OFFICIAL USE ONLY ASSOCIATION OF AMERICAN RAILROADS RAIL AWARENESS DAILY ANALYTIC REPORT (RADAR) July 18 - 21, 2019 - . . 5' 1; ?519$ I-. OFFICIAL USE ONLY OFFICIAL USE ONLY Summary of Content Climate Activism - \Vorldwide: ??ealthv Donors Create Fund to Support Climate Activist Groups 02? Three wealthy American philanthropists reportedly intend to donate over $600,000 to support the efforts of grassroots climate activist groups, such as Extinction Rebellion (XR), in opposing fossil fuels development, production, and transport. The three has promised to raise millions more in the coming months. - Prosecutors Drop Charges Against Atlantic Sunrise Pipeline Protesters 02? On Monday, July 8, the presiding judge in the Lancaster County Court of Common Pleas dismissed misdemeanor trespassing charges against seven defendants who blocked construction of the Atlantic Sunrise pipeline in October 2017, ordering them instead to perform community service. All defendants are members of local environmental activist group called Lancaster Against Pipelines, which issued a statement predicting this outcome will strengthen opposition to pipelines for fracked gas on public safety and climate change concerns. Rail Security Awareness - United States: New York Times Questions Oil?bv?Rail Safetv Improvements Since Lac?Megantic 02? On Tuesday, July 16, the New York Times published an article focused on the lingering dangers of oil-by-rail transport now six years after the 2013 Lac-Megantic derailment of a crude oil train in uncontrolled movement that killed 47 people and destroyed much of the downtown area of the Quebec town. The article, entitled Runaway Train Explosion Killed 47, but Deadly Cargo Still Rides the Rails,? asserts that renewed activism in the Paci?c Northwest is targeting the oil-by?rail industry. - Britain: London Tracking Tube Passengers via Smartphone ?iFi 03? Transport for London the agency which operates London?s subway system, has begun collecting data in its stations from passenger smartphones in an effort to improve services. Although other transportation services around the world use smartphone data, London?s subway system may be the ?rst transportation system to do so in order to track and use an individual?s trip data in real time. OFFICIAL USE ONLY OFFICIAL USE ONLY Summary of Content Rail Security Awareness (cont?d) - Russia: Seven ISIS Suspects Sentenced to Prison for Plot to Derail Train 02? On Friday, July 12, 2019, Russian media outlets reported that seven men believed to have ties to the Islamic State of Iraq and Sham (ISIS) have been sentenced to between 15 and 21 years in prison for allegedly plotting an attack targeting a Russian high- speed train. The investigation found that the group had plans to carry out a bombing following the failed train crash, however, the suspects were apprehended before they could execute any attack. - Arizona: Protesters Arrested for Blocking Light Rail Outside ICE acilitv in Phoenix 02? On Friday, July 12, 2019, Phoenix police reportedly arrested 16 protesters after they refused to clear away from the road and light rail tracks outside an Immigration and Customs Enforcement (ICE) of?ce ahead of the federal roundup expected the following Sunday in other cities across the country. Terrorism/Extremism - United States: DHS Renews National Terrorist Advisorv Svstem Bulletin 02? As of Thursday, July 18, the Department of Homeland Security (DHS) has re-issued the National Terrorism Advisory System (N TAS) Bulletin for the period through January 17, 2020. The content of the NTAS Bulletins has remained virtually identical since May 2017 - six advisories covering a period of 2 years and 8 months with no signi?cant change in content, despite the assessment that the United States is confronting ?one of the most challenging threat environments since 9/11.? Incendiarv Attack at Maior Animation Studio Highlights Potential Terror Tactic At least 33 people died and dozens suffered injuries after a man set ?re to an animation studio in the Japanese city of Kyoto. Police reported the 41-year-old suspect broke into the Kyoto Animation studio on Thursday morning, July 18, and sprayed petrol before igniting it. The success of this tactic could inspire Islamist extremist propagandists to urge its use in public settings. OFFICIAL USE ONLY OFFICIAL USE ONLY Summary of Content Terrorism/Extremism (cont?d) - ??ashington: Anarchist Killed by Police During Attack on Northwest Detention Center 03? Will Van Spronsen, a 69-year-old self-proclaimed anarchist and anti?fascist, was shot and killed while attacking the Northwest Detention Center in Tacoma, Washington. According to local media reports, Van Spronsen was armed with a ri?e, and threw incendiary devices at the facility, where migrants are being held pending deportation proceedings. - Italv: Police Seize Air-to?Air Missile from Far?Right Group On Monday, July 15, 