Archive for the ‘Iran’ Category

The $2.8 Billion Hole in U.S. Sanctions on Iran – The New York Times

Tugboats maneuvered the tanker Eternal Fortune into a berth at the Kharg Island oil terminal on Oct. 28, 2023, while it was falsely broadcasting its location as in the Gulf of Oman. The vessel was insured by an American company.

Maxar Technologies

Tug boats maneuvered the tanker Eternal Fortune into a berth at the Kharg Island oil terminal on Oct. 28, 2023 while it was falsely broadcasting its location as in the Gulf of Oman. The vessel was insured by an American company.

Maxar Technologies

For months, as Iran-backed groups attacked U.S. forces and allies in the Middle East, the Biden administration hailed its efforts to restrict Irans oil revenue and the countrys ability to fund proxy militias. The Treasury secretary told Congress that her teams were doing everything that they possibly can to crack down on illegal shipments, and a senior White House adviser said that extreme sanctions had effectively stalled Irans energy sector.

But the sanctions failed to stop oil worth billions of dollars from leaving Iran over the past year, a New York Times investigation has found, revealing a significant gap in U.S. oversight.

The oil was transported aboard 27 tankers, using liability insurance obtained from an American company. That meant that the U.S. authorities could have disrupted the oils transport by advising the insurer, the New York-based American Club, to revoke the coverage, which is often a requirement for tankers to do business.

Instead, the 27 tankers were able to transport shipments across at least 59 trips since 2023, The Times found, with half the vessels carrying oil on multiple journeys.

The Treasury Department did not respond to a question about whether it was aware the ships had transported Iranian oil while insured by the American Club.

The tankers exhibited warning signs that industry experts, and the Treasury, have said collectively warrant greater scrutiny. Among other red flags, the ships are: owned by shell companies, older than average vessels and use a tactic called spoofing to hide their true locations.

Satellite imagery, much of it freely accessible to the public, captured the tankers during their oil transports.

fortune galaxy

Feb. 25, 2023

galaxy star

Mar. 10, 2023

cathay kirin

Mar. 12, 2023

duplic dynamic

Jun. 11, 2023

fortune galaxy

Jun. 24, 2023

fortune galaxy

Jul. 13, 2023

cathay kirin

Aug. 8, 2023

fortune galaxy

Aug. 18, 2023

fortune galaxy

Sept. 4, 2023

galaxy star

Sept. 19, 2023

fortune galaxy

Oct. 4, 2023

eternal fortune

Oct. 29, 2023

eternal success

Nov. 23, 2023

fortune galaxy

Nov. 24, 2023

Sources: Copernicus Sentinel-2, Planet Labs, Maxar Technologies, TankerTrackers.com, Spire Global, MarineTraffic

Satellite images on display represent one of several methods that The Times relied on to locate each tanker.

It is unclear who the U.S. government considers primarily responsible for identifying suspicious tankers. The Treasury is tasked with administering sanctions by investigating and blacklisting individuals or companies participating in illicit activities. But it places some of the burden on insurers to monitor for suspicious behavior through the regular release of advisories and alerts.

To identify the shipments of Iranian oil, The Times built a database of thousands of tankers and their whereabouts using maritime data and satellite imagery. Vessels whose voyage paths showed irregularities were cross-referenced with information provided by Samir Madani, co-founder of TankerTrackers.com, a company that monitors oil shipping.

SynMax and Pole Star, two other companies that monitor shipping, provided additional data.

In late-January, several weeks after the American Club was mentioned at a Congressional hearing titled "Restricting Rogue-State Revenue", coverage for many of the tankers identified by The Times abruptly ended. The company said that the stoppages were the result of its own internal investigations. Five of the vessels are still insured by the company, according to data listed on its website; the American Club said it is still investigating those ships.

The Timess findings come as the Biden administration is under increasing scrutiny from lawmakers and advocacy groups for its handling of sanctions on Iran.

