Ex-NSA techie pleads guilty to selling state secrets to Russia
- Reference: 1698165915
- News link: https://www.theregister.co.uk/2023/10/24/nsa_techie_russia_espionage/
- Source link:
Jareh Sebastian Dalke will be facing up to life in prison when sentenced in April 2024, though in his plea [1]agreement [PDF] the government agreed to seek a sentence no greater than 262 months (just shy of 22 years) "if the government determines [Dalke] has cooperated fully … and the information [he] has provided has been truthful, complete, accurate and of value."
Dalke, 31, admitted that he transmitted excerpts from three classified documents, and sent four in their entirety, to an FBI online covert employee (OCE), all of which contained national defense information [2]determined [PDF] to be classified top secret.
[3]
A former US Army soldier, Dalke was employed at the NSA as an information security systems designer for less than a month, and resigned after the NSA denied his request for extended leave to take care of a sick family member. Dalke's initial communications with his "Russian contact" began weeks after he resigned.
[4]
[5]
Dalke told the OCE posing as a Russian official that he had taken his NSA job because he had "questioned [the US's] role in damage to the world in the past and by a mixture of curiosity for secrets and a desire to cause change."
After his resignation from the NSA, Dalke reapplied and was hired for a new position he would have started at the end of September 2022, which he told the OCE would put him in a position to exfiltrate further secrets.
[6]
As for Dalke's motivation to sell state secrets to Russians, no need to speculate. He turned coat for the same reason plenty of others have done for generations: [7]Debt .
According to Dalke's signed plea deal, he told the OCE he was $237,000 in debt, with $93k soon to be due. Dalke requested $85k in an unnamed cryptocurrency for all the documents in his possession, and promised more in the future. The OCE paid Dalke approximately $16,499 in cryptocurrency for the excerpts, most of which was quickly moved from his crypto wallet to a personal bank account.
[8]International Criminal Court blames spies for 'targeted and sophisticated attack'
[9]US Navy sailor admits selling secret military blueprints to China for $15K
[10]Chinese snoops stole 60K State Department emails in that Microsoft email heist
[11]Routers have been rooted by Chinese spies, US and Japan warn
Along with [12]assuming cryptocurrency is [13]anonymous , Dalke made an elementary mistake in the commission of his crimes that led the FBI right to him. He didn't consider that the NSA might have comprehensive logs of user activities on their systems.
Dalke printed the documents he sent to the OCE while employed at the NSA. A look at historical data on NSA systems made it easy to determine that [14]it was his account alone that printed those four particular documents, the FBI said in its affidavit.
Dalke also reportedly sent some of the cryptocurrency paid to him by the OCE to a wallet on the Kraken crypto exchange registered in his own name.
[15]
Some security engineer.
Dalke's case is hardly the only recent incident of cyber espionage affecting the US government. In August, a US Air Force National Guard member was [16]accused of posting classified information online for clout, which later ended up on Russian-linked Telegram channels.
Days later a pair of US Navy sailors pleaded [17]guilty to giving sensitive military information to Chinese spies, and last month a civilian US government employee working as an IT helpdesk tech was arrested for [18]allegedly transmitting US national defense information to Ethiopia. ®
Get our [19]Tech Resources
[1] https://regmedia.co.uk/2023/10/24/dalke-plea-agreement.pdf
[2] https://regmedia.co.uk/2023/10/24/dalke-indictment.pdf
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZTg@hwMIZj97aYVHtb1kPAAAAJc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZTg@hwMIZj97aYVHtb1kPAAAAJc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZTg@hwMIZj97aYVHtb1kPAAAAJc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZTg@hwMIZj97aYVHtb1kPAAAAJc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://www.nbcnews.com/news/us-news/how-big-debt-threatening-security-clearances-thousands-troops-flna939408
[8] https://www.theregister.com/2023/10/21/icc_spying_attack/
[9] https://www.theregister.com/2023/10/11/us_navy_china_spy/
[10] https://www.theregister.com/2023/09/28/chinese_hackers_stole_60000_state/
[11] https://www.theregister.com/2023/09/27/us_japan_routers/
[12] https://www.theregister.com/2017/08/20/bitcoins_anonymity_easy_to_penetrate/
[13] https://www.theregister.com/2023/08/23/tornado_cash_founders_indicted/
[14] https://www.theregister.com/2022/10/03/nsa_worker_fbi_espionage/
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZTg@hwMIZj97aYVHtb1kPAAAAJc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://www.theregister.com/2023/08/01/us_military_cybersecurity/
[17] https://www.theregister.com/2023/08/04/us_navy_sailors_china_spies/
[18] https://www.theregister.com/2023/09/21/it_help_desk_guy_arrested/
[19] https://whitepapers.theregister.com/
Re: Dalke printed the documents he sent to the OCE while employed at the NSA.
How else would you provide sensitive information where it's needed? Sneakernet is the securest network.
Re: Dalke printed the documents he sent to the OCE while employed at the NSA.
Let me see if I understand correctly, they've got a machine at the NSA that prints-out “secret” documents :o
Yes, because sometimes it is necessary to print material that resides on a classified network. As with any other equipment on said networks, those printers are not allowed on unclassified networks.
Debt
According to Dalke's signed plea deal, he told the OCE he was $237,000 in debt, with $93k soon to be due. Dalke requested $85k in an unnamed cryptocurrency for all the documents in his possession, and promised more in the future.
Seems like blunder during recruitment and onboarding? Why would you hire someone knee deep in debt at [unpleasant organic matter] paid government job with access to valuable intel?
On the other hand a good training material for rookie FBI "Russian spies"...
"questioned [the US's] role in damage to the world in the past and by a mixture of curiosity for secrets and a desire to cause change."
Yup, give intel to a terrorist regime, that will change the world. Da Bolshoy LOL
When I read stories like these
I always wonder if they are some others committing similar crimes without being a total moron who don't get caught. The government isn't likely to announce "some secrets have shown up in Russian / Chinese hands but we have no idea who sold them those secrets or how they managed to access them".
Dalke printed the documents he sent to the OCE while employed at the NSA.
“ Dalke printed the documents he sent to the OCE while employed at the NSA. A look at historical data on NSA systems made it easy to determine that it was his account alone that printed those four particular documents, the FBI said in its affidavit. ”
Let me see if I understand correctly, they've got a machine at the NSA that prints-out “secret” documents :o