Friendly Fire How GCHQ Monitors Germany, Israel and the EU
Part 2: A Continuation of Echelon?
When GCHQ officials were asked about the suspicion arising from the documents that their organization engages in large-scale industrial espionage, they stated that while they were unwilling to address specific details, "one of the purposes for which GCHQ may be authorized to intercept communications is where it is necessary for the purpose of safeguarding the economic well-being of the UK" or state security. "Interception under this purpose is categorically not about industrial espionage," it stated.
The NSA also denied in a statement that it uses its "foreign intelligence capabilities to steal the trade secrets of foreign companies on behalf of -- or give intelligence we collect to US companies." In another statement, NSA officials said, "The United States collects foreign intelligence just as many other governments do."
Either way, it appears the British have come relatively close to the goals they state elsewhere in the documents to "exploit global telecommunications" and of "mastering the Internet." The documents that were reviewed also suggest that the satellite dragnet is likely a continuation of the legendary global Echelon surveillance network, which was the subject of an investigation by a committee of the European Parliament in 2000.
In their 2001 final report, the EU politicians presented a wealth of convincing evidence of industrial espionage allegedly committed through Echelon, and also made various demands on the United States. But only a few weeks later, the events of 9/11 pushed the criticism of the EU's partner to the back burner.
A map from the wealth of classified documents obtained by Snowden on the so-called "Fornsat" activities of the technical intelligence cooperation program -- informally known as the Five Eyes -- shows that the system of global satellite surveillance remained in operation.
Bude is referred to by its codename "Carboy" under a heading titled "Primary Fornsat Collection Operations." Another collection point in the alliance that also appears in the documents is the NSA's Sugar Grove listening post in northern Virginia, codenamed "Timberline."
It has been clear since the release of the Echelon report that intelligence services eavesdrop on international communications conducted by satellite -- and Germany's BND foreign intelligence agency is no exception. What is so politically charged about the current revelations is that the names and institutions of European neighbors, including EU representatives and various UN organizations, appear to be listed in the target databases. It would be hard to consider this to be anything less than an intelligence service attack on friends. The question now is whether the names and institutions are also intelligence targets for the NSA.
Israel Spying May Cause Tensions for US
GCHQ and NSA agents work together closely at Bude, which is a jointly operated listening post. Clearly the visitor from the United States who was so enchanted by the scenic Cornwall landscape was far from an isolated case. In fact, there are NSA agents who are permanently assigned to the Cornwall facility. The Guardian reported over the summer, based on information from other documents in the Snowden archive, that the NSA even assumed redevelopment costs of more than $20 million (14.5 million). According to a secret GCHQ document from 2010, the British were making an effort to at least satisfy the NSA's minimum expectations, but had trouble keeping up with demand from the United States.
The close cooperation between Britain and the United States could prove highly controversial because the intelligence workers in Bude also targeted Israel. At least four Israeli targets are named in GCHQ lists, including an email address named as the "Israeli prime minister." The paper dates from 2009, when Ehud Omert was in office. Another email address is also sensitive. For a time, firstname.lastname@example.org was central to Israeli foreign and security policy. Israeli Defense Minister Ehud Barak and his then chief of staff Yoni Koren personally used the mailing list. In its reporting, SPIEGEL learned that Barak coordinated a part of Israel's Iran policies using this account. It wasn't a forum for top-secret operations, but it was one for many internal decision-making processes.
The prime minister and his foreign minister are the two most important men in Israel. Anyone with access to their communications could quickly gain a lot of insights about the inner workings of Israeli politics.
Suggestions Germans Were Also Targeted
The lists of full numbers, names and email addresses certainly offer the potential for fresh political tensions in other places. Just last week, German Chief Federal Prosecutor Harald Range said that from his office's perspective, there is no evidence that the NSA or British intelligence has systematically monitored German telephone and Internet traffic. In a joint appearance before the British House of Commons in November, Britain's three top intelligence chiefs insisted that their work primarily involved counterterrorism operations.
The material viewed does indeed contain many references to possible terror suspects, suspected cases of nuclear proliferation and individuals associated with the taking of hostages. In many instances, the code names of current operations appear next to the listed numbers, including the operations of other British agencies, such as the Serious Organised Crime Agency (SOCA) police unit. Still, this doesn't explain the large number of so-called "hits" relating to political, diplomatic and business matters. These individuals, organizations and businesses must, therefore, have been defined as espionage targets.
