Thread by @DawsonSField

Breaking!
Neustar's access to government networks was worse than we thought!
And I thought they had everything!

It appears Neustar was subcontracted for EOP by Verisign, Inc. who had the federal contract to provide DNS services for ALL .gov websites!
#ButNothingsHappening

Verisign Inc. was providing DNS services for the entire .gov system under a contract with GSA.
The earliest contract that makes clear that they are managing the .gov domain for the federal government is in 2010 or 2011, but there are contracts earlier.
usaspending.gov/award/CONT_AWD…

Here is the contract from 2016 that was recently extended until June of 2022.
In 2014 when Neustar got access to do DNS services at the Executive Office of the President, Verisign was the contractor for all .gov domains. If Neustar was a subcontractor, it was for Verisign.

Neustar was brought in to offer DNS resolution which is a security solution that gives their servers all the DNS data for that domain. This 2014 assignment might have been specific to the EOP, but that is uncertain.
.gov domains include federal, state, local & tribal governments.

If you saw my previous thread, Neustar was providing law enforcement secure VPNs for the FBI, DEA, ATF, & USMS starting in 2010.
Potentially giving them access to secure FBI communications.

https://twitter.com/DawsonSField/status/1488566212393111554?s=20&t=ca2-2vyEQ1RiLWiFv5do_w

From 2010-2014 Neustar acquired all of these agencies as clients. Until 9/2/17 all of these were sole provider contracts claiming no one but Neustar could provide the service.

https://twitter.com/DawsonSField/status/1488566237701550086?s=20&t=ca2-2vyEQ1RiLWiFv5do_w

Following a still classified OIG investigation into Insider Threats in FBI Classified Networks, delivered on 9/22/17, all of these contracts are allowed to expire & DOJ's law enforcement agencies no longer need Neustar in their networks.

https://twitter.com/DawsonSField/status/1488566250120921091?s=20&t=ca2-2vyEQ1RiLWiFv5do_w

But we don't know how widely Verisign was using Neustar to provide DNS security solutions, that also allowed them to data mine information from the Executive Office of the President.
But I now know what Neustar did next.

See this contract with Verisign?
It's really Neustar!

After Neustar lost it's DOJ network contracts, it most certainly remained a subcontractor for Verisign.
Then on 10/25/18 it was announced that Neustar was buying Verisigns security solutions DNS contracts & would take over the service.

Neustar was providing subcontracted security services to Verisign, took over the entire contract from Verisign, but the bills still say Verisign.
Which is why they have escaped us for so long. itsecurityguru.org/2018/10/26/neu…

How does Neustar provide that solution?
By taking it's customers' internet and placing it all inside Neustar's custom network.

Not just DNS queries, websites, emails, & other systems of all US government computer networks were placed inside Neustar's private network of servers!

And the contracts still said Verisign if you went digging to do investigative research on them...

Let's go to an incident revealed in one of Durham's filings. Sussmann approached OIG in Spring of 2017 claiming he had data from Joffe showing an OIG employee connecting to a foreign VPN.
Did this data come from providing DNS security for Verisign?

https://twitter.com/DawsonSField/status/1486164251412766723?s=20&t=ca2-2vyEQ1RiLWiFv5do_w

Indicates that Joffe had the ability to spy upon DOJ Office of the Inspector General employees!
What dates did OIG investigate FBI networks?
April 2014 until March 2017!
Neustar got the DNS security contract in 2014, Sussmann approached OIG in March 2017

https://twitter.com/DawsonSField/status/1486166427832926212?s=20&t=ca2-2vyEQ1RiLWiFv5do_w

Then one week after Durham revealed evidence that Joffe was spying on OIG employees. OIG's .gov website went offline because of an expired SSL security certificate.
The feds by these certificates from Verisign, the only company authorized to provide them.

https://twitter.com/DawsonSField/status/1488246236696174602?s=20&t=ca2-2vyEQ1RiLWiFv5do_w

What power to datamine do you have if you have every DNS click, email, & document sent by every federal government employee in unclassified networks, inside your network?
You have all the power to blame & frame federal agencies with real & false allegations.

Then in 2020, Neustar took over all of Verisign's public DNS business too! Making them even more powerful & possibly replacing data they lost when Obama's FCC took their contract for running the US phone system. home.neustar/about-us/news-…

@markjohnt3 pointed out an interesting coincidence.

Verisign's Board of Directors includes ClintonistaJamie Gorelick, Deputy Attorney General to Janet Reno from 1994-97, the predecessor of DAG Eric Holder in that office.
investor.verisign.com/board-director…

I think we now know why Joffe wanted to become the top cybersecurity official in the federal government.

A job promised to him by Democrats & members of Hillary Clinton’s campaign! They never thought she would lose!

https://twitter.com/DawsonSField/status/1438607728637882372?s=20&t=triq9SFIANbK3OyY5KW0UQ