2019, it was reported that three alleged members of a far-right group were detained by Italian anti?terror police following a raid in which of?cers seized a three-meter long air-to-air missile and a large stash of automatic weapons. The discoveries came after a year-long investigation into Italians who took part in the Russia-backed insurgency in of eastern Ukraine. - Somali: Al Shabaab Claims Responsibilitv for Deadlv Terror Attack in Kismavo On Friday, July 12, at least four militants af?liated with Al Shabaab, an Islamic terrorist group linked to al Qaeda, reportedly launched an attack on the Asasey hotel in the Somali port of Kismayo, killing 27 people and injuring 56 others. The assault began with a suicide bomber ramming a car packed with explosives and continued with a gun battle that lasted over 14 hours. Cyber . ?"orldwide: Far?Right Social Network Joins Social Justice Twitter Alternative 02? The social media platform Gab, which is home to one of the largest far-right online social media networks, has reportedly switched its backend to run on software from Mastodon - which was launched as a social justice friendly and decentralized alternative to Twitter. - ??orldwide: Iranian Drone Downed bv U.S. RIilitarv 02? The American military is reported to have destroyed an Iranian Drone that had come within 1000 yards of the USS Boxer deployed in the Strait of Hormuz. Using the new anti?Drone system, Marine Corp?s Light Marine Air Defense Integrated System, the drone?s Global Positioning System signal was ?jammed? or potentially spoofed, reportedly rendering it useless. OFFICIAL USE ONLY OFFICIAL USE ONLY Summary of Content Cyber (cont?d) - Iran: Identity of Iranian Hacker who Aided in Espionage Against US Revealed 0:0 Jeff Bardin, the Chief Intelligence Of?cer for the California?based security ?rm Treadstone 71, has reportedly unmasked ?Mr. Tekide?, a malware developer and hacker who allegedly assisted in Iranian espionage activities directed against the United States and other foreign countries and organizations. - Insider Threat Report: Out of Sight Should Never Be Out of blind 0.0 According to the Verizon Insider Threat report released March 2019, 57% of database breaches involved an insider within the organization, with Privilege Nlisuse2 (also called Insider and Privilege lVIisuse) representing approximately 20% of all cybersecurity incidents and nearly 15% of all data breaches in 2018. The Insider and Privilege Nlisuse pattern includes insider threats when external threats collaborate with internal actors to access a company?s information or assets. In the Breaches per Pattern data, Miscellaneous Errors rank second. - TrickBot 1\Ialware has Compromised 250 million Email Accounts 02? The security ?rm, Deep Instinct, has reported the discovery of a new variant of the ?nancial malware known as TrickBot and a corresponding database of 250 million harvested email accounts from government and businesses in the United States, Canada, and Britain. The TrickBot malware, active since 2016, had mostly focused on ?nancial data theft; however, it has evolved into a sophisticated multi-purpose self replicating malware that actively avoids detection and harvests an enormous amounts of data, including log-in credentials, according to Deep Instinct researchers. - Israel: vaer Bodv Warns of New BEC Phishing Attack that Uses AI 02? On Wednesday, July 10, published reporting indicated that the Israel National Cyber Directorate, an Israeli government ?cyber body,? has issued a warning on a new type of cyber attack that uses arti?cial intelligence technology that ?impersonates senior company executives.? This new method of attack is a form of business email compromise fraud, in which an attacker impersonating a vendor sends a fraudulent targeted email to employees with a ?social engineering method? that prompts a response, allowing the attack to escalate by giving instructions to company employees to perform tasks such as money and bank transfers, as well as provide private information to gain access to a company?s network while releasing malicious activity on the company's network. OFFICIAL USE ONLY OFFICIAL USE ONLY Worldwide: Wealthy Donors Create Fund to Support Climate Activist Groups According to reports, three wealthy U.S. philanthropists intend to donate over $600,000 to grassroots climate activist groups, such as Extinction Rebellion (XR), with the promise of raising ?tens of millions more? in the coming months. The donors - Trevor Neilson, Rory Kennedy and Aileen Getty - have launched the Climate Emergency Fund (CEF) to help support school strikes and activist groups like XR. Neilson, who has worked as an investor with prominent ?gures such as Bill Gates and Richard Branson, said the fund was inspired by Swedish teenager Greta Thunberg (founder of the school strike for climate movement) and the XR demonstrators who blocked traf?c and