certainly Congress could mandate some kind of transparency on foreign companies and with that require private companies to administer such things. but it wouldn’t be a quick fix.

There’s a more immediate risk, however. The filing claims that this indictment is, “a case that has absolutely nothing to do with any links or coordination between any candidate and the Russian Government.” While it is true that Rod Rosenstein emphasized there was no allegation in the current indictment that any American knowingly conspired with these Russians, there are actually three Trump campaign staffers described in a way in the indictment that may reflect they’re still under investigation. And in its last filing, Concord demanded the communications behind one event — an American holding a sign in front of the White House — that leads me to believe Concord knows that the involvement of this US person is more complex than alleged in the indictment.

With respect to ¶ 12b, identify the “real U.S. person,” identify the specific Defendant or conspirator who communicated with the “real U.S. person,” provide the dates and times of any such communications, identify the Defendant or conspirator who stated “is a leader here and our boss . . . our funder,” and clarify whether it is alleged that any such communications were made on behalf of Defendant Concord.

That is, while Rosenstein said that thus far there are no Americans in this indictment, that doesn’t mean Mueller didn’t have plans to add some at a later date.

But if Concord can get this conspiracy charge thrown out before then, it’s going to undercut any effort to claim the conspiracy that will be critical to substantiating the collusion charge even if Mueller presents clear evidence of an agreement to carry out this trolling.

That doesn’t mean he won’t be able to prove a conspiracy involving a more obvious agreement — such as the Agalarovs offering dirt in exchange for sanction relief (though that would invoke the bribery rules that SCOTUS has significantly reined in).

But for now, the IRA indictment is a test case in a legal theory that will make it fairly easy to show that Republicans engaged in a conspiracy to tamper with the election. Because Mueller named a corporate person, he provided a way for the Russians to otherwise undercut a theory that seems central to the effort to hold Trump and the Russians accountable.

Again, Mueller can likely prove ConFraudUs with other players in the larger conspiracy. But this filing poses an immediate threat of undermining the logic of such an approach before he can charge it.

With the Upcoming Concord Consulting Not Guilty Plea, Russians Continue to Win the Lawfare Hockey Title

Last year, I observed how effective the mostly-Russian (with some assistance from Republicans) lawfare surrounding the Steele dossier had been. Between the Webzilla and Alfa Bank suits against Steele dossier actors (the latter advised by top Republican lawyers at Kirkland & Ellis), they forced out information that would embarrass Democrats and assist Republican efforts to undermine the Russian investigation. Further, the many suits were far more costly than the initial oppo research had been.

As a number of outlets have observed, one of the firms named in the Internet Research Agency indictment, Concord Management and Consulting, is waging similar lawfare in response to that indictment.

Concord is the firm of Yevgeniy Prigozhin, often called Putin’s chef because he’s gotten rich of catering contracts. The indictment claims Concord provided the bulk of the funding for the IRA. It further alleges Concord funds disinformation campaigns not just targeting America, but targeting other countries and domestic Russian audiences.

Beginning as early as 2014, Defendant ORGANIZATION began operations to interfere with the U.S. political system, including the 2016 U.S. presidential election. Defendant ORGANIZATION received funding for its operations from Defendant YEVGENIY VIKTOROVICH PRIGOZHIN and companies he controlled, including Defendants CONCORD MANAGEMENT AND CONSULTING LLC and CONCORD CATERING (collectively “CONCORD”). Defendants CONCORD and PRIGOZHIN spent significant funds to further the ORGANIZATION’s operations and to pay the remaining Defendants, along with other uncharged ORGANIZATION employees, salaries and bonuses for their work at the ORGANIZATION.

[snip]

Defendants CONCORD MANAGEMENT AND CONSULTING LLC (Конкорд Менеджмент и Консалтинг) and CONCORD CATERING are related Russian entities with various Russian government contracts. CONCORD was the ORGANIZATION’s primary source of funding for its interference operations. CONCORD controlled funding, recommended personnel, and oversaw ORGANIZATION activities through reporting and interaction with ORGANIZATION management.

