Breaking: Norwegian authorities named the real identity of the fake "Brazilian researcher": his name is Mikhail Mikhushin, born 1978. This announcement is in line with what we, together with our investigative partners, had already discovered, and I will add some more details:
As a reminder, his cover identity was José Assis Giammaria (born 1984). It was clear that that was a fake identity, as we found that he first appeared on the horizon with that ID in 2006, when he applied for Brazilian passport and social security number claiming a BR mother.
(Mind you, 2006 is the year that at least three other GRU illegals - one of whom Maria Adela Kuhlfeld, or Olga Kolobova - obtained or tried to obtain South-American citizenship. The Peruvians caught "Kuhfeld"'s application and stopped the process, Brazil apparently was more lax).
But who was "Jose" in reality? We had a pretty good sense that he's a Russian citizen, and that his name is Mikhail. How did we know these two things? Because of his terrible opsec, as we will show you. Image
Our partners from @vgnett had found out the email account that "Jose" had used to apply for his university job. We then checked if this email had been breached before. It had (in a Linked-in breach in 2012), and we could find the password he had used for it. Image
So, we decided to check what other accounts had used the same password (and had been breached over the years). We found quite an interesting cluster of 24, 4 few of which stood out. Image
What was odd was that there were two accounts on Russian platforms. And both had words/concepts in the account name that were linked to Brazil or Portugese. AgrandeFamilia is/was a popular Brazilian sitcom. And Mika_Invasor literally means Mikhail The Invador. Great spy name! Image
(and btw, the mika-invasor email accounts had been used for ICQ and LiveJournal - which almost literally noone out of the former USSR has used in the last 15 years)
My favorite was probably this, however: using a now defunct email account, he had signed up for a DNA relative-tracing test at MyHeritage.com - incredible. Who did he expect to find? And what did the test show? Image
But back to our search for "Mikhail The Invador". A reverse face search in Russia's comprehensive passport system returned many lookalikes but not him. This meant either we're wrong that he's Russian, or that authorities had purged his passport file. We now know it's the latter. Image
So how do we know Norway's allegation of his name is correct? Well we got Mikhail's drivers' license photo. And here you go: Microsoft Azur (and our eyes) confirm it's the same person. Mikhail on the left, "Jose" on the right (literally and figuratively, check that T-shirt) Image
So we now know there's no Jose and the guy is a Russian spy called Mikhail Mikushin, 6 years older than his adopted identity (man, he wanted to be younger). But how do we know which intelligence service he is from? Let's check his address history in Russia.
Bingo! He was registered at the address of the dormitory of the GRU academy. Which means he's no less than a colonel! Great job, Norway - you've caught yourself a colonel from the GRU. Image
Not only did he get a free apartment at the coveted GRU academy residential quarters, but he's also wanted for unpaid property tax! You may invade the world, but in post-Soviet Russia, Tatyana from the Tax Office invades you. Image
What is also interesting is that he did travel back and forth to Russia, despite being deployed long-term undercover. (This is very different than the old, SVR illegals). For example, he was in Russia in June 2015 (seen from the date he got his drivers' license renewed).
Just 4 months later, he was campaigning for Canada's New Democratic Party. Image
He also visited Russia in June 2020, when he shopped at SegWave and EVEN left a raving review. He bought himself a scooter. ImageImage
BTW, same as "Maria Adela", who traveled back from Italy to Russia each summer summer and then again around Christmas under false pretenses of "caring for her aged adoptive mother". So GRU's illegals were not fully deprived of visitation rights to home. bellingcat.com/news/2022/08/2…
A couple of follow-up questions that came up in the replies, I will try to answer in the thread:
Q. How did you find his name if his passport file was deleted?
A: They can only remove his passport file from the live database. Can't go back in time and delete already leaked data.
Q: How would the Norwegian authorities have found out his real ID?
A: Don't know but I'd guess they did a search of his home, and almost certainly he had his Russian ID docs with him, considering he sometimes travels to Russia, as we found out. Or they hacked his phone.
Q: You said he was a colonel but graduates of the GRU academy may be majors, or even captains.
A: True, but even a captain in 2006 would definitely be a colonel latest in 2019 (because of how Russian rank awards work). In fact illegals get 3:1 "time served" ratio, so even earlier

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Christo Grozev

Christo Grozev Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @christogrozev

Oct 28
Watching Nothing New on the Western Front while arguing in telegram with Russian soldiers in Ukraine about the inevitability of their demise. "don't bury us yet, this may be the demise or Britain instead. We can be in London soon".. and then this scene comes up. Image
"At least we do not live boring lives" as the last line of defense for this war. ImageImage
Ещё жду ответа. Image
Read 4 tweets
Oct 25
Wow. Norway arrested a "Brazilian" university researcher at University of Tromso, who studied "hybrid threats". The catch? He's a Russian spy, not a Brazilian professor. More to come soon.
vg.no/nyheter/innenr…
The researcher apparently graduated from the Center for Military Studies in Calgary. Also, implausibly, he worked on a hybrid-threats university project called "The Grey Zone" facebook.com/CMSS.Calgary/p…
So the latest crazy twist to the fake-Brazilian spy story is that he attended a hybrid threats working symposium in Vilnius sponsored by the EU, where one of the simulation topics was "what to do if Nord Stream pipelines are sabotaged". Image
Read 4 tweets
Oct 24
When I first confronted one of the missile programmers months ago, I asked him how he sleeps at night after what he does. He snapped back: "Be professional. Ask a professional question". I asked him why they kill so many civilians. He wrote "You know well I can't answer this".
Mind you, he seemed the nicest of them all. A guy who tweeted about the latest Hollywood movies, organized fashionista parties, had a hipstery beard, and listened to cool music. But clearly, he treated killing people as a day job.
Captain Ilyin, a missile programmer from the Kalibr team, and his wife were renting out a room in their apartment.
The main condition? "Only to a girl with a Slavic appearance".
These are the Russian "de-nazificators" of Ukraine.
Read 6 tweets
Oct 21
French intel blocked the Schengen visa application of a Russian woman concluding she's linked to a GRU spy from the infamous black ops unit 29155. However, I believe they made a serious blunder, confusing a cover GRU identity for his real-life namesake.
lemonde.fr/international/…
In late 2018, after @bellingcat identified the passport number range used by the Skripals poisoners, French Intel identified five other members of 29155 from the same range who had visited the French Alps. One of them was called Alexander Kulagin (cover name).
"Kulagin", a GRU colonel whose real name we also identifed, was one of over 30 members of the killer team of 29155 who had roamed Europe (including France) undetected for a decade, despite using consecutive-numbered passports, and having no real-life digital footprint.
Read 5 tweets
Oct 1
In a long rant clearly not written by the semi-literate (in Russian, not sure in Chechen) Kadyrov, he accuses Chief of Staff Gerassimov of ignoring his warnings that the commanding officer of Lyman=useless, and calls for use of "low-power nuclear weapons". Wonder who wrote this. ImageImage
(also, love the epitaph: "The whole situation would be great if it weren't so terrible")
And Prigozhin sides with Kadyrov, both clearly speaking on behalf of the ultra-hawks, and calling for blood-letting at the top of MoD. ImageImage
Read 4 tweets
Oct 1
And this is already confirmed also by Russian militant channels ("Whatever promises there were to send us reinforcements never materialized". So Lyman is in Ukrainian hands.
Center of town in Ukrainian hands, multiple Russian reports.
Not sure what happened to all 4k ++ Russian forces surrounded in Lyman, but this video from one of the entry roads from this morning suggests many of them were destroyed by artillery while trying to leave the town:
Read 7 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(