It is very concerning, said Senator Maggie Hassan, a Democrat of New Hampshire, who has filed a bill to strengthen the enforcement of sanctions on deceptive ships.

The United States must use every tool at its disposal to identify, stop and sanction these bad actors, she said. These new revelations highlight the stakes.

In response to Times findings, a Treasury spokesperson said in a statement: Treasury remains focused on targeting Irans sources of illicit funding, including exposing evasion networks and disrupting billions of dollars in revenue.

The spokesperson added that this month the department had taken action against what it called a Hong Kong-based front company, which U.S. officials said had funded Irans Revolutionary Guards Corps.

Kharg Island, pictured in 2017, is one of Irans main oil terminals where many of the American Club-insured tankers loaded oil.

Fatemeh Bahrami/Anadolu Agency via Getty Images

The insurance provided by companies like the American Club is a key factor in the tankers ability to move oil; industry insiders call it a vessels ticket to trade. Most major ports insist that ships have proof of liability coverage, among other requirements, before they can enter and do business.

The American Club is one of only 12 major insurers of its kind, and the only one based in the United States. Specifically, the company says, its policies cover third parties affected during an accident caused by a ships negligence.

Because of these insurers importance to shipping, they have been consulted by the U.S. government when developing sanctions on Russian oil sales.

Daniel Tadros, the American Clubs chief operating officer, said his company has one of the most stringent compliance programs in the industry. But he said that the companys six-person compliance team was overwhelmed each month with hundreds of inquiries about potentially suspicious vessels, and that investigating even a single case takes time.

It's impossible for us to know on a daily basis exactly what every ship is doing, where it's going, what it's carrying, who its owners are, Mr. Tadros said. I would like to think that governments have a lot more capability, manpower, resources to follow that.

He added that the U.S. government had only recently suggested the use of satellite imagery for maritime-related businesses looking for sanctions evasion. Satellite imagery has been used as a ship-tracking tool in the industry for at least a decade.

Shipowners willing to skirt trade restrictions can make more than their normal commissions. But to maintain business connections with the West, including with insurers, they may resort to using deceptive tactics.

Since the start of 2023, the 27 vessels moved roughly 59 million barrels of oil, according to a Times analysis. The calculation is based on a tankers depth in the water before and after the oil was loaded, a measurement used by industry analysts.

There is no official source detailing the amount of oil that leaves Iran. According to estimates from Kpler, a company that monitors global trade, the oil carried by the tankers would amount to roughly 9 percent of Iran's oil exports over that period.

Sources: Copernicus Sentinel-2, Planet Labs, Maxar Technologies, Spire Global, MarineTraffic, TankerTrackers.com

Note: Pickups include those made at Iranian ports as well as via transfer at sea from other ships to American Club-insured ships. The map does not represent all oil pickups The Times found.

Many of the tankers ultimately ended up in China, which has tripled its imports of Iranian oil over the past two years.

Some of the shipments continued into the fall, as one Iran-backed group, Hamas, led the Oct. 7 assault on Israel, and other Iran-aligned militants, like the Houthis in Yemen, launched attacks on shipping routes and U.S. forces in the region.

By then, the tankers had transported at least $2.8 billion in crude oil, based on the lowest reported prices of Iranian oil in 2023.

That dollar amount could be higher. The Times found eleven more tankers, anchored off Iranian oil ports last year, that used deceptive practices and carried American Club insurance. Although there is little other reason for the ships to hide their presence, The Times could not verify whether they loaded oil.

Where contact information was available, The Times sought comment from more than 40 entities linked to the tankers involved in moving Iranian oil. None replied.

Some experts expressed doubt that the American Club was doing everything it could to identify deceptive ships.

Responsible, reputable insurers waste no time in confronting their clients or club members, Mr. Madani of TankerTrackers.com said.

David Tannenbaum, a former sanctions compliance officer for the Treasury Department who now works as a consultant for a compliance advisory company, said his research showed that the American Club covers a large proportion of deceptive vessels when compared with similar insurers.