CONCORD funded the ORGANIZATION as part of a larger CONCORD-funded interference operation that it referred to as “Project Lakhta.” Project Lakhta had multiple components, some involving domestic audiences within the Russian Federation and others targeting foreign audiences in various countries, including the United States.

Among the details in the indictment that would require the most SIGINT (as distinct from cooperation from Facebook and domestic forensics analysis) is a paragraph describing the funding behind the operation.

To conceal its involvement, CONCORD labeled the monies paid to the ORGANIZATION for Project Lakhta as payments related to software support and development. To further conceal the source of funds, CONCORD distributed monies to the ORGANIZATION through approximately fourteen bank accounts held in the names of CONCORD affiliates, including Glavnaya Liniya LLC, Merkuriy LLC, Obshchepit LLC, Potentsial LLC, RSP LLC, ASP LLC, MTTs LLC, Kompleksservis LLC, SPb Kulinariya LLC, Almira LLC, Pishchevik LLC, Galant LLC, Rayteks LLC, and Standart LLC.

Presumably, the Mueller team named Concord and Prigozhin because doing so would support sanctions against him and his companies (indeed, Prigozhin was added to sanctions back in March). But it was also a way to put the operation within the immediate vicinity of Putin and tie it to the patronage that he uses to stay in power.

But then the corporate person of Concord Consulting unexpectedly started to contest the charges. On April 11, two lawyers from Reed Smith filed an attorney appearance for the firm. That same day, the lawyers sent Mueller’s team two letters, one asking for a Bill of Particulars and the other an expansive discovery request. Mueller’s team (having previously tried to serve Concord via the Russian government) then sent a letter to the lawyers, asking for confirmation they can receive summons for their client, which the lawyers returned it 10 days later, saying it violated Federal Rules of Criminal Procedure. The government, based on the returned summons, asked for a continuance to make sure that summons had been accepted.

Acceptance of service is ordinarily an indispensable precondition providing assurance that a defendant will submit to the jurisdiction of the court, obey its orders, and comply with any judgment. Here, proper service is disputed. It would not be an efficient use of resources to conduct proceedings against Concord clouded by the question whether Concord has been properly served. And as mentioned above, that is particularly true given the sensitive intelligence gathering, national security, and foreign affairs issues presented by defense counsel’s initial requests.

Concord’s lawyers responded by arguing the Special Counsel was ignoring local rules requiring two weeks advance notice to make a scheduling change, and further noting the government had not cited any case law supporting the argument that there might be uncertainty about whether Concord had been served.

The Special Counsel is not entitled to special rules, and is required like the Attorney General to follow the rules of the Court. See United States v. Libby, 498 F.Supp.2d 1, 10-11 (D.C.C. 2007).

The Special Counsel’s motion, filed late on a Friday afternoon, essentially seeks to usurp the scheduling authority of the Court by requesting a continuance of a proceeding scheduled in five days knowing that Defendant is ordinarily entitled to fourteen days to respond.

The Special Counsel’s motion is in violation of Local Criminal Rule 47(b) in that its contains no citation to points of law and authority and instead proclaims without citation to any authority that “A criminal case against an organizational defendant ordinarily requires that the defendant has been properly served with a summons in order for the court to be assured that the defendant has submitted to the jurisdiction of this court and has obligated itself to proceed in accordance with the Federal Rules of Criminal Procedure and other applicable laws that govern this criminal proceeding,”

Judge Dabney Friedrich denied the government motion, meaning there’ll be an initial appearance Wednesday.

Before looking at what Concord is trying to do with its discovery request, let’s take a step back.

The US has been charging Russian hackers and other criminals (like Viktor Bout) for years. Russia hates it. Even ignoring the number of Russian criminals we’ve imprisoned for long sentences, in cases where we don’t nab defendants while on vacation, the indictments still provide the US a forum to expose Russian intelligence activities with little cost to the US.

