You are on page 1of 135

Page 1 of 1

PENNSYLVANIA ACTIONABLE INTELLIGENCE BULLETIN #61


TARGETED ACTIONABLE MONITORING CENTER 19 MARCH 2010

******
The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of public and private sector, critical infrastructure protection initiatives and strategies. The ITRR, a commercial research and analysis organization, uses open-source, human, and closedsource intelligence resources to derive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic, and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts, and military intelligence personnel. Consider in context with other known information.

STRATEGIC ANALYSIS
1. CCTV Mapping and How it Aids Terrorists
Like career criminals, terrorists of all kinds often carry out pre-operational surveillance to determine, among many other things, the location and number of CCTV surveillance cameras in their target location. True, terrorists in the midst of carrying out suicide attacks may not concern themselves with CCTV coverage, but those who plan such attacks and those who assist the attackers certainly do, as do those perpetrating remote attacks or attacks they hope to repeat (VBIED and IED placement, sabotage, assassination, ideological vandalism, drive-by shooting, arson, etc.). In the case of preparing suicide attackers for their mission, advance knowledge of surveillance camera placement can sometimes facilitate their undetected access to heavily populated or significant target areas. For other terrorists, CCTV awareness helps them avoid premature detection of their actions, effectively conceal their identities or facilitate an unnoticed escape from authorities. This phenomenon most recently came to the fore in Greece, where police shot and killed a suspected anarchist terrorist in an exchange of gun fire (see PAIB no. 60) on 10 March 2010. The confrontation ensued when the anarchist, Lambros Fountas, and his associates were interrupted while trying to steal a car. Subsequent investigation by counterterrorism officers into the activities of Mr. Fountas revealed that he had in his possession a map of CCTV surveillance cameras throughout Athens. Police sources told the Greek media that the map, a handmade sketch, "pinpoints all the capital's
Targeted Actionable Monitoring Center 19 March 2010

Page 2 of 1

street cameras and includes notes regarding the scope and blind spots of each camera's lens." The find has strengthened the police assumption that Fountas was a central figure in a Greek anarchist terror organization. Based on the map in his possession and the circumstances of his death, there is some police speculation that Fountas was planning to place a VBIED at an Athens location using a stolen vehicle. In the United States, anarchist groups have already made use of surveillance camera mapping for their own purposes. ITRR analysts note that ahead of the 2008 Democratic National Convention in Denver, Colorado, anarchist activists carried out a survey of CCTV camera locations in the city. The subsequent anarchist-led disorders during the event were possibly facilitated by riot leaders identifying staging areas, targets of vandalism or paths of escape for key activists that were "invisible" to area CCTV cameras. ITRR analysts expect that the same method was used by anarchist instigators prior to the 2008 Republican National Convention in St. Paul, Minnesota. Since at least 2003, most recently in 2010, there have been efforts to crowd-source virtual maps of the large network of CCTV surveillance cameras in the United Kingdom. In some cases, this has been partly accomplished by Freedom of Information requests. In 2006, such a request was made for details of the location of CCTV cameras operated by the UK Highways Agency. Maps of the highway cameras were provided. In Canada, ahead of the 2010 Olympics, privacy rights activists surveyed downtown Vancouver and mapped over 2,000 security cameras. In their report on their August 2009 findings, the activists noted that by "February 2010, between 900 and 1,000 new cameras have been added as part of the Olympic security preparations." Similarly, in Italy activists started a project designed to publicize the location of surveillance cameras, including private CCTV cameras pointed into public spaces. The Anopticon Project, launched in January 2010, uses online mapping as a means to pinpoint all known CCTV cameras in Venice and other cities. Pennsylvania Revolution - a website self-described as "inspired by the ideas of individual freedom, personal liberty and the constitution of the commonwealth and of the United States" began its own project in August 2009 to map "all the known camera's [sic] in PA. The list is already over 400 camera's [sic] including Lancaster City and Penndot Traffic Cameras. Remember this is a small tidbit of the cameras every day." [The Pennsylvania Revolution map "is a website owned, operated and displays the views and opinions of Scott Davis and several contributors to the site."]

Targeted Actionable Monitoring Center 19 March 2010

Page 3 of 1

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sectors: COMMERCIAL FACILITIES; GOVERNMENT FACILITIES 2. The 'Tea Party Express' is on the Way
Several organizations generally associated with the "Tea Party movement" are preparing for a 23-state caravan and series of rallies from Nevada to Washington DC. The "Tea Party Express", as it is being called, will start with a "Mega Rally in Searchlight, NV (hometown to Senate Majority Leader Harry Reid)" and arrive in the capital on 15 April 2010, for a major mass demonstration. The caravan is slated to arrive in Erie, Pennsylvania, on 11 April 2010 for a Tea Party rally. The location of the event has yet to be announced. ******ANALYSIS****** T/I/W Rating: LOW-to-MODERATE

As of this writing, ITRR analysts expect the above event to conform to conditions of a legal protest, although ITRR has no current information regarding needed police permits. No illegality, violence, vandalism or other rioting is expected. Law enforcement personnel will primarily be called upon to provide crowd control and manage possible counter-protests. Nonetheless, a small chance exists that more radical anti-government elements will be inspired to "direct action" targeting government offices. In addition, confrontations between Tea Party protesters and their opponents may escalate into physical conflict.

Sectors: COMMERCIAL FACILITIES; GOVERNMENT FACILITIES 3. Anti-Nuclear Protest March to Stop in PA


A "Walk for Nuclear Abolition" is slated to take place from 8-29 April 2010. The "walk" is to start in Washington, DC and make its way to New York City ahead of a United Nations session on nuclear non-proliferation (Nuclear Non-Proliferation Treaty Review, 3-28 May 2010). The anti-nuclear activists taking part in the "walk" will be in the Philadelphia area from 19-22 April. They are to be hosted by the Brandywine Peace Community while in the city. On 22 April they will attend a Nuclear Free Earth Day Rally in Independence Mall. ******ANALYSIS****** T/I/W Rating: LOW-to-MODERATE

As of this writing, ITRR analysts expect the above event to conform to conditions of a legal protest, although ITRR has no current information regarding needed police permits. Law enforcement personnel will primarily be called upon to provide crowd control. As in other protests of this nature, there remains a small chance that more radical elements will be inspired to take "direct action", such as civil disobedience.

Sectors: ENERGY; GOVERNMENT FACILITIES


Targeted Actionable Monitoring Center 19 March 2010

Page 4 of 1

4. Targeting the EPA Over MTR Mining


Activists protesting mountaintop removal (MTR) mining have issued a call for assistance in "turning up the social media heat on Lisa Jackson today." Jackson is the Environmental Protection Agency's top administrator and she has recently begun communicating in an official capacity through social media sites such as Twitter. The anti-MTR activists have therefore called for supporters to send her Internet messages supporting the actions of protesters who chained themselves to a 20-foot-tall structure they constructed outside her Washington DC office on 18 March 2010. ******ANALYSIS****** T/I/W Rating: LOW-to-MODERATE

Previous calls for assistance in putting pressure on the EPA have already led to sympathetic actions in Pennsylvania. As noted in PAIB no. 50 (22 February 2010), anti-MTR activists decided to target the EPA offices in Philadelphia on 1 March 2010. On that date, about 40 activists gathered at the building for a sit-in, until they were granted a meeting with EPA officials. In their description of the event, the anti-MTR activists said they had "a successful engagement" and that their demands were met. In light of the recent anti-MTR actions focused on the EPA, ITRR analysts believe that additional protests are possible at the Philadelphia EPA offices (1650 Arch St.) in coming days.

Sectors: COMMERCIAL FACILITIES; DEFENSE INDUSTRIAL BASES 5. Good Friday 'Civil Disobedience' at Lockheed Martin in Valley Forge
On 2 April 2010, the Brandywine Peace Community is planning to hold a protest outside the offices of defense contractor Lockheed Martin in Valley Forge, Pennsylvania. Billing the event as "Good Friday civil disobedience", the activists will gather on Goddard Boulevard, behind the King of Prussia Mall, across the street from Lockheed Martin. This anti-war protest is an annual event called "Good Friday Stations of Justice & Peace" and is "modeled on the traditional Stations of the Cross...." The activists will set up large wooden crosses with the Lockheed Martin logo at the crucifixion nail points, which "signify the human cost of war as well as the social and environmental casualties of militarism and Lockheed Martin, the world largest war profiteer and weapons builder." ******ANALYSIS****** T/I/W Rating: LOW

ITRR analysts believe the above event will be non-violent, although it is unclear what the organizers feel will constitute "civil disobedience" in this case. ITRR has no current information regarding needed police permits. Law enforcement personnel are expected to primarily be called upon to provide crowd control. However police personnel should be prepared to counter demonstrator tactics which may include trespass and locking themselves to the facility's gate.

Targeted Actionable Monitoring Center 19 March 2010

Page 5 of 1

Sectors: COMMERCIAL FACILITIES; DEFENSE INDUSTRIAL BASES; GOVERNMENT FACILITIES 6. Special Reminder: Anti-War Protests in DC; Possible Repercussions in PA
Anti-war protesters from around the US are expected to gather in large numbers in Washington DC this Saturday, 20 March, for a "National March on Washington". They will be calling for an end to US-led wars in Afghanistan and Iraq (and most likely in Pakistan and Yemen, too), as well as for an end to ongoing imprisonments in Guantanamo Bay, the Patriot Act, private defense contractors, and support for Israel. As noted in PAIB no. 58, anti-war activists in Pennsylvania are planning related events for Friday and Saturday. These include: * A "peace vigil" protest today, 19 March 2010, outside the Newton facilities of Lockheed Martin, at Silver Lake Park on the Route 413 Bypass. * Also today, anti-war protesters are gathering for a protest on the Morrisville, Pennsylvania, side of the "Trenton Makes" Bridge (connecting Trenton, New Jersey, and Morrisville). * On 20 March 2010, the Coalition for Peace Action (CFPA) is planning a protest event and vigil outside Franklin Mills Mall, at the corner of Knights Rd. and Woodhaven Rd. in northeast Philadelphia. They will be calling for the closure of the Army Experience Center (AEC) at the mall. In addition to the foregoing, the organizers of an ongoing anti-war gathering in Washington called Camp OUT NOW (which was set up to "direct civil disruptions of DC activities") have declared 22 March 2010 as the start of a new campaign. The announcement declares that "acts of civil resistance will begin... and we will end when the troops start to come home." The Camp OUT NOW organizers say they expect each person's "individual commitment" to consist of an act of "civil resistance" "at least once a week", which can include "contributing to the running and infrastructure of our encampment and the care and feeding of activists." ******ANALYSIS****** T/I/W Rating: MODERATE

ITRR analysts expect the above Pennsylvania events to be non-violent, although ITRR has no current information regarding necessary police permits. Nonetheless, it appears that law enforcement personnel will primarily be called upon to provide crowd control. As in other protests of this nature, there remains a chance that radical elements will be inspired to take "direct action", which can include civil disobedience, vandalism or more vigorous protesting. In addition, as ITRR analysts stated in PAIB no. 50, the Camp OUT NOW call for "acts of civil resistance" should not be dismissed, due to the potential involvement of violent groups and individuals (including Anarchists and eco-terrorists). Furthermore, ITRR analysts noted that such acts of "resistance" may be inspired among activists in Pennsylvania. Targets of any such actions would likely include federal and state government offices, as well as military facilities and recruitment stations.

Targeted Actionable Monitoring Center 19 March 2010

Page 6 of 1

Sectors: COMMERCIAL FACILITIES


7. Mujahidin World Cup: Rereleased A 34 minute video first released before the 2006 World Cup, has been released again on jihadi websites as the 2010 South African World Cup approaches. The clip asks the viewers which is a more beautiful goal? then shows a football kick and a goal, then it asks or this and an American Humvee is seen being blown up in Iraq. The narration continues in claiming that Muslim youngsters care more about football than they do the jihad and that it is deteriorating the Muslim spirit. The video shows extremely graphic footage of Muslim victims in Iraq and Gaza including childrens bodies. The footage moves on to show American soldiers bodies being mutilated and burned. The message being sent is that football is the beginning of the way away from jihad, and that the youth need to look at what is happening to Muslims around the world and to join the violent jihad. ******ANALYSIS****** T/I/W Rating: MODERATE

This particular message has been released again because of the 2010 World Cup. However, it shows a continuous effort to recruit young people away from Western activities and attempts to encourage the joining of the international jihad. Additionally, it continues to reflect the jihadists' focus on sporting events as contrary to the jihadist spirit and therefore, worthy of targeting. (PAIB nos. 42, 47, 54 and 57)

Targeted Actionable Monitoring Center 19 March 2010

Page 7 of 1

No actionable intelligence at this time for the following sectors:

AGRICULTURE AND FOOD HEALTHCARE AND PUBLIC HEALTH NATIONAL MONUMENTS AND ICONS BANKING AND FINANCE WATER CHEMICAL CRITICAL MANUFACTURING DAMS EMERGENCY SERVICES NUCLEAR REACTORS, MATERIALS, AND WASTE INFORMATION TECHNOLOGY COMMUNICATIONS POSTAL AND SHIPPING TRANSPORTATION SYSTEMS

Compiled by NR

Targeted Actionable Monitoring Center 19 March 2010

Page 8 of 1

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little capability or intent to take action against the target. It is assessed that, although it cannot be ruled out, an attack or action is unlikely to be mounted based on current available intelligence. Available intelligence and recent events indicate that hostile elements have the capability to take action against the target and that such action is within the adversary's current intent. It is assessed that an attack or action is likely to be a priority and might well be mounted. Available intelligence and recent events indicate that hostile elements have an established capability and current intent to take action against the target and there is some additional information on the nature of the threat. It is assessed that an attack or action on the target is a priority and is likely to be mounted. Available intelligence and recent events indicate that hostile elements with an established capability are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is expected imminently.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Targeted Actionable Monitoring Center 19 March 2010

Page 9 of 1

END-CLASSIFIED-TAM-CFor additional information, please contact the TAM-C of the Institute of Terrorism Research and Response at: +1.215.922.1080 or info@itrrintel.org Working with organizations that refuse to surrender their domestic or international operations to terrorism
Ensure that you always receive the latest information from The Institute of Terrorism Research and Response. Add the e-mail address, "info@itrrintel.org" to your personal address book. This Intelligence report includes information from open and closed intelligence sources. Not all information is able to be verified; however, the TAM-C is actively evaluating the reporting to establish its accuracy and to determine if it represents a possible link to terrorism. If recipients have any additional or clarifying information, please contact the Targeted Actionable Monitoring Center (TAM-C) at +1.215.922.1080. Actionable Intelligence Weekly Briefing A general overview of actionable intelligence (upcoming events) used by directors of security and law enforcement managers to pre-plan their future operations. The Briefing is dispatched on Monday of each week by 1100 GMT to enable early planning of the upcoming weeks. Threat and Hazard Monitoring (THM) A custom service meeting the needs for each client. With the assistance of our international analysts, this service identifies specific threats, hazards, vulnerabilities, and assets our team of native language speakers researchers and ground resources, are to monitor and forward on to the client. For additional information regarding the Center's services or specialized customized research and analysis programs, feel free to contact us at: info@itrrintel.org

Targeted Actionable Monitoring Center 19 March 2010

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 109


9 JULY 2010

******
The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. In accordance with the Homeland Security Act of 2002 and Implementing Recommendations of the 9/11 Commission Act of 2007, the NIPP groups all critical infrastructure, key resources and significant special events in 18 sectors. This intelligence product is oriented specifically on those sectors. The ITRR, a commercial information research and analysis organization, uses open-source, human and closedsource intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel. Consider information contained herein in context with other known information.

STRATEGIC ANALYSIS
1. UPDATE: Mehserle Trial Verdict - Involuntary Manslaughter
Johannes Mehserle is a former Bay Area Rapid Transit police officer accused of deliberately shooting a defenseless African-American youth, Oscar Grant, in Oakland, California, on New Year's Day 2009. Mehserle's trial was held in Los Angeles. On Thursday, the jury found the ex-BART officer guilty of involuntary manslaughter. Events in Oakland on Thursday night confirmed previous ITRR alerts (noted in PAIB Nos. 104 and 108) indicating a high potential for street violence in the event that Mehserle was not found guilty or was found guilty of a reduced charge. In addition, ITRR analysts predicted that protests in the wake of the Mehserle verdict were likely to draw anarchist and left-wing radical elements, as has also been confirmed.

Pennsylvania Actionable Intelligence Bulletin No. 109, 9 July 2010

According to police sources, a crowd that reached around 800 people gathered in the streets of Oakland, primarily at 18th St. and Broadway, in reaction to the verdict. Among the protesters were approximately 50 anarchists. Around 8:00 PM, the gathering turned violent when black-clothed anarchists clashed with police attempting to disperse the crowds. As of this writing (pre-dawn PST), the following acts of violence have been noted: A small incendiary device detonated near a downtown police station. Rocks and bottles thrown at police. The windshield of a California Highway Patrol cruiser was smashed. Fires started in the street, primarily in garbage bins. Area businesses were broken into, looted and vandalized, including a Foot Locker sporting goods store, a branch of Far East National Bank and a RiteAid pharmacy. By late last night, police had made dozens of arrests from among the rioters and anarchists. The officers maintained a presence in the area of unrest throughout the night. As previously noted, recent Black Nationalist communications have been encouraging continuing violence in reaction to the Mehserle trial. Some examples: "[E]nough is enough, NO JUSTICE NO PEACE. [Use] the Art of War; work in squads. BURN IT DOWN!!!" "Grant is executed on live TV, but he was not the only one. This [violence] is not violence, this is retribution." In the wake of the jury's verdict, further radical communications were noted by ITRR researchers: "All out to 14th & Broadway, Oakland! (Communicated ahead of the rioting.) "We must not just demand justice, we must take it. Tear Oakland asunder. Show'em that they can't control us and that we revolt when they killed innocent members of our community. Defend your neighborhoods from uniformed gang members and take this fight to the streets." "OFF THE PIG!" Self-identified anarchists also called for taking to the streets (communicated ahead of the rioting): "We are anarchists who live in the Bay. We are OUTRAGED by the murder of Oscar Grant, and we are pissed at continuing police violence and disregard of communities health and safety. Some folks have been calling us outside agitators. We wonder: outside of what? We are all faced by police violence." "THE PIGS STARTED THIS. Straight up, we dont like that the police murder people. Last year when people expressed themselves in the streets, we
Page 2 of 9

Pennsylvania Actionable Intelligence Bulletin No. 109, 9 July 2010

heard condemnation of property destruction but no rebuke of police aggression against peoples bodies. Lets not forget that the only reason Mehserle is on trial is because the people of Oakland rose up." In addition to Oakland, ITRR analysts identified Los Angeles and San Francisco as the primary cities at risk of civil unrest in the wake of the Mehserle verdict. In Los Angeles, a few dozen protestors gathered at a mostly peaceful rally at Leimert Park. However, it is notable that members of the radical socialist and anarchist ANSWER Coalition were identified among the protesters. As noted in PAIB no. 36 and thereafter, anarchists worldwide repeatedly expressed admiration for the very destructive riots that took place in Oakland immediately following the Grant shooting. A similar supportive reaction can be expected this time as well, possibly driving rioting and unrest in other cities outside California or even outside the United States (depending on the outcome of this still-developing event). ITRR Analysts Note: Thursday's violence may be a precursor of additional rioting and vandalism both in Oakland and elsewhere. A general call to action has been issued through anarchist communication channels under the heading: "We are all Oscar Grant! A West Coast call out for Solidarity actions. Thus far, two such rallies in "solidarity" with the rioting in Oakland have already been called for in Richmond, VA, and Bloomington, IN. ITRR reiterates that adversarial reactions - including anything from minor vandalism to violent rioting - are a particular risk in those urban centers with significant radical activism or anarchist groups; this includes the greater Pittsburgh and Philadelphia areas.

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


SECTOR: ENERGY 2. A 'Green' Protest Against a 'Green' Solution EARTH FIRST! protesters targeted a wind farm in Franklin County, Maine, on 6 July

2010. About 35 people tried to block an access road to the site of the TransCanada wind farm project on Kibby Mountain, as well as targeting a truck on a major public road leading to the site. Four activists - including one woman who locked herself by the neck to the truck with a bike lock - were arrested. Violations included failure to disperse and trespassing. The local Land Use Regulation Commission was to deliberate the following day on a proposal to build 15 wind turbines on a ridge north of Sisk Mountain.

Page 3 of 9

Pennsylvania Actionable Intelligence Bulletin No. 109, 9 July 2010

****** ANALYSIS ******

T/l/W Rating: LOW-to-MODERATE

The above civil disobedience and direct action protest came on the heels of the 2010 Earth First! Round River Rendezvous, held 29 June-6 July 2010 in Maine. As noted in PAIB No. 104, participants in the Rendezvous were invited to take part in "direct-action and skills trainings," as well as lessons in "war tax resistance" and "self-defense. In addition, as previously noted, the skills and knowledge shared at events like the Rendezvous will most likely be seen and felt at subsequent environmental protest events or in direct action vandalism by eco-terrorist adversaries. ITRR analysts note that the targeting of a project that is generally seen as a "green" alternative energy facility confirms that radical activists such as Earth First! are willing to oppose any initiative not perfectly aligned with their views. Due to the socialist and anarchist bent of most "green radicals, this appears to be especially true of projects operated by private companies; however, environmental activists have also targeted governmental nature protection agencies as well. As reported in PAIB No. 90, supporters of Earth First! are forming a new network in the upstate New York-Pennsylvania region. Therefore, ITRR analysts have identified the wind farms in Pennsylvania that may be targets for eco-activists inspired by events in Maine to carry out their own "direct actions:" Allegheny Ridge Wind Farm (Blair and Cambria Counties) Armenia Mountain Wind Farm (Tioga and Bradford Counties) Bear Creek Wind Power Project (Luzerne County) Casselman Wind Power Project (Somerset County) Chestnut Flats Wind Farm (Blair and Cambria County - planned to open this year). South Chestnut Wind Project (Fayette County - planned to open this year) Forward Wind Project (Somerset County) Green Mountain Wind Energy Center (Somerset County) Highland Wind Project (Cambria County) Locust Ridge I and Locust Ridge II (Columbia and Schuylkill Counties) Lookout Wind Project (Somerset County) Meyersdale Wind Power Project (Somerset County) Mill Run Wind Energy Center (Fayette County) North Allegheny Wind Farm (Blair and Cambria County) Stonycreek Wind Farm (Somerset County) Somerset Wind Farm (Somerset County) Waymart Wind Farm (Wayne County) Also of note is that expanding circles of environmentalists and "green anarchists, explicitly including Earth First! (as noted in PAIB No. 68), are willing to embrace escalating eco-terrorism of one form or another.

Page 4 of 9

Pennsylvania Actionable Intelligence Bulletin No. 109, 9 July 2010

SECTORS: ENERGY AND TRANSPORTATION SYSTEMS 3. Green Tactics: 'Piracy'

Environmental activists from the Greenpeace organization illegally boarded a ship transporting coal from South Africa to Israel on Thursday. It was a "direct action" of piracy just off Israel's coast in protest against a new coal-fired power plant in Ashkelon. The Greenpeace team used inflatable rubber boats to approach the vessel undetected and a rope ladder to climb aboard. Three activists then tied themselves to the ship's mast, flew banners reading "Coal Kills" and demanded that the ship be halted before delivering its cargo. Police succeed in controlling the environmental activists and bringing them off the ship. ****** ANALYSIS ****** T/l/W Rating: LOW-to-MODERATE

As with other protest actions that make international headlines, the above event in Israel is an inspiration for other eco-terrorists or environmental militants. Other notable Greenpeace actions that made the headlines this year included the successful disruption in France of a train delivering radioactive waste to Russia (PAIB 60) and the arrest of fifty Greenpeace activists after they trespassed and broke into Swedish nuclear power plant (PAIB no. 100). ITRR Analysts Note: The aforementioned tactic of hijacking a coal delivery boat or barge - although possible on in open seas - is not deemed a threat in the navigable, inland waterways of Pennsylvania. Any disruption/interdiction of freedom of navigation is however. According to official government figures, there are five power plants along Pennsylvanias inland waterways that receive approximately 11.5 million tons of coal; while about 15.5 million tons of Pennsylvania coal is exported by barge to 21 power plants in the Ohio River Basin. An example of the latter is Penn Keystone Coal of Claysburg, Pennsylvania. This company distributes coal from northeastern Pennsylvania, which it trucks to western Pennsylvania and loads onto barges for delivery along the Monongahela River ("the Mon"), Allegheny and Ohio Rivers.

SECTORS: COMMERCIAL FACILITIES AND GOVERNMENT FACILITIES 4. Egyptian Muslim Brotherhood: 'Go Out Against the Zionists'
The new leader of the MUSLIM BROTHERHOOD IN EGYPT has issued a call for Muslims to take action against "the Zionists.