While weve seen spoofers infiltrate almost all of the major protection and indemnity clubs, they are definitely a leader, he said.

Last week, Bloomberg reported that the American Club had insured more ships suspected of violating sanctions than other comparable insurers, according to data from United Against Nuclear Iran, a privately funded group advocating stronger sanctions on Iran.

(Many of the vessels noted by the group were also identified by The Times. Mr. Tadros, the American Club executive, said his company had removed insurance for the claims it could corroborate. He said in some cases United Against Nuclear Iran presented flawed evidence, which The Times also concluded for one of the accused tankers.)

The Times was able to use satellite imagery and information available to the shipping industry, such as signals that ships transmit to report their purported locations, to identify the tankers.

The tankers deception mainly involved a practice known as spoofing in which vessels broadcast fake route information to hide their true locations. Last August, for example, the tanker Glory broadcast that it was off the coast of the United Arab Emirates when it was really loading oil in Asaluyeh, Iran.

Sources: Copernicus Sentinel-2, Spire Global, MarineTraffic, TankerTrackers.com, SynMax

Note: Locations relative to each other are approximate in time.

In some cases, tankers also conducted ship-to-ship transfers, exchanging goods with another vessel at sea. The practice is common, but can be used to conceal a cargos origin, especially when used with spoofing. Ship-to-ship transfers near Iran frequently occurred just off the coast, such as when the tanker Shalimar took on oil in October. For each transfer, The Times traced the cargo back to Iranian oil terminals.

Sources: Copernicus Sentinel-2, Spire Global, MarineTraffic, TankerTrackers.com

Note: Locations relative to each other are approximate in time.

The Times also found some tanker crews altering the physical appearance of their ships. On one spoofing vessel, a red tarp was spread over its green deck in an apparent effort to disguise itself from satellites.

A month after leaving China, the American Club-insured tanker Irises reaches the Gulf of Oman for at least the fourth time in 2023.

Red tarps appear partially covering the deck of the Irises. The ship begins spoofing its location as it approaches the Persian Gulf.

Elsewhere, a ship owned by the National Iranian Tanker Company loads oil from Kharg Island.

The two ships meet in the Persian Gulf, with more red tarp visible on the Irises deck. The Iranian ship transfers oil to the Irises.

Sources: Planet Labs, Copernicus Sentinel-2, Spire Global, MarineTraffic, TankerTrackers.com

Even though the tankers used deceptive tactics, their spoofing had identifiable patterns. Many pretended to anchor off Oman or in the Persian Gulf for days, while satellite imagery showed they were not there. Some ships even broadcasted signals showing them on land and moving at high speeds, a physical impossibility.

Several of the tankers had a history of picking up oil in other countries under U.S. sanctions. Before they moved the Iranian oil, a Times analysis found, eight of the tankers spoofed their locations while carrying Venezuelan oil that was subject to sanctions. Its unclear if they were insured by the American Club at the time.

One of the tankers did carry American Club insurance when The Times found it likely evading Russian sanctions last year.

The American Clubs role in insuring the 27 tankers could put the company in potential violation of sanctions, industry experts said.

Mr. Tadros disagreed. He said the company includes a clause in its contracts, based on Treasury guidance, that nullifies coverage if a ship violates sanctions. He argued this protects the insurer from being complicit in potential violations.

The American Club takes its obligations seriously and works diligently to comply with sanctions regulations, Mr. Tadros said.

The Treasury office has publicly enforced sanctions on the American Club only once in the past 20 years. In 2013, the office announced that it found the insurer had processed dozens of claims for ships that violated sanctions on Cuba, Sudan and Iran. Treasury officials calculated the penalty for the apparent violations totaled more than $1.7 million.

Ultimately, the office said the American Club did not appear to have been willful or reckless and the case was settled. The company agreed to pay a reduced fine of $348,000.