Charging a corporate person — one close to Putin — for a crime (information operations) that the US also engages in, the government provided Putin and his ally Prigozhin with an opening to either inflict some damage or force the government to withdraw the indictment (and think twice before indicting any other Russian corporations in other Russian investigation indictments).

Here’s some of what Concord is asking for:

Unnamed co-conspirators. When Rod Rosenstein announced this indictment, he emphasized that no Americans were named as co-conspirators in the indictment. That’s different than saying no Americans did conspire (indeed, I’ve noted that three Trump Campaign Officials described in the indictment may be under ongoing investigation). The motion for a Bill of Particulars asks for the identities of those three Trump Campaign Officials, as well as the identities of at least ten other Americans described specifically, and 100 recruited by IRA (described in ¶81). It also asks for the name of co-conspirators for an act, ¶7 of the indictment, who were required to register even though no co-conspirators are alleged to have to do so. Intriguingly, it asks not just for the identity of the real US person who held a sign in front of the White House (¶12b), but also all details surrounding the communications behind that appearance.

Related crimes the government will introduce at trial. The discovery request makes a very normal Rule 404(b) request for any “other crimes, wrongs, or acts” the government might introduce at trial. If Mueller’s team believes anyone in this indictment was involved in other parts of the operation, they might have to disclose that.

SIGINT. The request for a Bill of Particulars asks the government to identify all VPNs, PayPal accounts, Twitter accounts, and web-based emails used in the operation. It asks for the IDs of the people behind the operation and a definition of what significant funds means which would convey how much money Mueller has tracked. It asks for the specific bank accounts the indictment alleges Concord used to launder its money. It asks for specific evidence showing Prigozhin’s knowledge of the operation. It asks for all the communications behind the named events in the indictment. Showing this would provide Concord, and so Prigozhin, and so Putin, a very detailed picture of how much intelligence the US collected to draw up this indictment, which would also hint a lot about how we got it.

Details they will use to show US double standards. This includes a request for all the times since 1945 an agent of the US “engaged in operations to interfere with elections and political processes in any foreign country,” which is probably a reference to this study that shows CIA has done it more than Russia, along with a parallel request about any times Americans have been charged under the same crime, 18 USC 371, charged in the indictment. It also asks for a definition of a bunch of terms — such as “improper foreign influence,” “computer infrastructure,” “collecting intelligence,” and “began to monitor” that Russia will then use to point out where US spooks do the same. The request asks for a list of all criminal statutes that prohibit interference operations, the specific statutes behind the FECA, FARA, and visa violations alleged, as well as statutes that prohibit “impairing, obstructing and defeating the lawful governmental functions of the US … [by] interfer[ing] with US political and electoral processes. Together, those requests are designed to show that much of this stuff is either legal or spying.

The names of informants. Concord asks for this both as a general Brady request and asks for the specific name of the uncharged co-conspirator who traveled to Atlanta in 2014 in the request for a Bill of Particulars. While Prigozhin probably knows which Russians cooperated, Russia will nevertheless love to use that to punish whoever did.

While neither will happen immediately — Mueller’s team will push for a protection order and CIPA process before turning over the requested discovery and defendants almost never get a Bill of Particulars — effectively, Concord signaled its intention to impose real costs on the US government’s use of our criminal justice system to embarrass Russia. They made it clear that one of Putin’s closes allies will be demanding the intelligence behind an indictment naming him and two of his companies. Which is going to pose real discomfort for Mueller’s team (which might explain a bit of their delay here).

Let me clear: Concord is entirely within its right to begin demanding such evidence. That’s the risk of using our criminal justice system, affording due process, in charging a Russian corporate person who can challenge any charges without risking their freedom. I imagine Mueller’s team didn’t sufficiently account for this possibility when charging it this way. And if there are any other known Russian corporations involved in this operation (or fronts, such as the one Joseph Mifsud worked behind), I would imagine Mueller’s team is rethinking their approach to including those fronts. This could be problematic to the extent that proving any “collusion” between Trump’s people and Russians would most easily be demonstrated via conspiracy charges involving Russian entities.

