UNCLASSIFIED // LAW ENFORCEMENT SENSITIVE (U) Preventing Violence and Criminal Activity in Protection of Lawful Protest 5 JUNE 2020 – 1200 (U//LES) Information provided in this update is based on responses provided to the Joint Inter-Agency Command Post in the FBI Strategic Information Operations Center as of the information cut-off time of 0600 EST on 5 June. The following agencies contributed to the development of this SITREP ATF, DEA, DCNG, DHS, DOJ, NGB, USAMD, and USMS. Responses provided after the cut-off time will be included in the next SITREP. (U//FOUO) This document is meant as a summary of significant investigative highlights and NOT as a comprehensive review of ongoing investigations. The information contained in this communication is NOT to be incorporated into any formal or informal written document nor further disseminated without the authorization of the FBI Headquarters, SIOC. Unauthorized use of this information may jeopardize sensitive national security and/or criminal investigations, result in the possible identification and/or physical harm of human sources, or create undue notification into the FBI's interest of intended targets. (U) This communication is intended to provide timely information to appropriate law enforcement and/or public safety personnel who are authorized to protect facilities, personnel, and the public from imminent threats of violent and/or criminal activity. It is related to and within the scope of an authorized law enforcement investigation or investigative activity. Under FBI policy and federal law, no investigative activity may be based solely on First Amendment activity. The FBI does not investigate, collect, or maintain information on U.S. persons solely for the purpose of monitoring activities protected by the First Amendment. (U) Significant Reporting (U//FOUO) The FBI, in close coordination with its federal, state, and local partners, continues to monitor and respond to events related to the violence associated with lawful protests. While reports, to include open source reporting and social media postings, suggest individuals involved in or present at locations of lawful protests are part of an organized effort associated with anti-government-anti-authority extremism, militia extremism, racially or ethnically motivated violent extremism, or violent gangs, they majority of the violence and vandalism appears to be perpetrated by opportunistic, individual actors acting without specific direction. We continue to aggressively seek to corroborate any organized effort to incite violence by either known criminal groups or domestic violent extremists. (U//LES) Protests (violent and non-violent) as a result of the law enforcement death of George Floyd on 25 May 2020, have occurred in over 140 cities across the United States. While violent protests originated in Minneapolis, Minnesota, on 26 May 2020, these have spread to include a wide array of violent activity amidst lawful protests across the country. The National Guard has been activated in at least 32 states and the District of Columbia. (U//FOUO) The FBI is aware of individuals using multiple techniques to incite violence, including the use of laser pointers and umbrellas to injure or obfuscate the view of law enforcement. The FBI is also aware of domestic violent extremist (DVE) actors and like-minded individuals using social media platforms and mobile messaging applications, with varying levels of privacy settings and encryption to maintain operational security and communicate extremist activities. (U) LAW ENFORCEMENT SENSITIVE: The information marked (U//LES) in this document is the property of the Federal Bureau of Investigation and may be distributed within the federal government (and its contractors), U S intelligence, law enforcement, public safety or protection officials, and individuals with a need to know Distribution beyond these entities without FBI authorization is prohibited Precautions should be taken to ensure this information is stored and/or destroyed in a manner that precludes unauthorized access Information bearing the LES caveat may not be used in legal proceedings without first receiving authorization from the originating agency Recipients are prohibited from subsequently posting the information marked LES on a website on an unclassified network without first obtaining FBI approval UNCLASSIFIED // LAW ENFORCEMENT SENSITIVE UNCLASSIFIED ENFORCEMENT SENSITIVE Several states reported travel across state lines for protests. However, in most cases it was rmclear if any of these travelas intended to engage in violence. Protests had also reportedly spread to the suburbs of several major cities. As of 5 June, there have been two reported deaths of law enforcement o?cers and 367 local o?icers injured around the during protests, ?equently ?om projectiles. (U) There were three non-law enforcement involved reported deaths. As of 5 June, there are a number of reports of planned protests targeting Federal facilities