Sources and Methodology

Times reporters built a database of nearly 20,000 tankers and their owners, operators, managers and insurers by combining information from Equasis; the International Maritime Organization; and Pole Star, a maritime intelligence company. Times reporters cross-referenced this information with the websites of the major insurance companies, which all maintain freely accessible databases of ships they insure.

The publicly available location data of the ships, known as their automatic identification system or AIS, was obtained through MarineTraffic and Spire Global. The platforms show live ship locations around the world and keep records of past voyages.

To detect any irregularities in the AIS paths that may be signs of deceptive practices, The Times used data on spoofing ships provided by TankersTrackers.com, as well as from SynMax, a satellite data analytics company, and Spire Global; and information collected through The Timess own reporting. Reporters then crossed-referenced the sources with satellite imagery.

The satellite imagery used to search for the ships reported and actual locations came from Planet Labs, Maxar Technologies and the European Space Agencys Copernicus Sentinel-2 satellite, which is publicly available. A large share of the spoofing tankers had already been spotted in Iranian waters by TankerTrackers.com.

Go here to read the rest:
The $2.8 Billion Hole in U.S. Sanctions on Iran - The New York Times

Designating Persons Tied to Network Smuggling U.S. Technology to Central Bank of Iran – United States Department of … – Department of State

The United States is today designating four entities and three individuals tied to a network facilitating the illegal export of U.S. goods and technology to end users in Iran, including the Central Bank of Iran. The Central Bank of Iran has played a critical role in providing financial and technological support to the Islamic Revolutionary Guard Corps-Qods Force and Hizballah, both foreign terrorist organizations and key drivers of the ongoing conflict in the Middle East.

Todays action demonstrates that defying export restrictions and circumventing sanctions against Iran will result in consequences. The United States is steadfast in its commitment to countering terrorist financing and will continue to use all available means to disrupt the illegal procurement of sensitive technology by the Iranian regime.

The Department of the Treasury designations were taken pursuant toExecutive Order 13224, as amended. For more information on todays action, see Treasuryspress release.

View post:
Designating Persons Tied to Network Smuggling U.S. Technology to Central Bank of Iran - United States Department of ... - Department of State

Update on Santander, Iran and US sanctions – Santander

13 February 2024

In response to an article published in UK media on 4th February, Santander can say categorically that, after a thorough internal investigation, it has not found any direct nor indirect sanctions breach in any part of the group. We have distributed the following communication to our teams:

As we informed you last week, a UK media outlet published a report on 4 February 2024 about a Santander account allegedly linked to Iran.

We have conducted a thorough investigation into the allegations and the circumstances related to the opening and use of the account referenced in the article, as well as connected individuals. Thus, we can state categorically that Santander has not found any breach by it of U.S. sanctions against Iran in connection with these allegations.

For both legal and reputational reasons, the allegations in this news report require a clear and firm response from us. We have taken action both internally and externally to address them. If this article is raised by concerned clients or customers, I would be grateful if you were to address them with the following points of fact:

Regards,

Juan Manuel Cendoya

Global head of Communications, Corporate Marketing & Research

Go here to read the rest:
Update on Santander, Iran and US sanctions - Santander

Google: Iranian, regional hacking operations that target Israel remain opportunistic but focused – CyberScoop

Theres little evidence that Hamass Oct. 7 attack on Israel included a planned cyber component, but in the months since, a flurry of regional hacking units with ties to the terrorist group, as well as Hezbollah and Iran, adjusted their operations to participate in the ongoing conflict, a Google analysis concluded Tuesday.

The analysis conducted by Googles Threat Analysis Group and Mandiant, part of Google Cloud documented operations tied to a half-dozen regional cyber threat groups with objectives including espionage, information operations or destructive activities.

While cyber operations play a supporting and symbiotic role to kinetic and physical attacks in some conflicts, the Israel-Hamas war shows how cyber operations stand on their own and provide governments with lower-cost, lower-risk ways to engage rivals without direct military confrontation, the researchers said.

The contrast between the role of cyber in this conflict and how its been used during Russias ongoing war on Ukraine is clear, said Sandra Joyce, vice president of Mandiant Intelligence.