disrupted trains in London in April of this year. The level of monetary and potentially political support resulting from this commitment to the XR effort will likely bolster the number and frequency of campaigns, including direct actions. Rory 125;;- :15: 5 ?gray-J; 3-3.33.3. my; :5 a cg- Kennedy is the daughter of late US Senator and Attorney General Robert Kennedy. L's- ?hm-=3 9?4 - . Aileen Getty is the granddaughter to oil baron Jean Paul Getty and heir to the Getty I I: ?4 1' fortune an estimated $5 billion and ranked as one of America?s richest families. Among those serving on the advisory board are reportedly author and environmentalist Bill McKibben, who established 350.0rg, and David Wallace Wells, who wrote the international bestseller Uninhabitable Earth. The money will initially be used to support school strike and XR groups in the US, but will also be available to help ?seed? similar groups around the world. It offers tiers of funding to support different-sized groups, from individual activists seeking money for demonstration materials, to funding for salaries and of?ces for established groups in big cities. Some of the funding has already been committed to support XR groups in New York and Los Angeles. The overt funding of activist groups like Extinction Rebellion (XR), which was founded on the idea that illegal acts of civil disobedience are the best tactic to urge government action against climate change, supports the notion that unlawful behavior targeting the fossil fuel industry is both publicly acceptable and for the greater good. According to a report by The Guardian, Neilson notably states the CEF would back ?non-violent legal action? but does not clarify how groups such as New York chapter - which engaged in an illegal action in June of this year, when a number of its members scaled the New York Times building in Manhattan - will be required to allocate the money once they receive it, in order to ensure it is not being spent on illegal protest activities. 1, g, g, OFFICIAL USE ONLY OFFICIAL USE ONLY Prosecutors Drop Charges Against Atlantic Sunrise Pipeline Protesters On Monday, July 8, 2019, Judge Howard Knisely of the Lancaster County Court of Common Pleas dismissed misdemeanor trespassing charges against seven defendants who blocked construction of the Atlantic Sunrise pipeline in October 2017, ordering them instead to perform community service as an alternative disposition. The defendants were part of a larger group of 23 activists who were arrested following their direct action against the fossil fuel project; while 16 of them pleaded ?no contest? to the charges, the remaining seven said they pleaded ?not guilty? in order to force the matter into court. All of the activists are members of local environmental group called Lancaster Against Pipelines, which subsequently issued a statement predicting that the outcome of the case will strengthen the position of those who say that pipelines carrying fracked gas threaten public safety and exacerbate climate change. Judge Kniseley reportedly welcomed the agreement between the defendants and the district attorney, and said that peaceful, nonviolent protest is protected, albeit with limitations, by state and federal law. He added that legislatures, not the courts, are the proper place to protect the natural environment and public safety. ?We must all be more vigilant to elect to those legislative positions persons who are highly concerned with their local constituents and local problems, and not those who merely look for personal advancement or who look to industry to ?ll their coffers for re-election,? he told the court. Mark latterbuck, a spokesman for the defendants, asserted the dismissal ?shows that communities that peacefully defend their health and safety and protect the earth against the gas industry were vindicated this morning.? One of the defendants, an 88-year-old Catholic nun named Barbara VanHorn, told interviewers that the outcome should encourage protesters against other pipelines such as Mariner East, which has sparked widespread community protest, particularly in the Philadelphia suburbs. VanHorn is one of among 15 nuns belonging to the order of the Adorers of the Blood of Christ in West Hemp?eld who participated 1n the action against the Atlantic Sunrise pipeline after they refused to sell their land to the Williams energy company .. . to make way for its construction. Williams then took the land by eminent domain, which prompted the nuns to ?le a lawsuit arguing that their religious rights had been violated. After losing 1n an appeals court, they took their case to the US. Supreme Court, which declined to hear it in February of this year. Multiple states in the United States have enacted critical infrastructure legislation as a means to deter pipeline protesters by de?ning offenses and stiffening penalties for criminal direct action tactics. Despite illegal activities, activists are claiming the court?s dismissal of charges as a victory. Regardless of perceptions, this case demonstrates activists are still using trespass incidents to cause arrests for the specific purpose of presenting arguments on climate change in courts to establish precedent that may potentially favor activists who face charges for climate?related protests in the future and encourage public perception that acts of criminality targeting fossil fuel companies are protected by law if they are carried out on behalf of climate activism. 