As I said, for years, it has pissed off Russia generally and Putin in particular that the US used its criminal justice system to embarrass Russia, particularly for actions (like nation-state spying or information warfare like that alleged in this indictment) that we also engage in, including against Russia. It seems clear Putin and his buddy Prigozhin are using the incidence of the latter having had his company be named in this indictment as an opportunity to retaliate and make DOJ think twice as it continues to expand such efforts in the future.

And to a large degree, it’s quite likely to work.

What Did Mueller Achieve with the Internet Research Agency Indictment?

Back during Nunes Week, Trey Gowdy described the importance of Robert Mueller’s investigation by stating that we were only seeing half of what he was doing. The other half of his work, Gowdy said, was the counterintelligence side, the investigation into what Russia did to the US in 2016.

Friday, Rod Rosenstein rolled out the first glimpse of the other half of that investigation, an indictment of 13 Russians tied to the Internet Research Agency, the Russian troll factory. The indictment accuses IRA of 8 crimes: criminal conspiracy to defraud the United States, conspiracy to commit wire fraud and bank fraud, and five counts of aggravated identity theft.

In the wake of that indictment, the court unsealed a February 7  plea agreement with Californian Richard Pinedo, for identity theft (basically, selling bank account numbers; the information doesn’t identify the users who purchased the bank account numbers as IRA personnel who used them to set up “American” identities, but that is clearly what happened).

The 13 Russians charged in the IRA indictment — which include Yevgeniy Prigozhin, the close Putin associate who owns the company, those in charge of the operation (which was not limited to US targeting), down to a few of the analysts who did the troll work — will never be extradited to the US, though the most senior among them will surely be sanctioned. Nor will Putin in any way retaliate against them — they were doing work he approved of! Further, by criminalizing “information warfare” (as the Russians admitted they were engaged in, and as we do too, under the same name) we risk our own information warriors being indicted in other countries.

So what purpose did the indictment serve? Here are some thoughts:

Creating a paper trail

Rosenstein and Chris Wray have both said they believe investigators should speak through indictments and other official documents, not through Comeyesque press conferences. Here we have an indictment that serves as a record of what Mueller’s team has found.

We would probably have gotten it in any case, as Jeff Sessions’ DOJ has emphasized bringing more cybersecurity related indictments.

But that we did get it addresses one of the questions we’ve gotten about the Mueller investigation: whether we’ll get to read a report of what he has found.

To the extent that something is indictable, even if that indictment would name Russians or others located overseas, I guess we should expect more of the same.

Establishing bipartisan credibility for the larger investigation

The reason I keep pointing to Gowdy’s statements in support of the investigation in the last several weeks is because his actions seem to reflect one of the most partisan Republicans reacting soberly to an attack on the country, rather than just one party.

And while the details of the indictment — most notably that the trolls affirmatively supported Bernie Sanders as well as Trump — have resurfaced the old primary recriminations, for the most part, the indictment has provided a way for people from both parties to agree to the reality of the attack. Trump said Mueller did a good job with the indictment (admittedly, he may be currying favor). Trump’s National Security Advisor HR McMaster responded to the indictment by declaring the evidence that Russia interfered in the election “incontrovertible.” This indictment offers a way for even self-interested Republicans to start acknowledging the reality of what happened.

The indictment also gave Rod Rosenstein an opportunity to own this investigation with a press conference announcing it. None of the prosecutors tied to the case appeared (since I track these things, know that Jeannie Rhee, Rush Atkinson, and Ryan Dickey are on the docket), just Rosenstein. Hopefully, tying him to this non-offensive indictment will make it harder to fire Rosenstein, and thereby further protect Mueller.

Reiterating the crime of conspiracy to defraud the United States

The most interesting of the three crimes charged in the IRA indictment is the first, the conspiracy to defraud the United States. The indictment describes the conspiracy this way:

U.S. law bans foreign nationals from making certain expenditures or financial disbursements for the purpose of influencing federal elections. U.S. law also bars agents of any foreign entity from engaging in political activities within the United States without first registering with the Attorney General. And U.S. law requires certain foreign nationals seeking entry to the United States to obtain a visa by providing truthful and accurate information to the government.