In the Israel-Gaza region, we didnt observe that spike in cyber operations, Joyce said in a call with reporters ahead of the reports release. We saw that in Russia, but we didnt see that here.

Iran has targeted Israel and the U.S. for years, the analysis noted, and operations continue apace. In the six months leading up to Hamass attack, Iran accounted for roughly 80% of all government-backed phishing activity that targeted users based in Israel, the researchers said.

After October 7, weve seen a focused effort to undercut support for the war among both the Israeli public and the broader global populace, including hack-and-leak and information operations to demoralize Israeli citizens, erode their trust in national organizations, and cast Israels actions in a negative light, the report stated.

This kind of information operation made headlines in the U.S. in November, when a group linked to the Iranian Islamic Revolutionary Guard Corps Cyber-Electronic Command (IRGC-CEC) targeted Israeli-manufactured devices used in water utilities with defacing messages. A water utility in Aliquippa, Pa., was hit in the attack, and the U.S. government on Feb. 2 sanctioned a half-dozen Iranian officials over the affair.

The groups highlighted in the report most with ties to Iran have targeted Israel, other entities in the Middle East, the United States or Europe.

Hamas-linked groups which have traditionally targeted Israel and Palestine as part of intra-Palestinian operations were active through September 2023 and showed no observable increase in activity leading up to or after Oct. 7, the researchers said.

One of the groups, tracked by Google as Great Rift and as UNC4453 or Plaid Rain by others, is likely linked to Hezbollah in Lebanon, according to the analysis. That group, researchers say, took advantage of the surge of interest in emergency services after Oct. 7 attacks, impersonating legitimate Israeli services in phishing lures.

The group also created a fake missing persons website that prompted visitors to download a small malicious program, purportedly to receive notifications about abducted Israelis, and created a website to impersonate a legitimate Israeli hospital to distribute malware using a blood donation theme, the researchers said.

The incidents are examples of established regional hacking campaigns that demonstrate the agility to rapidly tailor activity to current events, the report read.

Another incident with likely connections to Iran, which surfaced Feb. 12, targeted Israeli civilians whose emails were obtained in compromises of Israeli organizations in November, with destructive malware disguised as notices from the Israel National Cyber Directorate, John Hultquist, Mandiant Intelligences chief analyst, said in an email Tuesday.

If executed, the malware overwrote files and played a video that included a message to hostage families meant to demoralize Israelis, Hultquist said.

Increasingly, Iran is directly targeting civilians with information operations and attacks, he added.

Nicole Fishbein, a security researcher with Intezer, flagged the campaign in a series of posts to the X social media platform Feb. 12, noting that it included anti-war propaganda and an attack ad against Israeli Prime Minister Benjamin Netanyahu.

Originally posted here:
Google: Iranian, regional hacking operations that target Israel remain opportunistic but focused - CyberScoop

Dearborn, Michigan Commemoration Of Iran’s Islamic Revolution Anniversary: Greedy DC Politicians Betrayed The … – Middle East Media Research…

Speakers at a February 9, 2024 commemoration of the anniversary of the Iranian Islamic Revolution, held at the Hadi Institute Youth Community Center in Dearborn, Michigan praised Iranian leaders Ruhollah Khomeini and Ali Khamenei. Hassan Salami recited poetry claiming that MEMRI wants to "silence us as a community." He said that the "greatest threat to the American people is Israel" and that the U.S. has been "hijacked by Zionist and elitist thugs." Salami continued to claim that Washington politicians are "infected by greed," and they have "betrayed the American people." He said that "Sleepy Joe" should wake up to the fact that the politicians are no different than Donald Trump.

