UNCLASSIFIED//FOR OFFICIAL USE ONLY

Washington State Fusion Center

FLO Weekly

February 6, 2012 Volume 2, Issue 4

Snow covered pine trees near Snoqualmie Pass, King County

Hot Topics
02/01 FBI: cyberattacks to top threat
Inside this issue:
Hot Topics Suspicious Activity Reports Tips and Leads Fusion Liaison Officer Program Calendar

1-2 3 3 4-5

Cyber attacks against government agencies and businesses in the United States continue to rise, and cyber threats will one day surpass the danger of terrorism to the United States, intelligence community officials said in an open hearing of the Senate select intelligence community Tuesday. "Stopping terrorists is the number one priority," said FBI director Robert Mueller. "But down the road, the cyber threat will be the number one threat to the country. I do not think today it is necessarily [the] number one threat, but it will be tomorrow." http://informationweek.com/news/government/security/232600046 02/02 No fly list doubles in year The size of the US government's secret list of suspected terrorists who are banned from flying to or within the country has more than doubled in the past year. The no-fly list jumped from about 10,000 known or suspected terrorists one year ago to about 21,000, according to government figures. About 500 are US nationals. The flood of new names began after the failed Christmas 2009 bombing of a Detroit-bound jetliner when the US government lowered the standard for putting people on the list and scoured its files for anyone who qualified. "We learned a lot about the watchlisting process and made strong improvements, which continue to this day," said Timothy Healy, director of the Terrorist Screening Centre, which produces the no-fly list. Among the most significant new standard is that a person doesn't have to be considered only a threat to aviation to be placed on the list. People considered a broader threat to domestic or international security or who attended a terror training camp are also included, said a US counter-terrorism official who spoke on condition of anonymity. As agencies complete the reviews of their files, the pace of growth is expected to slow, the counterterrorism official said. http://www.guardian.co.uk/world/2012/feb/02/us-no-fly-list-doubles 02/03 Top 5 US terror hot spots Nearly a third of all terrorist attacks from 1970 to 2008 occurred in just five metropolitan U.S. counties, but events continue to occur in rural areas, spurred on by domestic actors, according to a report published January 31, 2012 by researchers in the National Consortium for the Study of Terrorism and Responses to Terrorism (START), a Department of Homeland Security Science and Technology Center of Excellence based at the University of Maryland. The largest number of events clustered around major cities: Manhattan, New York (343 attacks) Los Angeles County, Calif. (156 attacks) Miami-Dade County, Fla. (103 attacks) San Francisco County, Calif. (99 attacks) Washington, D.C. (79 attacks) UNCLASSIFIED//FOR OFFICIAL USE ONLY

Training Opportunities 6 Administrative Notes

Special Points of Interest:

New RIG Coordinator in Region 9 refer to Page 7.

Continues

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Page 2 FLO Weekly Volume 2, Issue 4

While large, urban counties such as Manhattan and Los Angeles have remained hot spots of terrorist activities across decades, the START researchers discovered that smaller, more rural counties such as Maricopa County, Ariz. which includes Phoenix have emerged as hot spots in recent years as domestic terrorism there has increased. The START researchers found that 65 of the nations 3,143 counties were hot spots of terrorism.