ranging ?om civil disobedience, calls for violence against law enforcement, bomb threats Gill-ins, and potential use of VBIEDs and other explosives. As of 4 June, USAO charged 54 individuals with varying crimes ranging ?om use of explosive or ?re to damage or destroy a vehicle used in interstate commerce; traveling in interstate commerce or using a facility of interstate commerce to incite a riot; organize, promote, encourage, participate in, a carry on a riot; and use of an explosive device; and conspiracy to destroy by ?re and explosive. To date, ?eld o?ices reported more than 11,0371 arrests made by various law enforcement agencies across the nation. As of 4 June, more than 32 states have requested National Guard personnel with more than 41,500 National Guard personnel on duty. ATF reported 80 federal ?rearms licensees? burglaries have occurred with an estimated loss of 1,114 firearms; 854 reported arsons; 76 explosive incidents and 41 ATE arrests to date. (U) A public memorial service for George Floyd was held in Minneapolis on 4 ere. A second public savice will be held in Raeford, NC on 6 June a?er the body is driven via ground transportation ?om Minneapolis. Athird public service will be held in Houston on 8 June and a private funeral service will follow on 9 June. (U) THREAT (U) Other events that could potentially prompt a large commimity reaction: 0 Members of the Outcast Club indicated they are going to be in Raeford, NC. for Mr. Floyd?s memorial service but there is no reporting on speci?c numbers of members. The NC chapter has approximately 40 members; however, if surrormding states attend the number could grow to 500. 0 (U) Virginia Governor and the City of Richmond Mayor announced the state will remove the statue of Confederate Gen. Robert E. Lee ?om Richmond?s Monument Avenue. 0 (U) Curfews remain in effect in multiple municipalities with varying dates of expiration. 7 UNCLASSIFIED ENFORCEMENT SENSITIVE UNCLASSIFIED // LAW ENFORCEMENT SENSITIVE (U) Damage to Government Facilities/Property (U//FOUO) Anecdotal criminal activity noted around the country include: • (U//FOUO) Protestors attempted to break fences erected in Lafayette Park, outside of the White House. In addition to attempting to pull apart fence panels, some individuals attempted to use bolt cutters to separate the panels. • (U//FOUO) Persons attempted to set fire to a military diesel fuel truck using accelerants and wood pallets. • (U//LES) Significant damages to multiple Federal Courthouses as a result of protester activities. • (U) A Superior Court was evacuated after a suspicious package was observed taped to the front doors. The package had an anti-law enforcement message on it and a bomb squad responded and determined the package did not contain any explosive materials. • (U) A deputy had protesters at his residence, which was identified by his vehicle in the driveway. • (U) A college police department parking lot was “tagged” with “ACAB” (All Cops are Bastards). TACTICS (U) Upcoming infrastructure concerns (highways shut down, blockaded streets, etc.) that could be impacted by violence. • • • (U//LES) Municipalities and county governments experienced DDOS attacks. (U//FOUO) A 911 call center received an increased number of recorded calls, in an apparent effort to overwhelm the system. Another city reported s unusual citywide computer network activity and a directed denial of service (DDOS) attack of their tip line the evening of 2 June. (U) INTELLIGENCE/INVESTIGATIVE UPDATES (U) Social Media Exploitation (SOMEX) (U) Social Media Exploitation (SOMEX), to include communication means used to plan illegal activities, i.e., types of communication platforms used by violent protestors, code words being used in platforms to mobilize/communicate • • • (U//FOUO) Twitter posting warned of alleged anarchist extremist groups canvassing neighborhoods and taking pictures of police cruisers in driveways. Police reportedly were being threatened that their homes would be burned down with their families inside. (U//FOUO) An identified user posted a video on TikTok demonstrating which tab to pull to quickly remove body armor of LEO/military, saying “do with this information what you will.” The post was gaining significant traction. (U//LES) Criminal actors likely monitoring police radio channels and broadcasting police movements through Telegram channels and other social media platforms. 