ChristoGrozev@bsky.social Profile picture
Oct 28, 2022 21 tweets 7 min read Read on X
Breaking: Norwegian authorities named the real identity of the fake "Brazilian researcher": his name is Mikhail Mikhushin, born 1978. This announcement is in line with what we, together with our investigative partners, had already discovered, and I will add some more details:
As a reminder, his cover identity was José Assis Giammaria (born 1984). It was clear that that was a fake identity, as we found that he first appeared on the horizon with that ID in 2006, when he applied for Brazilian passport and social security number claiming a BR mother.
(Mind you, 2006 is the year that at least three other GRU illegals - one of whom Maria Adela Kuhlfeld, or Olga Kolobova - obtained or tried to obtain South-American citizenship. The Peruvians caught "Kuhfeld"'s application and stopped the process, Brazil apparently was more lax).
But who was "Jose" in reality? We had a pretty good sense that he's a Russian citizen, and that his name is Mikhail. How did we know these two things? Because of his terrible opsec, as we will show you. Image
Our partners from @vgnett had found out the email account that "Jose" had used to apply for his university job. We then checked if this email had been breached before. It had (in a Linked-in breach in 2012), and we could find the password he had used for it. Image
So, we decided to check what other accounts had used the same password (and had been breached over the years). We found quite an interesting cluster of 24, 4 few of which stood out. Image
What was odd was that there were two accounts on Russian platforms. And both had words/concepts in the account name that were linked to Brazil or Portugese. AgrandeFamilia is/was a popular Brazilian sitcom. And Mika_Invasor literally means Mikhail The Invador. Great spy name! Image
(and btw, the mika-invasor email accounts had been used for ICQ and LiveJournal - which almost literally noone out of the former USSR has used in the last 15 years)
My favorite was probably this, however: using a now defunct email account, he had signed up for a DNA relative-tracing test at MyHeritage.com - incredible. Who did he expect to find? And what did the test show? Image
But back to our search for "Mikhail The Invador". A reverse face search in Russia's comprehensive passport system returned many lookalikes but not him. This meant either we're wrong that he's Russian, or that authorities had purged his passport file. We now know it's the latter. Image
So how do we know Norway's allegation of his name is correct? Well we got Mikhail's drivers' license photo. And here you go: Microsoft Azur (and our eyes) confirm it's the same person. Mikhail on the left, "Jose" on the right (literally and figuratively, check that T-shirt) Image
So we now know there's no Jose and the guy is a Russian spy called Mikhail Mikushin, 6 years older than his adopted identity (man, he wanted to be younger). But how do we know which intelligence service he is from? Let's check his address history in Russia.
Bingo! He was registered at the address of the dormitory of the GRU academy. Which means he's no less than a colonel! Great job, Norway - you've caught yourself a colonel from the GRU. Image
Not only did he get a free apartment at the coveted GRU academy residential quarters, but he's also wanted for unpaid property tax! You may invade the world, but in post-Soviet Russia, Tatyana from the Tax Office invades you. Image
What is also interesting is that he did travel back and forth to Russia, despite being deployed long-term undercover. (This is very different than the old, SVR illegals). For example, he was in Russia in June 2015 (seen from the date he got his drivers' license renewed).
Just 4 months later, he was campaigning for Canada's New Democratic Party. Image
He also visited Russia in June 2020, when he shopped at SegWave and EVEN left a raving review. He bought himself a scooter. ImageImage
BTW, same as "Maria Adela", who traveled back from Italy to Russia each summer summer and then again around Christmas under false pretenses of "caring for her aged adoptive mother". So GRU's illegals were not fully deprived of visitation rights to home. bellingcat.com/news/2022/08/2…
A couple of follow-up questions that came up in the replies, I will try to answer in the thread:
Q. How did you find his name if his passport file was deleted?
A: They can only remove his passport file from the live database. Can't go back in time and delete already leaked data.
Q: How would the Norwegian authorities have found out his real ID?
A: Don't know but I'd guess they did a search of his home, and almost certainly he had his Russian ID docs with him, considering he sometimes travels to Russia, as we found out. Or they hacked his phone.
Q: You said he was a colonel but graduates of the GRU academy may be majors, or even captains.
A: True, but even a captain in 2006 would definitely be a colonel latest in 2019 (because of how Russian rank awards work). In fact illegals get 3:1 "time served" ratio, so even earlier