Page 5 of 9

Pennsylvania Actionable Intelligence Bulletin No. 109, 9 July 2010

Using the imagery of "reviving jihad" and "defending Al-Aqsa mosque" in Jerusalem, Mohammad Badie called for his followers to "assist the resistance" as much as they can. He said that Islamic duty is to wage jihad against Israel, and to not accept "surrender and humiliation. Badie also added his "greetings to whoever is contributing to breaking down the siege on Gaza and to ending the Zionist occupation of the land of Palestine." The communication appears in Arabic on the official website of the Muslim Brotherhood. ****** ANALYSIS ****** T/l/W Rating: LOW-to-MODERATE

ITRR analysts note that Badie is the new Muslim Brotherhood leader since January 2010. His heated anti-Israel rhetoric may be a small part of an attempt to establish his credentials among the militants. Israel ITRR recommends that Pennsylvania students, researchers and faculty at the many overseas programs in Israel (such as those of Temple University, Drexel University, University of Pennsylvania, and various Jewish and Christian religious seminaries), as well as business travelers in the country, maintain their heightened situational awareness. Security risks come from violent protests and lone-wolf attacks, as well as organized terrorism. ITRR further recommends adhering carefully to any instructions provided by Israeli security forces. Egypt As reported in PAIB No. 31, ITRR researchers intercepted jihadist communications that shared targeting information for a residential building in Egypt in which, jihadists claimed, Jewish people live. At the time, ITRR analysts had correctly identified the probable target as the Sha'ar HaShamayim synagogue in Cairo. On 21 February 2010, an unidentified man hurled a suitcase containing a makeshift bomb from a hotel at the aforementioned synagogue. Sha'ar HaShamayim, as well as other historical synagogues and the Israeli embassy in Cairo, may again draw the hostile attentions of local supporters of the Muslim Brotherhood. Pennsylvania students attending the American University in Cairo, Egypt (BEG), business travelers and tourists to Jewish religious sites should be advised of the current increased danger of terrorist activity. Additionally, government offices, major hotels and Sinai resorts have also been preferred jihadist targets. Pennsylvania Members of Islamic groups in Pennsylvania that see themselves as generally aligned with the international Muslim Brotherhood movement may take some action
Page 6 of 9

Pennsylvania Actionable Intelligence Bulletin No. 109, 9 July 2010

in response to the Egyptian Muslim Brotherhood leader's call. Vigorous protests possibly including some "direct action"-type illegality - may focus on the Israeli consulate in Philadelphia. Other potential targets for protests, vandalism or lonewolf terrorism in the region include any high-profile Jewish institution, synagogue or Jewish communal event. In addition, pro-Israeli gatherings or counterdemonstrations may be seen as population targets for attacks by extremist activists or actual terrorist cells. Personnel with assets in proximity to Israeli or Jewish assets should be prepared to respond to collateral damage as a result of acts of violence aimed at the Israeli assets. Of note in this regard is the Muslim American Society (123 East Luzerne Street, Philadelphia), which appears to be linked with the international Muslim Brotherhood movement. ITRR researchers are attempting to definitively identify other Muslim Brotherhood-affiliated institutions in Pennsylvania. ITRR researchers are continuing to monitor jihadist and Muslim Brotherhood communications for indications of calls to arms or protest events in Pennsylvania. No intelligence at this time regarding the following sectors:

AGRICULTURE AND FOOD BANKING AND FINANCE CHEMICAL COMMUNICATIONS CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASES EMERGENCY SERVICES HEALTHCARE AND PUBLIC HEALTH INFORMATION TECHNOLOGY NATIONAL MONUMENTS AND ICONS NUCLEAR REACTORS, MATERIALS AND WASTE POSTAL AND SHIPPING WATER
Compiled by NR

Page 7 of 9

Pennsylvania Actionable Intelligence Bulletin No. 109, 9 July 2010

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little capability or intent to take action against the target. It is assessed that, although it cannot be ruled out, an attack or action is unlikely to be mounted based on current available intelligence. Available intelligence and recent events indicate that hostile elements have the capability to take action against the target and that such action is within the adversary's current intent. It is assessed that an attack or action is likely to be a priority and might well be mounted. Available intelligence and recent events indicate that hostile elements have an established capability and current intent to take action against the target and there is some additional information on the nature of the threat. It is assessed that an attack or action on the target is a priority and is likely to be mounted. Available intelligence and recent events indicate that hostile elements with an established capability are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is expected imminently.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Page 8 of 9

Pennsylvania Actionable Intelligence Bulletin No. 109, 9 July 2010

END-CLASSIFIED-TAM-CFor additional information, please contact the TAM-C of the Institute of Terrorism Research and Response at: +1.215.922.1080 or
info@itrrintel.org

Working with organizations that refuse to surrender their domestic or international operations to terrorism
Ensure that you always receive the latest information from The Institute of Terrorism Research and Response. Add the e-mail address, "info@itrrintel.org" to your personal address book. This Intelligence report includes information from open and closed intelligence sources. Not all information is able to be verified; however, the TAM-C is actively evaluating the reporting to establish its accuracy and to determine if it represents a possible link to terrorism. If recipients have any additional or clarifying information, please contact the Targeted Actionable Monitoring Center (TAM-C) at +1.215.922.1080. Actionable Intelligence Weekly Briefing A general overview of actionable intelligence (upcoming events) used by directors of security and law enforcement managers to pre-plan their future operations. The Briefing is dispatched on Monday of each week by 1100 GMT to enable early planning of the upcoming weeks. Threat and Hazard Monitoring (THM) A custom service meeting the needs for each client. With the assistance of our international analysts, this service identifies specific threats, hazards, vulnerabilities, and assets our team of native language speakers researchers and ground resources, are to monitor and forward on to the client. For additional information regarding the Center's services or specialized customized research and analysis programs, feel free to contact us at: info@itrrintel.org

Page 9 of 9

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 110


12 JULY 2010

******
The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. In accordance with the Homeland Security Act of 2002 and Implementing Recommendations of the 9/11 Commission Act of 2007, the NIPP groups all critical infrastructure, key resources and significant special events in 18 sectors. This intelligence product is oriented specifically on those sectors. The ITRR, a commercial information research and analysis organization, uses open-source, human and closedsource intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel. Consider information contained herein in context with other known information.

ACTIONABLE DATE REMINDERS


Current-31 August 2010: In the general escalation in Irish republican terrorism, Marching Season in Northern Ireland is a period of several serious potential flashpoints for violence, with the most significant risk surrounding the 12 July march. Heightened situational awareness is called for among students and faculty with overseas programs in Northern Ireland, such as those of Millersville University and the Pennsylvania College of Technology. 14 July 2010: Northern Wayne Property Owners Alliance (NWPOA) is calling for supporters of oil well drilling in the Delaware River Basin - which would naturally entail their right to sell their properties to oil companies - to attend the Delaware River Basin Commission hearing in Trenton, New Jersey. Opponents of such drilling have called for a parallel rally at the DRBC.

Pennsylvania Actionable Intelligence Bulletin No. 110

15-19 July 2010: Animal Rights National Conference 2010 at the Hilton Hotel in Alexandria, Virginia: "the world's largest and longest-running animal rights gathering. Likely to have an impact on animal rights activism nationwide. 16-18 July 2010: The NORTHEAST ANARCHISTS NETWORK (NEAN) is holding its annual assembly in Boston, Massachusetts. 16-18 July 2010: 28th Annual Riyaadah (http://www.riyaadah09.org/) - a Muslim sports and outdoor celebration slated to take place in Philadelphia, at the park on Cobbs Creek and on the campus of Temple University. (See details herein.) 16-19 July 2010: A multi-state militia organization - the 2-4 MID ATLANTIC

CITIZEN HOMELAND SECURITY ASSOCIATION (2-4 MACHSA or "Mountain Men"),


active along the Mason-Dixon Line of Maryland and Pennsylvania - is holding its first Annual Patriot Training in Pennsylvania. 17 July 2010: A.N.S.W.E.R. (ACT NOW TO STOP WAR & END RACISM, https://secure2.convio.net/pep/site/SPageServer?JServSessionIdr004=lg54by2ms1 .app213b&pagename=ANSWERLA ) meeting in Philadelphia, at the William Way LGBT Center. (See details herein.) 17 July 2010: Environmental activist groups in Europe have called for an "International Stop the Tar Sands Day. The reference is to what they call the "climate crime" of tar sands oil extraction projects in Alberta, Canada. ITRR analysts identified several specific banks funding the Alberta tar sands project that may become targets for eco-activist "direct action, or worse, in Pennsylvania, including branches of financial institutions (see PAIB no. 107 for a detailed list). 24 July 2010: A Lesbian, Gay, Bi-sexual and Transgender (LGBT "Gay pride") parade and subsequent festival, PrideFest, are to take place in Harrisburg. The parade will progress down Front Street (between North and Walnut), with the festival in Riverfront Park. Law enforcement personnel will primarily be called upon to provide crowd control and manage possible counter-protests. Of note are recent focused anti-gay rhetoric and actions among White supremacists and some rightwing militia supporters. 29 July 2010: Arizona's immigration law SB-1070 to be enacted. Anarchists and immigrants' rights activists are prepared to "escalate resistance" nationwide. 6-9 August 2010: An Anarchy Summer Camp in northern Virginia (the precise location kept confidential at the present time) "will help you prepare for the upcoming International Monetary Fund (IMF) demonstrations this fall.... [and] will

Page 2 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

prepare participants for the demonstrations through workshops... as well as real life exercises, such as tactical simulations." The IMF is scheduled to meet in Washington, DC, 9-11 October 2010. Skills and lessons learned can be expected to be put into effect in anarchist actions throughout the northeast region in the following months, including in Pennsylvania. 6-9 August 2010: The Brandywine Peace Community is planning to hold two protests marking the World War II nuclear bomb attacks on Hiroshima and Nagasaki, Japan, in 1945. On 6 August 2010 activists will gather outside the offices of defense contractor Lockheed Martin in Valley Forge for "civil disobedience and... arrest..." On 9 August 2010, the activists will gather at Philadelphia's City Hall and march to SS Peter and Paul Roman Catholic Cathedral. 9-12 August 2010: Coal-Gen 20-Ten, the coal "industry's most dynamic event, is to be held at the David L. Lawrence Convention Center in Pittsburgh. 30 July-31 August 2010: The anarchist organization, CRIMETHINC. http://www.crimethinc.com/ is planning what they have called "a decentralized convergence". One specified rolling event is the Conspiracy Tour throughout several US states, from 25 July through 25 August 2010. Tentative Conspiracy Tour dates and locations in Pennsylvania include: 30-31 July 2010 in Pittsburgh 3 August 2010 in Philadelphia

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


SECTORS: COMMERCIAL FACILITIES AND GOVERNMENT FACILITIES 1. A.N.S.W.E.R. Meeting in Philadelphia
The radical anti-capitalist, anti-authoritarian A.N.S.W.E.R. organization is planning to hold a planning and analysis meeting in Philadelphia on 17 July 2010. The gathering is slated to take place in the William Way LGBT Center at 315 Spruce St. under the heading, "Fighting the right and defending immigrant rights. Participants hope to discuss, "Who is behind recent right-wing demonstrations and legislation? What social and class forces do they represent? What can we do to organize and fight back?" Participants will also hear a report about protests over
Page 3 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

Arizona Governor Jan Brewer's attendance at the National Governors Association meeting in Boston on 10 July 2010. ANSWER is also planning to press for Philadelphia to become an illegal immigration "sanctuary city. ****** ANALYSIS ****** T/I/W Rating: LOW

ITRR analysts do not foresee a security risk at the ANSWER gathering; however, the lessons learned and plans to "organize and fight back" under discussion can be expected to be incorporated in subsequent ANSWER actions in Pennsylvania. ITRR researchers are monitoring adversarial communications for indications of risk stemming from the ANSWER planning sessions.

Sectors: BANKING AND FINANCE, ENERGY AND GOVERNMENT FACILITIES 2. EPA Headquarters Sit-In
Members of the RAINFOREST ACTION NETWORK (RAN), held a sit-in at the Washington, DC offices of the Environmental Protection Agency (EPA) on 8 July 2010. Calling for an end to mountaintop removal (MTR) coal mining in West Virginia, the activists collectively sat down in the center of the EPA lobby and locked themselves together with metal "lock boxes, while playing music interspersed with sounds of MTR explosives. Another RAN member hung an anti-MTR banner from the EPA's front door. RAN is opposed to the new guidelines issued by the EPA regarding MTR mining. ****** ANALYSIS ****** T/I/W Rating: LOW-to-MODERATE

ITRR analysts reiterate that anti-coal mining activists and related organizations have recently been increasing training and actions targeting the coal industry and related facilities. Training sessions in West Virginia and Virginia have focused on "skills and knowledge" regarding tactics for "direct action, while the EARTH FIRST! movement has taken a turn to advocating more aggressive civil disobedience and sabotage. In addition, eco-extremist and anti-capitalist communications of 8 January 2010 and thereafter include explicit calls for sabotage of major facilities and even murder. Significantly, calls for assistance in putting pressure on the EPA from environmentalist militants have led to sympathetic actions in Pennsylvania. As noted in PAIB No. 50, anti-MTR activists decided to target the EPA offices in Philadelphia on 1 March 2010. On that date, about 40 activists gathered at the building for a sit-in.

Page 4 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

Regarding RAN, ITRR analysts note that the organization has declared its decision to specifically target JP Morgan Chase for its role on MTR mining. On 2 April 2010, for example, RAN activists participated in a flash-mob "street theater" at JP Morgan Chase's Chicago headquarters. Other facilities targeted by RAN in previous campaigns have been the scene of illegal actions including trespassing, lock-downs and vandalism. In light of the recent anti-MTR action focused on the EPA, ITRR analysts believe that sympathetic protests are also possible at the Philadelphia EPA offices (1650 Arch St.). In addition, ITRR reiterates that branches of financial institutions such as JP Morgan Chase, Citi Bank, Goldman Sachs and Bank of America are potential targets of anti-coal mining activist protests, campaigning or more radical "direct action" activities. Other companies previously identified as targets of ecological activists were the coal companies directly involved in MTR coal operations, power companies that burn this coal and the offices of Duke Energy. In addition, precautions are called for at businesses in proximity to the above-named institutions.

Sector: COMMERCIAL FACILITIES 3. Annual Muslim Sporting and Outdoor Event in Philadelphia
Philadelphia will host the 28th Annual Riyaadah on 16-18 July 2010. Described as "one big Muslim family reunion," the Riyaadah includes outdoor games and sports competitions, vendors and craftspeople, as well as various religious "lectures, seminars and workshops on bringing the teachings of Islam into our lives." Events begin with a large communal prayer on Friday, to be held in the park at 61st St. and Cobbs Creek Parkway. An additional welcoming event is to take place in the evening at the African American Museum (701 Arch St.). On Saturday, primary Riyaadah events are slated to take place at the Temple University campus complex, as well as a pistol competition at the Double Action Inc. range at 611 Industrial Park Dr. in Yeadon. On Sunday the central Riyaadah event is a "citywide barbecue" in the park at 61st St. and Cobbs Creek Parkway. ****** ANALYSIS ****** T/I/W Rating: LOW-to-MODERATE

ITRR analysts do not foresee a significant security risk inherent to the Riyaadah; however, there is a possibility of local troublemakers taking advantage of the large urban gathering. ITRR analysts observe that such a scenario has taken place at the Greek Picnic event in Fairmount Park (not far from Cobbs Creek). Additionally, there is a small risk of protesters targeting the Riyaadah for antiIslamic agitation. While no such indicators have yet been identified, ITRR analysts

Page 5 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

are monitoring adversarial communications for indications of increased risk associated with the Riyaadah.

Sectors: COMMERCIAL FACILITIES AND ENERGY 4. Oil Executive Targeted in Parcel Bombing
A woman suffered significant facial injuries Friday when a pipe bomb concealed in what appeared to be a gift package of chocolates exploded in her hands. The parcel was left on the front porch of the Houston home where she was staying. While open sources do not identify the owner of the property, saying only that it belongs to an "oil executive"; ITRR has confirmed that it is the property of Adams Resources and Energy executive James Moore. Of note is that anti-authoritarian speculation as to the property owner's identity, using open sources and crosschecking methods, also identified Moore. According to authorities, the bomb was packed with thumb tacks and nails to increase physical damage to targeted individuals. In reaction to the bombing, for which no group has taken responsibility as of this writing, anti-capitalist and environmental militants expressed satisfaction: "Do you think any other oil execs should start worrying about their personal well being just because BP has killed 11 workers, fucked up the gulf and its coastline, devastated an entire ecosystem and destroyed the lives of thousands of people, birds and aquatic creatures?... Sometimes when these things happen, reactionary responses take on a life of their own." "But seriously, how else do people get the CEO's attention? They have no conscience and don't think twice about killing innocents for their greed. They see riches piling up and there is never enough to satisfy them... Let this be a lesson to the arrogant wankers running big corporations. If you have no conscience to guide you then you will have to learn the hard way. I'm sure the citizens who were forced to these extremes will be caught and made an example of, but hopefully the elitist who laugh all the way to the bank will learn a lesson." "Americans finally recognize the enemy." "Let the class war begin. This has been simmering for decades. Citizens have no recourse against hundred billion dollar transnational corporations, the president of the united states is freaking powerless against them. They are bigger than most countries in the world and more powerful; somehow they have colluded even with our coast guard who is protecting BP instead of our coast...."

Page 6 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

"The only thing these people listen to is huge sums of money, which citizens dont have, or violence. Until we destroy enough of their property to make a financial splash or start killing their executives and decision makers and profiteers, nothing will change. Why should it. ...What can we do but violence????????" "One oil executive dead is just a good beginning as far as I'm concerned but there are plenty of other corporations that deserve the same or worse... Let's start with Monsanto and Koch industries." "Let the games begin!" "I think we'll see a huge rise in incidents like the pipe bomb at the oil executives homes... since the laws dont govern the rich and powerful the same as the poor and disadvantaged then 'vigilante' justice will start big time." "The destruction of our lives as a result of the energy industry goes far beyond Hayward. And none are held accountable. Has there been any charges levied against Massey, yet?" ****** ANALYSIS ****** T/I/W Rating: MODERATE

The above bombing, if confirmed to be the work of eco-terrorists, would confirm the environmentalist slide toward violence as identified by ITRR in January 2010. Eco-extremist, anti-coal mining and anti-capitalist communications of 2010 include explicit calls for everything from more aggressive civil disobedience through sabotage and even murder. Furthermore, the increasing combination and crosspollination of ecological militants and anarchists is expected to prove increasingly volatile, since, like their environmentalist militant allies, anarchist rhetoric has also seen a shift toward support for extremist action in the past year. In this context, ITRR analysts have observed general anarchist support or sympathy in some circles for the anti-civilization "Unabomber, Ted Kaczinski. Specifically named in communications reacting to the Houston bombing were Monsanto, with offices in Manheim and York, Koch Industries, with offices in Pittsburgh and Schaefferstown, and Massey Energy. In May 2010, it will be noted, Massey purchased the Mathies mine in Union, its first investment in Pennsylvania.

Sector: GOVERNMENT FACILITIES 5. Ugandan Bombing Follows Explicit Threats; PA Man Killed
Two apparent suicide bombers struck the Ugandan capital of Kampala on 11 July 2010. As of this writing, 64 people were reportedly killed in the attacks. The bombings were apparently timed to strike large crowds gathered at restaurants in the city to watch the final game of the FIFA World Cup on TV.
Page 7 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

One American was killed and at least three others wounded in one of the bombings, at an Ethiopian restaurant. The American casualties were all part of a church-based NGO from Pennsylvania. Current local assessments, as well as ITRR analysis, indicates that the Somali jihadists SHABAB AL-MUJAHIDEEN are behind the deadly bombings. The latest Shabab rhetoric has increasingly focused on Uganda as a preferred target, along with Burundi, but not just in the African continent. 1. On 11 July 2010 the Shabab issued a new video recording called, "The African Crusaders: The War for the West." In the video, there are several scenes of what is claimed to be successful Shabab attacks on foreign forces in Somalia. A key statement in the video's audio track is: "The Ugandans invaded to our land. That is why we will kill their soldiers and generals; we'll destroy their weapons, and kill their politicians and diplomats." The threat concludes with a call to action: "We recommend that all jihad fighters put the Ugandans on the top of their list." 2. Several days earlier, the purported leader of Shabab issued explicit threats against Uganda and Burundi for those countries' roles in the African Union forces in Somalia. He called on Somalis to "unite in their war against the enemies of Allah." The peoples of Uganda and Burundi can become a group target for Shabab, the communication warned, "as a response over the massacre of Somali women and children in Mogadishu by their soldiers." 3. Around the same time, a senior Shabab spokesman publicly called on international jihadists to attack the embassies of Burundi and Uganda throughout the world. As the spokesman phrased it, "We call on Muslim youths and jihadists wherever they are in the Muslim world to attack, bomb and burn the global embassies of Burundi and Uganda." 4. Also in recent days, ITRR researchers identified communications aimed for internal use of Shabab in which there is an express intent to increase operations against African Union troops within Somalia. The communication said that "the enemies of Allah met in Ethiopia few days ago and agreed to fight the great Koran." In response to the Kampala bombings, Yusuf Sheik Issa, a Shabab spokesman, told the Associated Press: "Uganda is one of our enemies. Whatever makes them cry makes us happy. May Allah's anger be upon those who are against us." He refused to confirm or deny Shabab involvement. In new communications intercepted today (12 July 2010) by ITRR, jihadists declare: "If there are martyrs in Mogadishu there will be martyrs in Addis Ababa [Ethiopia] and Kampala. This is not the end. Dont think that Kampala is the end. It's just the beginning."
Page 8 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

****** ANALYSIS ****** T/I/W Rating: MODERATE-to-SEVERE ITRR analysts note that the jihadist strategy of openly threatening a given target even as plans to attack it are already underway is designed to increase the prestige of the organization. They earn a reputation for being able to "call their shots, which would be seen as a sign of a force that the jihadists' enemies are unable to stop. Due to the clear, current evidence of the Shabab use of that strategy and the threats of more imminent attacks, ITRR analysts reiterate guidance (offered in PAIB No. 44) regarding explicit Shabab threats to Kenya. As noted at the time, Pennsylvania has had several links with Kenya in recent years, bringing Commonwealth-based delegations to the African country from Pennsylvania State University student volunteers to representatives of the Pennsylvania Credit Union Association. Pennsylvanian organizations with current contacts with Kenya should be made aware of the increased risk of attack or abduction throughout the Horn of Africa. In addition, there is a continuing and increased potential of opportunistic terror attacks within Uganda, Burundi and Ethiopia at the current time. There is also a small risk of lone-wolf operations targeting Ugandan, Ethiopian or Burundian assets outside Africa.

Page 9 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

No intelligence at this time for the following sectors:

AGRICULTURE AND FOOD CHEMICAL COMMUNICATIONS CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASES EMERGENCY SERVICES HEALTHCARE AND PUBLIC HEALTH INFORMATION TECHNOLOGY NATIONAL MONUMENTS AND ICONS NUCLEAR REACTORS, MATERIALS AND WASTE POSTAL AND SHIPPING TRANSPORTATION SYSTEMS WATER

Compiled by NR

Page 10 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little capability or intent to take action against the target. It is assessed that, although it cannot be ruled out, an attack or action is unlikely to be mounted based on current available intelligence. Available intelligence and recent events indicate that hostile elements have the capability to take action against the target and that such action is within the adversary's current intent. It is assessed that an attack or action is likely to be a priority and might well be mounted. Available intelligence and recent events indicate that hostile elements have an established capability and current intent to take action against the target and there is some additional information on the nature of the threat. It is assessed that an attack or action on the target is a priority and is likely to be mounted. Available intelligence and recent events indicate that hostile elements with an established capability are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is expected imminently.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Page 11 of 12

Pennsylvania Actionable Intelligence Bulletin No. 110

END-CLASSIFIED-TAM-CFor additional information, please contact the TAM-C of the Institute of Terrorism Research and Response at: +1.215.922.1080 or
info@itrrintel.org

Working with organizations that refuse to surrender their domestic or international operations to terrorism
Ensure that you always receive the latest information from The Institute of Terrorism Research and Response. Add the e-mail address, "info@itrrintel.org" to your personal address book. This Intelligence report includes information from open and closed intelligence sources. Not all information is able to be verified; however, the TAM-C is actively evaluating the reporting to establish its accuracy and to determine if it represents a possible link to terrorism. If recipients have any additional or clarifying information, please contact the Targeted Actionable Monitoring Center (TAM-C) at +1.215.922.1080. Actionable Intelligence Weekly Briefing A general overview of actionable intelligence (upcoming events) used by directors of security and law enforcement managers to pre-plan their future operations. The Briefing is dispatched on Monday of each week by 1100 GMT to enable early planning of the upcoming weeks. Threat and Hazard Monitoring (THM) A custom service meeting the needs for each client. With the assistance of our international analysts, this service identifies specific threats, hazards, vulnerabilities, and assets our team of native language speakers researchers and ground resources, are to monitor and forward on to the client. For additional information regarding the Center's services or specialized customized research and analysis programs, feel free to contact us at: info@itrrintel.org

Page 12 of 12

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 111


14 JULY 2010

******
The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002 and Implementing Recommendations of the 9/11 Commission Act of 2007, critical infrastructure and key resources are defined as systems and assets whether physical or virtual - so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. This informational / /intelligence product is oriented specifically on those Pennsylvania-based critical infrastructures & key resources. The ITRR, a commercial information research and analysis organization, uses open-source, human and closed-source intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel. Consider information contained herein in context with other known information, indicators, threats and warnings.