Effectively, Mueller is saying that it’s not illegal, per se, to engage in political trolling (AKA information warfare), but it is if you don’t but are legally obliged to register before you do so. That’s an important distinction, because much of what these trolls did is accepted behavior in American politics — all sides did this in 2016, including people employed by campaigns and others expressing their own political opinions. Trolling (AKA information warfare) only becomes illegal when you don’t carry out the required transparency or reporting before you do so.

The charge of a conspiracy to defraud the United States has a very important parallel elsewhere in this investigation, in the first charge in the Paul Manafort and Rick Gates indictment. The indictment explains,

It is illegal to act as an agent of a foreign principal engaged in certain United States influence activities without registering the affiliation. Specifically, a person who engages in lobbying or public relations work in the United States (hereafter collectively referred to as lobbying) for a foreign principal such as the Government of Ukraine or the Party of Regions is required to provide a detailed written registration statement to the United States Department of Justice. The filing, made under oath, must disclose the name of the foreign principal, the financial payments to the lobbyist, and the measures undertaken for the foreign principal, among other information. A person required to make such a filing must further make in all lobbying material a “conspicuous statement” that the materials are distributed on behalf of the foreign principal, among other things. The filing thus permits public awareness and evaluation of the activities of a lobbyist who acts as an agent of a foreign power or foreign political party in the United States.

The Manafort indictment then argues that by hiding that the lobbying work they were doing was on behalf of Ukraine’s Party of Regions they, “knowingly and intentionally conspired to defraud the United States by impeding impairing, obstructing, and defeating the lawful governmental functions of a government agency, namely the Department of Justice and the Department of the Treasury.” I’ll have more to say about this parallel in coming days, but suffice it to say that Mueller is alleging that Manafort is the mirror image of the troll farm, engaging in politics while hiding on whose behalf he’s doing it (he was arguably doing the same in Ukraine). [Update: see this post for more on how this might work.]

In both cases, the indictments substantiate the conspiracy by naming a variety of crimes, like money laundering and identity theft.

I suspect we’ll be seeing more of this structure going forward (and suspect it’s something the numerous appellate specialists on Mueller’s team have been spending a lot of time thinking about).

Laying out how Americans might be involved with or without “colluding”

Much has been made of Rosenstein’s line, “There is no allegation in the indictment that any American was a knowing participant in the alleged unlawful activity.” I don’t read too much into that. Rather, I think Rosenstein included it because the indictment does explicitly and implicitly describe actions many Americans and possible Americans took that were part of this conspiracy. That includes:

Illegal compensated acvitities

  • Richard Pinedo: Selling Russian trolls (and others) bank account numbers they can use to conduct identity fraud
  • Unknown persons: Providing social security numbers and fake US drivers licenses of Americans
  • Unknown persons: Selling stolen credit card information

Presumptively legal compensated activities

  • Unknown Americans: Renting servers in the US to run VPNs to hide their foreign location
  • Yahoo, Gmail, Paypal: Providing email and PayPal accounts the Russians used as the basis for social media accounts
  • Twitter, Instagram, Facebook: Providing those social media accounts
  • Twitter, Instagram, Facebook: Selling advertisements on social media
  • Unknown Trump associates: Paying for IRA rally expenses
  • Paid providers: Building a cage, acquiring a costume, and posing as Hillary in prison stunt at a FL event
  • Unknown US person: Providing posters for a Support Hillary, Save American Muslims rally
  • Unknown American: Holding a sign in front of the White House on May 29, 2016