5, OFFICIAL USE ONLY United States: New York Times Questions Oil-by-Rail Safety Improvements On Tuesday, July 16, 2019, the New York Times published an article focused on the lingering dangers of oil-by- rail transport following the 2013 Lac-Megantic disaster, entitled Runaway Train Explosion Killed 47, but Deadly Cargo Still Rides the Rails.? While not explicitly stated, the article comes shortly after the sixth anniversary of the derailment and oil train explosion in Lac-Megantic that killed 47 people. The article covers many of the same points often made by environmental groups and known oil-by-rail critics, to include arguments against the Federal Railroad Administration?s abandonment of proposed legislation that would have required at least two?person crews on most trains, as well as concerns over the proven safety of newer tank cars. Moreover, the article particularly highlights the lasting impact the 2013 disaster has had on the Lac-Megantic community and warns of trains still carrying ?ammable cargo through densely populated areas in Canada and the United States. 1, Media criticism of the oil?by?rail industry, as well as related protests by environmental activist groups, tends to increase in the weeks surrounding the anniversary of the Lac-Megantic disaster. - About a week before the New York Times published its article, activists from Coalition to Ban Unsafe Oil Trains (CBUOT), along with several other groups, staged a rally in New Jersey to call for legislation that would increase oil train safety regulations. Around the same time, the activist group, Wild Idaho Rising Tide (WIRT), held a series of demonstrations in the Sandpoint area to commemorate the Lac-Megantic disaster and raise public awareness of its long-standing battle against BNSF Railway?s proposed construction of rail bridges in the area. Lastly, at the start of this month, prominent oil-by-rail critic Justin lVIikulka announced the release of his new book, ?Bomb Trains: How Industry Greed and Regulatory Failure Put the Public at Risk.? While this targeting of the oil-by-rail industry by both the media and environmentalists is typically isolated on a yearly basis around the Lac-Megantic anniversary, there has been a recent focus by climate groups based in the Paci?c Northwest, such as Extinction Rebellion - PDX, on opposing oil-by-rail expansion at the Zenith Portland Terminal. As such, their ongoing and widely publicized campaign, in combination with negative coverage by major news outlets such as the New York Times, may serve to in?uence or galvanize more long-term activism against the oil?by?rail industry throughout North America. OFFICIAL USE ONLY OFFICIAL USE ONLY Britain: London Tracking Tube Passengers via Smartphone WiFi Transport for London the agency which operates London?s subway system, has begun collecting data in its stations from passenger smartphones in an effort to improve services. Although other transportation services around the world use smartphone data in this manner, London?s subway system may be the ?rst transportation system to use smartphone data to track an individual?s trip data in real time. The new data collection program, which began on July 8, 2019, and was developed in house by the is built off of a four-week pilot program tested in 2016 across 54 stations in Zones 1-4. The intends to use data collected from smartphones to determine the number of people moving through the subway system, as well as how crowded platforms and trains are. - Alternate transportation agencies reportedly use similar methods to track shared e-scooter and e-bikes, and will be used to monitor self-driving cars in the future. The has claimed that under this new system, passengers will bene?t by receiving more alerts about congestion and delays. maintains that it will be able to monitor in real time how many people are on a train, as well as how long it takes passengers to walk from the ticketing area to the platform. The program will rely on the Wi-Fi provided in 260 stations to determine passengers? locations. It is detect any smartphone in the area with its Wi-Fi in operating status. Passengers who wish to opt out of this data collection program will need to turn off Wi-Fi on their devices. The TfL?s data collection program has raised concerns over the possible misuse of data, as well as