ONGOING RESEARCH
1. Annual Muslim Sporting and Outdoor Event in Philadelphia
Philadelphia will host the 28th Annual Riyaadah (http://www.riyaadah09.org/ ) on 16-18 July 2010. Described as "one big Muslim family reunion," the Riyaadah includes outdoor games and sports competitions, target shooting at a gun range, vendors and craftspeople, as well as various religious "lectures, seminars and workshops. ITRR is monitoring far-right communications for potential protests by anti-Islam organizations. (PIB No. 110)

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

2. Anarchy Summer Camp in August


Communications in Philadelphia-centered anarchist fora include calls for attendance at the Anarchy Summer Camp, (http://www.phillyimc.org/en/event/anarchysummer-camp-20 ), 6-9 August 2010, in order to "prepare for the upcoming International Monetary Fund demonstrations this fall. Organizers are currently keeping the precise location in northern Virginia confidential. ITRR Analysts Note: There has been an escalation in rhetoric and tactics among anarchist and far-left groups for more than a year, including arson, bombings, vandalism and "direct action. Further acts of anarchist terrorism and vandalism, inspired by the Toronto G20 "actions, the Quebec bombing, and the previouslymentioned Anarchy Summer Camp, can be expected throughout North America in the near term. Military recruitment centers, police, banks and multinational companies in Pennsylvania - specifically in areas of significant anarchist activity should consider increasing situational awareness. (PAIB Nos. 94, 107 and 108)

3. Militia Ongoing Agitation for Vigilantism; PA Training in July 2010

Recently, in reaction to increasing violence on both sides of the Arizona-Mexico border, American militia communications have been filled with angry rhetoric calling for organized vigilante action. More generally, communications from extremist militia forums indicate a growing restlessness and self-reinforcing feeling of impending confrontation with the US federal government. In this context, it is notable that a multi-state militia, 2-4 MACHSA (http://www.machsa.vit.im/homeconstruction.html ), is holding its first Annual Patriot Training in Pennsylvania from 16-19 July 2010. ITRR has identified possible central Pennsylvania and Pittsburgh Metro Area links for this militia group, with leadership in the south central area. ITRR researchers continue to monitor antigovernment militia organizations promoting armed, dispersed and "leaderless resistance" against what they define as the "New World Order. (PAIB Nos. 63, 65, 68, 73, 88 and 103)

4. International 'Stop the Tar Sands Day'

Environmental activist groups in Europe have called for an "International Stop the Tar Sands Day, tentatively scheduled for 17 July 2010. In March 2010 the RAINFOREST ACTION NETWORK (RAN - http://ran.org/ ), declared its intention to "keep the pressure on" the Royal Bank of Canada (RBC) over its financing of the Alberta, Canada, tar sands project. Security personnel should review protection measures for facilities of RBC and other financial institutions named in RAN communications (see PAIB No. 107 for a detailed list). ITRR is monitoring adversarial communications for further regional Pennsylvania targeting at this time. (PAIB Nos. 55, 107)

5. Al-Qaida Expanding its English-Language 'Marketing' AL-QAIDA, through one of its most active branches, AL-QAIDA IN THE ARABIAN PENINSULA (AQAP), has decided to expand its outreach further into the English-

speaking world with its first official magazine in English, Inspire. The combination of motivational texts and videos, religious sermons and practical lessons in jihad -all
Page 2 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

in English - has the potential to be a significant factor in Al-Qaida's efforts to recruit lone-wolf terrorists (as well as more serious individuals) in English-speaking circles. (PAIB No. 106)

6. Pride Festival in Harrisburg, Celebration in Reading

On 24 July 2010, a LGBT (lesbian, gay, bi-sexual and transgender "Gay pride") parade and subsequent festival, PrideFest (http://www.prideofcentralpa.org/ ) are to take place in Harrisburg. On 18 July 2010, the Reading Pride Celebration is slated to be held in Centre Park, Reading. There are increasing indications of focused, anti-gay rhetoric and actions among White supremacists and right-wing militia supporters. ITRR will continue to monitor for details on protest / counterprotest activity. (PAIB No. 105)

7. 'Escalate Resistance' to Arizona's New Immigration Law

Referring to Arizona's new immigration legislation, anarchists and immigrants' rights activists are preparing to "peacefully escalate resistance to SB1070. The radical Students for a Democratic Society (SDS) organization is planning what they have called an "Arizona Freedom Summer," 23 July-5 August 2010, focused on bringing activists to Arizona for the designated time period. Anarchists have called for "direct actions in our local communities" when the law goes into effect on 29 July 2010. Well-known minority community leaders warned that unidentified "activists" are willing to commit acts of "civil disobedience" to fight the law. Pennsylvania opponents of the law may target visiting Arizona VIP, delegations or Arizona-related events with protests or "direct action" in the coming weeks and months, including Arizona Diamondback baseball games in Philadelphia in late July and in Pittsburgh in September 2010. Counter-protests by supporters of the Arizona legislation may precipitate violent confrontations between opposing protesters requiring law enforcement intervention. (PAIB Nos. 98, 102 and 106)

8. CrimethInc.'s Anarchist 'Show of Force' in July-August The anarchist movement, CRIMETHINC. (http://www.crimethinc.com/ ) is planning
what is called "a decentralized convergence" to take place in late July and throughout August. The group is encouraging anarchists in North America to take any action they feel will be effective in order to make the anarchist presence felt in their respective local areas. One such event, the Conspiracy Tour, has announced tentative Tour dates and locations in Pennsylvania: 30-31 July 2010, Pittsburgh 3 August 2010, Philadelphia ITRR researchers are monitoring anarchist communications for further planned "actions, dates and locations relevant to Pennsylvania. As of this time, situational

Page 3 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

awareness is suggested throughout the next two months at those sites that have previously been targeted by anarchist activity. (PAIB No. 103)

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sectors: COMMERCIAL FACILITIES AND EMERGENCY SERVICES 9. Anti-Fascist 'Call to Action', Conference in July
A Portland, Oregon, branch of the radical, international anti-Fascist organization known as ANTIFA (http://antifa.fr/worldwide/ ) has issued a "call to action" for 31 July 2010. The "call to action" will come on the heels of the 16th annual Anti-Racist Action (ARA) Network Conference in Portland, Oregon, on 22-25 July 2010 (http://antiracist.org/ ). The Antifa organization is seeking an anti-Fascist / anti-racist response nationwide on 31 July, with multiple venues and various types of action. As Antifa communications regarding the target date explain: "We want mass and varied forms of protest and action. These actions can range from: music and DJ shows; educational events; outings of known Right and fascist organizers; street protest; immigrant solidarity and anti-minuteman action; and so on. While we want collaboration and coordination when possible, we also want to maximize the impact of this CA (Call to Action - ed.) and thus argue for the greatest degree of creativity and initiative." The group adds that they hope the call to action promotes "a mass, radical response to racist and fascist organizing." Thus far, the call to action has been endorsed by Anti-Racist Action branches in Texas, California, Oregon, Ohio and New Jersey. Other endorsing groups include:

BRING THE RUCKUS! (http://bringtheruckus.org/ ) COMMON CAUSE (of Ontario, Canada http://www.commoncause.org/site/pp.asp?c=dkLNK1MQIwG&b=4741359 )

FIRST OF MAY ANARCHIST ALLIANCE

(http://news.infoshop.org/article.php?story=2010050203073079 )

FOUR STAR ANARCHIST ORGANIZATION (http://4sao.wordpress.com/ )

Page 4 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

IRON RAIL INFOSHOP (http://anarchistnews.org/?q=node/10078 ) KERSPLEBEDEB (http://www.kersplebedeb.com/ ) RED AND ANARCHIST SKINHEADS SOLIDARITY & DEFENSE (http://solidarityanddefense.blogspot.com/ ) WILD ROSE COLLECTIVE (http://wildrosecollective.org/ ) WORKERS SOLIDARITY ALLIANCE (http://workersolidarity.org/ )
****** ANALYSIS ****** T/l/W Rating: MODERATE

ITRR analysts note that the ANTI-RACIST ACTION (ARA) NETWORK Conference is sponsored and hosted by Rose City ANTIFA, a violently anti-racist network. The organizational policy of the movement includes: "Whenever Fascists are organizing or active in public, we're there. We don't believe in ignoring them or staying away from them. Never let the Nazis have the street!" Anti-Racist Action, an organization supporting and promoting the above "call to action, is known to have official contact information for Philadelphia and Harrisburg. There are also active Antifa and ARA supporters in Pittsburgh, York and elsewhere. For example, in November 2009, it was strongly suspected, though not confirmed, that members of the Philadelphia ARA were responsible for the Starlight Ballroom backing out of hosting the East Coast Oi! Fest in 2010. The festival is a known gathering point for various skinhead groups. Similarly, in April 2009, Pittsburgh anti-Fascists targeted pro-life demonstrators in the East End. Disrupting the pro-life demonstration with noise, intimidation and their own banners, the anti-Fascist group then (in their own words) "followed [the pro-life demonstrators] to their van and proceeded to surround them and yell prochoice slogans at them. Part of the group followed them to their cars in the parking lot across the street where their vehicles were pounded on, dented, and had their window(s) broken." In the "call to action" for 31 July 2010, the Antifa organizers add that they "support the incorporation of any existing and ongoing anti-racist/anti-fascist action ... to bolster already active organizing. Furthermore, ITRR analysts note that Antifa rhetoric has also sharply criticized the police and the FBI for "protecting" racist gatherings and for employing force to disperse anti-racist protesters. Broad situational awareness is called for regarding any upcoming demonstrations by groups deemed "fascist" (Tea Party, militia, Christian conservative, etc.), "racist"
Page 5 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

(Klan, White Power, Skinhead, etc.) or "anti-choice" (any Christian pro-life groups) by supporters of the ARA or Antifa. ITRR analysts are currently monitoring antifascist and anti-racist militant communications for indications of planned actions in Pennsylvania on or around the above-mentioned target date.

SECTOR: COMMERCIAL FACILITIES 10. Keystone United and the Euro-American Heritage Fest
Radical White nationalists are promoting an event called the Euro-American Heritage Fest 2010 (AKA European American Heritage Celebration). It is slated to take place on 14 August 2010 "in the Wilkes-Barre / Scranton area," according to promotional communications. The only indication of what the Heritage Fest will include is a brief message in radical White Power forums: "Come celebrate our heritage with food, music and games. Free to the public!" While the Fest appears to be the first of its kind, racist militant communications indicate a similar event is slated to take place in Orange County, in southern California. In a separate event, BLOOD & HONOR-AMERICAN DIVISION, another radical White Power organization, will be hosting a private event in southwestern Pennsylvania on 7 August 2010. "There will be live music, tattoo artists, food, bonfire, etc. This is a family friendly event. ****** ANALYSIS ****** Threat Level: MODERATE

There are no indications at this time that the Blood & Honor "private event, at an as-yet undisclosed location, will involve confrontational actions. It is likely to remain limited, by design, to an internal racist organizational gathering. The Euro-American Heritage Fest 2010 has been publicized on racist forums, although other official publicity is still sparse. ITRR researchers believe the event is being organized by KEYSTONE UNITED (KU; formerly Keystone State Skinheads, http://www.keystoneunited.com/ ) members. KU principals are, in any case, assisting in fundraising for it. While the specific location has thus far not been publicly announced, ITRR researchers have preliminary indications that the Fest is to be held in Public Square, in the city of Wilkes-Barre. As of this writing, it is unknown if the organizers have sought required police permits. In promotional communications, racist militants have identified regional accommodations for Fest attendees. These include:

Page 6 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

Holiday Inn Express, Wilkes-Barre/Scranton (Airport) in Pittston (Luzerne County) Interstate Hotel and Resort in Moosic Borough (Lackawanna County) Julia's Old Forge Hotel in Old Forge (Lackawanna County) Comfort Suites Scranton in Moosic The Courtyard in Moosic Rodeway Inn Moosic in Moosic Clarion Hotel Scranton in Scranton No part of the communications identified by ITRR analysts indicates an intention to conduct confrontational actions at the Euro-American Heritage Fest 2010. However, KU (or its previous Keystone State Skinheads incarnation) and other groups promoting the event have a history of conducting organized actions that have required significant law enforcement interaction. ITRR analysts believe there is a significant possibility of public disorder due to alcohol-fueled confrontations among attendees at the Heritage Fest. In addition, as the event becomes more generally known and its location announced, anti-racist groups may organize protests against the event, which may escalate into direct confrontations. Police will likely be requested to maintain crowd-control and isolate instigating individuals from among Fest attendees and their opponents, as well as preventing violent confrontations. Such potential violence would not necessarily be limited to the Fest fairgrounds, but may take place in any of the surrounding areas, including the vicinity of the above-named hotels.

Sectors: COMMERCIAL FACILITIES AND GOVERNMENT FACILITIES 11. Uighur Jihadists Issue New Threats
ITRR researchers have identified a new publication just issued in Arabic by the Turkestan Islamic Party (TIP), a jihadist organization dedicated to establishing an Islamic regime in China's ethnically Uighur Xinjiang province. The document, translated from an earlier release in the Uighur and Chinese languages, calls on Muslims to continue the jihad against China "until martyrdom or victory." The TIP declares that China thinks it can take over as the major world power now that the United States is failing in its war with the Muslims, "but we will teach China the same lesson" we have taught the Americans.
Page 7 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

"China is one of the bitterest enemies of Islam and the Muslims," the communication continues, and it "must be opposed by very painful means." The TIP encourages its supporters, as well, saying that there is no reason to be impressed by the size of the Chinese army, because "they are like a thin [rice-paper] wall against jihadists." Addressing Arabic-speaking, non-Uighur Muslims, the TIP publications urges: "Help your brothers any way you can ... support the jihad against China." Of note in this context is that Chinese authorities have begun demolishing neighborhoods in Urumqi, Xinjiang province that housed hundreds of thousands of majority-Muslim Uighurs. Furthermore, July 2010 is a sensitive period in the region; one year deadly rioting left at least 200 people dead in Urumqi. At the time, China executed several Uighurs it deemed terrorist instigators of violence. Tension between Han Chinese and Uighur Muslims remains a factor in local relations and politics. ****** ANALYSIS ****** T/I/W Rating: MODERATE

The above-mentioned TIP publication is not the only recent Arabic-language call to support the jihad against China. As cited in PAIB No. 55, jihadist communications at the time called on Muslims to target personnel and assets of the China globally. One month later (see PAIB No. 68), the TIP issued a statement reiterating its goal of Islamic supremacy through armed jihad. The group then named several international Uighur organizations it deemed "non-jihadist", possibly in order to target them as collaborationist (among the named organizations were the Uighur Association of America and other political groups with North American representatives). Around the same time, and in response to Chinese military operations in Xinjiang, an intercepted Arabic jihadist communication asked, "Have you given up on the jihad? Allah will help our brothers in Turkestan and all the Muslims. Allah will show us the way of revenge on those who attacked our religion." ITRR Analysts Note: Chinese targets have already been hit in recent years both in Xinjiang, and in the Arab countries of the Middle East and North Africa. Previous attacks have ranged from bombings to ambushes with small-arms fire aimed at Chinese contract workers abroad. In light of the continued ratcheting up of incitement over China's actions in Xinjiang province and the current anniversary of the 2009 clashes, ITRR analysts reiterate their assessment that an increased risk level exists in the Turkestan area, in central Chinese cities, and in the vicinity of Chinese assets abroad (as well as for cultural institutions deemed "secular" by the Turkestan Islamic Party). Organizations in close proximity to high-profile Chinese assets or groups should take note of

Page 8 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

increased pressure to target these assets by lone-wolf or small unit terror organizations. Students from Pennsylvania schools (Clarion University, East Stroudsburg, Indiana University, Mansfield University, and Westminster College) participating in International Student Exchange Programs (ISEP) in China, Indiana University of Pennsylvania exchange students in China, as well as University of Pennsylvania School of Dental Medicine exchange students at China's Fourth Military Medical University College of Stomatology, should be made aware of the specific regional risks noted above. No intelligence at this time for the following sectors:

AGRICULTURE AND FOOD BANKING AND FINANCE CHEMICAL COMMUNICATIONS CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASES ENERGY GOVERNMENT FACILITIES HEALTHCARE AND PUBLIC HEALTH INFORMATION TECHNOLOGY NATIONAL MONUMENTS AND ICONS NUCLEAR REACTORS, MATERIALS AND WASTE POSTAL AND SHIPPING TRANSPORTATION SYSTEMS WATER
Compiled by NR

Page 9 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little capability or intent to take action against the target. It is assessed that, although it cannot be ruled out, an attack or action is unlikely to be mounted based on current available intelligence. Available intelligence and recent events indicate that hostile elements have the capability to take action against the target and that such action is within the adversary's current intent. It is assessed that an attack or action is likely to be a priority and might well be mounted. Available intelligence and recent events indicate that hostile elements have an established capability and current intent to take action against the target and there is some additional information on the nature of the threat. It is assessed that an attack or action on the target is a priority and is likely to be mounted. Available intelligence and recent events indicate that hostile elements with an established capability are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is expected imminently.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Page 10 of 11

Pennsylvania Intelligence Bulletin No. 111, 14 July 2010

END-CLASSIFIED-TAM-CFor additional information, please contact the TAM-C of the Institute of Terrorism Research and Response at: +1.215.922.1080 or info@itrrintel.org. Working with organizations that refuse to surrender their domestic or international operations to terrorism
Ensure that you always receive the latest information from The Institute of Terrorism Research and Response. Add the e-mail address, "info@itrrintel.org" to your personal address book. This Intelligence report includes information from open and closed intelligence sources. Not all information is able to be verified; however, the TAM-C is actively evaluating the reporting to establish its accuracy and to determine if it represents a possible link to terrorism. If recipients have any additional or clarifying information, please contact the Targeted Actionable Monitoring Center (TAM-C) at +1.215.922.1080. Actionable Intelligence Weekly Briefing A general overview of actionable intelligence (upcoming events) used by directors of security and law enforcement managers to pre-plan their future operations. The Briefing is dispatched on Monday of each week by 1100 GMT to enable early planning of the upcoming weeks. Threat and Hazard Monitoring (THM) A custom service meeting the needs for each client. With the assistance of our international analysts, this service identifies specific threats, hazards, vulnerabilities, and assets our team of native language speakers researchers and ground resources, are to monitor and forward on to the client. For additional information regarding the Center's services or specialized customized research and analysis programs, feel free to contact us at: info@itrrintel.org

Page 11 of 11

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 112


16 JULY 2010

******
Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002 and Implementing Recommendations of the 9/11 Commission Act of 2007, critical infrastructure and key resources are defined as systems and assets whether physical or virtual - so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. This informational/intelligence product is oriented on and specifically developed for all affected stakeholders of those Pennsylvania-based critical infrastructures & key resources.

STRATEGIC ANALYSIS
1. Public Summer Events and the Risk to Mass Transportation
The summer months in the Northern Hemisphere see increased festivals and outdoor concerts of all kinds, as well as some large communal religious events, with large crowds in attendance (such as Pennsylvania "Gay Pride" events, the Riyaadah (http://www.riyaadah09.org/ ), the Israel Day Parade, high profile sporting events, Fourth of July celebrations, and more). Such gatherings serve as high-profile targets for terrorists, anarchists and professional "troublemakers" of all stripes. In some cases, when effective security provisions are in place, terrorists may find that targeting the heart of such large summer gatherings with explosives or firearms is a difficult objective. Therefore, adversaries may see mass transportation venues bringing attendees to the event as an acceptable proxy target. Seeking a weak link in the overall security perimeter, trains and buses to such events may be seen as vulnerable. Hitting trains or buses on the way to public events, in terrorist calculations, may at times have a higher chance of success than - and an equal psychological impact as - a strike in the heart of those events themselves. A second concern is the ability of non-jihadist terrorists to use "direct action" tactics on mass transit as a method to disrupt a public event served by the transportation venue targeted. Secondarily, it should be noted that anonymous bomb threats called into stations or trains on railway lines may serve as an effective method to temporarily halt service. Finally, more violent adversaries may also use bomb hoaxes for purposes of pre-operational surveillance and probing, observing and learning security forces' response protocols.

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

Real-world examples of mass transit targeting tactics abound: 1. One of the methods of terrorist disruption and attack on mass transit is, of course, a bomb planted or carried on board trains, buses or other mass transportation. Such was the case in the London (2005) and Madrid (2004) public transportation bombings, for example, as well as in the many bus bombings that struck Israel in the late 1990s and early 2000s. 2. Another tactic, rail side bombs, has become a familiar facet of Marxist separatist terrorism in India aimed primarily at halting train traffic and sending a message to the central government. In Russia, such an attack led to the deaths of 28 people in late 2009 when jihadists detonated a bomb under a passenger train, derailing it. 3. Derailment by means of track sabotage, used alone, has not been a favorite tactic of ideological terrorists. However, a major derailing in India in May 2010, which led to the deaths of nearly 150 people, was attributed to a Communist (Naxalite) terror cell. According to police, the terrorists abducted a railway lineman, threatening him and his family, and forced him to release clips holding the rails in place. This month, in New York, an Amtrak passenger train struck railroad ties that were apparently deliberately placed on tracks running through the Cattaraugus Reservation. Signs out up near the scene said, "No Mail - No Rail," which police believe is a reference to a new federal law banning Native American businesses from sending cigarettes by postal service. 4. Disruption of train service alone also has its benefits, in the terrorist worldview. Several cases of bomb threats called into Indian stations, for example, have highlighted the disruptive power of this tactic. In addition, when caused by dummy devices or abandoned cars, such disruptions can serve as pre-operational testing ("dry runs") for active terrorist cells. This week, in New Jersey, a police bomb squad was called to investigate a suspicious car parked near a Northeast Corridor railroad overpass. A device in the vehicle appeared to consist of gasoline canisters connected with wires. While investigation showed the device was not a bomb, traffic in the vicinity was brought to a halt. Investigation continues into the reason the car was abandoned where it was, but ITRR analysts note that such tactics are consistent with recent jihadist communications regarding the deliberate creation of false alarms in Western countries (see PIB no. 85).

Page 2 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sectors: ENERGY, GOVERNMENT FACILITIES 2. Increasing and Expanding Focus on Marcellus
ITRR analysts have identified a new anti-gas documentary that follows in the tradition of the anti-gas-industry Gasland. The new film, All Fracked Up, explicitly singles out Chesapeake Energy, with heavy interests in Pennsylvania. As the film's directors, Jeff and Jodi Andrysick from Pulteney, New York, explain: "We were jolted into harsh reality this January when a predatory gas corporation [Chesapeake - ed.] picked our beautiful bucolic town along Keuka Lake to inject aprox. 3/4 billion gallons of toxic brine into an abandoned gas well in Pulteney. The toxic brine was a result of the earth regurgitating back high pressure toxic fluids used in hydro-fracking operations in PA. ...A massive grass roots movement occurred on Super Bowl Sunday at our firehall with almost 500 people showing up on a cold frigid winter day. They said 'no, we won't accept your toxic brine disposal well.' The gas company rescinded their application. Hooray for Pulteney and Keuka Lake! THE MORAL OF THE STORY: The people always win when they show up in numbers and demand their rights as citizens of this great American experimentDEMOCRACY." The directors are marketing the film as a more hard-hitting version of Gasland, using militant rhetoric such as calling for "resistance" against the "shale army." Thus far, All Fracked Up screenings are slated for the New York area. Showings are expected in Pennsylvania after the end of July 2010. ******ANALYSIS****** T/l/W Rating: LOW-to-MODERATE

The film Gasland contributed to the recent intensification of protests and rising anger among community and activist groups against Marcellus Shale drilling. ITRR analysts believe that All Fracked Up will add to this adversarial sentiment. Radical environmental groups may be particularly inspired by the film's confrontational approach. ITRR analysts further note that the Northeast Anarchist Network (NEAN) has also recently focused on the Marcelllus Shale gas industry in its targeting and motivational communications (http://neanarchist.net/ ). On 8 July 2010, for example, a major anarchist website reposted an old article detailing anarchist protests when a Chesapeake Energy CEO visited Boston. ITRR analysts believe that the repost indicates growing support among anarchists (such as NEAN) for the anti-Marcellus Shale drilling movement.

Page 3 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

Of note in this context is the 16-18 July 2010 NEAN annual assembly in Boston. In light of recent "green anarchist" focus on drilling projects, ITRR believes it likely that anarchists will be formally and informally sharing information regarding companies involved in oil and gas drilling in Pennsylvania. Furthermore, as reported in PIB no. 104, recent Earth First! networking communications have focused on the Marcellus Shale area gas drilling project as a high priority target in the New York-Pennsylvania region. In light of the growing risk indicators, ITRR analysts advise situational awareness for all Pennsylvania drilling projects. Eco-terror lone wolves or organized environmental militant cells may be inspired in the coming months to carry out significant "direct actions" targeting Chesapeake Energy or other Marcellus Shale drilling concerns. According to company officials, Chesapeake Energy has 19 active drilling rigs in northeast Pennsylvania. These are located in Wayne, Bradford, Susquehanna, Wyoming and Bradford Counties. A field office operates in Towanda, Bradford County, while a Chesapeake Energy corporate representative has an office in Allegheny County, as well.

Sectors: TRANSPORTATION SYSTEMS 3. Anti-Israel Activists Disrupt an International Flight


A small group of anti-Israel Communist activists and labor union members in Greece managed to delay an El Al Israel Airlines flight to Athens for two hours on Wednesday. The group of more than 30 people blocked five check-in counters serving the Israeli carrier in Athens International Airport. Police were at the scene, but no arrests were reported. "This was an action taken in solidarity with the Palestinian people and their effort to establish a Palestinian state," a union spokesman said. ******ANALYSIS****** T/l/W Rating: LOW-to-MODERATE

The above-mentioned incident, intended to disrupt an international port, was reminiscent of the 20 June 2010 targeting of Israeli shipping by more than 500 anti-Israel protesters at the Port of Oakland in California (see PIB no. 101). As in Greece, that effort was to prevent or delay an Israeli ship from docking. The Oakland protest was organized, in part, by the far-left radical ANSWER Coalition. Both the Greek and Oakland protests are being treated as successes from the perspective of anti-Israel activists, due primarily to the additional costs and disruptions surrounding Israeli assets, as well as in terms of international media coverage of the events. The targeting of Israeli imports at their point of entry to a
Page 4 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

given state is an attempt at forcing concerned ports or companies to prefer boycotting Israel over doing business with it. For that reason, such tactics are likely to be emulated in other port cities and at international airports in Pennsylvania. This includes the Port of Philadelphia and the Port of Chester, which both receive Israeli imports. Regarding potential airport locations for anti-Israel actions, ITRR researchers note that there are direct IsraelPhiladelphia flights by US Airways. El Al Airlines, the national Israeli carrier, has passenger flights to Pittsburgh International Airport by way of New York, and flies directly to the Newark Liberty International Airport (popular with travelers from the Philadelphia area, as well).

