Profile picture
The_War_Economy @The_War_Economy
, 35 tweets, 16 min read Read on Twitter
On December 31, 2018, Josh Gerstein at Politico published the article "Suspect's Twitter messages played role in NSA hacking-tools leak probe".

politico.com/story/2018/12/…
"Messages that the former NSA computer security specialist, Hal Martin, sent via Twitter appear to have led to an FBI raid on his Maryland home and to his arrest on charges of retaining a vast trove of classified information there without permission."

politico.com/story/2018/12/…
For reference, Harold T. Martin III was arrested on August 27, 2016 after the Shadow Brokers initiated a hunt within the National Security Agency, where they found 16 years worth of classified information.

nytimes.com/2016/10/20/us/…

nytimes.com/2016/10/07/us/…
The Shadow Brokers themselves first appeared to post information around the web on August 13, 2016. So there is a total of 14 days between the Shadow Brokers' first appearance and the arrest of Harold Martin.

web.archive.org/web/2016081515…
It was on August 25, 2016 that the Federal Bureau of Investigation to investigate Hal Martin's Twitter account, HAL_999999999.

politico.com/f/?id=00000168…
HAL_99999999 sent a private Twitter message to [REDACTED], which included a request for a meeting and a message, "shelf life, three weeks".

politico.com/f/?id=00000168…
This is Harold Martin's Twitter account. It is protected and it was created on July 18, 2010.
The YouTube video linked on Harold's Twitter profile is "black water sniper kill's 100 insurgents YouTube".

Apparently on August 28, 2016, the Shadow Brokers posted their second message, after their initial auction received modest buyers.

motherboard.vice.com/en_us/article/…
The Shadow Brokers' third message was on October 1, 2016.

"'Hello World!' TheShadowBrokers is sending message #2 weeks ago, but media no make big story?"

medium.com/@shadowbrokers…
The announcement of Harold Martin's arrest happened on October 5, 2016.

justice.gov/usao-md/pr/gov…
"The criminal complaint was announced by United States Attorney for the District of Maryland Rod J. Rosenstein; Assistant Attorney General for National Security John P. Carlin; and Special Agent in Charge George B. Johnson of the FBI, Baltimore Field Office."
The Shadow Brokers then posted another message on October 15, 2016, "TheShadowBrokers Message #4 Bill Clinton/Lynch Conversation".

They cancelled the auction on the same day.

pastebin.com/NpeiJKav
hahahah
Dear God, I wasn't expecting this insanity thrown in. It's hilarious.

pastebin.com/NpeiJKav
Joseph Menn and John Walcott published the article "Exclsuive: Probe of leaked U.S. NSA hacking tools examines operative's mistake" in Reuters on September 22, 2016.

reuters.com/article/us-cyb…
"A US investigation into a leak of hacking tools used by the National Security Agency is focusing on a theory that one of its operatives carelessly left them available on a remote computer and Russian hackers found them, 4 people with direct knowledge..."

reuters.com/article/us-cyb…
"NSA officials have told investigators that an employee or contractor made the mistake about three years ago during an operation that used the tools, the people said.

That person acknowledged the error shortly afterward."

reuters.com/article/us-cyb…
Note that after the Shadow Brokers happened and Harold Martin was arrested, Robert Mueller was then hired on October 19, 2016 to conduct a review of Booz Allen Hamilton's security, personnel and management processes.

The Shadow Brokers' Twitter account was created on August 13, 2016.
Apparently the Shadow Brokers also had the Twitter account EQGRP_Auction, which no longer exists.
Could have been fake, similar to the other Guccifer 2.0 account that came into being - apparently EQGRP_Auction had an account creation date of April 29, 2013.
"... there were debates at NSA over the years about how far to go in monitoring employees and contractors, and the decision often went in the direction of respecting the privacy of employees. 'You can't have too much Big Brother.'"

Of course!

nbcnews.com/news/us-news/n…
"Not every keystroke by every NSA employee is monitored, officials said, and nor is every person searched every day when leaving the facility. Thumb drives and and other portable devices are largely prohibited but there are many exceptions for many reasons."
Just Shadow Brokers making random posts on Reddit, I guess, to promote their auction.

reddit.com/r/Bitcoin/comm…
They created their account on August 1, 2016. And indeed, their first post to any subreddit - which generated zero response - was August 13, 2016.
The Shadow Brokers account posted an angry message on April 8, 2017, presumably in response to the First Syria Missile Crisis, as I call it, which happened the day before.

old.reddit.com/r/ShadowBroker…
"Some American's consider or maybe considering TheShadowBrokers traitors. We disagreeing. We view this as keeping our oath to protect and defend against enemies foreign and domestic."