the potential risks posed by hacking and unwanted tracking. The has stated that it will not be linking collected anonymous data with additional customer information, and that this data will only be available to a controlled group of employees. According to media reports, only aggregated data is allowed to be shared with either different departments or with external bodies. This data can reportedly be shared with law enforcement agencies if the police are able to demonstrate through a formal process that a release of data can use justi?ed in order to detect or prevent crime, or prosecute a suspected offender. The TfL?s adaptation and implementation of its data collection plan may shape future developments related to potential infrastructure projects in London?s subway system. The questions on how public data collection plans by transportation agencies impacts personal privacy and the digital security of customers will likely remain pertinent as other transportation systems around the world potentially develop their own real-time data collection plans. 2, l_0 OFFICIAL USE ONLY OFFICIAL USE ONLY Russia: Seven ISIS Suspects Sentenced to Prison for Plot to Derail Train On Friday, July 12, 2019, Russian media outlets reported that seven men convicted of ties to the Islamic State of Iraq and Syria (ISIS) have been sentenced to between 15 and 21 years in prison for plotting an attack targeting a Russian high?speed train. The suspects, who are from Tajikistan, a former Soviet republic, had placed a metal brake holder block on tracks on July 7, 2017, in an attempt to cause a crash and derailment of the high?speed Sapsan train operating between Moscow and St. Petersburg. Evidently, the train collided with a barrier but did not crash. As a result, five of the Sapsan train cars were damaged, estimated at a total of 55 million rubles ($880,000) in losses. Furthermore, the investigation found that the group had plans to carry out a bombing following the failed train crash, however, the suspects were apprehended before they could execute any attack. military involvement in Syria, while also posting their intended message online. The Moscow District Military Court (MOVS) sentenced all of the suspected terrorists to 15 to 21 years behind bars, adding that they will serve their sentences in ?special regime colonies,? which is the most common type of prison in Russia. Additionally, only one of the seven suspects pleaded guilty to all charges; another pled guilty to possession of firearms. The ?ve remaining suspects pled not guilty to all charged offense, including preparing and carrying out a terrorist act, as well as possessing weapons. 1 According to the court cited indictment, the suspected ISIS sleeper cells had plotted their attack plan as a way to protest Russia?s Russian news outlets state this case mirrors several other previous bomb plots that targeted high speed trains on the Moscow-Saint Petersburg Railway. - The Russian FSB security service reportedly foiled a terrorist bombing plot in 2011 to target a Sapsan high speed train transporting Russian elite class passengers at speeds up to 155 miles per hour. The ringleader of the cell was a 22-year-old from Kabardino-Balkaria in the North Caucasus who had recruited the three others, including a Chechen, at a mosque in Moscow. The four convicts are currently serving long-term prison sentences. On November 27, 2009, at approximately 9:34 pm, a bombing attack derailed a high speed Nevsky Express train in transit near Bologoye, Tver Oblast, resulting in 90 injuries and 28 fatalities. The ensuing investigation resulted in 10 suspects charged for the attack. On the night of August 13, 2007, a bomb placed along railroad tracks exploded as a high-speed Nevsky Express train was traversing a section of track crossing a bridge elevated an estimated 60 feet above a road. The passenger train cleared the bridge before derailing, its cars sliding on their sides, injuring at least 60 of the 230 on board. It has been reported that Islamist militant Pavel Kosolapov was behind the attack. His current whereabouts are unknown. u, E, Q, g, OFFICIAL USE ONLY Arizona: Protesters Arrested for Blocking Light Rail Outside ICE Facility in Phoenix On Friday, July 12, 2019, Phoenix police arrested 16 direct actionists after they refused to clear away from the road and light rail tracks outside an Immigration and Customs Enforcement (ICE) of?ce ahead of the federal roundup expected the following Sunday in other cities across the country. Of those arrested, 14 were accused of unlawful assembly and obstructing a public thoroughfare and two were accused of aggravated assault on a police of?cer. This direct action supported the nationwide Lights for Liberty immigration demonstrations against the ?border . . . Phoenix Pollce Department Camps? that were planned for hundreds of c1t1es across the United States. . . Anyone mo is bloc