Sectors: GOVERNMENT FACILITIES 4. Jihadists Continue 'Naming Names' in Gulf Targeting


In a new communication intercepted by ITRR analysts, jihadists reiterate and expand on targeting guidance and inspiration focused on well-known television personalities from the Persian Gulf region. The communication names Rima Salha, Abd Alkadir Al-Abidi, Salam Muhammad and Abu Inad, as well as "all who participate in production and setup" for their antijihad program called The Death Industry on the Al-Arabiya satellite TV network. The program cited by the jihadists purports to highlight Islamist and jihadist violence, crimes and ideologies. Those commenting on the program apparently fail to note the irony when they declare: "The jihad is still existing. The silencers (weapons - ed.) will kill you in the name of the armed jihad. The Islamic intelligence is monitoring you. Whatever you are trying to distort by your program isn't working. There are several martyrs that are waiting to cut your head off." A jihadist then requests information on the specific TV program, the location of AlArabiya offices and program centers in Dubai (where the station headquarters are located), the "addresses of Rima Salha in Beirut, Qatar and Dubai." Calling for action by whoever can manage it, the communication continues: Whoever has the capability to carry a weapon should do that; whoever has the capability to plan should do it; whoever can supply money to people who know the jihad fighters should do so; whoever can supply information that is useful for our jihadists in the Faluja website should do so." The writer adds that supporters "can give information by Facebook." Some of the information offered by jihadists regarding the above targets includes: * "The security service in Dubai includes aviation, ports, sea and land security, which is controlled and managed by the Crusader security services. Regarding the citizens of Dubai their role is secondary. But the regime is crusader 100%."
Page 5 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

* "You need to join together is the war against that channel. ..all who can target the employees should do that. All who can target their mail should do so. All who can monitor their moves should do so." ******ANALYSIS****** T/l/W Rating: MODERATE

ITRR analysts note that the latest communication regarding Al-Arabiya TV station programming is part of an increasing focus by jihadists on the station and its employees. As noted in PIB no. 84, jihadist communications have already offered targeting guidance for lone-wolf terrorist operations against Al-Arabiya television staff members and the Dubai emirate as a whole, as well as the Al-Misbar research institute. Other recent jihadist targeting of a media outlets focused on the BBC (see PIB no. 71). ITRR analysts note that the above communications and those regarding the BBC provide targeting guidance to organized terror groups, as well as to lone wolf terrorists. While the journalists and the stations are the primary targets in such communications, other civilians, especially Westerners, are deemed acceptable collateral damage among most jihadists. In light of the foregoing, Pennsylvania students and researchers at the American University branch in Dubai, where Al-Arabiya has offices and personnel, are advised to maintain situational awareness. Most particularly at risk is the vicinity of Dubai Media City. Students at the American University branches in Sharjah (also in the UAE) and in Beirut (where Rima Salha has a broadcasting center) are also advised of the stepped up threats to the named media outlets (Arabiya and BBC) and their personnel. Business travelers, military personnel, and oil industry employees and executives from Pennsylvania should also be aware of the increased risk in the named Gulf states. No emerging indicators, threats and/or warnings at this time for the following sectors:

AGRICULTURE AND FOOD BANKING AND FINANCE CHEMICAL COMMERCIAL REAL ESTATE COMMUNICATIONS CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASES ENERGY GOVERNMENT FACILITIES
Page 6 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

HEALTHCARE AND PUBLIC HEALTH HOTELS AND LODGING INFORMATION TECHNOLOGY NATIONAL MONUMENTS AND ICONS NUCLEAR REACTORS, MATERIALS AND WASTE POSTAL AND SHIPPING PRIVATE SECTOR SECURITY SOCIAL SERVICES TRANSPORTATION SYSTEMS WATER

Page 7 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little capability or intent to take action against the target. It is assessed that, although it cannot be ruled out, an attack or action is unlikely to be mounted based on current available intelligence. Available intelligence and recent events indicate that hostile elements have the intent and capability to take action against the target. It is assessed that an attack or action is likely to be a priority and might well be mounted. Available intelligence and recent events indicate that hostile elements have an established capability and current intent to take action against the target and there is some additional information on the nature of the threat. It is assessed that an attack or action on the target is a priority and is likely to be mounted. Available intelligence and recent events indicate that hostile elements with an established capability are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is imminently expected.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Page 8 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. The ITRR, a commercial information research and analysis organization, uses open-source, human and closed-source intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel. Consider information herein in context with other known information, indicators, threats and warnings.

Page 9 of 9

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 112


16 JULY 2010

******
Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002 and Implementing Recommendations of the 9/11 Commission Act of 2007, critical infrastructure and key resources are defined as systems and assets whether physical or virtual - so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. This informational/intelligence product is oriented on and specifically developed for all affected stakeholders of those Pennsylvania-based critical infrastructures & key resources.

STRATEGIC ANALYSIS
1. Public Summer Events and the Risk to Mass Transportation
The summer months in the Northern Hemisphere see increased festivals and outdoor concerts of all kinds, as well as some large communal religious events, with large crowds in attendance (such as Pennsylvania "Gay Pride" events, the Riyaadah (http://www.riyaadah09.org/ ), the Israel Day Parade, high profile sporting events, Fourth of July celebrations, and more). Such gatherings serve as high-profile targets for terrorists, anarchists and professional "troublemakers" of all stripes. In some cases, when effective security provisions are in place, terrorists may find that targeting the heart of such large summer gatherings with explosives or firearms is a difficult objective. Therefore, adversaries may see mass transportation venues bringing attendees to the event as an acceptable proxy target. Seeking a weak link in the overall security perimeter, trains and buses to such events may be seen as vulnerable. Hitting trains or buses on the way to public events, in terrorist calculations, may at times have a higher chance of success than - and an equal psychological impact as - a strike in the heart of those events themselves. A second concern is the ability of non-jihadist terrorists to use "direct action" tactics on mass transit as a method to disrupt a public event served by the transportation venue targeted. Secondarily, it should be noted that anonymous bomb threats called into stations or trains on railway lines may serve as an effective method to temporarily halt service. Finally, more violent adversaries may also use bomb hoaxes for purposes of pre-operational surveillance and probing, observing and learning security forces' response protocols.

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

Real-world examples of mass transit targeting tactics abound: 1. One of the methods of terrorist disruption and attack on mass transit is, of course, a bomb planted or carried on board trains, buses or other mass transportation. Such was the case in the London (2005) and Madrid (2004) public transportation bombings, for example, as well as in the many bus bombings that struck Israel in the late 1990s and early 2000s. 2. Another tactic, rail side bombs, has become a familiar facet of Marxist separatist terrorism in India aimed primarily at halting train traffic and sending a message to the central government. In Russia, such an attack led to the deaths of 28 people in late 2009 when jihadists detonated a bomb under a passenger train, derailing it. 3. Derailment by means of track sabotage, used alone, has not been a favorite tactic of ideological terrorists. However, a major derailing in India in May 2010, which led to the deaths of nearly 150 people, was attributed to a Communist (Naxalite) terror cell. According to police, the terrorists abducted a railway lineman, threatening him and his family, and forced him to release clips holding the rails in place. This month, in New York, an Amtrak passenger train struck railroad ties that were apparently deliberately placed on tracks running through the Cattaraugus Reservation. Signs out up near the scene said, "No Mail - No Rail," which police believe is a reference to a new federal law banning Native American businesses from sending cigarettes by postal service. 4. Disruption of train service alone also has its benefits, in the terrorist worldview. Several cases of bomb threats called into Indian stations, for example, have highlighted the disruptive power of this tactic. In addition, when caused by dummy devices or abandoned cars, such disruptions can serve as pre-operational testing ("dry runs") for active terrorist cells. This week, in New Jersey, a police bomb squad was called to investigate a suspicious car parked near a Northeast Corridor railroad overpass. A device in the vehicle appeared to consist of gasoline canisters connected with wires. While investigation showed the device was not a bomb, traffic in the vicinity was brought to a halt. Investigation continues into the reason the car was abandoned where it was, but ITRR analysts note that such tactics are consistent with recent jihadist communications regarding the deliberate creation of false alarms in Western countries (see PIB no. 85).

Page 2 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sectors: ENERGY, GOVERNMENT FACILITIES 2. Increasing and Expanding Focus on Marcellus
ITRR analysts have identified a new anti-gas documentary that follows in the tradition of the anti-gas-industry Gasland. The new film, All Fracked Up, explicitly singles out Chesapeake Energy, with heavy interests in Pennsylvania. As the film's directors, Jeff and Jodi Andrysick from Pulteney, New York, explain: "We were jolted into harsh reality this January when a predatory gas corporation [Chesapeake - ed.] picked our beautiful bucolic town along Keuka Lake to inject aprox. 3/4 billion gallons of toxic brine into an abandoned gas well in Pulteney. The toxic brine was a result of the earth regurgitating back high pressure toxic fluids used in hydro-fracking operations in PA. ...A massive grass roots movement occurred on Super Bowl Sunday at our firehall with almost 500 people showing up on a cold frigid winter day. They said 'no, we won't accept your toxic brine disposal well.' The gas company rescinded their application. Hooray for Pulteney and Keuka Lake! THE MORAL OF THE STORY: The people always win when they show up in numbers and demand their rights as citizens of this great American experimentDEMOCRACY." The directors are marketing the film as a more hard-hitting version of Gasland, using militant rhetoric such as calling for "resistance" against the "shale army." Thus far, All Fracked Up screenings are slated for the New York area. Showings are expected in Pennsylvania after the end of July 2010. ******ANALYSIS****** T/l/W Rating: LOW-to-MODERATE

The film Gasland contributed to the recent intensification of protests and rising anger among community and activist groups against Marcellus Shale drilling. ITRR analysts believe that All Fracked Up will add to this adversarial sentiment. Radical environmental groups may be particularly inspired by the film's confrontational approach. ITRR analysts further note that the Northeast Anarchist Network (NEAN) has also recently focused on the Marcelllus Shale gas industry in its targeting and motivational communications (http://neanarchist.net/ ). On 8 July 2010, for example, a major anarchist website reposted an old article detailing anarchist protests when a Chesapeake Energy CEO visited Boston. ITRR analysts believe that the repost indicates growing support among anarchists (such as NEAN) for the anti-Marcellus Shale drilling movement.

Page 3 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

Of note in this context is the 16-18 July 2010 NEAN annual assembly in Boston. In light of recent "green anarchist" focus on drilling projects, ITRR believes it likely that anarchists will be formally and informally sharing information regarding companies involved in oil and gas drilling in Pennsylvania. Furthermore, as reported in PIB no. 104, recent Earth First! networking communications have focused on the Marcellus Shale area gas drilling project as a high priority target in the New York-Pennsylvania region. In light of the growing risk indicators, ITRR analysts advise situational awareness for all Pennsylvania drilling projects. Eco-terror lone wolves or organized environmental militant cells may be inspired in the coming months to carry out significant "direct actions" targeting Chesapeake Energy or other Marcellus Shale drilling concerns. According to company officials, Chesapeake Energy has 19 active drilling rigs in northeast Pennsylvania. These are located in Wayne, Bradford, Susquehanna, Wyoming and Bradford Counties. A field office operates in Towanda, Bradford County, while a Chesapeake Energy corporate representative has an office in Allegheny County, as well.

Sectors: TRANSPORTATION SYSTEMS 3. Anti-Israel Activists Disrupt an International Flight


A small group of anti-Israel Communist activists and labor union members in Greece managed to delay an El Al Israel Airlines flight to Athens for two hours on Wednesday. The group of more than 30 people blocked five check-in counters serving the Israeli carrier in Athens International Airport. Police were at the scene, but no arrests were reported. "This was an action taken in solidarity with the Palestinian people and their effort to establish a Palestinian state," a union spokesman said. ******ANALYSIS****** T/l/W Rating: LOW-to-MODERATE

The above-mentioned incident, intended to disrupt an international port, was reminiscent of the 20 June 2010 targeting of Israeli shipping by more than 500 anti-Israel protesters at the Port of Oakland in California (see PIB no. 101). As in Greece, that effort was to prevent or delay an Israeli ship from docking. The Oakland protest was organized, in part, by the far-left radical ANSWER Coalition. Both the Greek and Oakland protests are being treated as successes from the perspective of anti-Israel activists, due primarily to the additional costs and disruptions surrounding Israeli assets, as well as in terms of international media coverage of the events. The targeting of Israeli imports at their point of entry to a
Page 4 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

given state is an attempt at forcing concerned ports or companies to prefer boycotting Israel over doing business with it. For that reason, such tactics are likely to be emulated in other port cities and at international airports in Pennsylvania. This includes the Port of Philadelphia and the Port of Chester, which both receive Israeli imports. Regarding potential airport locations for anti-Israel actions, ITRR researchers note that there are direct IsraelPhiladelphia flights by US Airways. El Al Airlines, the national Israeli carrier, has passenger flights to Pittsburgh International Airport by way of New York, and flies directly to the Newark Liberty International Airport (popular with travelers from the Philadelphia area, as well).

Sectors: GOVERNMENT FACILITIES 4. Jihadists Continue 'Naming Names' in Gulf Targeting


In a new communication intercepted by ITRR analysts, jihadists reiterate and expand on targeting guidance and inspiration focused on well-known television personalities from the Persian Gulf region. The communication names Rima Salha, Abd Alkadir Al-Abidi, Salam Muhammad and Abu Inad, as well as "all who participate in production and setup" for their antijihad program called The Death Industry on the Al-Arabiya satellite TV network. The program cited by the jihadists purports to highlight Islamist and jihadist violence, crimes and ideologies. Those commenting on the program apparently fail to note the irony when they declare: "The jihad is still existing. The silencers (weapons - ed.) will kill you in the name of the armed jihad. The Islamic intelligence is monitoring you. Whatever you are trying to distort by your program isn't working. There are several martyrs that are waiting to cut your head off." A jihadist then requests information on the specific TV program, the location of AlArabiya offices and program centers in Dubai (where the station headquarters are located), the "addresses of Rima Salha in Beirut, Qatar and Dubai." Calling for action by whoever can manage it, the communication continues: Whoever has the capability to carry a weapon should do that; whoever has the capability to plan should do it; whoever can supply money to people who know the jihad fighters should do so; whoever can supply information that is useful for our jihadists in the Faluja website should do so." The writer adds that supporters "can give information by Facebook." Some of the information offered by jihadists regarding the above targets includes: * "The security service in Dubai includes aviation, ports, sea and land security, which is controlled and managed by the Crusader security services. Regarding the citizens of Dubai their role is secondary. But the regime is crusader 100%."
Page 5 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

* "You need to join together is the war against that channel. ..all who can target the employees should do that. All who can target their mail should do so. All who can monitor their moves should do so." ******ANALYSIS****** T/l/W Rating: MODERATE

ITRR analysts note that the latest communication regarding Al-Arabiya TV station programming is part of an increasing focus by jihadists on the station and its employees. As noted in PIB no. 84, jihadist communications have already offered targeting guidance for lone-wolf terrorist operations against Al-Arabiya television staff members and the Dubai emirate as a whole, as well as the Al-Misbar research institute. Other recent jihadist targeting of a media outlets focused on the BBC (see PIB no. 71). ITRR analysts note that the above communications and those regarding the BBC provide targeting guidance to organized terror groups, as well as to lone wolf terrorists. While the journalists and the stations are the primary targets in such communications, other civilians, especially Westerners, are deemed acceptable collateral damage among most jihadists. In light of the foregoing, Pennsylvania students and researchers at the American University branch in Dubai, where Al-Arabiya has offices and personnel, are advised to maintain situational awareness. Most particularly at risk is the vicinity of Dubai Media City. Students at the American University branches in Sharjah (also in the UAE) and in Beirut (where Rima Salha has a broadcasting center) are also advised of the stepped up threats to the named media outlets (Arabiya and BBC) and their personnel. Business travelers, military personnel, and oil industry employees and executives from Pennsylvania should also be aware of the increased risk in the named Gulf states. No emerging indicators, threats and/or warnings at this time for the following sectors:

AGRICULTURE AND FOOD BANKING AND FINANCE CHEMICAL COMMERCIAL REAL ESTATE COMMUNICATIONS CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASES ENERGY GOVERNMENT FACILITIES
Page 6 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

HEALTHCARE AND PUBLIC HEALTH HOTELS AND LODGING INFORMATION TECHNOLOGY NATIONAL MONUMENTS AND ICONS NUCLEAR REACTORS, MATERIALS AND WASTE POSTAL AND SHIPPING PRIVATE SECTOR SECURITY SOCIAL SERVICES TRANSPORTATION SYSTEMS WATER

Page 7 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little capability or intent to take action against the target. It is assessed that, although it cannot be ruled out, an attack or action is unlikely to be mounted based on current available intelligence. Available intelligence and recent events indicate that hostile elements have the intent and capability to take action against the target. It is assessed that an attack or action is likely to be a priority and might well be mounted. Available intelligence and recent events indicate that hostile elements have an established capability and current intent to take action against the target and there is some additional information on the nature of the threat. It is assessed that an attack or action on the target is a priority and is likely to be mounted. Available intelligence and recent events indicate that hostile elements with an established capability are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is imminently expected.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Page 8 of 9

Pennsylvania Actionable Intelligence Bulletin No. 112, 16 July 2010

The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. The ITRR, a commercial information research and analysis organization, uses open-source, human and closed-source intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel. Consider information herein in context with other known information, indicators, threats and warnings.

Page 9 of 9

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 113


19 JULY 2010

******
Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002, Implementing Recommendations of the 9/11 Commission Act of 2007 and National Infrastructure Protection Plan of 2009, critical infrastructure and key resources are defined as systems and assets - whether physical or virtual - so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. This informational/intelligence product is oriented on and specifically developed for all potentially-affected stakeholders of those Pennsylvaniabased critical infrastructures, key resources and significant special events.

REMINDERS
Current-19 July 2010: Animal Rights National Conference 2010 at the Hilton Hotel in Alexandria, Virginia (http://www.arconference.org/overview.htm) "the world's largest and longest-running animal rights gathering." Likely to have an impact on animal rights activism nationwide. Current-19 July 2010: A multi-state militia - the 2-4 MID ATLANTIC CITIZEN HOMELAND SECURITY ASSOCIATION (2-4 MACHSA or "MOUNTAIN MEN", http://www.machsa.vit.im/homeconstruction.html), active along the MasonDixon Line of Maryland and Pennsylvania - is holding its first Annual Patriot Training in Butler Twp, Schuylkill County. Current-31 August 2010: In the general escalation in Irish republican terrorism, Marching Season (http://www.flashpoints.info/countriesconflicts/Northern_Ireland-web/n-ireland_parades_main.html ) in Northern Ireland is a period of several serious potential flashpoints for violence, with the most significant risk surrounding the 12 July march. Students and faculty participating in overseas programs in Northern Ireland (e.g., Millersville University and the Pennsylvania College of Technology inter alia) should remain aware that these events could suddenly turn violent with little to no warning. 24 July 2010: A LGBT (lesbian, gay. Bi-sexual and transgender "Gay pride") parade and subsequent festival, PrideFest (http://www.prideofcentralpa.org/),

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

are to take place in Harrisburg. The parade will progress down Front Street (between North and Walnut); the festival occurs in Riverfront Park. Law enforcement personnel will primarily be called upon to provide crowd and traffic control and manage possible counter-protests. Particularly noteworthy are the recent anti-gay rhetoric and actions among White supremacists and some rightwing militia supporters. 29 July 2010: Arizona's immigration law SB 1070 to be enacted. Anarchists and immigrants' rights activists are prepared to "escalate resistance" nationwide. 30 July-31 August 2010: the anarchist organization CRIMETHINC. (http://www.crimethinc.com/) is planning what they have called "a decentralized convergence. One specified rolling event is the Conspiracy Tour (http://conspiracytour.wordpress.com/) throughout several US states, from 25 July through 25 August 2010. Tentative Conspiracy Tour dates and locations in Pennsylvania include: 30-31 July 2010 in Pittsburgh 3 August 2010 in Philadelphia. 31 July 2010: The radical, international, anti-Fascist organization ANTIFA and the ANTI-RACIST ACTION (ARA, http://antiracist.org/) network issued a nationwide "call to action" for this date. Multiple venues and any type of action are encouraged. Broad situational awareness is suggested regarding any upcoming demonstrations by groups deemed "fascist" (Tea Party, militia, Christian conservative, etc.), "racist" (Klan, White Power, Skinhead, etc.) or "anti-choice" (any Christian pro-life groups) by supporters of the ARA or Antifa. 6-9 August 2010: An Anarchy Summer Camp in northern Virginia (the precise location kept confidential at the present time) "will help you prepare for the upcoming International Monetary Fund demonstrations this fall ... [and] will prepare participants for the demonstrations through workshops ... as well as real life exercises, such as tactical simulations. The IMF is scheduled to meet in Washington, D.C. 9-11 October 2010. Skills and lessons learned can be expected to be put into effect in anarchist actions throughout the northeast region in the following months, including in Pennsylvania. 6-9 August 2010: The Brandywine Peace Community is planning to hold two protests marking the World War II 1945 atomic bomb attacks on Hiroshima and Nagasaki, Japan. On 6 August 2010 activists will gather outside the offices of defense contractor Lockheed Martin in Valley Forge for "civil disobedience and... arrest ..." On 9 August 2010, the activists will gather at Philadelphia's City Hall and march to SS Peter and Paul Roman Catholic Cathedral. 9-12 August 2010: Coal-Gen 20-Ten (http://www.coal-gen.com/index.html), the coal "industry's most dynamic event, is to be held at the David L. Lawrence Convention Center in Pittsburgh.
Page 2 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

14 August 2010: Radical White supremacists are promoting an event called the Euro - American Heritage Fest 2010 (AKA Euro-American Heritage Celebration, http://eahf.org/ ). It is slated to take place on "in the Wilkes-Barre / Scranton area," most likely in Public Square in Wilkes-Barre.

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sectors: Commercial Facilities and Government Facilities
1. Philadelphia Tea Party on the Mall A Tea Party rally, nicknamed UNI-TEA (http://www.uni-tea.com/), is slated for 31 July 2010 in Philadelphia. The event is to take place on Independence Mall and it will, among other agenda items, address charges of racism leveled at the Tea Party movement as a whole. As promotional material for the all-day event declares, "This will be a national event with incredible speakers and bands - the Tea Party for ALL communities." The event has already been noted and announced in internal communications of the Philadelphia Green Party (NW Greens), which is seeking to drum up opposition to the Tea Party. ****** ANALYSIS ****** T/I/W Rating: LOW-to-MODERATE As of this writing, the event is expected to conform to the established conditions for a legal protest although analysts have not validated Philadelphia police permits. No illegality, violence, vandalism or other rioting is expected. Law enforcement personnel will primarily be called upon to provide crowd and traffic control and manage possible counter-protests. However, confrontations between Tea Party movement members and their opponents may escalate into physical conflict at the Philadelphia rally. This degree of risk is higher at this time because (PIB No. 111) radical, international anti-fascist organizations ANTIFA and ANTI-RACIST ACTION (ARA) are promoting a "call to action" for this month. Both hope to promote "a mass, radical response to racist and fascist organizing," which, according to Antifa and ARA communications, explicitly includes Tea Party rallies. As previously noted, ARA is known to have official contact information for Philadelphia and Harrisburg.

Page 3 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

Sectors: Banking and Finance, Commercial Facilities, Energy, Government Facilities and Transportation Systems
2. In English, a 'Message'; In Arabic, Tactical Debate In the space of one week, intercepted jihadist communications have included both an English-language warning to Americans and a practical discussion of the advisability of targeting Wall Street with a "dirty bomb. In what was billed as a "Message from an Islamic Soldier to America and its Citizens Around the World," a jihadist warned in English that Muslims "don't accept the shame and humiliation ... because the religion of Allah doesn't allow us to accept that ... The writer asked (spelling and grammatical errors in the original - ed.), "How can we allow unbelivers to control us??! Do you understand the message??! He continued, warning, "I swear to you that there are a lot of Muslim men who are very interested by fighting you ... bringing the revenge on their top concerns and they are planning for attacking you and God willing they will come to you with things you don't see, don't hear about nor expect before if this remember you by events of 11/9 [i.e., the 11 September 2001 attacks - ed.] you may elevate the degree of preparedness at your airports." Continuing the focus on air travel, the jihadist wrote: "Omar Al-Faruq brother's [the failed Christmas Day bomber - ed.] in the way to you, but if you think that your new sonographic devices in your airports preclude us from reaching our targets, i tell you that you have not understood the lesson well. He further added, "i d'ont advice you to believe that your aircraft carriers or ships are safe in sea and your planes are safe in air or they are far from the fire of our fighters and their ambushes ... And if you believed that you are safe in land, air or even sea, you should know that you are you still muffling in your deep sleep. We know very well that you have ordered your stary dogs in the governments of Egypt and Yemen to stop sailing of small fishing boats before your ship passing by in the water passage days before you come till you have leave fearing of us." The "next shock," the communication warned, is "coming soon. ...God willing, we will attack you from where you don't expect. God willing, we will attack you in the sea, land and air." The jihadist justified attacks on civilians, as well, saying, "Because of your attacks on unarmed, elders and Muslim women in the East and West of the world, we also attack your unarmed civilians East and West of the world. ... You should know very well that your civilian planes are legal targets for us. Of course, in addition to your fighter aircrafts as well as civil and military ships, and you should know that we learned from our mistakes in the past and in our next attack in sea we will do our best to make your ships dormant in the depths of the sea...." Declaring that the jihadist movement has "bases in Afganistan, Iraq, Yemen,
Page 4 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

Somalia, Jerusalem, Caucasus and Islamic Maghreb," the communication directed at the Americans concluded by warning, "In the near future, God willing, in a new chapter in the battle with you. God willing, the next attacks will make you forget shock of 11/9." In the same communication, the writer issues "a call to my Islamic Ummah [nation - ed.]," in which he encourages all Muslims to take up jihad in order to obtain freedom for imprisoned Islamist women. In same jihadist forum, this time in Arabic, communications were exchanged theorizing about the impact a "dirty bomb" would have were it detonated on Wall Street. Indicating a basic awareness of the American economy, the communication asks, "If we hit them in this particular time will it destroy all the steps that have been taken by the US administration and put them in a deep crisis? Can we attack that economy with economical attacks? The discussion recognizes an attack's affect on the "confidence of the investors." The communication also indicated the potential to use radioactive material in conjunction with an explosive device. One response to the discussion of bombing Wall Street included: "It is better to attack the infidels because they can pressure their government. Of course they will feel the necessity of fighting the jihadists but in the same time, they know that they are not winning although there have been many years of war, and they will prefer to end it." In other words, a jihadist said: "Kill the fighting infidels. Kill as many as you can." Addressing another aspect, a jihadist said, "Attacking their economy can only succeed if you cut off the energy to them - meaning, control the Arabian Peninsula. When the time is right, he added, Al-Qaeda "can start killing the [Saudi] princes and attacking the oil wells with simple rockets." ****** ANALYSIS ****** T/I/W Rating: MODERATE

Recognizing that the American economy is what permits the United States to project power around the world, previous jihadist targeting guidance requested that "all Muslims, whether students, businessmen, tourists, or citizens in the US to target the financial world" of America. The discussion to attack US financial centers has been ongoing among supporters of the international jihad for some time. As a result, there is a higher potential for lone-wolf terror attacks in American financial institutions, both internationally and on the home front. As noted herein, the lengthy English-language communication focuses on maritime and air travel, both of which have also seen an increasing focus in jihadist operational discussions. The maritime ports and airports serving Pennsylvania remain desirable targets for jihadist attack, as mentioned in several previous editions of the PIB.
Page 5 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

Finally, as noted in the Arabic-language communications above, the motivation to disrupt American oil supplies from within the Arabian Peninsula is also very high among jihadists. Such disruption, if sufficiently extensive, has the potential to affect oil supplies from to East Coast of the United States.