Imam Usama Abdulghani praised Khomeini, Khamenei, and IRGC Qods Force leader General Qasem Soleimani. He said that if Muslims fear "Genocide Joe," then that is who they will get. He recounted the story of the hostages taken in the U.S. Embassy as told by Khamenei. Abdulghani said that while "weak liberal individuals" suggested the hostages should be released, Khamenei pledged before Khomeini that he is not afraid of the Americans and was directed to keep the Americans hostage. The event was streamed live on the YouTube and Facebook pages of Light of Guidance.

To view the clip of the Dearborn, Michigan Commemoration Of Iran's Islamic Revolution Anniversary, click here or below:

MEMRI Is An "Imbecile Station" Created By The Mossad "They Want To Silence Our Community"

Speaker: "So we thank Allah for blessing us with the faith that is characterized by the love, commitment, and devotion to Ruhollah Khomeini."

[...]

Hassan Salami: "The Mossad, the Israeli intelligence or should I say stupidity creates imbecile stations like MEMRI, and they want to silence us as a community.

[...]

"The Greatest Threat To The American People Is Israel"

"And since you are listening, I will let you know who the greatest threat to the American people is. The greatest threat to the American people is Israel. The American people are waking up to the fact that their country has been hijacked by Zionist and elitist thugs, and that the American people have more in common with the ones being killed overseas than [with] the politicians in Washington, infected by greed, who have betrayed the people of this country.

[...]

"So tyrants of today, take notice. Open your ears Sleepy Joe, wake, the jig is up. We know none of you are any different than Donald Trump.

[...]

"They are seeing the truth clearly showing between your lies, and that is why you hate this Revolution. That is why you try to make the entire world hate Imam Khomeini, the one who sought to put the rule of the modern-day Pharaohs to an end."

IRGC General Qasem Soleimani Taught Us That "In Times Of Crisis, There Is Incredible Opportunity"

Usama Abdulghani: "Everything changed when the Revolution happened.

[...]

"We are very grateful that Allah has honored us with this, and of course, we offer our congratulations first and foremost, to our Master, the [Hidden] Imam of the Time, the last hope of humanity, and after that, to his representative, the guardian of our time, Imam Khamenei.

[...]

"God won't make anyone rule over us, except for the person we are afraid of. If we are afraid of Genocide Joe, we get Genocide Joe. We are afraid of Netanyahu, we get Netanyahu.

[...]

"It is a principle that you and I learned from the martyr Qasem Soleimani. What did he teach us? He taught us that in times of crisis, there is incredible opportunity.

"A story from Imam Khomeini. May Allah bless Imam Khomeini. Right now, you see resistance in Iraq, you see resistance in Yemen. Our Yemeni brothers... I can't get enough of hearing their statements. You see how in Gaza, the Palestinians are going to break Netanyahu. This going to be something you witness in your own lives. You see Lebanon, right? Where did this start? Imam Khomeini.

[...]

"So Iran just had the Revolution, believers are just standing on their feet, a few months in, what happened? Some of the brave university students rushed in to the U.S. embassy. Weak minded liberal individuals, those people and they are always like this they start saying: 'Let those guys go... this not okay... the international law... let them go...' CIA contractors doing dirt in your country, [and they say:] 'Let them go'. Imam Khamenei says: 'At that time I went with...' He mentions two of the brothers, I'm not going to mention their names. He says: 'We went to Imam Khomeini'.

[...]

"[They said to him:] 'We have a hostage situation, and our duty isn't clear. We are not sure what we should do. Should we keep the hostages or should we let them go?' The Leader says: 'Imam Khomeini thought for a second. He looked up and he looked right at those brothers and he asked one question: 'Are you afraid of America'?' The Leader said: 'I didn't let those guys answer, I jumped right in. I said: 'No, we are not afraid.' Imam Khomeini said: 'Then keep the hostages'.'

[...]

"Right now, the IDF...

[...]

"They are not brave guys, they wear adult diapers. Seriously, what army is this? They are getting it handed to them. The are the worst people on earth."

See the rest here:
Dearborn, Michigan Commemoration Of Iran's Islamic Revolution Anniversary: Greedy DC Politicians Betrayed The ... - Middle East Media Research...