http://earthsky.org/human-world/five-u-s-urban-counties-lead-terror-hot-spots-list-but-rural-areas-not-exempt 02/06 AK man arrested for terror extortion A 36-year-old North Pole man is accused of trying to extort money from the state of Alaska in exchange for not committing acts of terrorism. Troopers say Stanislaus Grzeskowiak was arrested Friday after he contacted troopers in Fairbanks and tried to extort $85,000, threatening to otherwise commit acts he believed would affect the University of Alaska, oil companies, cell phone companies, credit card companies and troopers' ability to conduct day-to-day operations. Court records show he is charged with extortion and threatening harm. He is in custody at the Fairbanks Correctional Center, which says he is being held on $2,500 bail and can only be released to a courtapproved third party custodian. It's unclear if he has an attorney. http://www.thenewstribune.com/2012/02/06/2014782/man-accused-of-attempted-extortion.html 02/07 Lone wolf terror threat warning The UK could face a growing threat from "lone wolf" terrorists returning from fighting overseas in the next few years, a think tank has warned. The Royal United Services Institute estimates about 50 Britons are fighting with Somali extremists al-Shabab. Returnees from "wars in Somalia, Yemen or Nigeria" could use their experience on UK streets, Rusi said. The Home Office said its security arrangements would reflect "the nature of the terrorist threat we face". It is also feared that the return of Britons from overseas could coincide with the release of people convicted of terrorist charges over the last decade. BBC security correspondent Frank Gardner says the think tank is warning of "a perfect storm of combined threats coming together in the near future". The UK terror threat level was reduced from "severe" to "substantial" in July last year, but Rusi warned that the threat from jihadist terrorism had not diminished. Despite recent arrests and failed plots, "lone wolves" and "self-radicalized" jihadi terrorists were hard to track down and posed a greater security risk, its report said. http://www.bbc.co.uk/news/uk-16920643

UNCLASSIFIED//FOR OFFICIAL USE ONLY

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Page 3 FLO Weekly Volume 2, Issue 4

SARs
Breach/Attempted Intrusion WSFC INTAKE 1-877-843-9522
intake@wsfc.wa.gov

(U//FOUO) [Region 7] On 28 January 2012 at approximately 1545 hours, a white newer model Dodge with Oregon license plates drove up to a call box located at the (REDACTED) Dam. A male subject exited the vehicle and placed a phone call from a call box, located outside the gated area of the Dam, to Dam Security requesting entry into the Dam. The caller was quite insistent in demanding entry. When he was refused entry he went back to the vehicle, occupied by four other subjects, and drove away. WSFC Tracking No. TL_2012-02-01T10:26:24 Status Referred

ADMINISTRATION
FLO@wsfc.wa.gov

Tips and Leads

(U//FOUO) [Region 6] On 24 January 2012, personnel at the Congregation (REDACTED) received a letter, via U.S. Postal Service, that contained various statements and news articles that initially appear to be the work of someone who has mental issues or is delusional. References are made to the discovery of body parts in Hollywood, CA and vehicles and people seen at Congregation (REDACTED). Mention is made of the Rabbi (REDACTED) and the authors inability to see him. The author does not self identify him/her/self, and the return address is a Jewish facility in Seattle. WSFC Tracking No. TL_2012-0125T11:19:35 Status Closed (U//FOUO) [Region 6] On 27 January 2012 at approximately 1911 hours, a routine security sweep of delivery trucks arriving at the (REDACTED) terminal at the Port of Seattle led to the discovery of a loaded .45 caliber hand gun, with two additional loaded 16 round clips, behind the seat of one of the trucks. WSFC Tracking No. TL_2012-01-31T15:44:17 Status Open (U//FOUO) [Region 1] A federal facility in Bothell recently had two separate incidents of suspicious photography. The first took place on 2 February 2012 at approximately 1407 hours when a Dodge Dakota truck stopped in front of the facility gate and guard shack. An occupant in the vehicle proceeded to take photos. The vehicle then left the area before the occupant could be identified or the vehicle license plate obtained. The second incident took place on 6 February 2012 at approximately 1448 hours. A late 1980's model Volvo approached the main entry gate. A male and female were inside the vehicle and flashes from a camera were observed. As the guard approached the vehicle to speak with the occupants, the vehicle turned around and left the property. WSFC Tracking No. TL_2012-02-07T11:44:10 Status Open (U//FOUO) [Region 6] On 6 February 2012 at approximately 1456 hours, the Security Manager for the Space Needle observed a van, occupied by three male subjects, traveling, with the sliding door open, west bound on Broad St. The occupants appeared to using a large video camera to film the Space Needle through the open door of the van. WSFC Tracking No. TL_2012-02-07T13:33:35 Status Open (U//FOUO) [Region 1] On 7 February 2012 at approximately 1000 hours, a male and female subject were observed to cross the boundary line delineating public property from the (REDACTED) Refinery property. The subjects were observed taking photos of themselves and when spoken to by one of the guards, left the prohibited area. WSFC Tracking No. TL_2012-02-08T08:57:23 Status Closed (U//FOUO) [Region 6] On 7 February 2012 at approximately 0140 hours, an unidentified male subject was discovered walking in the secured area of the (REDACTED) terminal at the Port of Seattle. He was first thought to be a crew member on one of the vessels tied to the pier, but it was later determined the subject was a probably a transient. At the terminal office the man began screaming to be let go, and was released prior to any identification being presented. WSFC Tracking No. TL_2012-02-07T07:15:21 Status Closed

