Christo Grozev Profile picture
Oct 28, 2022 21 tweets 7 min read Read on X
Breaking: Norwegian authorities named the real identity of the fake "Brazilian researcher": his name is Mikhail Mikhushin, born 1978. This announcement is in line with what we, together with our investigative partners, had already discovered, and I will add some more details:
As a reminder, his cover identity was José Assis Giammaria (born 1984). It was clear that that was a fake identity, as we found that he first appeared on the horizon with that ID in 2006, when he applied for Brazilian passport and social security number claiming a BR mother.
(Mind you, 2006 is the year that at least three other GRU illegals - one of whom Maria Adela Kuhlfeld, or Olga Kolobova - obtained or tried to obtain South-American citizenship. The Peruvians caught "Kuhfeld"'s application and stopped the process, Brazil apparently was more lax).
But who was "Jose" in reality? We had a pretty good sense that he's a Russian citizen, and that his name is Mikhail. How did we know these two things? Because of his terrible opsec, as we will show you. Image
Our partners from @vgnett had found out the email account that "Jose" had used to apply for his university job. We then checked if this email had been breached before. It had (in a Linked-in breach in 2012), and we could find the password he had used for it. Image
So, we decided to check what other accounts had used the same password (and had been breached over the years). We found quite an interesting cluster of 24, 4 few of which stood out. Image
What was odd was that there were two accounts on Russian platforms. And both had words/concepts in the account name that were linked to Brazil or Portugese. AgrandeFamilia is/was a popular Brazilian sitcom. And Mika_Invasor literally means Mikhail The Invador. Great spy name! Image
(and btw, the mika-invasor email accounts had been used for ICQ and LiveJournal - which almost literally noone out of the former USSR has used in the last 15 years)
My favorite was probably this, however: using a now defunct email account, he had signed up for a DNA relative-tracing test at MyHeritage.com - incredible. Who did he expect to find? And what did the test show? Image
But back to our search for "Mikhail The Invador". A reverse face search in Russia's comprehensive passport system returned many lookalikes but not him. This meant either we're wrong that he's Russian, or that authorities had purged his passport file. We now know it's the latter. Image
So how do we know Norway's allegation of his name is correct? Well we got Mikhail's drivers' license photo. And here you go: Microsoft Azur (and our eyes) confirm it's the same person. Mikhail on the left, "Jose" on the right (literally and figuratively, check that T-shirt) Image
So we now know there's no Jose and the guy is a Russian spy called Mikhail Mikushin, 6 years older than his adopted identity (man, he wanted to be younger). But how do we know which intelligence service he is from? Let's check his address history in Russia.
Bingo! He was registered at the address of the dormitory of the GRU academy. Which means he's no less than a colonel! Great job, Norway - you've caught yourself a colonel from the GRU. Image
Not only did he get a free apartment at the coveted GRU academy residential quarters, but he's also wanted for unpaid property tax! You may invade the world, but in post-Soviet Russia, Tatyana from the Tax Office invades you. Image
What is also interesting is that he did travel back and forth to Russia, despite being deployed long-term undercover. (This is very different than the old, SVR illegals). For example, he was in Russia in June 2015 (seen from the date he got his drivers' license renewed).
Just 4 months later, he was campaigning for Canada's New Democratic Party. Image
He also visited Russia in June 2020, when he shopped at SegWave and EVEN left a raving review. He bought himself a scooter. ImageImage
BTW, same as "Maria Adela", who traveled back from Italy to Russia each summer summer and then again around Christmas under false pretenses of "caring for her aged adoptive mother". So GRU's illegals were not fully deprived of visitation rights to home. bellingcat.com/news/2022/08/2…
A couple of follow-up questions that came up in the replies, I will try to answer in the thread:
Q. How did you find his name if his passport file was deleted?
A: They can only remove his passport file from the live database. Can't go back in time and delete already leaked data.
Q: How would the Norwegian authorities have found out his real ID?
A: Don't know but I'd guess they did a search of his home, and almost certainly he had his Russian ID docs with him, considering he sometimes travels to Russia, as we found out. Or they hacked his phone.
Q: You said he was a colonel but graduates of the GRU academy may be majors, or even captains.
A: True, but even a captain in 2006 would definitely be a colonel latest in 2019 (because of how Russian rank awards work). In fact illegals get 3:1 "time served" ratio, so even earlier