Sectors: Banking and Finance and Information Technology


3. Thousands of Israeli Passwords Stolen by Turkish Islamists Turkish Islamist hackers have reportedly obtained the online usernames and passwords of tens of thousands of Israelis, potentially giving the hackers access to bank, credit card and Pay Pal accounts. Possibly including the details of 100,000 Israelis, the extensive database has been shared on Turkish Islamist online forums. According to an Israeli technology news forum, Islamist hackers have been debating the religious permissibility of using of the information thus illegally obtained. Most believe that non-Muslim enemies can be targeted with whatever means present themselves. Israeli IT analysts have explained that the Turkish hackers, working as a virtual "cell," managed to break into a popular Israeli online service to obtain the information. While access to the initially targeted website was not critical, the methodology behind such hacks is based on the assumption that people often use the same username and password for multiple sites, including for their personal banking, credit card, phone service and PayPal accounts online. ****** ANALYSIS ****** T/I/W Rating: MODERATE

A 2008 religious ruling from the Al-Azhar Fatwa Committee (Egypt) permitted the hacking and damaging of American and Israeli websites that cause "harm" to Islam or Muslims. Such actions are part of the "electronic jihad" that has been praised and is ongoing for many years. The new twist in the above mass password theft is the theoretical potential for an unknown level of economic disruption in Israel, and potentially elsewhere, if the targeted accounts are not immediately secured. Security personnel are advised to tighten IT security protocols as much as feasible, especially in those systems accessed by Israeli account holders, until the extent of the above security breaches can be assessed or mitigated. More generally, the massive hack is indicative of the need for clear Operations Security (OPSEC) including password security protocols for online communications and business, because the ultimate effects of faulty IT security are very real including everything from identity theft to intelligence intercepts to the compromising of valuable assets. In May 2010, over 25,500 Social Security numbers residing on Penn State University computer systems may have been
Page 6 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

compromised due to IT security breaches. It is not yet known if there has been any malicious use of the exposed data.

Sectors: Commercial Facilities, Government Facilities and Emergency Services


4. Narco-Terrorism and New Aggressive Tactics In the ongoing war perpetrated by narco-terrorists in Mexico, it seems that the past week indicates some very clear escalations. On 16 July 2010, narco-terror gangs blocked at least ten roads, using buses and trucks, in southern and western Nuevo Laredo. Gang members were reportedly engaged in carjacking vehicles. Armed confrontations with soldiers ensued thereafter and at least three people were killed. Also on 16 July 2010, a car bomb was used to attack police and first responders lured to the target area by a false report of an officer down. Three people were killed in the attack in Ciudad Juarez, on the US-Mexico border. A Mexican commander said that the bomb may have been up to 22 pounds (10 kilograms) in weight and detonated remotely. Last month, suspected narco-terror gunmen assassinated two candidates during campaigning for local and state elections. ****** ANALYSIS ****** T/I/W Rating: MODERATE-to-SEVERE

Mexico The use of a car bomb by narco-terrorists is a new tactic on the Mexican security front. As the fallout from the bombing is observed by global and local terrorists, they will learn from the incident its various advantages and disadvantages. This tactic will likely be repeated by narco-gangs in order to send powerful messages to centralized authority. While the gang targets for large-scale assaults are generally law enforcement officers, Mexican civilians have also been targeted for extortion and they have regularly fallen victim as incidental casualties. University of Pittsburgh students studying abroad at Tecnologico de Monterrey, in Mexico's volatile Nuevo Leon state (battleground for some of Mexico's deadliest gangs) are advised to heighten situational awareness for anything unusual in their surroundings, from abandoned bags and illegally parked cars through incongruous behaviors. Particularly at risk are areas in the vicinity of Mexican security forces' facilities. Tactics and Strategy Regarding the strategic aspect of the events in Mexico, there is a growing trend towards active targeting of law enforcement agencies and personnel in North America. The adversarial actors include both criminal and ideological terrorist
Page 7 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

elements, with motivational influences ranging from jihadist communications to Mexican organized crime. (PAIB Nos. 29 and 97) Law enforcement officers in Hemet, California, have been targeted this year and last using a rocket, a redirected natural gas line fed into a gang task force HQ, a ballistic device attached to a security fence, explosives attached to police vehicles and police stations, and arson. Sources quoted by the Los Angeles Times said that the attacks appear to be the work of a White supremacist gang. Jihadist cells are most assuredly taking note of the feasibility of tactics used by criminal gangs, and the responses to the tactics, for their own planning of attacks on public facilities (especially police stations). In PAIB No. 19, communications among Arabic speaking jihadists cited the multiple homicides of police officers in the state of Washington on 29 November 2009 as inspiration for future operational techniques. The lessons for federal and Pennsylvania law enforcement agencies from the foregoing incidents are clear: Heighten situational awareness in the field. Maintain vigilance even in the office. Monitor the issuing and disposal of uniforms and equipment. Maintain good communication for accountability. Remain aware of adversarial pre-operational surveillance and probing.

Sectors: Energy and Government Facilities


5. Stormy Meetings Over Gas Drilling in Delaware River Basin On Wednesday, 14 July 2010, over 600 environmentalist activists disrupted a hearing of the Delaware River Basin Commission (DRBC) in Trenton, New Jersey. The activists, from across the Eastern Seaboard, oppose natural gas drilling such as is currently under discussion in the Delaware River Basin. Members and supporters of the Northern Wayne Property Owners Alliance (NWPOA) - who are in favor of preserving the right to sell their properties in the Delaware River Basin to energy companies - also attended the DRBC meeting. The landowners and anti-drilling protesters confronted each other in heated argument as they met outside the building where the DRBC hearing took place.

Page 8 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

****** ANALYSIS ******

T/I/W Rating: LOW-to-MODERATE

As noted in PIB No. 107, both NWPOA and anti-drilling activists called for their respective supporters to attend the aforementioned DRBC hearing. At the time, potential confrontations between pro- and anti-drilling activists at the meeting were highlighted. In Pennsylvania, the escalating conflict over the Delaware River Basin, Susquehanna River Basin and much of Western Pennsylvania may define local fault lines and potentially increase area environmentalist activity or eco-terrorism. It should be noted that the Damascus area (Wayne County), where leading landowner advocates are active, has also been the scene of eco-terrorist vandalism to drilling equipment. The NORTHEAST ANARCHIST NETWORK (NEAN, http://neanarchist.net/ ) has also recently focused on the Marcellus Shale gas industry in its targeting and motivational communications. As reported in PIB No. 104, recent EARTH FIRST! (http://www.earthfirst.org/ ) networking communications have also focused on the Marcellus Shale gas industry as a high priority target in the New York-Pennsylvania region. Analysts Note: Local officials and law enforcement agencies should remain aware of the potential for large, sometimes hostile meetings of landowners, as well as of anti-drilling environmentalist militants. Confrontations between the two groups, such as that DRBC hearing previously-mentioned, may be triggered by further highprofile public meetings on the issue or by regional gas industry activities. The following public meetings are schedule to deal with oil and gas wells (including Marcellus Shale wells) in Pennsylvania: 19 July at the Tunkhannock Area High School Auditorium in Tunkhannock, PA 21 July at Lycoming College Heim Science Center Building, Room G-11 at Williamsport, PA 21 July at 5 p.m. Allegheny County Council, Pittsburgh 22 July at the Department of Environmental Protection (DEP)s Northwest Regional Office, 1st Floor Conference Room in Meadville, PA 22 July at DEP's Southwest Regional Office, Waterfront Conference Room A and B, in Pittsburgh, PA 22 July U.S. Environmental Protection Agency (EPA) public information meeting from 6 p.m. to 10 p.m. EDT at the Hilton Garden Inn in Canonsburg, PA

Page 9 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

29 July at 10:00 a.m., at the Rachel Carson State Office Building, 400 Market Street, Harrisburg, PA Communities with small police departments are advised to prepare contingency plans in the event that such meetings or confrontations escalate significantly.

Sectors: Energy; Government Facilities and Nuclear Reactors, Materials, and Waste
6. Anti-War, Anti-Nuke Training Events in July Two significant gatherings by anti-war and anti-nuclear activists are slated to take place this month: 28 July 2010: A coalition of anti-war activist groups will be holding the National United Antiwar Conference (NUAC) in Albany, New York. The objective is to bring "together antiwar and social justice activists from across the country." Attendees will be discussing "strategies that unite us in action for mass mobilizations and a variety of other tactics that suit the agendas of the constituent groups." 30 July-9 August 2010: Think Outside the Bomb is holding its annual Disarmament Summer encampment in Chimayo, New Mexico. Along with training to be held at the encampment, attendees will be participating in "nonviolent direct actions focused on Los Alamos National Laboratory, the expansion of the nuclear weapons complex and the uranium mining needed to support this industry." ****** ANALYSIS ****** T/I/W Rating: LOW-to-MODERATE

The annual NUAC event is not likely to become a security risk; however, the tactics and strategies shared there can be expected to be put into effect in anti-war actions throughout the northeast region in the following months. On the other hand , the above-mentioned lengthy Disarmament Summer event has both immediate and explicit security implications for New Mexico law enforcement, as well as longer-term implications for law enforcement and nuclear facilities nationwide. Direct action tactics learned and implemented at the Think Outside the Bomb "encampment" are likely to be seen elsewhere. As the 9 September anniversary of the Plowshares Eight 1980 "direct disarmament action" (trespassing and vandalism) in King of Prussia approaches, there is an increased risk of escalation in anti-nuclear and anti-war activism in Pennsylvania. While most recent anti-nuclear events in Pennsylvania have been nonconfrontational, more radical elements may be inspired by the "direct action" training and the Plowshares Eight anniversary. Such individuals or small cells may
Page 10 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

decide to take "direct action" themselves, such as civil disobedience, against nuclear facilities. In Pennsylvania, nuclear facilities (Beaver Valley, Limerick, Peach Bottom, Three Mile Island and Susquehanna Steam and Electric) may be targeted for protests or other direct actions. Additionally, environmental activists have repeatedly cited Pennsylvania as a leader in nuclear waste production (although the state does not have a disposal site), and nuclear waste through shipments (PAIB Nos. 44, 50 and 57).

No emerging indicators, threats and/or warnings at this time for the following sectors: Agriculture and Food Chemical Commercial Real Estate Communications Critical Manufacturing Dams Defense Industrial Bases Government Facilities (Educational Facilities Sub-Sector): Although not specifically mentioned herein, students and faculty of all Pennsylvaniabased colleges and universities participating in educational exchange programs abroad need to remain cognizant of emerging, country-specific threats, indicators and warnings. Healthcare and Public Health Hotels and Lodging National Monuments and Icons Postal and Shipping Private Security Social Services Water

Page 11 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

Threat / Indicator / Warning Rating

Description
Available intelligence and recent events indicate that hostile elements currently have little capability or intent to take action against the target. It is assessed that, although it cannot be ruled out, an attack or action is unlikely to be mounted based on current available intelligence. Available intelligence and recent events indicate that hostile elements have the capability to take action against the target and that such action is within the adversary's current intent. It is assessed that an attack or action is likely to be a priority and might well be mounted. Available intelligence and recent events indicate that hostile elements have an established capability and current intent to take action against the target and there is some additional information on the nature of the threat. It is assessed that an attack or action on the target is a priority and is likely to be mounted. Available intelligence and recent events indicate that hostile elements with an established capability are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is expected imminently.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Page 12 of 13

Pennsylvania Actionable Intelligence Bulletin No. 113, 19 July 2010

The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. The ITRR, a commercial information research and analysis organization, uses open-source, human and closed-source intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel. Consider information herein in context with other known information, indicators, threats and warnings.

Page 13 of 13

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 114


21 JULY 2010

******
Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002, Implementing Recommendations of the 9/11 Commission Act of 2007 and National Infrastructure Protection Plan of 2009, critical infrastructure and key resources are defined as systems and assets - whether physical or virtual - so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. The Pennsylvania Office of Homeland Security produces this informational/intelligence bulletin specifically for all potentially-affected stakeholders of those Pennsylvania-based critical infrastructures, key resources and significant special events. Consider information herein in context with other known information, indicators, threats and warnings.

CONTINUING RESEARCH
1. Update: 'Grand Jury Resistance Training' in Pittsburgh
New anarchist communications provide updated information about the Pennsylvania leg of what is known as a Conspiracy Tour, part of what the radical anarchist group CRIMETHINC. is planning as "a decentralized convergence" late July and throughout August.1 As of this bulletin, the Conspiracy Tour will include: "Grand Jury Resistance Training!" on 30 July 2010 in Pittsburgh (623 Kirtland St. Point Breeze) An undefined "Tour Stop!" on 31 July 2010 at the Union Project (801 North Negley Ave.) in Pittsburgh Another, as-yet undefined stop on 3 August 2010 in Philadelphia, at Wooden Shoe Books (704 South St.) CrimethInc. is encouraging anarchists in North America to take any action they feel will be effective in order to make the anarchist presence felt in their respective local areas during the "decentralized convergence. Anarchist communications are continuously monitored for further planned "actions, dates and locations relevant to Pennsylvania. Situational awareness is recommended throughout the next two months at those sites that have previously been targeted by anarchist activity. (PIB No. 103)
1

www.crimethinc.com

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

2. Anti-Fascist 'Call to Action', Conference in July 2010


A Portland, Oregon, branch of the radical, international anti-fascist organization known as ANTIFA has issued a nationwide "call to action" for 31 July 2010.2 Antifa and the ANTI-RACIST ACTION (ARA) network are calling for various types of actions and multiple venues.3 Broad situational awareness is recommended regarding any upcoming demonstrations by groups deemed "fascist" (e.g., Tea Party, militia, Christian conservative, etc.), "racist" (Ku Klux Klan, White Power, Skinhead, etc.) or "anti-choice" (any Christian pro-life groups) by supporters of the ARA or Antifa. (PIB No. 111)

3. Keystone United and the Euro-American Heritage Fest, Moosic, PA


Radical White nationalists are promoting an event called the Euro-American Heritage Fest 2010 (AKA European American Heritage Celebration).4 It is slated to take place on 14 August 2010 "in the Scranton area," according to promotional communications. The Euro-American Heritage Fest 2010 has been publicized on racist forums. Potential violence due to excessive alcohol consumption, clashes with anti-racist protesters or with police would not necessarily be limited to the Fest fairgrounds (possibly Public Square in Wilkes-Barre) and may be triggered in any of the surrounding areas. (PIB No. 111)

4. Increasing and Expanding Focus on Marcellus Shale


There are positive indicators of growing support among anarchists (e.g., NORTH EAST ANARCHIST NETWORK5 and EARTH FIRST!6 for actions targeting organizations involved in or facilitating drilling in the Marcellus Shale regions.7 Ecoterror, lone-wolves or organized environmental militant cells may thus be inspired in the coming months to execute significant "direct actions" targeting Marcellus Shale drilling operations. Based on the increase in risk indicators, heightened situational awareness is recommended for all Pennsylvania drilling projects. (PIB Nos. 104 and 112)

5. Anarchy Summer Camp in August 2010

Communications in Philadelphia-centered anarchist forums include calls for attendance at the "Anarchy Summer Camp," 6-9 August 2010, in order to "prepare for the upcoming International Monetary Fund demonstrations this fall. There has been an escalation in rhetoric and tactics among anarchist and far-left groups for more than a year, including arson, bombings, vandalism and "direct action. Further acts of anarchist terrorism and vandalism, inspired by the Toronto G20 "actions;" the Trois-Rivires, Quebec, bombing and this Anarchy Summer Camp can be expected throughout North America in the near-term. Military recruitment centers, police, banks and multi-national companies in Pennsylvania - specifically in

2 3

http://antifa.fr/worldwide http://antiracist.org 4 http://eahf.org 5 http://neanarchist.net 6 http://www.earthfirst.org 7 http://geology.com/articles/marcellus-shale.shtml Pennsylvania Office of Homeland Security Page 2 of 11

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

areas of significant anarchist activity - are advised to increase situational awareness. (PIB nos. 94, 107 and 108)

6. Al-Qaida Continues Focus on English-Language Audience AL-QAIDA, through one of its most active branches, AL-QAEDA IN THE ARABIAN PENINSULA (AQAP), last month decided to expand its outreach further into the

English-speaking world with its first official magazine in English. This week, AQAP issued a text excerpt from the magazine by its American rising star, Anwar AlAwlaki, as well as a new Awlaki audio recording (in Arabic). The combination of motivational texts and videos, religious sermons and practical lessons in jihad, all in English or by American jihadists, has the potential to be a significant factor in AlQaida's efforts to recruit lone-wolf terrorists (as well as more serious individuals) in English-speaking circles. (PAIB No. 106)

7. PrideFest in Harrisburg, Celebration in Reading

On 24 July 2010, a LGBT (lesbian, gay, bi-sexual and transgender, "Gay pride") parade and subsequent festival, PrideFest, are scheduled in Harrisburg. On 18 July 2010, the Reading Pride Celebration is slated to be held in Centre Park, Reading. There are increasing indications of focused, anti-gay rhetoric and actions among White supremacists and right-wing militia supporters. Analysts and researchers are continuously monitoring sources for details on protest/counter-protest activities. (PAIB No. 105)

8. 'Escalate Resistance' to Arizona's New Immigration Law

Referring to Arizona's new immigration legislation, anarchists and immigrants' rights activists are preparing to "peacefully escalate resistance to SB1070." The radical STUDENTS FOR A DEMOCRATIC SOCIETY (SDS) organization is planning what they have called an "Arizona Freedom Summer" 23 July-5 August 2010, focused on bringing activists to Arizona for the designated time period.8 Although there are no current indications, it is likely some SDS activities may occur on Pennsylvania community college and university campuses. Anarchists have called for "direct actions in our local communities" when the law goes into effect on 29 July 2010. Well-known minority community leaders warned that unidentified "activists" are willing to commit acts of "civil disobedience" to fight the law. Opponents of the law in Pennsylvania may target visiting Arizona VIP, delegations or Arizona-related events with protests or "direct action" in the coming weeks and months, including Diamondback baseball games in Philadelphia in late July and in Pittsburgh in September 2010. Counter-protests by supporters of the Arizona legislation may precipitate violent confrontations between opposing protesters; this will likely require local law enforcement intervention. (PAIB Nos. 98, 102 and 106)
8

http://www.studentsforademocraticsociety.org Page 3 of 11

Pennsylvania Office of Homeland Security

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sectors: CHEMICAL; ENERGY; NUCLEAR REACTORS, MATERIALS, AND WASTE; AND POSTAL AND SHIPPING 9. Stolen Explosives and Domestic Threats

In the wake of the 16 July 2010 car bombing targeting Mexican police and first responders in Ciudad Jurez (PIB No. 113), Spanish graffiti taunts of additional car bombs aimed at the FBI and DEA have been spotted in the same area. Also reported in the media, the Juarez vehicle-borne, improvised, explosive device (VBIED) employed the industrial explosive, Tovex. An American official noted that explosives and other volatile materiel such as Tovex have been stolen from private industrial plants, warehouses and transportation vehicles in Mexico. ****** ANALYSIS ****** T/I/W Rating: MODERATE

Mexico One of the cartels involved in the rapidly escalating violence in Mexico is LOS ZETAS, a gang founded by renegade Mexican elite soldiers. The cartel has been accused of plotting to blow up the Falcon Dam.9 While narco-terrorist gangs primarily target law enforcement officers, Mexican civilians have also been targeted for extortion and they have regularly fallen victim as incidental casualties. University of Pittsburgh students studying abroad at Tecnologico de Monterrey, in Mexico's volatile Nuevo Leon state (battleground for some of Mexico's deadliest gangs) are advised to heighten situational awareness for anything unusual in their surroundings, from abandoned bags and illegally parked cars through incongruous behaviors. Particularly at risk are areas in the vicinity of Mexican security forces' facilities or personnel. Tactics The latest revelations regarding the source of the explosives used in the Ciudad Jurez car bombing are indications of potential risk factors in CONUS, as well. Terrorists of all varieties regularly learn from criminal enterprises and methods, and vice-versa. Various covert attempts to obtain explosives or ingredients for making explosives in the US have been uncovered in terrorism-related cases in recent years. However, the relative success of the Mexican narco-terrorists in stealing explosives and deploying them against law enforcement targets may serve as tactical inspiration for both criminal and jihadist terrorists in CONUS.

http://www.ibwc.state.gov/Organization/Operations/Field_Offices/Falcon.html Page 4 of 11

Pennsylvania Office of Homeland Security

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

Considering the above incidents, Pennsylvania firms that regularly transport, store or use potentially explosive materials should be aware of an expanding danger of theft, either through infiltration of facilities or interception of company transportation vehicles. (Additional related indicators of the risk from peroxide-based IED are mentioned below.)

Sector: Government Facilities 10. Rally in the Heart of EDL Country


As has been occurring frequently in recent months, the far-right English Defence League (EDL) is to hold another rally (PAIB Nos. 94, 98 and 99).10 This event is scheduled for 22 July 2010 and is to be held in Luton, the birthplace of the movement. Anti-fascist and anarchist activists are organizing a counter-demonstration as well. As one of their calls to action states: "[The EDL] have been chased out of Harrow and East London, however, and we can chase them out of Luton." Many rallies like the planned Luton event are met with counter-protests by leftwing, Muslim and anti-fascist groups opposed to the various British "Defence League" branches. On Saturday (17 July 2010) in Dudley, an EDL protest against a local mosque construction project ended in violent incidents involving both EDL members and Muslim counter-protesters. ****** ANALYSIS ****** T/l/W Rating: MODERATE

The EDL, anti-Islam rallies have lately been joined by violent soccer hooligan gangs as well as neo-Nazi and racist, skinhead contingents. For its part, the EDL has made great efforts to publicize a non-racist and non-anti-Semitic agenda through YouTube and blog communications. Nonetheless, such racist and thuggish gangs have been willing to travel significant distances to join previous EDL rallies in expectation of mob violence. Students and researchers from Pennsylvania taking part in the many exchange programs in the United Kingdom (such as through the University of Pittsburgh, Indiana University of Pennsylvania, Clarion, East Stroudsburg, Mansfield and Westminster) are advised to avoid visiting Luton Thursday afternoon and evening. If in Luton, large public gatherings or protests should be avoided as a precautionary measure in light of the possibility of violent confrontation.

10

http://www.englishdefenceleague.org Page 5 of 11

Pennsylvania Office of Homeland Security

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

11. France's Nexus of Risk Factors


Several recent events in France indicate a current heightened level of risk both in the country and abroad: On 16-17 July 2010, the Villeneuve area of Grenoble was the scene of massive rioting by Muslim youths, including automatic weapons fire, the torching of dozens of cars and an attack on a train. The rioting was sparked by the death of a young man of North African descent, who exchanged fire with police after he had robbed a local casino. Hundreds of riot police and military troops were patrolling Grenoble earlier this week. Also on 16 July, a man who crashed into a policeman at a barricade and then failed to stop his car at a second police checkpoint was shot dead in SaintAignan. In reaction to the above shootings, dozens of Saint-Aignan residents, primarily of North African descent, rioted on 17-18 July. They attacked the local police station, as well as damaging several shops and vehicles. French authorities deployed soldiers to patrol the area of unrest. The above rioting came on the heels of French legislators voting overwhelmingly (only one opposed) on 13 July 2010 to ban the wearing of face-covering veils in all "public spaces. In September 2010, the bill will be brought before the French Senate, but it may be challenged beforehand in court as a violation of European Union laws. ****** ANALYSIS ****** T/l/W Rating: MODERATE

Emerging European legislation to ban veils, such as that recently voted on in France, have regularly led to jihadist communications calling for attacks on the nations passing said laws. Local jihadist preachers and international jihadist communications often incite Muslim youth to act against the nearest "infidel" targets guilty of "denigrating" Islam. The current period - while the issue of the veil ban is under public debate and, assuming the law is passed, in the near term thereafter - would be the most likely time to see such an increase in violent agitation. As previously noted in May 2010 (PAIB No. 91) analysts have intercepted communications from AL-QAIDA IN THE ISLAMIC MAGHREB (AQIM) naming France, Spain and Mauritania as urgent current targets for attack. Depending on the level of attention the ban is given in the Western media, as well as by senior jihadist leaders, possible increases in the risk of lone-wolf or selfstarting cells targeting both French cities and French assets are indicated worldwide. In addition, France's majority-Muslim neighborhoods may see increasing unrest derived from both the veil ban and from the recent shooting deaths mentioned above.

Pennsylvania Office of Homeland Security

Page 6 of 11

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

Students and researchers from Pennsylvania taking part in exchange programs in France (such as from the University of Pennsylvania, the University of Pittsburgh, Indiana University of Pennsylvania, Clarion University of Pennsylvania, East Stroudsburg University, Mansfield University and Westminster College) should be informed of the increased risk factors at the current time. In this regard, the French government has produced a list of 750 "no-go zones" (officially known as Zones urbaines sensible (Sensitive Urban Zones), considered to be high-risk (http://sig.ville.gouv.fr/Atlas/ZUS). In Pennsylvania, high-visibility French assets that may draw the attention of jihadist adversaries include the offices of France's Consulate General in Center City Philadelphia and the Alliance Franaise de Pittsburgh, which meets in the University of Pittsburgh's Cathedral of Learning.

Sectors: Chemical, Commercial Facilities, Postal and Shipping, and Transportation Systems 12. Al-Qaida Plot Highlights Risk of Peroxide-Based IED
On 8 July 2010 three men identified as Al-Qaida operatives were arrested in Norway and Germany on charges of plotting to build a chemical weapon to attack Western targets. In a display of international cooperation between intelligence agencies, the Norway Police Security Service worked with the FBI and CIA in exposing the plot, which appears to have connections with other peroxide-related plots in New York City and in England. The three men reportedly belong to the TURKESTAN ISLAMIC PARTY (TIP), an AlQaida-affiliated separatist terror organization based in Xingjian Province, China. (PIB No. 111) The Norwegian arrests come only one day after the US Department of Justice leveled charges on Adnan Shukrijumah and other Al-Qaida members for plotting coordinated suicide-attacks against the New York City subway using an explosive consisting of peroxide, acetone, flour and oil. The New York City subway plot was connected to a Manchester bombing plot. The latter plot unraveled in April 2009 when British authorities arrested Al-Qaida members who had large quantities of flour and oil in their possession, as well as photographs and maps of the city of Manchester indicating pre-operational surveillance. According to authorities, the three men from Oslo, who purchased what they thought were hydrogen peroxide-based chemicals from a local pharmacy, are directly linked to both the New York City and Manchester plots through common terror masterminds based in Pakistan and Afghanistan.

Pennsylvania Office of Homeland Security

Page 7 of 11

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

****** ANALYSIS ******

T/l/W Rating: MODERATE

Acetone peroxide-based explosives continue to be a popular choice for jihadist terrorists because of its availability, portability and powerful effects. Tighter regulations and oversight from law enforcement and intelligence services, however, has made the purchasing of peroxide much more risky for the would-be terrorists, as the arrests in Norway indicate. Analyst Note: Terrorists are likely to increasingly seek alternative ways of attaining hydrogen peroxide and other chemicals that can be used to make explosive materials. This includes the possibility that terrorists will attempt to steal these chemicals from a water treatment plant or hijack said chemicals from a transportation vehicle.