NWWARN www.nwwarn.org

UNCLASSIFIED//FOR OFFICIAL USE ONLY

UNCLASSIFIED//FOR OFFICIAL USE ONLY

FLO Weekly Volume 2, Issue 4 Page 4

FLO Program Calendar February 2012

Resource: US National Counterterrorism Center2011 Calendar, www.nctc.gov * Refer to Volume 2, Issue 1 through Issue 4 for an in-depth description of each training event for February 2012.

1 (Wed)
2011, US: Colleen LaRose, also known as Jihad Jane, pleads guilty in federal court in Philadelphia to four terrorism-related charges

2 (Thu)
2009, Afghanistan: Suicide bomber kills 25 police officers, wounds many more in Tarin Kowt; Taliban claim responsibility

3 (Fri)
2000, Syria and Sudan: Countries sign agreement on fighting terrorism in compliance with Arab Antiterrorism Convention

4 (Sat)
2009, Colombia: Seventeen civilians stabbed to death near Barbacoas; FARC claims responsibility

5 (Sun)
2001, Algeria and France: Countries sign accord to cooperate in fighting terrorism

6 (Mon)
2004, Russia: Unknown group detonates explosives in Moscow Metro, killing 40 and wounding 122

7 (Tue)
1991, UK: Attack on No. 10 Downing Street; mortar rounds fired at Prime Minister John Majors residence wound three; PIRA responsible

8 (Wed)
2008, India: Seven civilians killed in courtroom shooting in Tuensang; National Socialist Council of Nagaland-Isak Muivah claims responsibility

9 (Thu)
2009, Sri Lanka: LTTE female suicide bomber kills 28, wounds 90 in Vishvamadu

10 (Fri)
2011, Pakistan: Teenage suicide bomber kills 27 soldiers in attack on military training center in Mardan; local member of TTP claims responsibility

11 (Sat)
2010, Democratic Republic of the Congo: Fifteen civilians kidnapped, seven later killed in Bisembe; Democratic Forces for the Liberation of Rwanda believed responsible

12 (Sun)
2008, Syria: Imad Mughniyah, believed responsible for 18 April 1983 bombing of US Embassy in Beirut, killed by car bomb in Damascus

13 (Mon)
2000, Colombia: FARC, ELN stage attacks, kill 12, kidnap 16

14 (Tue)
2005, Lebanon: Former Prime Minister Rafiq al-Hariri is assassinated by car bomb in Beirut; UN investigation in October finds Government of Syria responsible

15 (Wed)
1999, Turkey: PKK leader Abdullah Ocalan arrested and returned to Turkey; arrest sparks Kurdish protests across Europe

16 (Thu)
1992, Lebanon: Hizballah General Secretary Abbas Musawi killed in helicopter ambush

DT: Lateral Vascular Neck Restraint Instructor Recertification CourseBurien 2-Day Law Enforcement Media Training SeminarKent Background Investigations for Public Safety PositionsEdmonds DT: Lateral Vascular Instructor Course (Feb 1517) RISSIntel and RISSafe TrainingEdmonds