A key document consisting of a long list of telephone numbers and dated Nov. 27, 2009 suggests that this also applies to German institutions and possibly German individuals. The surveillance operation recorded in the document was apparently focused on targets in crisis-ridden Congo, including members of the family of an African president, as well as senior military officials in the country, a cleric and a former vice-president. Two numbers with relevance to Germany are listed under a line that reads "list of all noted hits in priority order."
Berlin As 'Surveillance Target'
The words "German Emb in Rwanda" -- the German Embassy in the capital Kigali -- are noted next to the number "250-252575141." Further reporting revealed that the telephone number was the main line for the German Embassy in Kigali until 2011.
Five hits farther down the list, a combination of numbers leads directly to the German capital: "49-30-180 German Government Network." Those numbers include the country code for Germany, the area code for Berlin and the prefix for the Federal Government Information Network, to which government ministries in Berlin are connected. Any agency that would include that prefix for German government numbers must have considerable interest in political developments in Berlin.
SPIEGEL contacted several intelligence experts, who expressed the opinion that the list of German numbers under the term hits could only mean that GCHQ essentially declared these numbers to be surveillance targets.
GCHQ: Activities Are 'Authorized'
The documents SPIEGEL was able to examine do not indicate how intensively and during which periods of time the individual targets were actually monitored. However, the example of an African politician shows that even during a surveillance test run, the British intercepted and stored his mobile phone text messages in their entirety.
In response to a detailed list of questions, GCHQ answered that it does not comment on intelligence matters. It did state, however, that its own activities are "authorized, necessary and proportionate," and are conducted under the "rigorous oversight" of various supervisory bodies.
However, it must be assumed that the German Embassy in Rwanda and the number for the Berlin government network aren't the only targets with relevance to Germany. Rather, they were merely the only German numbers acquired during the period and on the specific communication path in question. The fact that the British agents monitor, at least intermittently, the entire signal paths of satellite communications between Germany and other countries means it is certain that significantly more numbers with the German country code, 0049, must appear in the GCHQ databases.
Search for New Targets
Moreover, the intelligence services participating in the satellite surveillance alliance are apparently constantly searching for new eavesdropping opportunities of interest, or at least they were in the period from 2008 to 2009, when the satellite surveillance documents SPIEGEL examined were created.
Some of the longer documents and hit lists are "informal reports" addressing test runs for new, previously unmonitored communication paths intended to "highlight the possible intelligence value." They are generally listed under "Bude Sigint Development," which means they relate to the identification and development of new targets.
According to the documents, most of the tests were conducted over a period of a few days, during which the intercepted numbers were apparently correlated with the target databases to determine whether ongoing monitoring would be worthwhile. The hit lists filled with names and numbers are the results of these tests. Each of the documents ends with a question: "Can this carrier be tasked to the collection system?" In many cases the answer is simply "yes." One such case is a communication path from Europe to Africa from the year 2008, in which EU Commissioner Almunia appears for the first time. In the January 2009 document in which Almunia is mentioned once again, the answer to the question at the end reads: "Not currently due to the data rate of the carriers." It is also noted that "future ( ) updates will resolve this issue."
A Revealing Example
A report from August 2009 shows how much information the spies managed to intercept even in these test runs. It also mentions the president of the Economic Community of West African States (Ecowas), who is referred to as "Dr. Chambers" in the material. This appears to be a reference to the Ghanaian diplomat Mohamed Ibn Chambas, who worked for Ecowas in various capacities from 2001 to 2010. In late 2012, UN Secretary General Ban Ki Moon appointed him as the UN's Joint Special Representative for Darfur.
In 2009, the British apparently intercepted his text messages as part of a test run. The messages are marked in red in one of the documents, which is meant to highlight the potential value of another satellite link between Africa and Europe.
The documents include, among other things, more than a dozen of the complete texts of his messages, and reveal the whereabouts of the Ecowas president, who was in Liberia to receive a prize for his peace efforts. "Am in Liberia to receive a national award during their independence day celebration (sic) tmrow," reads one of the texts intercepted by the British. In another, Chambas recommends a book about Ghana's colonial history. It's "interesting and informative," the message, which is private and mundane like most of the others, informs.
SPIEGEL was unable to obtain a statement from Chambas before this article went to print about surveillance of his text messages.
But when contacted by reporters, Leigh Daynes, the UK executive director of Doctors of the World, said he was "shocked and surprised by these appalling allegations of secret surveillance on our humanitarian operations." He said his relief organization, like others, operates impartially and independently. "There is absolutely no reason for our operations to be secretly monitored," he said.
- Part 1: How GCHQ Monitors Germany, Israel and the EU
- Part 2: A Continuation of Echelon?