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with ChristoGrozev@bsky.social

ChristoGrozev@bsky.social Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @christogrozev

Oct 4
I've been reporting to @Meta fake profiles that impersonate me on Facebook. Meta refuses to remove the impersonators, for some inscrutable reason considering impersonation of an investigative journalist to *not* be a violation or their terms. This is irresponsible and dangerous. Image
Image
. Not only did @Meta not remove the impersonators, but are *actively* pushing them to people. This is a fake account created in 2021. Facebook is suggesting to someone to add this fake person as their friend. Just imagine the risks from this irresponsible behavior. Image
@Meta To my real account, I constantly get unsolicited tips from whistleblowers who trust me. Imagine what would happen if/when a whistleblower contacts a fake account created by a bad state actor. @Meta is not simply helping spread disinformation, it's actively endangering lives.
Read 4 tweets
Sep 30
Pavel Durov, Telegram's founder, claims he was poisoned in 2018 (symptoms he describes are indeed are consistent with nerve agents/organoposphates). He chose "not to tell my colleagues so I wouldn't scare them"
I believe him this happened. Sadly, he didn't volunteer information on where this happened (I wish he had, so we could triangulate the usual suspects - in 2018 he was a MAJOR thorn in the side of Russian authorities). But thanks to leaked databases we can have some guesses.
Based on leaked travel data, he spent most of the time in 2018 in Dubai, interspersed with stays in Switzerland, France and the UK. Interestingly (likely coincidentally), he left the UK for Dubai a day after the Skripal poisoners left London for Moscow.
Read 6 tweets
Jul 23
In our new investigation into Russia's use of children for their military drone program, crucial evidence came from @tashurkevich's undercover phone calls. Here are some of the most striking confessions she extracted.
What are the tasks assigned to the kids? Well they sound like things from Ender's Game (link to full investigation here: )
Here Tatsiana calls "Maksim" who explains the kids' "oath of silence" in mentioning the war.
Read 6 tweets
Jun 19
If anyone had any doubts about the subvertive nature of Chinese AI freebies, here's a good example.
I decided to ask @deepseek_ai to do a mundane job: edit the text of a recent @the_ins_ru article to make it more vocal-delivery friendly, so we can record it as a podcast. SFSG. Image
Here's the beginning of the original article that DeepSeek totally promised would not alter, but for style edits Image
And here's the offered text that I almost choked while reading out to my daughter. Image
Image
Image
Read 6 tweets
May 10
NBC reports that, shockingly, during his latest Moscow pilgrimage Witkoff met with Putin and his two negotiators alone and without his own interpreter, relying - in breach of protocol - on a locally present one. . However, this seems half the problem (1/n)nbcnews.com/world/russia/r…
Here's the video released by the Kremlin. It clearly shows Witkoff pointing at the young woman and asking "Interpreter?", to which Putin & Co say "yes". Following that, cryptically Witkoff asks "from Embassy?", to which he again gets a confirmation.
So what embassy is the interpreter from? Obviously there's no Russian embassy in Moscow (unless Witkoff thinks so), so a logical conclusion is that he was assured she was, hm, sent by or approved by the US embassy? Anyway, let's look at who she is.
Read 10 tweets
Mar 19
Serbian opposition activists post photo of what is alleged to be a police Jeep with a mounted long range acoustic device. Visual and audio evidence already seen from open sources is compatible with the use of such devices. If this photo is verified then there's no doubt anymore.
This is especially ridiculous given that Russia's man in Belgrade, Deputy PM Aleksandar Vulin, publicly thanked Russian intelligence for "helping quash color revolution attempts" in Serbia. I.e. any use of sonic weapon would've been coordinated with/done by RU intel to begin with
And a reminder that Unit 29155 of GRU, whose members are very frequent visitors to Belgrade, spent years researching "potential capabilities of non-lethal acoustic weapon in urban warfare" Image
Read 4 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(