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Christo Grozev

Christo Grozev Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @christogrozev

Apr 3
In addressing the Havana Syndrome controversy, I'd stick to the old golden triangle for crime investigations: who had the Motive, Means and Opportunity - and if a suspect is found, does s/he have an Alibi (short thread)
In his February 2012 "election" platform essay, Putin wrote: Image
That same year, Putin created a military R&D program that was tasked with developing "directed energy weapons", among other "futuristic" weapons. This was clearly Putin's pet project. Image
Read 12 tweets
Nov 30, 2023
Our friends at @agents_media used recently hacked Russian airline booking data to prove what Polish authorities have claimed all along: that "Pablo Gonzales", aka Pavel Rubtsov, is in fact a GRU operative. They found joint flight bookings between him and GRU officer Sergey Turbin
What I can add is that Sergey Turbin is not just any GRU operative (as seen from his address registration at the GRU academy); he belongs to GRU's 5th Department, i.e. the one running the illegals program. His phone number appears in call records of members of the 5th department.
In particular, he made dozens of phone calls to Andrey Ilchenko, a top-ranking GRU general who oversees the illegals program - and who also supervised the so-called "Bonanza Media" project and ran a discreditation campaign against @Bellingcat
Read 5 tweets
Aug 23, 2023
Russian telegram channels show (graphic) video of wreckage of plane on which Prigozhin and Utkin/Wagner were registered to have flown. Still anticipating evidence that Prigozhin did fly on that plane (and didn't just send a decoy).
and a video of the falling plane with 10 passengers on board (competing narratives in Russian channels of "two S300 missiles" vs "bomb on board" circulating for now).
Prigozhin's second plane is now landing, and everyone is holding their breath if he doesn't show up alive on it. If he does (less likely than the alternative), that will be a second humiliation for Putin in 60 days.
Read 7 tweets
Aug 19, 2023
I keep getting asked what's going to happen with PMC Wagner. My answer usually is "no one knows, not even Prigozhin or Putin", but there are a few things that can be put on the record for the time being, based both on leaks by in-fighting clans, ex-mercs, & phone data (short 🧵)
First, a reminder of the context: at the start of the war, Wagner was not invited to the table. On the assumption of a quick victory for 🇷🇺, generals at MoD and GRU set up their own PMC, both to seize control away from Prigozhin, but also to dip into the (corrupt) funding flows.
The top general who in late 2021 was put in charge of creating the new PMC (variously called Reduta or Zvezda) was Gen. Vladimir Alexeev (yes, the same one who famously sat down to negotiate with Prigozhin on the day of the abortive coup attempt)
Image
Image
Read 14 tweets
Aug 4, 2023
Russian channels report three naval drones attacked the Crimea bridge (official reports claim drones were destroyed), but another drone reported hitting an oil tanker approx 30 miles from the bridge...which may have been the real 🎯? Image
Indeed, the Sig oil tanker that Russian channels report was hit, was in the right place near the bridge and appears to have shuttled oil between Crimea and Syria, worked for Russian armed forces and was thus a legitimate military target.
Image
Image
Ukrainian telegram channels publish alleged intercepts of conversation of the crew of the Sig tanker; they talk of a fully flooded engine room and an immobilized vessel.
Read 4 tweets
Jul 24, 2023
Russian media report that a drone attacked buildings near Komsomolsky prospect 17 in Moscow; traffic down this avenue has been closed. What is interesting is that this address is just across from the headquarters of GRU's cyber offense (incl. FancyBear), among other mil. units Image
At this location is also the Military University () and several top-secret GRU facilities, including the head of their illegals program. If Ukraine hit that building complex, the symbolic damage to MoD/GRU will be very significant.vumo.mil.ru
Russia's MoD building, with smoke from the drone that Russia says was shot down before it reached its target. Image
Read 4 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(