Websites queried for training opportunities : www.cjtc.state.wa.us; www.wsafc.org

UNCLASSIFIED//FOR OFFICIAL USE ONLY

UNCLASSIFIED//FOR OFFICIAL USE ONLY

FLO Weekly Volume 2, Issue 4 Page 5

FLO Program Calendar February 2012

Resource: U.S. National Counterterrorism Center2011 Calendar, www.nctc.gov

17 (Fri)
2008, Afghanistan: More than 100 killed, many more wounded in suicide bombing in Kandahar; Taliban believed responsible

18 (Sat)
2002, Israel: Policeman killed by suicide bomber; alAqsa Martyrs Brigade claims responsibility

19 (Sun)
2001, UK: Terrorism Act 2000 enacted

20 (Mon)
2003, Saudi Arabia: Gunman ambushed car at stoplight, killing UK citizen; Yemen-born naturalized Saudi later arrested

Burien

21 (Tue)
2004, Uganda: Lords Resistance Army attacks refugee camp in northern region, killing 239 and wounding 60

22 (Wed)
2010, US: Najibullah Zazi pleads guilty to charges of conspiring to bomb New York City subway system

23 (Thu)
2002, Colombia: Politician Ingrid Betancourt and three US military contractors, Marc Gonsalves, Thomas Howes, and Keith Stansell, kidnapped by FARC

24 (Fri)
2009, Sudan: Sixteen military, 21 civilians killed in attack in Malakal; no claim of responsibility, but Sudan Peoples Liberation Army widely suspected

Motivating Personnel in Difficult Times Puyallup Craigslist InvestigationsSpokane Valley Officer Involved Shooting Investigations CourseWenatchee Active Shooter Response InstructorIssaquah The REID Technique of Interview and InterrogationSpokane Valley CISM: Individual Crisis Intervention and Peer SupportSpokane Valley

25 (Sat)
1996, Israel: HAMAS bombs buses in Jerusalem, killing 28 and wounding 80

26 (Sun)
2010, Afghanistan: Taliban attack Kabul guesthouses frequented by foreigners; 17 killed, 30 wounded in bombings and subsequent gunfire

27 (Mon)
2007, Afghanistan: Suicide attack on Bagram Air Base during visit by Vice President Cheney kills 23 and wounds 20

28 (Tue)
2005, Iraq: Two vehicle-bomb attacks kill more than 160 Iraqis; al-Zarqawi group claims responsibility

Undercover Techniques and Operations Olympia WSIN IntermediateLevel Analytical Academy (Feb 2729) Standardized Field Sobriety Testing 2012 WA State Fire Training and Safety Officers Conference (Feb 2529)

29 (Wed)
2008, Pakistan: Forty killed, 50 injured in suicide IED attack in Mingaora, North-West Frontier Province (now Khyber Pakhtunkhwa); no claim of responsibility

1 MAR

Camp Murray (Feb 28 to Mar 1) Spokane Valley Yakima

Websites queried for training opportunities : www.cjtc.state.wa.us; www.wsafc.org