Followed by the password to the EQGRP Auction Files.
This is apparently the same as the message they posted on April 8, 2017 to Medium, "Don't Forget Your Base".

medium.com/@shadowbrokers…
It was on August 15, 2016 that the Shadow Brokers posted to tumblr (page does not exist anymore) about their breaching of the Equation Group.

wired.com/2016/08/hacker…
The Shadow Brokers apparently called it quits on January 12, 2017.

"So long, farewell peoples. TheShadowBrokers is going dark, making exit. Continuing is being much risk and bullshit, not much bitcoins. TheShadowBrokers is deleting accounts..."

motherboard.vice.com/en_us/article/…
Joseph Cox apparently managed to secure a small interview with The Shadow Brokers on December 15, 2016.

motherboard.vice.com/en_us/article/…
"TheShadowBrokers no arrested. TheShadowBrokers is not being irresponsible criminal. TheShadowBrokers is opportunists. TheShadowBrokers is giving 'responsible parties' opportunity to making things right."

motherboard.vice.com/en_us/article/…
On October 31, 2016, The Shadow Brokers published "Message #5 - Trick or Treat?" in Medium.

medium.com/@shadowbrokers…
Dmitri Alperovitch blamed Russia for The Shadow Brokers.

businessinsider.com/shadow-brokers…
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to The_War_Economy
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @The_War_Economy see all

Profile picture
pewdiepie won't.
I just watched the clip and it's Baked Alaska doing the Hit or Miss song, but it's Alex Jones voice clips. That's it. But yes, pewdiepie will now be declared a Nazi again by the media.
Read 3 tweets
Profile picture
"Moscow-based Kaspersky Lab turned Harold T. Martin III in to the NSA after receiving strange Twitter messages in 2016 from an account linked to him".
"Martin used an anonymous Twitter account with the name 'HAL999999999' to send five cryptic, private messages to two researchers at [Kaspersky Lab]."

"After each researcher responded to the confusion messages, Hal blocked them."

politico.com/story/2019/01/…
August 13, 2016 was the first message to the Kaspersky Lab researchers.

"So... figure out how how we talk. With Yevgeny present."

"Shelf life, three weeks."

politico.com/f/?id=00000168…
Read 11 tweets
Profile picture
In the Equation Group dump is a module known as "m12000000", or TADAQUEOUS, which does not have a Listening Post (LP) attached to it.

"It can only be loaded and unloaded through this interface, not controlled, and it will spit an error message."

laanwj.github.io/2016/09/01/tad…
What apparently TADAQUEOUS does is cripple or disable IPsec, or Internet Protocol Security.

"Most of the symbols are not standard Linux symbols but specific to the TOS/Fortinet implementation."

laanwj.github.io/2016/09/01/tad…
"I read this to mean that the hardware or software of the system running IPsec was compromised, causing it to send valid protocol ESP packets, but creating those in such a way that these could be decrypted without knowing the ESP session keys (from IKE)".

laanwj.github.io/2016/09/01/tad…
Read 23 tweets

Related threads

Profile picture
1. in Sep #JudgeHowell, who oversees #FedGrandJury-related cases, saw #MichaelDreeben (of the #MuellerTeam) & issued a ruling on a subpoena.
On the 10th Dec we began to get the news that the #DC #CircuitCourtOfAppeals was engaged in secret #GrandJury arguments. ......
2. ......@dsamuelsohn, of #POLITICO, #tweeted showing a #USCourtOfAppeals doc.
On Friday, 14th Dec, word came that not only the courtroom, but an entire floor had been sealed.
POLITICO
politico.com/story/2018/12/…
#Inquisitr
inquisitr.com/5209950/muelle…
On 15th Dec many had put......
3. ......the pieces together realizing that this was all linked to an individual the #MuellerProbe wanted to question on the #FakeRussiaCollusion #WitchHunt.
It wasn't some epiphany, but rather common sense that has brought forth the unconfirmed reports that it was in fact......
Read 5 tweets
Profile picture
💣BOOM💣

Huge News Day!