3 UNCLASSIFIED // LAW ENFORCEMENT SENSITIVE UNCLASSIFIED // LAW ENFORCEMENT SENSITIVE (U) Social media platforms observed, trending and tied to groups and type of activity; source of information; groups and individuals associated with social media postings; use of Social Media tradecraft i.e. inform, warn, threat, indications of intentions/future actions; posture in collection on social media platforms (i.e., CHS, OCE); response to social media post i.e. legal process, arrests • • • • • • • (U//LES) FBI, OGA and open sources report protestors and extremists are using social media and encrypted platforms to communicate; specifically, Facebook, Twitter, Instagram, iWatch app chat, Nextdoor, 4Chan, Signal, Reddit, Meet-Up, Roaming Google, TikTok, Topbuzz.com, Wikr, and Twitch. The FBI is aware of domestic violent extremist (DVE) actors and like-minded individuals using social media platforms and mobile messaging applications, with varying levels of privacy settings and encryption to maintain operational security and communicate extremist activities. (U) Multiple users retweeted an open source article that identified the hotels as housing locations for Army National Guard members. The tweets also identified the bus company transporting military personnel. One tweet says "Y'a'll know what to do." (U) Unidentified user tweeted an IMEI phone grabbing app (snoopsnitch) which monitors network activity to determine if someone's phone is under electronic surveillance. (U//LES) Individuals aligned with the Boogaloo movement obtained burner telephone numbers and are discussing development of a secure communication application by a group associate who is a computer coder for member use. (U//FOUO) An unidentified individual using TOR to obscure their identity sent an email to a police department advising they have released the names and home addresses of 50 “police thugs” to “patriot groups” via Discord. (U//FOUO) There were multiple social media posts of close range photos of LEOs, including FBI agents. Several federal police officers were contacted on their personal Instagram accounts by a “vague” account that had since been deleted. The messages sent contained the officers full first name, last name, home towns followed by a question mark. USCP assesses an individual saw the officers name tags at the protest and queried open source. (U//LES) Security cameras of elected officials have been targeted. Other identifiers of individuals traveling (to or over state lines) to engage in violent activities to include: (U//LES) Reporting indicates protestors are using vehicles to incite violence and agitate protestors to vandalize property. Offices have reported protestors obstructing roadways, assaulting police officers, interfering with public duties, and resisting. There is also reporting of shots fired and Molotov cocktails thrown, in addition to protestors shining bright lights in officers’ eyes. Local protestors have also been seen utilizing handheld radios to communicate. (U//FOUO) Multiple states reported the use of laser pointers to target law enforcement. Other states reported hoax calls to scatter law enforcement, individuals following law enforcement and the use of firearms to incite protesters. • • (U//FOUO) There are multiple reports of officers being followed home and in one incident an officer was followed home at end of shift and his patrol car was torched. After further investigation, five subjects were arrested, purported to be from 3 different gangs. Affiliations unknown at time of reporting. (U//LES) Reckless discharge of firearms to incite violence and agitate protestors and citizens using scanners to monitor the movement of local law enforcement. 4 UNCLASSIFIED // LAW ENFORCEMENT SENSITIVE UNCLASSIFIED // LAW ENFORCEMENT SENSITIVE • • • • (U//LES)An individual dressed like a National Guard member and in possession of at least two firearms was arrested. (U//LES) Pre-staging of projectiles and the presence of heavily armed protesters wearing body armor and long guns. Some carried signs in support of the protesters. Others were reported to be counter-protesters. Social media pictures displayed cases of frozen water being unloaded from trucks; intelligence reporting individuals pre-staging bricks at protest locations. (U//FOUO) A suspected police dispatcher provided information on social media to protesters regarding police tactics and movement. The dispatcher advised his/her readers to use the mobile app Signal because it offers encryption and law enforcement would not be able to see their messages. Information was passed to the affected Police Department. The subject may have accessed HSIN and leaked law enforcement sensitive information. (U//LES) Individual believed to have manufactured improvised incendiary devices (IIDs) discovered in downtown municipality. Law enforcement action resulted in the seizure of materials consistent with those found in the recovered IIDs. (U) Number of LE Mitigation actions to include: (U//LES) There were over 11,037 arrests made across the nation, which was provided by field offices during the reporting period. (U//FOUO) As of 4 June, USAO charged 54 individuals with varying crimes ranging from use of explosive or fire to damage or destroy a vehicle used in interstate commerce; traveling in interstate commerce or using a facility of interstate commerce to incite a riot; organize, promote, encourage, participate in, or carry on a riot; and use of an explosive device; and conspiracy to destroy by fire and explosive. 5 UNCLASSIFIED // LAW ENFORCEMENT SENSITIVE