UNCLASSIFIED//FOR OFFICIAL USE ONLY

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Training Opportunities
** The following training announcements are provided to our FLOs as an opportunity for furthering education and is not endorsed by the WSFC, or DHS, unless specifically stated. We encourage FLOs to research each class to see if it meets their training needs before attending. For more information on courses, click on below icons. ** Local
(U) CISM: Individual Crisis Intervention and Peer Support, 2324 Feb, Spokane Valley Website: www.cjtc.state.wa.us (U) 2012 WA State Fire Training and Safety Officers Conference, 2529 Feb, Yakima Website: www.wsafc.org (U) Undercover Techniques and Operations, 27 Feb, Olympia Website: www.cjtc.state.wa.us (U) Standardized Field Sobriety Testing, Feb 28Mar 1, Spokane Valley Website: www.cjtc.state.wa.us (U) Social Networking: Employer and Employee Rights, 1 Mar, Kent Website: www.cjtc.state.wa.us (U) Grant Writing, 12 Mar, Burien Website: www.cjtc.state.wa.us (U) 25th Annual NW Law Enforcement Command College, 48 Mar, Bow, WA Website: www.cjtc.state.wa.us (U) Cyber Investigation 100 Identifying and Seizing Electronic Evidence, 5 Mar, Redmond Website: www.cjtc.state.wa.us (U) WA N.A.F.T.O. State Conference 56 Mar, Burien Website: www.cjtc.state.wa.us (U) Crime Scene Investigation Basic, 59 Mar, Burien Website: www.cjtc.state.wa.us (U) Supervisor Leadership Institute, 59 Mar, Bellevue Website: www.cjtc.state.wa.us (U) The Sergeants Academy, 59 Mar, Spokane Website: www.cjtc.state.wa.us (U) Basic Patrol K-9 Handler Course, Mar 5May 11, Spokane Website: www.cjtc.state.wa.us (U) Finding Concealed Compartments: Criminal Concealment Techniques, 6 Mar, Spokane Valley Website: www.cjtc.state.wa.us (U) Cyber Investigation 105 Basic Cell-phone Investigations, 78 Mar, Redmond Website: www.cjtc.state.wa.us

UNCLASSIFIED//FOR OFFICIAL USE ONLY

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Administrative Notes
FLO Coordinator: Det. George Mars 253-279-9669 FLO@wsfc.wa.gov

Regional Intelligence Group (RIG) FLO Coordinators are as follows: RIG 1: SGT Matt Myers has been reassigned and, until his successor is named, Det. Kevin Fairchild will be the acting sergeant and FLO point of contact for Region 1. work 425-257-8495 cell 425-508-6018 KCRCIG: SGT Steven Davis/ Criminal Intel Unit 206-296-7527 SAR@kingcounty.gov RIG 5: Det./SGT Jim Loeffelholz/ South Sound Regional Intel Group 253-830-6533 253-405-6214 jloeffe@co.pierce.wa.us/ Entire RIG: pcintel@pierce.wa.us RIG 9: Douglas Silver, Analyst Supervisor/ Spokane County Sheriffs Office (Planning, Research and Analysis Unit) work 509-477-2703 cell 509-413-3414 dwsilver@spokanecounty.org If you know of any federal or local training you would like to add to the FLO Weekly, or if you would like training on a particular topic, please reply to FLO@wsfc.wa.gov. If you need SAR training material to share with your co-workers please notify Detective Mars. Handouts and a 15 min DVD are available and will be provided to you. For those of you who would like additional informationand have a legitimate need-to-knowon a SAR or TL mentioned in any of the FLO Weeklys, contact the WSFC via email or tip-line and provide the WSFC Tracking No. and a justification. If your department, agency, or organization identifies any suspicious activities, please contact your local law enforcement agency and the WSFC at 1-877-843-9522 or email intake@wsfc.wa.gov. Additionally, reporting can be accomplished by using the Report Suspicious Activity feature at the Northwest Warning, Alert, and Response Network (NWWARN) at www.nwwarn.org/. Please include the word FLO, followed by your region number (1-9) then your name when you submit information to intake@wsfc.wa.gov. Put this information in the subject line of your email; for example, FLO 1 Joe Smith. By providing the WSFC this extra information, it will assist us in keeping track of FLO information submitted. On another note, when you submit a Tip and Lead (TL) to the WSFC we ask that you courtesy copy (Cc) your RIG FLO Coordinator as well, so that they may obtain situational awareness. If you do not have an established RIG in your area, courtesy copy (Cc) your local police or sheriffs department when submitting a TL to the WSFCdoing this will help WSFC assigned detectives follow up necessary TLs. If there are any new trends you are seeing in your area that you would like to share with your fellow FLOs, please submit an article for the FLO Weekly at FLO@wsfc.wa.gov.

UNCLASSIFIED//FOR OFFICIAL USE ONLY