Armed group seeks legitimacy with Tripoli migrant deal

File photo shows migrants standing in line as they wait to be transferred to Spanish frigate Canarias after being rescued by “Save the Children” NGO crew in the Mediterranean sea off Libya coast. (Reuters)
Updated 21 September 2017

Armed group seeks legitimacy with Tripoli migrant deal

ROME/TUNIS: A powerful armed group, known for smuggling people from Libya, is seeking legitimacy and state security jobs from the Tripoli government in exchange for stopping migrant boats from leaving the coast of Sabratha for Italy, a senior group member said.
The group, the Anas Al-Dabbashi brigade, struck a deal with Libya’s UN-backed Government of National Accord (GNA) this summer to clamp down on trafficking, the senior brigade member, who gave his name as Mohamed, told Reuters.
The need for the GNA to strike such a deal would illustrate the power of armed groups in western Libya, which continue to hold the real influence locally as they have since a 2011 uprising that ousted Muammar Qaddafi.
The revelation would also throw light on the fragility of the sharp recent reduction in migrant arrivals from Italy, which took over from the Aegean route as the main focus of European concerns in the crisis.
The GNA did not respond to requests for comment.
Local sources, who declined to be named, said there had been at least one meeting between government officials and Ahmed Al-Dabbashi, identified as one of the main “facilitators” of human smuggling in Libya in a UN report earlier this year.
Mohamed said there had been a number of such meetings, and that the brigade was also offered the possibility of an amnesty for past smuggling activity.
To show it could uphold the deal with Tripoli, the several-hundred-strong brigade has cracked down on departures with the help of the coast guard leading to an 80 percent fall in the arrival of rescued migrants in Italy last month, Mohamed said.
With a national election looming in the first half of next year, the government in Rome, which welcomed the sudden decline shown in official data, is under pressure to show it can stop, or at least slow, migration from the oil-producing desert state.
Libya remains split between rival political camps and armed alliances. The GNA has struggled to impose its authority on Tripoli and other parts of western Libya, and has been rejected by factions that control the east of the country.
Like normal police
Mohamed said the GNA, under pressure from Italy to halt the migrant flows, had exerted pressure on the Dabbashi brigade. The GNA “said that they would gather all the cities west of Tripoli against us, and they would come and fight us.”
“On the other hand, they have offered to let us join the police, and let us join the military,” Mohamed said. “If this plan goes forward and the (Tripoli) government was telling the truth... in six months time everybody in this battalion will be like normal police.”
A second source in Sabratha spoke to Ahmed Al-Dabbashi, who confirmed that Mohamed was a member of the brigade. It is the first time a brigade member has spoken at length about why the group suddenly shifted from smuggling to policing, a change first reported by Reuters last month.
Some international media reported that Dabbashi had received five million euros directly from Italy’s secret services to stop the migrant boats, but Mohamed denied this. Italy has also denied any direct payments to armed groups.
The fragility of the security situation in Sabratha was underscored by territorial clashes that erupted there over the weekend, with Dabbashi’s group battling cross-town rivals in some of the heaviest fighting the city has seen in recent years.
Explosions could be heard as far away as the port of Zawiya, 22 km away.
Both sides in the fighting claim to have the backing of the Tripoli government, and both battled together to drive Daesh out of the area last year.
‘Little bit smart’
With Italy and the EU offering millions of euros to local authorities in Libya who can put a cap on trafficking, armed groups have an interest in proving that they are the only ones who can police the territory.
“This smuggling thing — everybody knows that Libya is not going to be like this forever,” Mohamed said. “If you are just a little bit smart, you will go with the government.”
As a result of the policing by Dabbashi and coast guard interceptions, arrivals of rescued migrants in Italy fell 50 percent in July from a year earlier, and declined more than 80 percent in August — two months that had been peak periods during the previous three years.
Overall, there have been more than 100,000 arrivals in Italy this year, a decline of more than 20 percent compared to 2016, official Italian data show.
To rein in smuggling, Italy has spearheaded efforts to bolster the Libyan coast guard, and it is dealing directly with local governments to try to offer incentives for them to shut it down, including with Sabratha’s Mayor Hussein Al-Thwadi.
Forgiveness on table
Al-Thwadi sought support directly from Italy, meeting the ambassador earlier this month and Interior Minister Marco Minniti in July.
The Dabbashi brigade, which also guards an oil and gas facility west of Sabratha run jointly by Libya’s National Oil Corporation (NOC) and Italian firm Eni, denied any direct contacts with Italy. It is allied to Brigade 48, a group of some 300 soldiers aligned with the GNA.
“We only have deals with the (Tripoli) government,” Mohamed said. “They said they might forgive all of what we have done in the past,” he added, referring to people smuggling.
But it is unclear if Tripoli can deliver on its promises to integrate Dabbashi’s men, or whether any group can hold the line against forces who want to keep smuggling.
On Saturday, Libyan coast guard officials said they had turned back more than 1,000 migrants traveling in at least eight boats. On the same day, the Dabbashi brigade intercepted about 3,000 more, said Mohamed. More than 1,500 were rescued at sea and brought to Italy.
“A lot of people are pressuring us to stop this,” Mohamed said of Dabbashi’s crackdown on departing migrant boats. “They want to start (human trafficking) again.”