Sector: Government Facilities 13. Germany: 'Chaos Days' in 2010?


Recent communications among German anarchists and anti-authoritarians would seem to indicate a growing desire and planning for a new set of Chaostage, or "Chaos Days" in English translation. Chaos Days refers to mass rioting and vandalism by "punks" and other antiauthoritarian youths. The Chaos Days took place first in the 1980s and then in the mid-1990s, primarily in Germany. This year, there has been some indication that German anarchists are hoping to generate growing enthusiasm for new Chaos Days starting 5 July 2013. In communications on the future event, anarchists added, "But until then, you should no longer feel safe. They promise decentralized rioting "everywhere in the Federal Republic of Germany ... to prepare for the Chaos Days of 2013." Perhaps in an effort to show their serious intentions, anarchists held what they called a Warm-Up Chaos Day on 5 July 2010 in Heidelberg. The rowdy group that turned up briefly clashed with police after burning a few public garbage bins. There are additional indications that the "preparations" for 2013 will continue on or around 6-8 August 2010 in Hamburg, as well as possibly on 3 August 2010 in Hanover. There has been very little mention, as of this writing, of the Chaos Days among American anarchist circles. However, it bears noting that Chaos Days took place in San Francisco in 1995 and 1996, approximately parallel with the German Chaos Days.

Pennsylvania Office of Homeland Security

Page 8 of 11

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

******A NALYSIS ******

T/l/W Rating: MODERATE

There is the possibility of anti-authoritarian rioting, vandalism and clashes with police in the above-mentioned locations on or around the dates listed. If the groups behind the events are successful in promoting their plans in coming months, then the strength and vigorousness of the Chaos Days events will grow greater (as will the risk of incidental injuries and damages) with each gathering. In Germany, Pennsylvania students and researchers taking part in exchange programs (such as from the University of Pennsylvania, the University of Pittsburgh, Indiana University of Pennsylvania, Clarion University of Pennsylvania, East Stroudsburg University, Mansfield University and Westminster College) should maintain heightened situational awareness in the above-mentioned cities on and around the target dates listed. Analysts will continue to monitor anarchist communications for further indications of Chaos Days and "warm-up" Chaos Days in Europe that pose a risk to Pennsylvania students, as well as for any planning related to possible American affinity-group Chaos Days.

No emerging indicators, threats and/or warnings at this time for the following sectors:

AGRICULTURE AND FOOD BANKING AND FINANCE COMMERCIAL REAL ESTATE COMMUNICATIONS CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASE EMERGENCY SERVICES GOVERNMENT FACILITIES11 HEALTHCARE AND PUBLIC HEALTH HOTELS AND LODGING INFORMATION TECHNOLOGY NATIONAL MONUMENTS AND ICONS NUCLEAR REACTORS, MATERIALS AND WASTE POSTAL AND SHIPPING
11

Educational Facilities Sub-Sector: Security directors, students and faculty of all Pennsylvania-based colleges and universities participating in educational exchange programs abroad need to remain cognizant of emerging, countryspecific threats, indicators and warnings.

Pennsylvania Office of Homeland Security

Page 9 of 11

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

PRIVATE SECTOR SECURITY SOCIAL SERVICES TRANSPORTATION SYSTEMS WATER

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little intent or capability to take action against the target. Although it cannot be ruled out, an attack/action is unlikely based on currently available intelligence. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. An attack or action is likely to be a priority and might well be mounted. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. Additional information is also available on the nature of the threat. An attack or action on the target is a priority and is likely. Available intelligence and recent events indicate that hostile elements not only have the intent and established capability, but also are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is imminent.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Pennsylvania Office of Homeland Security

Page 10 of 11

Pennsylvania Intelligence Bulletin No. 114, 21 July 2010

The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. The ITRR, a commercial information research and analysis organization, uses open-source, human and closed-source intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel.

Pennsylvania Office of Homeland Security

Page 11 of 11

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 115


23 JULY 2010
The Pennsylvania Office of Homeland Security produces this informational/intelligence bulletin specifically for all potentially-affected stakeholders of Pennsylvania-based Critical Infrastructures, Key Resources and Significant Special Events. Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002, Implementing Recommendations of the 9/11 Commission Act of 2007 and National Infrastructure Protection Plan of 2009, critical infrastructure is defined as systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. Consider the information contained herein in context with other known information, indicators, threats and warnings.

CONTINUING STRATEGIC ANALYSIS


1. Increased Tempo of Jihadist Chatter Focusing on US Homeland
New jihadist communications indicates intent to conduct terrorist operations in the US in the near term; these appear to fit the pattern of increased tempo of such rhetoric currently focusing on the American homeland. Describing Muslim "rage" at US State Department insults against "a sister of ours," and "threats and mocking" of the international jihad, an unidentified jihadist addresses Americans directly in an Arabic communication. The jihadist expresses the intent to return to major [terrorist] operations within a major American city. The jihadist states, "We attacked you once in Detroit ... and we attacked you again ... in New York. Of the next attack, he asks, "Will it be in Chicago? Will it be in Los Angeles? Will it be in Boston? However, in a subsequent communication the same writer declares, "We attacked you twice in New York, but it didn't hurt you. The third time will be a major blow." ITRR analysts note that, in the same communication, the jihadist calls for lone-wolf or small cell actions by stating, "Sons of the Islamic nation: don't wait for the leaders, but take the initiative and start to work ..." As noted above, the latest communications came in quick succession after other threats against CONUS. These include: A "Message from an Islamic Soldier to America and its Citizens Around the World" (PIB No. 113) - a jihadist warning in English that "there are a lot of

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

Muslim men who are very interested by fighting you ... but if you think that your new sonographic devices in your airports preclude us from reaching our targets, i tell you that you have not understood the lesson well. He further added, "i d'ont advice you to believe that your aircraft carriers or ships are safe in sea and your planes are safe in air or they are far from the fire of our fighters and their ambushes ..." The "next shock," the communication warned, is "coming soon. God willing, we will attack you from where you don't expect. God willing, we will attack you in the sea, land and air. It concluded, "In the near future, God willing, in a new chapter in the battle with you. God willing, the next attacks will make you forget shock of 11/9." In the same jihadist forum, Arabic communications were exchanged theorizing about the impact a "dirty bomb" would have were it detonated on Wall Street.

AL-QAIDA IN THE ARABIAN PENINSULA (AQAP) just released its first

official magazine in English and a text excerpt from the magazine by its American rising star, Anwar Al-Awlaki. In the magazine and the sermon, Awlaki makes it abundantly clear that Islam demands attacks on America and Americans at the current time (PIB No. 106) Analysts Note: There is significance in the fact that the communications focusing on striking the American homeland have been issued in quick succession, and that they have come from both Al-Qaida key players and unidentified (but apparently active) jihadists. As mentioned in several previous editions of the PIB, maritime ports and airports, rail and light rail, as well as large public venues in Pennsylvania remain desirable targets for jihadist attacks along the lines detailed in recent adversarial communications. Readers should review and consider past advisories that increasing international traffic at Philadelphia International Airport, along with its central location, significantly raises its profile as a target for jihadist agents. As the second-most, well-traveled airport in Pennsylvania, and as a US military transit point with facilities for military personnel and their families, Pittsburgh International Airport would also be a high-profile target for such terrorists. The continuing jihadist search for methods to foil technology-based security measures should focus attention on the need to heighten awareness of behavioral and situational clues indicating hostile intent. Personnel responsible for security in Pennsylvania mass transportation or other public venues should note the possibility of explosive devices concealed as otherwise innocuous items. This can include everything from cardboard boxes posted for delivery, sports paraphernalia, prosthetic limbs or more familiar and effective means.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

2 of 11

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sector: Dams and Energy 2. Targeting: Hydroelectric Plants
On Wednesday, 21 July 2010, a cell of up to five terrorists (assumed to be jihadists) attacked a hydroelectric facility in the Russian Caucasus region. The attackers killed two guards, briefly took control of the station by confining the employees and then destroyed three plant generators using at least four separate explosive devices. The facility had to be shut down, but the dam itself was not breached. It is unknown at this time if the attackers' intention was to cause major flooding by cracking the dam or merely to destroy the hydroelectric plant. ****** ANALYSIS ****** T/I/W Rating: MODERATE

On 2 December 2009, in a statement claiming responsibility for the 27 November 2009 double bombing of the Nevsky Express in Russia, the International Electrotechnical Commission (IEC)1 reiterated its adherence to the worldwide jihadist strategy of focusing on the enemy's infrastructure assets, insofar as such attacks are feasible. In August 2009, Chechen jihadists of MUWAHIDUN AL-RUSI ("The Russian Monotheists") claimed to have sabotaged a major hydroelectric plant; the targeting focus is clear. Hence, the new attack on the Caucasus hydroelectric plant is thus far assumed to be part of the lengthy, on-going jihad being waged by Muslim separatists in the Caucasus region. More broadly, there is extensive intelligence, training, experience and knowledge sharing current underway among terrorists worldwide. Therefore, jihadists and separatist insurgents elsewhere are likely analyzing the execution, outcome and results of the attack on the Caucasus hydroelectric plant for lessons they can apply on their own local front. If the tactic and targeting displayed in the aforementioned Caucasus attack is deemed effective among jihadist strategic analysts, such attacks are likely to be repeated. Although there are no credible indicators of attacks against US dams or energy sector facilities, Al-Qaidas intent and capability to destroy critical infrastructure remain omnipresent. Security personnel and law enforcement agencies responsible for Pennsylvania's hydroelectric facilities should be advised of the potential for increased jihadist interest in plant and dam vulnerabilities.

http://www.iec.ch 3 of 11

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

Among the highest profile relevant facilities in Pennsylvania are the following: York Haven Hydro Station on the Susquehanna River, in the jurisdiction of Dauphin, Lancaster and York counties Holtwood Hydroelectric Plant, also on the Susquehanna River, in the jurisdiction of Lancaster and York counties Safe Harbor Hydroelectric Station on the Susquehanna River, and also in the jurisdiction of Lancaster and York counties Kinzua Dam on the Allegheny River in Allegheny National Forest, in Warren County Muddy Run Pumped Storage Facility in Lancaster County Seneca Pumped Storage Generating Station in Warren County

Sectors: Commercial Facilities and Energy 3. Chevron Execs in RAN Sites The RAINFOREST ACTION NETWORK (RAN) is encouraging supporters to "adopt" a
Chevron corporation board member to target for action that "forces Chevron to clean up their toxic legacy in Ecuador," in the language of a new RAN communication.2

RAN claims Chevron has "used every dirty public relations and legal trick in the book to avoid cleaning up its mess in the Amazon rainforest. The organization goes on to call for "transforming Chevron from the inside! What that means is "[c]onvincing just one Chevron adoptee to do the right thing ..." The methods suggested to achieve the foregoing - presented alongside a detailed list of the Chevron board members, their corporate addresses and contact information - include: writing letters, sending "photos of families impacted by oil pollution in the rainforest, visiting the Chevron board members at their offices, turning up at their speaking engagements, putting up posters of them around their home town, etc. RAN implores: "unleash your creativity to ensure your board member listens and forces Chevron to clean up their toxic legacy in Ecuador." ****** ANALYSIS ****** T/I/W Rating: MODERATE

The methods RAN explicitly suggests in the above communications to petition Chevron corporate board members do not represent an explicit call to illegality or "direct action. However, the call to "unleash your creativity" is broad enough to

http://ran.org 4 of 11

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

encompass any of the activities RAN and its allies have been known for in the recent and distant past. Previous facilities targeted by RAN have been the scene of illegal actions including trespassing, lock-downs and vandalism. In one episode, RAN members held a sit-in at the Washington, DC, offices of the Environmental Protection Agency (EPA) on 8 July 2010 (PIB No. 110). Furthermore, RAN has been a frequent collaborator with CLIMATE GROUND ZERO.3 On 14 July 2010, Climate Ground Zero and MOUNTAIN JUSTICE activists locked themselves to mining equipment on Coal River Mountain, West Virginia, to protest mountaintop removal mining.4 In a January 2010 communication, RAN noted that an environmentalist training event was being conducted by Climate Ground Zero and added, "[M]ore actions are expected throughout 2010. It's going to be a kick ass year." Analysts Note: None of the Chevron board members listed in RAN communications live or have offices in Pennsylvania. While there are a host of Chevron and Chevron-affiliated gas stations in Pennsylvania, it does not appear at this time that RAN is formally targeting such assets. Analysts will continue to monitor environmentalist, militant communications for indications of targeting.

Sectors: Commercial Facilities and Government Facilities 4. Rallies 'to Defend Lancaster County's Civil Rights'
The Committee to Defend Civil Rights in Lancaster, a coalition of civil action groups, is planning two "Unity Rallies" for 24 July and 29 July 2010. Both events, called to oppose "the elimination of the County's Human Relations Commission," are to be held in Binns Park in Lancaster County. After the 29 July gathering in Binns Park, protesters "will march in unity to the public hearing on the elimination of Lancaster County's Human Relations Commission." Speakers at the events include local politicians, church leaders, NAACP branch representatives and a member of the Pennsylvania Human Relations Commission. Sponsoring organizations behind the rallies include: American Civil Liberties Union Congregation Shaarei Shomayim Equality PA Crispus Attucks Community Center Governor's Advisory Commission on Latino Affairs
3 4

http://climategroundzero.net http://mountainjustice.org 5 of 11

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

Lancaster Coalition for Peace and Justice Lancaster County Council of Churches Lancaster City Human Relations Commission Board Lancaster City Human Relations Commission Lancaster County Coalition for Religious and Social Justice Lancaster County Democratic Committee Lancaster County Democratic Women's Association Lancaster Lesbian, Gay, Bisexual and Transgender (LGBT) Organizing Committee SEIU Healthcare Pennsylvania Spanish American Civic Association Theatre For Transformation Vision of Hope MCC YWCA of Lancaster ****** ANALYSIS ****** T/I/W Rating: LOW

Due to the platform ideologies of the sponsoring groups and the contemplated protests, analysts do not anticipate unruly or illegal behavior; however, the possibility that these groups will attract counter/anti groups is always present. Law enforcement responsibilities at the events will generally be limited to crowd control and traffic direction (possibly at the 29 July event). Analysts are unaware whether the necessary police permits have been obtained by the sponsoring groups.

Sector: Government Facilities 5. Update: France Veil Ban Elicits Jihadist Response
Newly intercepted jihadist communications indicate a vehement reaction to the recent vote by the French lower house of parliament to ban the full-face veil in all public venues (PIB No. 114). The proposed ban will still need to pass the French Senate in September 2010, but it is already apparently going to face a legal challenge claiming that it violates existing European Union laws. In the relevant communication, the jihadist commentator says: "All that is left is to wait for Senate approval of the law. This means that few things are going to happen: they are going to attack our women; they'll need to remove their veils or pay a fine - a fine for their devotion to maintaining their dignity." Impatient to wait for the outcome of the vote or the possible court challenge, the jihadist continues: "Do we wait until that will happen and put our heads in the sand, and wait until an international organization will object to that law instead of us? Do we allow those sisters to feel there isn't a nation behind them? Do we allow the infidels to play with our feelings and symbols and, by doing so, prove to them that we are a weak nation?"

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

6 of 11

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

Rejecting any other path, the communication declares, "Jihad is the way to preserve the religion and the dignity and security of our sisters. We need to declare war - a war in which everything is allowed as a response to the war they declared on us. From now on, we need to organize for war as much as we can." To this end, the jihadist explains, "The jihad fighters should get together ... as individuals or groups, in the open or in secret. We need to promote strong operations in France. From now on, all French women and men are a target since the law has passed. We need operations against them that they have yet to imagine as a response for passing that law. At the same time, the objective of attacking now is so that "they don't dare pass the law in its final phase and execute it." In addition, the jihadist adds, "the French should feel that the war is coming to France and it will strike all the national symbols, and that what has happened to the Americans isn't so far from them. This war will reach all their interests everywhere ... the moment that the dignity of one of our sisters will be ruined. Then, the stream of blood won't stop flowing." The war will start in earnest, he writes, "as soon as they will attack the first Muslim woman (will take off her hijab) ..." Until then, "we should start to kidnap French people - men and women - just as a response to the decision on the law; and every hijab removed from one of our sisters will mean the taking of another French soul. ... [As] soon as the law will be implemented, all their interests around the world will become our target - in Yemen, Somalia, Iraq, Pakistan, Afghanistan, Algeria, Africa and Palestine. Who is more suitable for carrying out these attacks than my African brothers? Since [French] interests are spread there and the targets there are easier to attack." In addition, the communication warns jihadists everywhere to be conservative with their bluster, "Every threat that won't be executed will show how weak we are ..." ****** ANALYSIS ****** T/I/W Rating: MODERATE

These new jihadist communications confirm indications of a current heightened level of risk in France and abroad. "In addition to the veil ban, analysts also cited violent unrest, including weapons fire, in predominately Muslim areas in recent days. (Correction: In PIB No. 114, the rioters in a separate area of the identified areas of unrest, Saint-Aignan, were members of the Roma [Gypsy] community, and not as published.)" Analysts Note: European veil bans have regularly led to jihadist communications calling for attacks on the nations passing said laws. Local jihadist preachers and international jihadist communications often incite Muslim youth to act against the nearest "infidel" targets guilty of "denigrating" Islam.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

7 of 11

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

The current period - while the issue of the veil ban is under public debate and, assuming the law is passed, in the near term thereafter - would be the most likely time to see such an increase in violent agitation. As already noted in May 2010 (PIB No. 91) AL-QAIDA IN THE ISLAMIC MAGHREB (AQIM) communications have named France, Spain and Mauritania as urgent current targets for attack. Depending on the level of attention the ban is given in the Western media, as well as by senior jihadist leaders, analysts foresee a possible increase in the risk of lonewolf or self-starting cells targeting both French cities and French assets worldwide. In addition, unrest in France's majority-Muslim neighborhoods may see increasing unrest that draws its inspiration from the veil ban and from recent clashes with police. Students and researchers from Pennsylvania taking part in exchange programs in France (such as from the University of Pennsylvania, the University of Pittsburgh, Indiana University of Pennsylvania, Clarion University of Pennsylvania, East Stroudsburg University, Mansfield University and Westminster College) should be informed of the increased risk factors at the current time. In this regard, the French government has produced a list of 750 "no-go zones" (officially known as Zones urbaines sensible ("Sensitive Urban Zones"), considered to be high-risk (see http://sig.ville.gouv.fr/Atlas/ZUS, in French). In Pennsylvania, high-visibility French assets that may draw the attention of jihadist adversaries include the offices of France's Consulate General in Center City Philadelphia and the Alliance Franaise de Pittsburgh, which meets in the University of Pittsburgh's Cathedral of Learning.

No emerging indicators, threats and/or warnings at this time for the following sectors:

AGRICULTURE AND FOOD BANKING AND FINANCE CHEMICAL COMMERCIAL REAL ESTATE COMMUNICATIONS CRITICAL MANUFACTURING DEFENSE INDUSTRIAL BASE EMERGENCY SERVICES GOVERNMENT FACILITIES5 HEALTHCARE & PUBLIC HEALTH
5

Educational Facilities Sub-Sector: Security directors, students and faculty of all Pennsylvania-based colleges and universities participating in educational exchange programs abroad need to remain cognizant of emerging, countryspecific threats, indicators and warnings.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

8 of 11

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

HOTELS AND LODGING INFORMATION TECHNOLOGY NATIONAL MONUMENTS & ICONS NUCLEAR REACTORS, MATERIALS & WASTE POSTAL & SHIPPING PRIVATE SECTOR SECURITY SOCIAL SERVICES TRANSPORTATION SYSTEMS WATER

OHS Goal: Situational Awareness Among All Stakeholders


- The Information-Sharing Community -

Owner/Operator Security Mgr Firefighters EMS Associated Federal & State Law Enforcement Agencies Public Works/Utilities PEMA Area Office US DHS Municipality Officials County Officials

CIKR Site

Surrounding County EMC Public Health Officials PA National Guard Emergency Preparedness Liaison Officers

Adjacent State Intelligence Centers

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

9 of 11

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little intent or capability to take action against the target. Although it cannot be ruled out, an attack is unlikely based on currently available intelligence. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. An attack is likely to be a priority and might well be executed. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. Additional information is also available on the nature of the threat. An attack on the target is a priority and is likely. Available intelligence and recent events indicate that hostile elements not only have the intent and capability, but also are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is imminent.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

10 of 11

Pennsylvania Intelligence Bulletin No. 115, 23 July 2010

Source Summary Statement

The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. The ITRR, a commercial information research and analysis organization, uses open-source, human and closedsource intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

11 of 11

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 116


26 JULY 2010
The Pennsylvania Office of Homeland Security produces this informational/intelligence bulletin specifically for all potentially-affected stakeholders whether public or private sector, federal or Commonwealth - of Pennsylvaniabased Critical Infrastructures, Key Resources and Significant Special Events. Consider the information contained herein in context with other known information, indicators, threats and warnings.

Actionable Date Reminders


Current-31 August 2010: In the general escalation in Irish republican terrorism, Marching Season in Northern Ireland is a period of several serious potential flashpoints for violence, with the most significant risk surrounding the 12 July march. Heightened situational awareness is called for among students and faculty with overseas programs in Northern Ireland (e.g., Millersville University and the Pennsylvania College of Technology). 29 July 2010: Arizona's immigration law SB 1070 to be enacted. Anarchists and immigrants' rights activists are prepared to "escalate resistance" nationwide. 29 July 2010: A public meeting dealing with oil and gas wells (including Marcellus Shale wells) in Pennsylvania is to be held at the Rachel Carson State Office Building, 400 Market St., in Harrisburg. Although there are no current indications, threats and/or warnings of planned, unruly or violent behavior, the recent public outcry for better safety and control measures for natural gas drilling has precipitated a general heightened awareness. Law enforcement agencies associated with supporting Harrisburg events/infrastructure are advised to prepare contingency plans in the event that the meeting or confrontations outside the meeting significantly escalate. 29 July 2010: The Committee to Defend Civil Rights in Lancaster, a coalition of civil action groups, is planning a rally and march to oppose "the elimination of the County's Human Relations Commission. Protesters will gather in Binns Park, Lancaster County, and march "to the public hearing on the elimination of Lancaster County's Human Relations Commission." There is no indication of
Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002, Implementing Recommendations of the 9/11 Commission Act of 2007 and the National Infrastructure Protection Plan of 2009, critical infrastructure is defined as systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those mat ters. Pennsylvania applies the same logic and intent to define Commonwealth, county & municipality critical infrastructures and key resources.

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

planned or expected unruly or illegal behavior. 30 July-31 August 2010: The anarchist organization CRIMETHINC. is planning "a decentralized convergence" in the form of a rolling event entitled, the Conspiracy Tour.1 The Tour will reach several US states, from 25 July through 25 August 2010. Tentative Conspiracy Tour dates and locations in Pennsylvania include: 30-31 July 2010, Pittsburgh 3 August 2010, Philadelphia 31 July 2010: The radical, international, anti-fascist organization, ANTIFA2 and the ANTI-RACIST ACTION (ARA)3 network issued a nationwide "call to action" for this date. Multiple venues and any type of action are encouraged. Broad situational awareness is suggested regarding any upcoming demonstrations by groups deemed "fascist" (e.g., Tea Party, militia, Christian conservative, etc.), "racist" (e.g., Ku Klux Klan, White Power, Skinhead, etc.) or "anti-choice" (e.g., any Christian pro-life groups) by supporters of the ARA or Antifa. 31 July 2010: A Tea Party rally, entitled UNI-TEA, is scheduled to take place at Independence Mall in Philadelphia. Although there are no current indications, threats and/or warnings of unruly or violent behavior regarding this event, the likelihood is real for confrontations between Tea Party movement members and their opponents. 6-9 August 2010: An Anarchy Summer Camp in northern Virginia (the precise location kept confidential at the present time) "will help you prepare for the upcoming International Monetary Fund [IMF] demonstrations this fall ... [and] will prepare participants for the demonstrations through workshops ... as well as real life exercises, such as tactical simulations. The IMF representatives are scheduled to meet in the US capital 9-11 October 2010. Analysts Note: Skills and lessons learned can be expected to be applied in anarchist actions throughout the northeast region in the following months, including in Pennsylvania.

6-9 August 2010: The Brandywine Peace Community is planning to hold two protests marking the World War II atomic bomb attacks on Hiroshima and Nagasaki, Japan, in 1945. On 6 August 2010 activists will gather outside the offices of defense contractor Lockheed Martin in Valley Forge for "civil disobedience and ... arrest...."

1 2

http://www.crimethinc.com http://antifa.fr/worldwide/ 3 http://antiracist.org/ Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715 2 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

On 9 August 2010, the activists will gather at Philadelphia's City Hall and march to SS Peter and Paul Roman Catholic Cathedral.
7 August 2010: Rally for the MOVE 9 at 11th and Market St. in Philadelphia (Additional details follow.).4 9-12 August 2010: Coal-Gen 20-Ten, the coal "industry's most dynamic event," is to be held at the David L. Lawrence Convention Center in Pittsburgh.5 14 August 2010: Radical White supremacists are promoting an event entitled, the Euro-American Heritage Fest 2010 (AKA European American Heritage Celebration). It is slated to take place on "in the Wilkes-Barre / Scranton area," most likely in the Public Square in Wilkes-Barre or Moosic.

Strategic Analysis: Special Edition


American Militia-Mexican Drug Cartels on Verge of Shooting War?
Narco-terrorist gangs in Mexico have been escalating their public proclamations and threats against American law enforcement and civilians in recent weeks. In response, communications among American militia members have also seen an escalation in rhetoric. In addition, in at least one case an armed patrol led by neoNazi leaders entered into an area reportedly used as a transit point for drug and people smugglers from Mexico. Last month, a Mexican drug cartel explicitly threatened American police officers in Nogales, Arizona, with sniper attacks if they interfere in the bustling cross-border drug trade. The police department has reportedly taken to warning its officers to remain armed, to have radios with them and to keep body armor accessible at all times. It is apparently the first such threat from across the border in the heating up drug and illegal migrant smuggling war. In the wake of the 16 July 2010 car bombing targeting Mexican police and first responders in Ciudad Jurez, Spanish graffiti taunts of additional car bombs aimed at the FBI and DEA have been spotted in the same area (PIB Nos. 113 and 114). Significantly, shots were fired into the El Paso, Texas, City Hall on 29 June 2010, apparently from Ciudad Jurez, Mexico. Whether or not the shots were fired intentionally, the incident points out vulnerability in the event of an actual armed confrontation, as well as the disregard Mexican narcoterrorists have for American sovereignty and authority.