Uncompensated activities

  • Unknown Americans: Interacting with Aleksandra Krylova and Anna Bogacheva when they traveled to the US sometime between June 4 and June 26, 2014 to conduct reconnaissance and another co-conspirator that November
  • Members of the media: Accepting tips and promoting IRA events
  • A member of a real TX-based Tea Party organization: Advising the conspirators to focus on the purple states “like Colorado, Virginia & Florida”
  • Unwitting members, volunteers, and supporters of the Trump Campaign involved in local community outreach, as well as grassroots groups that supported then-candidate Trump: Distributing IRA materials through existing channels of those groups
  • Administrators of large social media groups focused on U.S. politics: Promoting IRA events
  • Trump volunteer: Providing signs for the March for Trump event and otherwise recruiting for it
  • A Florida-based political activist identified as the “Chair for the Trump Campaign” in a particular Florida county: Advising on more locations and logistics for the Florida Trump event
  • Campaign Officials 1, 2, and 3: discussing the Florida events

Later the indictment describes a database of 100 real US persons whom the trolls treated as recruiting targets, complete with profiling.

On or about August 24, 2016, Defendants and their co-conspirators updated an internal ORGANIZATION list of over 100 real U.S. persons contacted through ORGANIZATION-controlled false U.S. persona accounts and tracked to monitor recruitment efforts and requests. The list included contact information for the U.S. persons, a summary of their political views, and activities they had been asked to perform by Defendants and their co-conspirators.

Here’s the important thing about all this. While Pinedo pled guilty and faces 12-18 months even with his cooperation agreement (and even there, while the information makes it clear he knew he was dealing with foreigners, his lawyer has made it clear he didn’t know who or what he was dealing with), there are only two other known illegal roles in this conspiracy, and there’s no reason those roles would have had to be carried out by Americans. Perhaps Mueller has others cooperating, perhaps those other criminals are unknown. But as for the rest, they are (as Rosenstein made clear) not guilty of any kind of conspiracy with Russia.

DOJ just rolled out an indictment in which probably 20 Americans can recognize themselves (many of whom were likely interviewed), about as many as all the Trump officials named in one or another plea agreement so far. Yet, as far as Mueller knows, none of these people did anything but conduct business or engage in sincerely held politics. They almost certainly had far less reason to be suspicious of the trolls they were being used by than Facebook and Twitter. Those actions have been tainted now through no fault of their own.

Which is something to remember: I’ve seen Hillary supporters, in the same breath, criticize Bernie or Jill Stein supporters because their preferred candidate was treated favorably by the trolls, yet in the same breath suggesting the black and Muslim activists targeted are innocent victims.

Obviously, Hillary and her supporters are victims. But everyone is, even the Trump volunteers. Because to the extent they had honestly held beliefs, the Russian operation tainted those beliefs, it diminished the weight of their honestly held beliefs. They were used by Russian trolls, most of them without the same profit motive that led Facebook and Twitter to allow themselves to be used. And we should remember that.

Hinting at what the US has

There are, however, a few tactical things this indictment does, starting with hinting at what other evidence the US has. This indictment was relatively easy, in that Adrian Chen (in a June 2015 article that still gets too little attention), Facebook and (to a lesser extent) other social media outlets, the Daily Beast, and SSCI generally have already laid out what IRA did. The indictment slaps some criminal charges on fraudulent behavior that enabled it, and without showing much about any additional evidence Mueller collected, you’ve got a showy indictment.

There are two hints, however, of the additional evidence used (which, given that the named conspirators will never face trial, will never need to be disclosed or explained). First, in a passage about how IRA started to cover their tracks after Mueller started focusing on this activity, there’s the reference to Irina Kaverzina.

On or about September 13, 2017, KAVERZINA wrote in an email to a family member: “We had a slight crisis here at work: the FBI busted our activity (not a joke). So, I got preoccupied with covering tracks together with the colleagues.”

Kaverzina was just a low-level troll and this may be nothing more than Section 702 collected email off GMail or Yahoo, or it may be a more formal intercept. But Mueller obtained communications from at least one of the indictees. Emails from more senior people, such as Prigozhin or his more senior managers (or the IT guys buying server space in the US) would be more interesting.

Plus, Mueller likely obtained cooperation from one IRA employee, the unnamed person who traveled to Atlanta in November 2014 for reconnaissance. Had that person not cooperated, he or she would have been named in the indictment.