Cybersecurity firm: More Iran hacks as US sanctions loom

Alister Shepherd, the director of a subsidiary of FireEye, during a presentation about the APT33 in Dubai Tuesday. (AP)
Updated 20 September 2018

Cybersecurity firm: More Iran hacks as US sanctions loom

  • The firm warns that this raises the danger level ahead of America re-imposing crushing sanctions on Iran’s oil industry in early November.
  • Iran’s mission to the UN rejected FireEye’s report, calling it “categorically false.”

DUBAI: An Iranian government-aligned group of hackers launched a major campaign targeting Mideast energy firms and others ahead of US sanctions on Iran, a cybersecurity firm said Tuesday, warning further attacks remain possible as America reimposes others on Tehran.

While the firm FireEye says the so-called “spear-phishing” email campaign only involves hackers stealing information from infected computers, it involves a similar type of malware previously used to inject a program that destroyed tens of thousands of terminals in Saudi Arabia.

The firm warns that this raises the danger level ahead of America re-imposing crushing sanctions on Iran’s oil industry in early November.

“Whenever we see Iranian threat groups active in this region, particularly in line with geopolitical events, we have to be concerned they might either be engaged in or pre-positioning for a disruptive attack,” Alister Shepherd, a director for a FireEye subsidiary, told The Associated Press.

Iran’s mission to the UN rejected FireEye’s report, calling it “categorically false.”

“Iran’s cyber capabilities are purely defensive, and these claims made by private firms are a form of false advertising designed to attract clients,” the mission said in a statement. “They should not be taken at face value.”

FireEye, which often works with governments and large corporations, refers to the group of Iranian hackers as APT33, an acronym for “advanced persistent threat.” APT33 used phishing email attacks with fake job opportunities to gain access to the companies affected, faking domain names to make the messages look legitimate. Analysts described the emails as “spear-phishing” as they appear targeted in nature.

FireEye first discussed the group last year around the same time. This year, the company briefed journalists after offering presentations to potential government clients in Dubai at a luxury hotel and yacht club on the man-made, sea-horse-shaped Daria Island.

While acknowledging their sales pitch, FireEye warned of the danger such Iranian government-aligned hacking groups pose. Iran is believed to be behind the spread of Shamoon in 2012, which hit Saudi Arabian Oil Co. and Qatari natural gas producer RasGas. The virus deleted hard drives and then displayed a picture of a burning American flag on computer screens. Saudi Aramco ultimately shut down its network and destroyed over 30,000 computers.

A second version of Shamoon raced through Saudi government computers in late 2016, this time making the destroyed computers display a photograph of the body of 3-year-old Syrian boy Aylan Kurdi, who drowned fleeing his country’s civil war.

But Iran first found itself as a victim of a cyberattack. Iran developed its cyber capabilities in 2011 after the Stuxnet computer virus destroyed thousands of centrifuges involved in Iran’s contested nuclear program. Stuxnet is widely believed to be an American and Israeli creation.

APT33’s emails haven’t been destructive. However, from July 2 through July 29, FireEye saw “a by-factors-of-10 increase” in the number of emails the group sent targeting their clients, Shepherd said.