4 5

http://www.onamove.com/move9/ http://www.coal-gen.com/index.html 3 of 15

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

A narco-terrorist from LOS ZETAS issued threats against armed, American civilians in a media interview. "I now believe my men were shot by crazed American vigilante cowards, who ambushed my solders at night, shot them from a great distance using high powered American rifles. Than our load of drugs were stolen," the Zeta gunman said of the recent shooting deaths of two members of his gang. He claimed that such attacks were not unusual, adding that Zetas "have been instructed to shoot and kill any Americans who are seen armed and roaming the deserts."6 The Pima County Arizona Citizens Militia (ACM) claimed that a 13 July 2010 encounter with "six enemy, in uniform, carrying AK and SKS rifles," led to ACM forces engaging the gunmen "as they tried to cross the international fence ..." The ACM reported: "two enemy KIA confirmed, unknown number of enemy WIA, no friendly casualties ..." An ACM spokesman responded to the Los Zetas officer's statement as follows: "God may show them Mercy. We will not. These Zetas are not Soldiers, not Partisans, and not Militia. Under the Law of Land Warfare and the Geneva and Hague Conventions, they are Brigands, Terrorists, and Marauders, no different from Pirates. They are going to be dealt with as such. When our forces engage these war criminals, we will show them no Mercy, we will neither ask for nor offer them any Quarter, and we will take no Prisoners. We are going to hunt the Zetas and destroy them like the vermin that they are. This won't be just War, this will be Extermination." He added, "The ACM County Units, supported by Militia groups from outside of Arizona, will conduct Operation Defiant Sentinel this Fall. Our Mission will be to Search and Destroy the Zetas and other armed, uniformed foreign military forces, and drive them out of Arizona." One response to the above exchange on a central militia forum was quite skeptical: "Pardon me if I ask to many questions, I saw this type of bragging and BS when I was in VietNam from people who never fired their weapons, I didn't like it then and I wouldn't like it now! So until I see some proof that everything reported took place where and when it is claimed I will continue to wonder." Other responses, however, expressed admiration for the ACM and a desire to assist them in some way. Meanwhile, Pinal County Sheriff Paul Babeu believes that a rival drug cartel was behind the aforementioned shooting deaths, rather than any militia. However, Sheriff Babeu has said that there is a likelihood of a shooting war erupting between American armed militias and narco-terrorists if such vigilante patrols continue.

http://www.kold.com/Global/story.asp?S=3394374 4 of 15

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

In a separate "operation," an armed and equipped group led by several neoNazi leaders has claimed to have "rescued" four illegal aliens in a desert area used as a transit for smugglers and uncovered a dead body of another would-be illegal immigrant. The group's leader, JT Ready, said that he would be leading more operations in the region throughout the summer. Analysts Note: Mexico-based narco-gangs are intent on sending powerful messages to centralized authority in the United States and Mexico, as well as to vigilantes on the American border. At the same time, American militia movements, neo-Nazi groups and concerned border-area residents are also increasing their activism along the US/Mexico border armed with licensed firearms. While some volunteer border patrol groups, such as the Minutemen, do not attempt to do more than report what they observe to law enforcement, it is far from certain that narco-terrorist cells seeking to create a balance of terror with the militia groups will make so fine a distinction before opening fire. Hence, this escalation has a great potential of triggering an authentic shooting war between armed American civilians and narco-terrorists. Such a situation would precipitate deeper law enforcement intervention, potential further escalation and a greater export of Mexican narco-terrorism into the border states of the US. There are possible indicators that US Customs and Border Patrol (CBP) officers, militia members or law enforcement officers may be at risk of cross-border kidnapping by jihadist- or ex-military-trained narco-terrorist cells. The abducted Americans may serve as bargaining chips, or be tortured and beheaded as tool of intimidation in line with the behavior of the Mexican narco-gangs domestically. As of this time, the potential armed confrontation with Mexican narco-terrorists is limited to the bi-national border area states. However, any tactics and strategies deemed successful by narco-gangs are likely to migrate northward with violent American gangs. Regarding the actions of the American militias, recent communications from extremist militia forums indicate a growing restlessness and self-reinforcing feeling of impending confrontation with the federal government. Comments such as "to arms," "it is time now" and "just say the word" are appearing in communications from some rank-and-file militia members, although most of the leadership of such organizations is publicly avoiding that rhetoric at the present time. The claimed "action" seen by Arizona and other regional militias along the Mexico border is feeding into this growing frustration as well, as it points to what appears to be a need for militarized initiatives without regard for government authority. The expression this frustration takes among Pennsylvania militias remains to be seen. Analysts and researchers will continue to monitor Pennsylvania-based militia and related communications regarding developments along America's southern border.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

5 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

Sector-Specific Threats, Indicators and/or Warnings


Sectors: Chemical, Commercial Facilities, Emergency Services, Government Facilities, National Monuments and Icons, and Transportation Systems
1. Specific Targeting of US Assets at Home and Abroad Three distinct, but complementary, jihadist communications intercepted point to specific targeting of American interests at home and abroad. American Blood Streaming in the Streets' Declaring, "We will destroy the USA soon," a communication from 25 July 2010 and addressed to "slaves of the cross" says that the "leaders who cooperate with you and whom you support" are "weaker than a small spider." The jihadist issuing the communication warns: "You will see American blood streaming in the streets of one of those countries very soon. Later, he adds, "in the coming days. The writer continues by identifying American embassies, with addresses, in "those countries," as he defines them, in Syria, Saudi Arabia, Algeria and Morocco. Jihadist in 'Rural America' On the same day, a jihadist who claims to be in "a rural area of the USA" praised the Times Square bomber Faisal Shahzad and says that "under appropriate conditions ... the blessing is coming ..." He seems to imply that he has been personally experimenting with chlorine gas in order to ultimately perpetrate a terrorist attack. The chlorine gas, he writes, "failed to explode four times out of six, but with the help of Allah this situation will improve. If he is successful, he insists, "it will be a big blow, so wait patiently, although it is much harder than expected." Moreover, he explains, his location makes him "afraid that the intelligence apparatus" will stop him and "will make it difficult" for him to carry out his plans. New English-Language Jihadist Magazine A fresh jihadist communication indicates that a new bi-monthly Englishlanguage publication is due to be released soon. The magazine is "on the art of warfare and the art of improvised weapons for the use in jihad in the battlefield and in the homeland of the kuffar [infidels - ed.]. Analysts have tentatively identified the source of the publication as Iraqi. If successfully released, this publication would join AL-QAEDA IN THE ARABIAN PENINSULA's Inspire

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

6 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

magazine as an indication of novel efforts to recruit English-speaking Muslims to the global jihad. ****** ANALYSIS ****** T/I/W Rating: MODERATE

The latest communications closely follow other threats against America and American assets, confirming and reinforcing increasing jihadist communications focusing on the American homeland. Analysts Note: Jihadist calls issued in such focused communications almost always encourage or outright demand lone-wolf or small cell acts of jihad by American residents. As mentioned in several previous PIB, maritime ports and airports, rail and light rail, as well as large public venues in Pennsylvania remain desirable targets for jihadist attacks along the lines detailed in recent adversarial communications. Also at heightened risk, based on earlier jihadist communications, are law enforcement facilities and personnel. In addition, the communication from "rural America" and other recent communications have discussed the use of accessible chemical agents for explosives. Terrorists will increasingly seek out alternative ways of attaining volatile chemicals and industrial explosives, including attempts to steal or hijack the desired ingredients while in transit. Regarding threats to the Pennsylvania transportation systems, increasing international traffic at Philadelphia International Airport, along with its central location, significantly maintains its position as a high-profile target for jihadist agents seeking to strike in American airspace. As the second-most traveled airport in Pennsylvania, and as a US military transit point with facilities for military personnel and their families, Pittsburgh International Airport also presents a highprofile target. The continuing jihadist search for methods to foil technology-based, security measures should focus attention on the need to heighten awareness of behavioral and situational clues indicating hostile intent. Personnel responsible for mass transportation or other public venues should note the possibility of explosive devices concealed as otherwise innocuous items (e.g., cardboard boxes posted for delivery, sports paraphernalia, prosthetic limbs, etc.).

Sector: Commercial Facilities


2. Rally for the 'MOVE 9' Members and supporters of the radical Black nationalist MOVE organization are planning to hold a rally at 11th and Market St. in Philadelphia on 7 August 2010. The rally is called to show support for nine imprisoned members of the group who went to jail in the wake of the massive armed confrontation that took place in
Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715 7 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

Philadelphia 32 years ago. "Our main activity is to pressure the parole board about their release," the MOVE communication declares, "but we won't let August 8th go by without reminding people what that day represents." Organizers have indicated that their only intention is to distribute information and "to talk to people about The MOVE 9." ****** ANALYSIS ****** T/I/W Rating: LOW-to-MODERATE

Currently, analysts do not foresee a likelihood of disorder or violence in the abovementioned MOVE event; however, no information regarding necessary police permits is available. Analysts have noted an increase this year in activity by supporters of the MOVE movement and its conflict with law enforcement (PIB No. 79). MOVE has been essentially "adopted" by extremist left-wing anarchists worldwide as one of their anti-state causes. Supporters of the MOVE 9 may come to reject peaceful means, which they will see as having failed them thus far. In light of the foregoing, there is a small possibility of more radical actions by individual supporters of MOVE.

Sector: Government Facilities


3. Jihad by SMS A new English-language communication shared among Arabic-speaking jihadists includes a brief three word message under the heading, "SMS to Swedish & Norwegian governments." The actual text of the message is printed in bright colors and laid out as follows: "You "Are "Next " Researchers note that the follow-up responses to the above "SMS" message ask how, when and why the named states would be targeted. One reply says simply, "Noooooooo!!!!!!!! However, another says (original spelling preserved), "Destroyed them. Does not take you in they mercy. Allah is the gratest." ****** ANALYSIS ****** T/I/W Rating: MODERATE

The individual behind the initial communication presenting the SMS text is known to analysts as an apparently active jihadist. Both Norway and Sweden have appeared in targeting information provided through past jihadist communications.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

8 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

The above SMS text alone does not indicate an increased risk of attack; however, analysts believe that Swedish and Norwegian interests and assets are currently facing pre-existing, jihadist, attack risk indicators. Within Pennsylvania, this includes the Royal Norwegian Consulate in Philadelphia (1760 Market St.). Students, researchers and faculty associated with overseas programs in Norway and Sweden (e.g., Clarion University of Pennsylvania, East Stroudsburg, Indiana University of Pennsylvania, Mansfield University and Westminster College should be advised of the existing risk indicators.

Sectors: Commercial Facilities, Government Facilities and Transportation Systems


4. Anti-Israel Violence at Sporting Event in Turkey Dozens of protesters clashed with Turkish police in Ankara on Saturday near a sports hall hosting a women's volleyball game between Israel and Serbia. While Turkish police managed to maintain order and prevent a breach of security during the game, they were forced to preemptively close the event to the public due to security concerns. Among the measures deployed to protect the Israeli players and the hall were roadblocks, Israeli security personnel assigned to the Israeli players, and a bus with tinted windows to transport the Israeli team to the indoor hall. In the confrontation outside the sports hall, protesters hurled water bottles and hit the shields of police officers with their Palestinian Authority flag poles. The protesters reportedly also demonstrated sophisticated tactics such as showing up one at a time in order to thwart attempts to prevent the gathering. They were similarly advised in an email by organizers to conceal Palestinian Authority flags and banners until their arrival, and to shout slogans only when they arrived at the hall. However, police intelligence successfully intercepted the communications and managed to prepare effectively. According to the Associated Press, one anti-Israel protest message named the hotel hosting the Israeli athletes. ****** ANALYSIS ****** T/I/W Rating: MODERATE

The events in Turkey underscore the security issues surrounding Israeli assets, delegations and representatives globally, including those Pennsylvania. Such assets include high-profile Jewish institutions, synagogues or communal events. The primary and repeat target of such actions in Pennsylvania is the Israeli consulate in Philadelphia. In addition, recent global anti-Israel activity has included the attempted disruption of Israeli shipping and air travel at foreign (non-Israeli) ports of arrival (PIB Nos. 101 and 112). Such tactics may be emulated in other port cities and at international airports in Pennsylvania. This includes the Port of Philadelphia and the
Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715 9 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

Port of Chester, which both receive Israeli imports. Regarding potential airport locations for anti-Israel actions, researchers note that there are direct IsraelPhiladelphia flights by US Airways. El Al Airlines, the national Israeli carrier, has passenger flights to Pittsburgh International Airport by way of New York, and flies directly to the Newark Liberty International Airport (popular with travelers from the Philadelphia area, as well).

Sectors: Banking and Finance; Commercial Facilities; Energy; Government Facilities and Nuclear Reactors, Materials, and Waste
5. 'Direct Action Without Compromise' and 'Nonviolent Direct Action' Two environmentalist training events in coming weeks indicate an ongoing emphasis among activists on "direct action" as what they believe is an effective strategy.

EARTH FIRST! - UK
The militant environmentalist organization EARTH FIRST! has announced a 4-9 August 2010 "Summer Gathering" under the heading, "Ecological Direct Action without Compromise," to be held in Derbyshire, in the United Kingdom.7 The gathering is being promoted as "5 days of workshops, skill sharing and planning action, plus low-impact living without leaders. Meet and share skills with others who care. Plan actions and campaigns. Sessions are to include identifying future targets for environmentalist "direct action." Earth First! communications promise participants that they will "learn skills for kick-ass actions on land and water: Small boat handling and blockading using kayaks / Blockading - tripods, lock-ons / Fences / Climbing skills / Action reconnaissance / Security for Activists / Strategy and tactics / How to research corporations / Protest camps." Earth First! specifies: "The programme also includes ... Water based direct action skills training. Loads of campaigns are taking to the water in defence of the planet, like at Rossport where Shell are trying to lay onshore pipelines and the Great Rebel Raft Regatta at last summers climate camp. This summers EF! gathering will again be building on these tactics with training in water based actions." The communication also identifies "current campaigns against ecological destruction" that will be discussed at the gathering, including: "Open-cast mining / Genetic engineering / Agrofuels / Saving Iceland / Climate actions / Pipeline resistance in Rossport / Anti-nuclear / Airport expansion/ Tar Sands."

http://www.earthfirst.org/ 10 of 15

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

PEACEFUL UPRISING - USA The Peaceful Uprising organization is planning a one-day "Nonviolent Direct Action Training" for 31 July 2010 at the First Unitarian Church in Salt Lake City, Utah.8 According to the group's announcement of the event, "Civil disobedience empowers ordinary people to effectively stand up to the fossil fuel, political and corporate interests that dominate our country. ...This workshop is designed to increase your comfort level with nonviolent direct action, help you learn basic skills and find out about the many roles needed to support effective action." Peaceful Uprising was formed to "train, support and defend those who engage in nonviolent direct action to protect our future from climate change." ****** ANALYSIS ****** T/I/W Rating: MODERATE

Analysts Note: The skills and knowledge shared at the above events will most likely be manifested at subsequent environmental protest events or in direct action vandalism by eco-terror elements. While the primary impact of the Earth First! gathering will likely be in Europe, the incorporation of North American campaigns in the list of topics is a confirmation and reinforcement of the globalization of "green activism." Similarly, some elements of the Peaceful Uprising training are likely to find their way into environmental activism outside Utah. As noted in PAIB No. 68 and thereafter, the Earth First! Movement in general has taken a turn to advocating more aggressive civil disobedience and sabotage. As stated in a recent Earth First! journal, "Our greatest strategic assessment should be whether our actions are effecting the financial bottom-line of the destroyers of Earth. The writer declared, "So lets [sic] live wild and be fierce as fuck. Ante Up!" Potential targets of eco-activist direct action in Pennsylvania identified in environmentalist and anarchist communications and cited in recent PIB editions include the following: Recent Earth First! networking communications have focused on the Marcellus Shale gas industry as a high priority target in the New YorkPennsylvania region (PIB No. 104), as has the NORTHEAST ANARCHIST NETWORK (NEAN). As far back as December 2009 (PAIB No. 2), sophisticated variations of "direct action" tactics were taught at Ruckus Society training in New York aimed at preparing for "direct action" against drilling in Pennsylvania's Marcellus Shale area. Ecological militants of the RAINFOREST ACTION NETWORK declared their intention to "keep the pressure on" the Royal Bank of Canada over its financing of the Alberta tar sands project (PIB No. 55).
8

http://www.peacefuluprising.org/ 11 of 15

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

In this context, ITRR analysts identified several specific banks funding the Alberta tar sands project that may become targets for eco-activist "direct action, or worse, in Pennsylvania, including branches of financial institutions such as TD Bank, JP Morgan Chase, Citi Bank, Bank of America and Wells Fargo. Anti-coal mining and anti-mountaintop removal militant have been very active and prolific in recent months. Branches of financial institutions such as JP Morgan Chase, Citi Bank, Goldman Sachs and Bank of America are potential targets of anti-coal mining activist protests, campaigning or more radical "direct action" activities. Other companies previously identified as targets of ecological activists were the coal companies directly involved in MTR coal operations, power companies that burn this coal and the offices of Duke Energy. In Pennsylvania, nuclear facilities may be targeted for protests or other direct actions. Additionally, environmental activists have repeatedly cited Pennsylvania as a leader in nuclear waste production (although the state does not have a disposal site), and nuclear waste through shipments. The previous call for heightened security in proximity to all of the above named institutions will remain for the foreseeable future.

No emerging indicators, threats and/or warnings at this time for the following sectors:

AGRICULTURE AND FOOD COMMERCIAL REAL ESTATE COMMUNICATIONS CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASE GOVERNMENT FACILITIES9 HEALTHCARE & PUBLIC HEALTH HOTELS AND LODGING
9

Educational Facilities Sub-Sector: Security directors, students and faculty of all Pennsylvania-based colleges and universities participating in educational exchange programs abroad need to remain cognizant of emerging, countryspecific threats, indicators and warnings.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

12 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

INFORMATION TECHNOLOGY POSTAL & SHIPPING PRIVATE SECTOR SECURITY SOCIAL SERVICES WATER

OHS Goal: Situational Awareness Among All Stakeholders


- The Information-Sharing Community -

Owner/Operator Security Mgr Firefighters EMS Associated Federal & State Law Enforcement Agencies Public Works/Utilities PEMA Area Office US DHS Municipality Officials County Officials

CIKR Site

Surrounding County EMC Public Health Officials PA National Guard Emergency Preparedness Liaison Officers

Adjacent State Intelligence Centers

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

13 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little intent or capability to take action against the target. Although it cannot be ruled out, an attack is unlikely based on currently available intelligence. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. An attack is likely to be a priority and might well be executed. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. Additional information is also available on the nature of the threat. An attack on the target is a priority and is likely. Available intelligence and recent events indicate that hostile elements not only have the intent and capability, but also are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is imminent.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

14 of 15

Pennsylvania Intelligence Bulletin No.116, 26 July 2010

Source Summary Statement

The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. The ITRR, a commercial information research and analysis organization, uses open-source, human and closedsource intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

15 of 15

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 117


28 JULY 2010
The Pennsylvania Office of Homeland Security produces this informational/intelligence bulletin specifically for all potentially-affected stakeholders whether public or private sector, federal or Commonwealth - of Pennsylvaniabased Critical Infrastructures, Key Resources and Significant Special Events. Consider the information & intelligence contained herein in context with other known information, indicators, threats and warnings.

CONTINUING RESEARCH
1. Highlighting Targeting of US Assets at Home and Abroad
A series of several distinct, but complementary, jihadist communications this month point to specific targeting of American interests at home and abroad. Similarly, ALQAIDA last month decided to expand its outreach further into the English-speaking world with its first official magazine in English. The combination of motivational texts and videos, specific targeting guidance, religious sermons and practical lessons in jihad - all in English or by American jihadists - has the potential to be a significant factor in Al-Qaida's efforts to recruit lone-wolf terrorists (as well as more serious individuals) in English-speaking circles. Maritime ports and airports, public transportation and railways, as well as large public venues remain desirable targets for jihadist attacks according to recent, adversarial communications. Also at heightened risk are law enforcement facilities and personnel. Recent communications have also discussed the use of accessible chemical agents for explosives, which terrorists will increasingly seek via theft or hijacking of the desired ingredients while in transit. (PIB Nos. 106, 113, 114, 115 and 116)

Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002, Implementing Recommendations of the 9/11 Commission Act of 2007 and the National Infrastructure Protection Plan of 2009, critical infrastructure is defined as systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. Pennsylvania applies the same logic and intent to define Commonwealth, county & municipality critical infrastructures and key resources.

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

2. Update: France's Growing Nexus of Risk Factors


Recent events in France indicate a current heightened level of risk both in the country and abroad. These include: French participation with Mauritania in a counterterrorism raid that killed six Al-Qaida members; jihadists have promised revenge. On 16-17 July 2010, the Villeneuve area of Grenoble was the scene of massive rioting by Muslim youths, including automatic weapons fire, the torching of dozens of cars and an attack on a train. French legislators voted almost unanimously on 13 July 2010 to ban the wearing of face-covering veils in all "public spaces." In September 2010, the bill will be brought before the French Senate. Subsequent Jihadist communications include calls for "strong operations in France. From now on, all French women and men are a target since the law has passed. Until then, "we should start to kidnap French people - men and women - just as a response to the decision on the law; and every hijab removed from one of our sisters will mean the taking of another French soul." Students and researchers from Pennsylvania taking part in exchange programs in France should be made aware of the increased risk factors at the current time. In this regard, the French government has produced a list of 750 "no-go zones" (see http://sig.ville.gouv.fr/Atlas/ZUS, in French). Within Pennsylvania, high-visibility French assets that may draw the attention of jihadist adversaries include the offices of France's Consulate General in Center City Philadelphia and the Alliance Franaise de Pittsburgh, which meets in the University of Pittsburgh's Cathedral of Learning. (PIB Nos. 114 and 115)

3. Germany: 'Chaos Days' in 2010?

Recent communications among German anarchists and anti-authoritarians would seem to indicate a growing desire and planning for a new set of Chaostage ("Chaos Days") over the next three years. Analysts and researchers are monitoring anarchist communications for indications of Chaos Days and "warm-up" Chaos Days in Europe that pose a risk to Pennsylvania students, as well as for any planning related to possible American affinity-group Chaos Days. (PIB No. 114)

4. Increasing and Expanding Focus on Marcellus

Analysts have identified growing support among anarchists (such as the NORTH EAST ANARCHIST NETWORK (NEAN) http://neanarchist.net/) and EARTH FIRST! (http://www.earthfirst.org/) for actions targeting organizations involved in or facilitating drilling in the Marcellus Shale formation (New York-Pennsylvania). Ecoterror lone-wolves or organized environmental militant cells may thus be inspired in the coming months to carry out significant "direct actions" targeting Marcellus Shale
Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715 2 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

drilling concerns. Based on growing risk indicators, general situational awareness is suggested for all entities involved in Pennsylvania drilling projects. (PIB Nos. 104 and 112)

5. 'Escalate Resistance' to Arizona's New Immigration Law

Referring to Arizona's new immigration legislation, anarchists and immigrants' rights activists are preparing to "peacefully escalate resistance to SB1070. The radical STUDENTS FOR A DEMOCRATIC SOCIETY (SDS) organization is planning what they have called an "Arizona Freedom Summer," 23 July-5 August 2010, focused on bringing activists to Arizona for the designated time period. Anarchists have called for "direct actions in our local communities" when the law goes into effect on 29 July 2010. Well-known minority community leaders warned that unidentified "activists" are willing to commit acts of "civil disobedience" to fight the law. A Welcome New Immigrants rally is to take place in Philadelphia on 29 July 2010 (details herein). Opponents of the law in Pennsylvania may target visiting Arizona VIP, delegations or Arizona-related events with protests or "direct action" in the coming weeks and months, including Diamondback baseball games currently underway in Philadelphia and in Pittsburgh in September 2010. Counter-protests by supporters of the Arizona legislation may precipitate violent confrontations between opposing protesters requiring law enforcement intervention. (PIB Nos. 98, 102 and 106)

6. Anarchy Summer Camp in August

Communications in Philadelphia-centered anarchist forums include calls for attendance at the "Anarchy Summer Camp," 6-9 August 2010, in order to "prepare for the upcoming International Monetary Fund demonstrations this fall." Analysts reiterate that there has been an escalation in rhetoric and tactics among anarchist and far-left groups for more than a year, including arson, bombings, vandalism and "direct action." Further acts of anarchist terrorism and vandalism - inspired by the Toronto G20 "actions", the Trois-Rivires, Quebec, bombing and the above Summer Camp - can be expected throughout North America in the near term. Military recruitment centers, police, banks and multinational companies in Pennsylvania specifically in areas of significant anarchist activity - are advised to increase situational awareness. (PAIB nos. 94, 107 and 108)

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

3 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

7. Anti-Fascist 'Call to Action', Conference in July


A Portland, Oregon, branch of the radical, international anti-fascist organization known as ANTIFA has issued a nationwide "call to action" for 31 July 2010. Antifa and the ANTI-RACIST ACTION (ARA) Network (http://antiracist.org/) are calling for various types of actions and multiple venues. Broad situational awareness is called for regarding any upcoming demonstrations by groups deemed "fascist" (e.g., Tea Party, militia, Christian conservative, etc.), "racist" (e.g., Klan, White Power, Skinhead, etc.) or "anti-choice" (e.g., any Christian pro-life groups) by supporters of the ARA or Antifa. Significant in this regard is that 31 July 2010 is also the date of a Tea Party rally set to take place at Independence Mall in Philadelphia. (PIB No. 111)

8. Keystone United and the Euro-American Heritage Fest


Radical WHITE NATIONALISTS (http://whitenationalists.com/home.php ) are promoting an event called the Euro-American Heritage Fest 2010 (AKA European American Heritage Celebration). It is scheduled for 14 August 2010 "in the WilkesBarre / Scranton area," (likely Moosic, PA) according to promotional communications. The Euro-American Heritage Fest 2010 has been recently publicized on racist forums. Potential violence due to excessive alcohol consumption, clashes with anti-racist protesters or with police would not necessarily be limited to the Fest fairgrounds (possibly Public Square in Wilkes-Barre) and may be triggered in any of the surrounding areas. (PIB No. 111)

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sectors: COMMERCIAL FACILITIES AND GOVERNMENT FACILITIES 9. Update: Conspiracy Tour 2010
Anarchist communications provide further, updated information about the Pennsylvania leg of what is known as Conspiracy Tour 2010. The nationwide Conspiracy Tour is focusing on support for several anarchists and an animal rights extremist who were charged, in separate cases, with conspiracy or terrorism-related crimes. The anarchists, known as the RNC 8, were involved in protest planning ahead of the 2008 Republican National Convention, and face felony charges of conspiracy to commit riot in the second degree and conspiracy to commit criminal damage to property in the first degree. The animal rights activist, Scott DeMuth, was indicted for conspiracy under the Animal Enterprise Terrorism Act and released pending trial.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

4 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

Updated Conspiracy Tour target dates, times and locations for Pennsylvania are: 30 July 2010: "Grand Jury Resistance Training!" in Point Breeze, Pittsburgh (623 Kirtland St.), at 7:00 pm 31 July 2010: "Tour Stop!" at the Union Project in Pittsburgh (801 North Negley Ave.), at 2:00 pm 3 August 2010: A presentation and discussion on the RNC 8 at Wooden Shoe Books in Philadelphia (704 South St.), at 7:00 pm As noted in previous PIB, the organizers boast, "This will be a roadshow to remember even before you read about it in your FBI file." ****** ANALYSIS ****** T/I/W Rating: LOW-to-MODERATE

Conspiracy Tour events include a musical puppet show, presentations and discussions on the charges the above-mentioned activists are facing, and, in the words of anarchist communications, "various (some would say nefarious) ways you can join the Conspiracy to support targets of state repression. In addition to the usual perks of joining a conspiracy, co-conspirators will be learning ways to strengthen and protect their communities from future incidences of state repression." In Oakland, California, for example, the Conspiracy Tour will be involved in hosting a legal forum and training (primarily speakers and workshops) for those who "have been arrested for political activity in the last few years or consider future arrests a possibility." In the Mid-West, the Conspiracy Tour is featuring presentations about the above cases and others, as well as "information about AETA, grand juries, dealing with state repression, legal trainings, and more." This tour is part of the We Are Everywhere campaign organized by the decentralized, leaderless anarchist organization CRIMETHINC. (http://www.crimethinc.com/). Called "a decentralized convergence," it is to take place in late July and throughout August (PIB No. 103). The group is encouraging anarchists in North America to take any action they feel will be effective. In addition to the known Conspiracy Tour events, heightened situational awareness is recommended throughout the next two months at those sites that have previously been targeted by anarchist activity (e.g., such as governmental institutions and icons, law enforcement personnel, banks, and energy and corporate facilities). The NORTH EAST ANARCHIST NETWORK (NEAN) will be stepping up its activities (both legal and illegal) in the northeastern United States through August 2010 (See details of the group's latest training notes below.).