📌Mueller has emails from Stone pal Corsi re WikiLeaks Dem email dump

📌CorsiEmail: Word is (J-Ass) plans 2 more dumps...Impact planned to be very damaging,"

Manafort’s lies give Mueller an excuse to publish everything re Manafort’s “crimes and lies,”
💣BOOM2💣

&/or new info re 2016 Trump Tower meeting; RU offer to help the campaign, or details about the Assange?

Birther Jerome Corsi admits he helped Roger Stone concoct a ‘cover story’ for infamous prediction about hacked emails
💣Manafort💣

‼️Manafort Recap:

📌Per Christopher Steele’s Dossier Manafort was at the center of a “well-developed conspiracy of cooperation” btwn the Trump campaign & RU’s leadership.

The two sides had a mutual interest in defeating HRC, whom Putin “hated and feared”.
Read 90 tweets
Profile picture
💣Complicit💣

Let this sink in...

Kush urged Trump to stand by MBS, & argued that outrage over Khashoggi’s brutal murder “will pass, like the kidnapping of Lebanon’s PM & the killing of a busload of children by a Saudi airstrike.

📌WH had TS SIGINT in advance of killing.
💣Complicit2💣

Saudi Arabia is putting money in Trump’s pocket. Is that shaping U.S. policy?

"It certainly looks that way to me," Trump said as he departed from Joint Base Andrews. "It's very sad. Certainly looks that way."

📌Rumor has it MBS & Kush chat via WhatsApp! #SIGINT
💣Complicit3💣

📌CT:”Trump (& some adult family) negotiated a deal w/ the Saudis and the Emiratis for 3.6 billion to get rid of Iran nuclear deal & reimpose sanctions.

The payment was made in two installments.

📌The first last year & the second earlier in 2018”

#Complicit
Read 73 tweets
Profile picture
30/ This one is really upsetting. Anti-gay activist Earl Kimmerling fostered 50 kids. One was to be adopted by a gay man, so he & wife adopted her to stop gay adoption then he raped her. 40 years in prison.
heraldbulletin.com/news/local_new…
31/ This is now contested, though he confessed. Republican Party leader and Sheriff's Deputy convicted of molesting his children. I just have a hard time believing a deputy made a false confession.
ordinaryevil.wordpress.com/2009/08/11/hea…
32/ GOP Election official Kevin Coan soliciting underage sex with 14 yo who was really a cop - shades of To Catch a Predator
qconline.com/news/illinois/…
Read 82 tweets
Profile picture
Seriously, what do people expect from Trump & Sessions? To hold a press conference laying out their investigative and prosecutorial plans regarding a deadly & dangerous criminal cabal just to satisfy our curiosity? Get real. It must be done quietly, there's no second chances.
Read 16 tweets
Profile picture
1) #SaveTheKids Now that I have a following, I am recreating...in a single, threaded post...my 27-point story of the #Treason against the US committed by #Hillary, #Obama, and the #Cabal, starting w/ #UraniumOne and #IranNukes deals. washingtonexaminer.com/fbi-agents-who…
2) Trump was recruited by #Patriots/#Military as the only outsider (not part of establishment) who could really #DrainTheSwamp, which is much worse than the aforementioned #Treason. He is protected by the #Marines in particular. washingtonpost.com/news/post-poli…
3) #SethRichMurder The #Cabal, which includes corrupt Dems/GOP, never expected #HRC to lose. They owned #FakeNews #LSM (lying socialist media), rigged #DNC primary for #Hillary, and unsuccessfully rigged actual election w/electronic voting politico.com/magazine/story…
Read 27 tweets

Trending hashtags

#EmbraceUnity #TraitorTot #JAss #McCain #Traitors #MaryCassatt #weinsteinscandal #PAM #PAMFAM #BillClinton #ChildrenAsHostages #Nukelin #FusionGPS #MichaelCohen #EpicBurn #TariffsAreTheGreatest #Memo #fortyfive #FrameTrump #CPTPP #ThePatriotTimes #Insurancepolicy #NAFTA #LovePopeFrancis #HillaryClinton

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!