Nevertheless establishing the political stakes

I said above that none of the hundred-plus Americans who were unknowingly used by trolls should be considered anything but victims. Their chosen political views, loathsome or not, have now been tainted, and not because of anything they’ve done except perhaps show too much trust or credulity.

But there are hints that Mueller is using this indictment to set up a more important point.

For example, the indictment (perhaps because of Mueller’s mandate) focuses on political activities supporting or opposing one or another 2016 candidate. Even where topics (immigration, Muslim religion, race) are not necessarily tied to the election, they’re presented here as such. Unless Facebook’s public reports are wrong, this is a very different emphasis than what Facebook has said the IRA focused on. Which is to say that Mueller’s team are focusing on a subset of the known IRA trolling, the subset that involves the 2016 contest between Trump and Hillary.

And there are several events, in particular, that may one day serve as details in a larger conspiracy. Most interesting, for the timing and location, are the twin anti-Hillary and pro-Trump events in NYC in June and July 2016.

In or around June and July 2016, Defendants and their co-conspirators used the Facebook group “Being Patriotic,” the Twitter account @March_for_Trump, and other ORGANIZATION accounts to organize two political rallies in New York. The first rally was called “March for Trump” and held on June 25, 2016. The second rally was called “Down with Hillary” and held on July 23, 2016.

a. In or around June through July 2016, Defendants and their co-conspirators purchased advertisements on Facebook to promote the “March for Trump” and “Down with Hillary” rallies.

b. Defendants and their co-conspirators used false U.S. personas to send individualized messages to real U.S. persons to request that they participate in and help organize the rally. To assist their efforts, Defendants and their co-conspirators, through false U.S. personas, offered money to certain U.S. persons to cover rally expenses.

c. On or about June 5, 2016, Defendants and their co-conspirators, while posing as a U.S. grassroots activist, used the account @March_for_Trump to contact a volunteer for the Trump Campaign in New York. The volunteer agreed to provide signs for the “March for Trump” rally.

[snip]

On or about July 23, 2016, Defendants and their co-conspirators used the email address of a false U.S. persona, [email protected], to send out press releases to over thirty media outlets promoting the “Down With Hillary” rally at Trump Tower in New York City.

The description of a IRA-organized event at Trump Tower the day after WikiLeaks dropped the DNC emails, in particular, suggests the possibility of a great deal of coordination, coordination with people in the US.

Similarly, the extended descriptions of events in Florida may also take on added relevance in the future, particularly coming as they did in tandem with Guccifer 2.0’s release of DCCC data targeting FL. (And this, in turn, should focus even more attention on the FL congressmen like Matt Gaetz and Ron DeSantis who’re leading the pushback on Mueller’s investigation.)

Using the term “co-conspirator” 119 times

Perhaps most interesting, given the tiny nods to what other intelligence Mueller might have, are the 119 uses of the word “co-conspirators.” Almost all of these uses seem to necessarily mean unnamed IRA employees working from the same St. Petersburg location described as trolling. Several times the co-conspirators are clearly described as located in Russia. So it may be that all references to co-conspirators here are just a way to refer to the 70 other people involved in this operation at IRA. But that’s not necessarily the case.

Other uses of “co-conspirator” involve wider knowledge, perhaps an outsider’s knowledge of a go-between role Prigozhin might have had.

But others are things that might have involved a stateside co-conspirator, such as the mention of co-conspirators helping to set up the May 29, 2016 Prigozhin birthday tribute in front of the White House, co-conspirators tracking US social media use, co-conspirators engaged in identity theft, co-conspirators promoting claims of voter fraud, co-conspirators destroying data. Several of those things (such as tracking US social media use or claiming Hillary was going to steal the election) are things we know Trump associates were also doing. Others might be facilitated by someone stateside. So those uses of the term could be people not employed by IRA.

Which is to say, this indictment might be (probably is) intended to address just the activities of those employed by IRA. But that’s not necessarily the case.

Update: added the public indictment part.