{"id":187416,"date":"2018-10-29T04:18:45","date_gmt":"2018-10-29T08:18:45","guid":{"rendered":"https:\/\/canadianinquirer.net\/v1\/?p=187416"},"modified":"2018-10-29T04:18:45","modified_gmt":"2018-10-29T08:18:45","slug":"russian-held-agent-studied-us-groups-cyberdefenses","status":"publish","type":"post","link":"https:\/\/canadianinquirer.net\/v1\/2018\/10\/29\/russian-held-agent-studied-us-groups-cyberdefenses\/","title":{"rendered":"Russian held as agent studied US groups’ cyberdefenses"},"content":{"rendered":"
\"\"<\/a>
\u201cWe have verified that all documents Internews provided to its students were publicly available, and we remain confident in the integrity of the State Department’s programs with Internews,\u201d he said. (File Photo: Robert J Palladino\/Twitter<\/a>)<\/figcaption><\/figure>\n

WASHINGTON \u2014 A year before federal prosecutors accused Maria Butina of operating as a secret agent for the Russian government, she was a graduate student at American University working on a sensitive project involving cybersecurity.<\/p>\n

Butina’s college assignment called for her to gather information on the cyberdefenses of U.S. non-profit organizations that champion media freedom and human rights, The Associated Press has learned. It was information that could help the groups plug important vulnerabilities, but also would be of interest to the Russian government.<\/p>\n

In fact, the Russians previously had in their sights at least two of the groups that she and other students interacted with.<\/p>\n

Butina participated in the project under the tutelage of a respected professor who advised the State Department on cybersecurity matters. It was carried out for the non-profit group Internews, which works extensively with the U.S. government to bolster the free flow of information in dangerous parts of the world and has drawn Russian ire with some of its programs in Russia and neighbouring countries.<\/p>\n

Internews confirmed Butina’s involvement and a broad description of what the project involved. A lawyer for Butina did not respond to a request for comment.<\/p>\n

Butina’s project raised few eyebrows before her July arrest, despite the fact that news reports already had posed questions about her rapid rise from selling furniture in Siberia and her ties with Kremlin officials.<\/p>\n

As part of the project, a small group of students led by Butina was given a list of Internews partners working on human rights and press freedom issues for research purposes only, with the understanding that they not be contacted without consultation. But the students contacted some of the groups anyway, according to people involved in the project who spoke on condition of anonymity because they were not authorized to describe the work.<\/p>\n

An individual who has worked on U.S. programs in Ukraine told the AP that after Butina’s arrest he was briefed by U.S. officials who expressed concern that two Internews programs in Ukraine \u2014 dealing with media freedom and cybersecurity, and funded by the State Department \u2014 may have been exposed to Russian intelligence and may be at risk due to Butina’s student work.<\/p>\n

State Department spokesman Robert Palladino said the department was not involved with the Internews project Butina worked on.<\/p>\n

\u201cWe have verified that all documents Internews provided to its students were publicly available, and we remain confident in the integrity of the State Department’s programs with Internews,\u201d he said.<\/p>\n

Kostiantyn Kvurt, who heads a local non-profit that Internews helped establish, Internews Ukraine, said he was unaware of Butina’s project before being informed of it by the AP, but already was wary of potential Russian intelligence interference.<\/p>\n

\u201cIf they understand how to break our firewalls, they could find our partners,\u201d Kvurt said. \u201cPeople could get detained, tortured, killed.\u201d<\/p>\n

Internews said the students were never given access to the group’s work or systems.<\/p>\n

\u201cThe selection of the students and their roles and activities in the research was solely determined by AU faculty,\u201d spokeswoman Laura Stein Lindamood said. \u201cInternews is currently reviewing our relationship with university-led student projects.\u201d<\/p>\n

The access that Butina won through her coursework illustrates how academia and the extensive network of entities that often carry out sensitive, but not classified, work for the U.S. government remain national security vulnerabilities. In this case, all the institutions expected someone else to vet Butina. Internews thought American University stood behind her; the university said it doesn’t do background checks and expects the State Department to vet foreign applicants fully before issuing visas.<\/p>\n

Prosecutors allege in court documents that attending the university was Butina’s \u201ccover\u201d as she cultivated political contacts and ties with the National Rifle Association. They contend she was part of a clandestine political influence campaign directed by a former Russian lawmaker who has been sanctioned by the U.S. Treasury Department for his alleged ties to Russian President Vladimir Putin.<\/p>\n

Butina’s student project was led by Eric Novotny, a cybersecurity expert who has a high security clearance as an adviser to the State Department. Novotny told the AP that even after press reports about Butina raised questions about her connections to the Russian government, he was obligated to treat her like any other student.<\/p>\n

\u201cI have always observed university policies and rules during my entire academic career,\u201d he said.<\/p>\n

The university declined comment, citing federal privacy rules.<\/p>\n

One of the organizations that Butina contacted, the prominent digital rights organization Electronic Frontier Foundation, had frequent contact with Internews on cybersecurity issues before and had previously been a Russian target.<\/p>\n

A June 14, 2017, encrypted email that Butina wrote to cybersecurity director Eva Galperin began: \u201cMy name is Maria Butina and I’m the captain of an American University student group doing research on U.S (civil society organizations) and their cyber security challenges. We have several questions about cyber security concerns facing human rights organizations and your expertise would be very beneficial.\u201d<\/p>\n

The Electronic Frontier Foundation often helps train at-risk civil society groups both in the U.S. and abroad. In 2015, the organization said Google had alerted it to a knockoff EFF site \u201calmost certainly\u201d operated by the infamous Russian cyberespionage ring now widely known as Fancy Bear. U.S. authorities say the hackers \u2014 who rattled the 2016 U.S. presidential campaign by releasing tens of thousands of Democrats’ emails \u2014 are members of Russia’s military intelligence agency.<\/p>\n

Novotny, who was later interviewed by the FBI about Butina, learned his instructions about not reaching out to partners had been ignored when the cybersecurity adviser of one non-profit called him after becoming suspicious that a Russian student was asking about cyber vulnerabilities. He sternly warned the students not to ignore the protocol.<\/p>\n

AP found no evidence that Butina passed any information from the university project to Moscow, but the work allowed her to contact likely Russian targets.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

WASHINGTON \u2014 A year before federal prosecutors accused Maria Butina of operating as a secret agent for the Russian government, …<\/p>\n","protected":false},"author":44,"featured_media":187417,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16,17],"tags":[],"class_list":["post-187416","post","type-post","status-publish","format-standard","has-post-thumbnail","category-news","category-news-w","mauthors-desmond-butler","mauthors-the-associated-press"],"_links":{"self":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts\/187416","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/comments?post=187416"}],"version-history":[{"count":0,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts\/187416\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/media\/187417"}],"wp:attachment":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/media?parent=187416"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/categories?post=187416"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/tags?post=187416"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}