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

5 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

Analysts are continually monitoring the anarchist networks for additional risk indicators in Pennsylvania.

Sectors: COMMERCIAL FACILITIES AND NATIONAL MONUMENTS AND ICONS


10. 'Jihad of Fire' in the Hot, Dry Summer In new intercepted communications, jihadists discuss the ethics, strategic value and efficacy of burning down forests in Russia as an element of the global jihad. Noting the reports of high temperatures and drought in Russia, a jihadist communication asks, "Will burning its forests be useful for the Caucasus issue?" The communication continues: "It is known that around Moscow there are a lot of forests, and these forests, under the high temperatures and heat that are currently in Moscow, are flammable and it is difficult to control it and put it out." The primary writer in the recent communications asks if it is "religiously permitted to burn forests as revenge against the Russians and to dump them into more economic crises than those they have to face now? On a practical level, he asks, "If it is allowed, will the burning of these forests have a direct impact on the Russian economy?" and "What is the extent of the impact on the economy, and will this impact be useful for the Caucasus issue?" Among the responses to the questions above was: "There is no doubt that it is permitted to burn these forests. And about the impact, every attack or revenge against the enemy is good for us, and every crisis they have is useful for us." The usefulness of deliberate forest fires to the jihad in the Caucasus is that "it would hurt some of their soldiers, or generate financial expenditures." ****** ANALYSIS ****** T/I/W Rating: MODERATE

Russia The current drought around Moscow has already resulted in underground peat fires on the outskirts of the city and the loss of a significant amount of this year's wheat crop. The additional expenditure of resources on firefighting would indeed have a negative impact on the current situation. The ongoing Russian counterterrorism campaign is having an effect on the jihadist cells from the Caucasus regions. The Caucasus-based jihadist groups are already under great pressure to prove organizational resilience by carrying out a new major attack. Analysts Note: Organizations with facilities that can be impacted by forest fires in the region of Moscow review business continuity plans to prepare for the protection of personnel and assets. Similarly, students at Russian educational institutions through programs such as those of Bryn Mawr College in Moscow, St. Petersburg and Vladimir should be made aware of the current increase in risk of fire-based attack. In addition, researchers and linguists pursuing continuing studies through
Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715 6 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

American Councils and similar programs in the Caucasus regions of Russia are particularly vulnerable to attack and abduction by local jihadist elements. Tactics Forest fires have previously been employed as a tactic by terror organizations within Israel. A discussion on the use of forest fires as a weapon against the US and Europe, referred to as "Global Fire," appears periodically in jihadist communications with different levels of intensity and enthusiasm. For example, in February 2010 (PIB No. 47), analysts intercepted a series of communications discussing intelligence and offering guidance for setting widely destructive forest fires in Western states, especially America. Tactical guidance offered for the "jihad of fire" included: setting a number of fires distant from each other ("which will make it harder for the [fire brigade] forces to succeed in their mission"); "set fire [to the forest] from a distance in the same way a charge may be set off, only this time instead of explosives one must use fuel"; and pre-operational considerations: "make a reconnaissance patrol to view the grounds ... to choose the optimal area and time; for example, one of the hot summer nights."

Sectors: PUBLIC HEALTH AND HEALTHCARE 11. Anti-Abortion 'Direct Action' with Dead Animals
Anti-abortion militants in Chicago have apparently adopted on a new tactic to get their point across - placing dead animals in packages left at abortion centers. The tactic has led to police alerts of potential improvised explosive devices (IED) at the targeted locations. On 22 July 2010 a suspicious package was found at the front door of a Planned Parenthood Center with a note that said, "This is for all the doctors and what you do for women. The box contained newspapers and a dead opossum. According to Planned Parenthood, they have several surveillance cameras outside their building, which they hope captured the perpetrator on tape. On 3 July 2010, a similarly suspicious package was found outside the offices of Family Planning Associates Medical Group. The box, with the same message on it, contained a dead skunk. In anti-abortion activity in Pennsylvania this week, the Operation Rescue organization claimed that Dr. Steven Chase Brigham - who has been barred from operating abortion clinics in Pennsylvania because of persistent infractions of state regulations - has managed to continue operating four abortion clinics.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

7 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

Dr. Brigham has facilities in Erie and State College, which are currently legally barred from performing abortions, while ownership of his Pittsburgh and Allentown abortion clinics were transferred to Rose Health Services. ****** ANALYSIS ****** T/I/W Rating: LOW-to-MODERATE

Abortion clinics have been targeted for bombings by anti-abortion terrorists in the past, which indicates a need to initiate the appropriate bomb threat procedures in reaction to suspicious packages such as those noted above. While no specific unusual anti-abortion events in Pennsylvania have been identified in the near term, analysts have noted ongoing agitation in pro-life communications. High-profile, pro-life actions provide inspiration for pro-life extremists elsewhere; the "dead animal" intimidation tactic can be expected to turn up at other abortion clinics. Potential targets for anti-abortion activism in Pennsylvania include those currently under discussion in pro-life circles, such as Dr. Brigham's clinics in Erie (Erie County) and State College (Centre County), the Rose Health Services clinics in Pittsburgh (Allegheny County) and Allentown (Lehigh County), as well as leading high-profile clinics and centers, such as: Planned Parenthood offices in Pennsylvania (in Harrisburg (Dauphin County), Warminster (Bucks County), York (York County), Trexlertown (Lehigh County), Pittsburgh and Philadelphia) The Allentown Women's Center (Lehigh County) The Allegheny Reproductive Health Center in Pittsburgh University Women's Services in Pittsburgh The Hillcrest Women's Medical Center in Harrisburg The Philadelphia Women's Center The Penn Family Planning and Pregnancy Loss Center in Philadelphia The Northeast Women's Center in Philadelphia Drs. Berger & Benjamin in Philadelphia

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

8 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

Sectors: BANKING AND FINANCE AND ENERGY 12. Targeting Notes: Climate Action Camp
A 18-25 August 2010 Climate Action Camp (http://www.climatecamp.org.uk/) planned for Glasgow in Scotland was preceded by a planning gathering 4-5 July in Edinburgh. Among the key decisions and notes from the planning meeting were the following: During COP16 - the sixteenth United Nations Climate Change conference, 29 November-10 December 2010 in Cancun, Mexico - activists involved in the Glasgow event will promote "Thousands of Cancuns throughout the world and throughout Mexico ..." The organizers will "request that neighbourhoods arrive at the camp having organised themselves into Defence Teams" of about 14 people. They decided on that "the day of action at the Camp" will include a "decentralized mass action" against an as-yet undetermined target. Among the proposed targets was the headquarters of the Royal Bank of Scotland (RBS). Tactically, this means coordinated action by several "affinity groups" assigned a specific "mission," such as to "prevent cars from entering this gate," etc. The guidance for the mass action also notes: "Affinity groups are free to decide HOW to accomplish their mission. ... Each affinity group will only know the details of their own action." The Climate Action Camp organizers also set aside a "Police Liaison" team, to "Liaise with the police on matters of site set-up, site practicalities, and tatdown," to "educate the police on RBS, capitalism, and climate change," but "NOT to liaise with the police on Direct Action." In discussing a primary target of the Climate Action Camp, the planning notes explained: "We are targeting RBS because it's investing cash in big fossil fuel companies like Scottish Coal and Shell, who are devastating the lives of communities in the UK, Canada and Nigeria." They also decided to currently promote the message that the "Camp for Climate Action will be taking direct action against RBS in Edinburgh this August to take back our future, and create a world based on people and planet, not profit. British banks such as Barclays and RBS are major investors in conventional and unconventional fossil fuel exploitation, this disastrous investment must stop. Another current message was that "exploitation of Coal, Tar sands, Oil and Gas affects the health and environments of communities the world over, many are resisting this locally and finding solidarity globally."

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

9 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

****** ANALYSIS ******

T/I/W Rating: MODERATE

The minutes were shared with others not in attendance, indicating a desire to spread the ideas, tactics and strategies discussed to a wider eco-militant audience. As noted above, environmental activists will be targeting the Royal Bank of Scotland and Barclays during the Glasgow Camp for Climate Action due to the bank's financial support of the petroleum industry working in the tar sands of Canada. Of significance to Pennsylvania is that the European activism planning cited tar sands extraction and other mining operations in North America. This may be confirmation and reinforcement of the globalization of "green activism." Potentially vulnerable assets of RBS include the subsidiary Citizens Bank of Pennsylvania branches in the state. For its part, Barclays Bank operates Barclays Wealth (part of Barclays Capital Inc.) at the Mellon Bank Building in Philadelphia. In an initiative similar to the Climate Camp targeting of RBS, the RAINFOREST ACTION NETWORK declared its intention to "keep the pressure on" the Royal Bank of Canada (RBC) over its financing of the tar sands project (as noted in PIB No. 55). Several specific banks have been identified for funding the tar sands project that may become targets for eco-activist "direct action, or worse, in Pennsylvania, including branches of financial institutions such as TD Bank, JP Morgan Chase, Citi Bank, Bank of America and Wells Fargo. Similar precautions are recommended for businesses in proximity to the above named institutions.

Sectors: COMMERCIAL FACILITIES 13. Reminder: Targeting of Synagogues


Two events this week have re-focused attention on the vulnerability of synagogues as targets of anti-Israel and anti-Semitic attack. In the Swedish city of Malmo, a synagogue has been hit twice in two weeks with large firecrackers - powerful enough to shatter window panes in the building. The most recent incident, on 23 July 2010, was preceded by a written threat taped to the synagogue the previous night. Security at the synagogue was increased following the attack. Anti-Semitic attacks, perpetrated mostly by Muslim immigrants, have increased substantially in Malmo in recent years. In Olney, a suburban area of Maryland just outside Washington DC, a synagogue was vandalized on Monday, with swastikas and anti-Semitic slogans spray-painted on the outside walls, parking lot and light posts. The graffiti at B'nai Shalom Synagogue included "work will set u free", "Death 2 Zionists" and "Jden raus" ("Jews out!" in German).
Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715 10 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

****** ANALYSIS ******

T/I/W Rating: MODERATE

All Israeli-identified assets worldwide are already under increased risk of uncontrolled protests or physical attack. As noted in several previous PIB editions, recent chatter among jihadists, anarchists and radical anti-war elements discuss targeting for attacks on Jewish and Israeli assets worldwide, which include the Israeli consulate in Philadelphia, high-profile Jewish institutions, synagogues, communal events and pro-Israel gatherings of all kinds. Analysts recommend heightened security measures and situational awareness at Jewish houses of worship in Pennsylvania. This will become increasingly significant as the Jewish High Holiday season approaches (beginning on 8 September 2010) which will draw very large crowds to the nation's synagogues.

Sector: GOVERNMENT FACILITIES 14. Targeted Incitement Comes to Fruition


A suicide car bomber drove a bus into a compound used by the Al-Arabiya TV network in central Baghdad on 26 July 2010, killing at least three people and wounding a dozen others. The bus, a telecommunications vehicle, successfully breached a security checkpoint at the compound's entrance. In response to the attack, intercepted jihadist communications were filled with gloating, such as: "Wait for more, and as is the size of 'The Death Industry' program, we will make your death, with Allah's help ... This was issued "in the name of the Islamic Intelligence, according to the book and the Sunnah." "Why have we attacked you and not Al-Jazeera for example?" asks another communication, "After the bombing of [this] 'Hebrew' channel, their reporters screamed and cried and asked why Al-Qaida is attacking us. How do they expect us to believe them that they are journalists? We have realized that that your channel is an intelligence base for the USA and Saudi Arabia." One jihadist indicates, "We told you before that your day will come ... but you thought that the jihad fighters were just talking and not acting." A warning is also included in the communications: "What happened to you is just the beginning. We will light a fire beneath your feet first in Dubai and then in Riyadh and Baghdad."

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

11 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

****** ANALYSIS ******

T/I/W Rating: MODERATE-to-SEVERE

The bombing attack conducted against the Al-Aribiya network in Iraq was part of the planning for terror operations previously identified (PIB Nos. 84 and 112). The current follow-up jihadist threats echo previously cited targeting guidance for terrorist operations against Al-Arabiya television staff members, the Dubai emirate (where the station headquarters is located), and the Al-Misba research institute. Other recent jihadist targeting of a media outlets focused on the BBC (PIB No. 71). The above communications and those regarding the BBC provide targeting guidance to organized terror groups, as well as to lone-wolf terrorists. While the journalists and the stations are the primary targets in such communications, other civilians, especially Westerners, are deemed acceptable collateral damage among most jihadists. Considering this information, Pennsylvania students and researchers at the American University branch in Dubai, where Al-Arabiya has offices and personnel, are advised to maintain situational awareness - particularly in the vicinity of Dubai Media City. Students at the American University branches in Sharjah (another emirate of the UAE) and in Beirut (where Rima Salha has a broadcasting center) are also advised of the stepped up threats to the named media outlets (Al-Arabiya and BBC) and their personnel. Business travelers, military personnel, and oil industry employees and executives from Pennsylvania should also be aware of the increased risk in the named Gulf States.

Sectors: COMMERCIAL FACILITIES AND GOVERNMENT FACILITIES 15. 'Welcome New Immigrants' Rally
On 29 July 2010, in response to the implementation of the controversial new Arizona immigration legislation SB 1070, anti-authoritarian, far-left and anti-border activists are planning a rally under the heading, "Welcome New Immigrants! - With Love Philly XOXO." The activists are planning to gather in Philadelphia's Welcome Park (South 2nd St.) and then "march around the block to the US Customs House, and unroll a giant welcome mat." Their goal is "to call for policies that welcome everyone to the City of Brotherly Love." ****** ANALYSIS ****** T/I/W Rating: LOW

There are no indications of planned or expected unruly or illegal behavior. Law enforcement responsibilities at the events will likely be limited to crowd control and traffic direction. There is a very small risk of militant pro-immigrant rights activists crossing the line with vigorous protest action, as well as an equally small possibility of opportunistic anti-immigrant counter-protesting.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

12 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

No emerging indicators, threats and/or warnings at this time for the following sectors:

AGRICULTURE AND FOOD CHEMICAL INDUSTRIES COMMERCIAL NUCLEAR REACTORS, MATERIALS AND WASTE COMMERCIAL REAL ESTATE CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASE EMERGENCY SERVICES GOVERNMENT FACILITIES1 HOTELS AND LODGING INFORMATION TECHNOLOGY POSTAL AND SHIPPING PRIVATE SECURITY SOCIAL SERVICES TELECOMMUNICATIONS TRANSPORTATION SYSTEMS WATER

Educational Facilities Sub-Sector: Security directors, students and faculty of all Pennsylvania-based colleges and universities participating in educational exchange programs abroad need to remain cognizant of emerging, countryspecific threats, indicators and warnings.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

13 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

OHS Goal: Situational Awareness Among All Stakeholders


- The Information-Sharing Community -

Owner/Operator Security Mgr Firefighters EMS Associated Federal & State Law Enforcement Agencies Public Works/Utilities PEMA Area Office US DHS Municipality Officials County Officials

CIKR Site

Surrounding County EMC Public Health Officials PA National Guard Emergency Preparedness Liaison Officers

Adjacent State Intelligence Centers

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

14 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little intent or capability to take action against the target. Although it cannot be ruled out, an attack is unlikely based on currently available intelligence. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. An attack is likely to be a priority and might well be executed. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. Additional information is also available on the nature of the threat. An attack on the target is a priority and is likely. Available intelligence and recent events indicate that hostile elements not only have the intent and capability, but also are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is imminent.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

15 of 16

Pennsylvania Intelligence Bulletin No.117, 28 July 2010

Source Summary Statement

The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. The ITRR, a commercial information research and analysis organization, uses open-source, human and closedsource intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

16 of 16

PE EN NN NS SY YL LV VA AN NIIA A IN NT TE EL LL LIIG GE EN NC CE E BU UL LL LE ET TIIN N NO O. 118


30 JULY 2010
The Pennsylvania Office of Homeland Security produces this informational/intelligence bulletin specifically for all potentially-affected stakeholders whether public or private sector, federal or Commonwealth - of Pennsylvaniabased Critical Infrastructures, Key Resources and Significant Special Events. Consider the information & intelligence contained herein in context with other known information, indicators, threats and warnings.

SECTOR-SPECIFIC THREATS, INDICATORS AND/OR WARNINGS


Sector: GOVERNMENT FACILITIES 1. Update: Greater Intensification in Jihadist Threats to France
Jihadist communications threatening French interests are steeply increasing in frequency and intensity due to a number of events: Newly-intercepted communications re: recent French legislation banning the full-face veil in public spaces (PIB Nos. 114, 115 and 117) Al-Qaeda's Ayman Al-Zawahiri condemnation of the pending ban Recent French participation with Mauritania in a counterterrorism raid that killed six Al-Qaeda members The subsequent French declaration of "war" on AL-QAEDA OF THE ISLAMIC MAGHREB (AQIM) after a French hostage, Michel Germaneau, was murdered. In a fresh communication, which is itself apparently adapted from a 2008 call for jihad against France, jihadists are encouraged "to attack Paris. The writer explains "the importance of the strategy and the benefits of striking Paris, the capital of France. He then names the most significant and symbolic assets and tourist sites in Paris, noting that the city "is an important symbolic capital, which includes these museums and centers on the one hand, and the strength of air transportation on the other hand. It is also the capital of major European businesses which depend on it."
Pursuant to the USA PATRIOT Act of 2001, Homeland Security Act of 2002, Implementing Recommendations of the 9/11 Commission Act of 2007 and the National Infrastructure Protection Plan of 2009, critical infrastructure is defined as systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. Pennsylvania applies the same logic and intent to define Commonwealth, county & municipality critical infrastructures and key resources.

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

The communication calls on the jihad fighters to "struggle and destroy the economy" and to "make the deals collapse" and "break [French President Nicolas] Sarkozy. Other "benefits" from attacking Paris cited in the communication included: "Make the people of France turn against Sarkozy and lower his popularity." "To teach the surrounding European countries a lesson, and in particular Germany and everyone who participated in the war against Muslim countries." "Create situations of panic in the European capitals, in anticipation of similar strikes in the event of their continued participation in the war against Islam." "Create social discontent of the political class, and loss of the historical and currently important symbols of Paris." "Explaining that Muslim conditions and discrimination in France are one of the causes of the raids ..." In a separate communication, a brief message targets Sarkozy and the French people: "We say to Sarkozy and his group: You got yourself into a dead-end. You said and promised that the killing of the hostage won't go unpunished. And we say that the blood of our martyrs because of your betrayal won't go unpunished. And to the French people we say: you have chosen your government that fights Islam; wait for the results of that. It won't be long before we will light the fire beneath your feet and your homes." In reaction to the counterterrorism raid by Mauritania (which, as noted, included French support), jihadists have begun issuing communications threatening that nation as well. According to one of these communications, an AQIM leader warned Mauritania five months ago "not to have alliance with the enemies in order to fight the jihad fighters. ...That statement was a message of peace to those countries. ... The action of the Mauritanian army is a response to the message from the jihad fighters; they preferred to keep on serving the French ..." (Echoing several previous alerts on the matter, subsequent official American and Australian advisories warned of attempts to kidnap and kill Westerners in Niger, northern Mali, Mauritania and Algeria.) ****** ANALYSIS ****** T/I/W Rating: MODERATE-to-SEVERE

Analysts Note: Expect jihadist response(s) to the Mauritanian and French operations, as well as to multiple factors related to France (cited most recently in PIB No. 117).

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

2 of 10

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

The current period - while the issue of the veil ban is under public debate and, assuming the law will be passed in the near term thereafter - would be the most likely time to see such an increase in violent agitation. As already noted in May 2010 (PAIB No. 91), analysts have intercepted AQIM communications naming France, Spain and Mauritania as urgent current targets for attack. An increase in the risk of lone-wolf or self-starting cells targeting both French cities and French assets worldwide can be expected. In addition, France's majorityMuslim neighborhoods may see increasing unrest that draws its inspiration from the veil ban and from recent events in Africa. Potential Impact to Pennsylvania Assets Students and researchers from Pennsylvania-based educational facilities taking part in exchange programs in France (e.g., University of Pennsylvania, the University of Pittsburgh, Indiana University of Pennsylvania, Clarion University of Pennsylvania, East Stroudsburg University, Mansfield University and Westminster College) should be made aware of the increased risk factors at the current time. In this regard, the French government has produced a list of 750 "no-go zones" (officially known as Zones Urbaines Sensibles (Sensitive Urban Zones) considered to be high-risk (see http://sig.ville.gouv.fr/Atlas/ZUS, in French). In Pennsylvania, high-visibility French assets that may draw the attention of jihadist adversaries include the offices of France's Consulate General in Center City Philadelphia, the Alliance Franaise de Philadelphie and the Alliance Franaise de Pittsburgh, which meets in the University of Pittsburgh's Cathedral of Learning.

Sectors: COMMERCIAL FACILITIES AND GOVERNMENT FACILITIES


2. 'A Warning to the Americans' An individual identifying himself as "Abu Suleiman Al-Nasser" has sent a "warning to the Americans" by way of jihadist communication channels stating: "We heard that one of your churches is organizing a gathering in order to burn the Quran in memory of 9/11," Al-Nasser writes. "If you will do that, wait for a war unlike that you have seen before. Your blood will flow like a river. We will not rest until we kill dozens of you for each word in the book of Allah that you will damage." The event to which the subject refers is the Dove World Outreach Center's "International Burn A Koran Day," which is scheduled to take place on 11 September 2010. The Dove World Outreach Center is located in Gainesville, Florida.1

http://www.doveworld.org/ 3 of 10

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

****** ANALYSIS ******

T/I/W Rating: MODERATE

This threat, dated 29 July 2010, would not present a significant risk indicator alone; however, it comes during a period of increasing jihadist communications indicating the intent to conduct terror operations within the US (PIB Nos. 106, 113, 115 and 116 for specific examples and further analysis). As a result, the current threat triggered by planned events in Gainesville, Florida, may serve as an additional indicator during this period of heightened jihadist focus on targets throughout the US. The communication is consistent with recent jihadist calls for lone-wolf or small cell actions within the CONUS. Unlike other recent jihadist communications, however, this communication provides a strong, specific religious motive to those individuals who would engage in terror activity. The planned Quran burning, now publicized in international jihadist forums, is also likely to cause a reaction against American interests in predominantly Muslim countries. In 2005, over 15 people died during worldwide rioting and attacks following published rumors that American interrogators had flushed a Quran down a toilet in Guantanamo Bay. Analysts and researchers will continue to monitor for indicators of risk to Pennsylvania assets - including protests, vandalism or terrorism - related to the above event.

Sector: GOVERNMENT FACILITIES 3. Protest Against Solitary Confinement


The Human Rights Coalition (HRC) is planning to hold a protest against solitary confinement in Pennsylvania prisons on 2 August 2010. The gathering is slated to take place at the Yeadon Borough Hall (Delaware County) during a Pennsylvania House Judiciary Committee hearing on solitary confinement.2 Under the slogan "Solitary Confinement is Torture!" HRC protesters are calling for the Judiciary Committee to investigate solitary confinement conditions in Pennsylvania: "This is an opportunity for all of us who know that solitary confinement is torture to make our voices heard!" the call to action says. "It's vital that we show up & let the members of the Judiciary Committee and the press know that they must take immediate action to bring an end to this barbaric and inhumane practice." HRC supporters are called to "show up early & testify with us!"

http://www.hrc.org/ 4 of 10

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

****** ANALYSIS ******

T/I/W Rating: LOW

Analysts Note: There is currently no indication of planned or expected unruly or illegal behavior. Law enforcement responsibilities at the event will likely be limited to crowd control and building access control; however, this may also include preventing determined protesters from disrupting the formal hearing at Yeadon Borough Hall. It is unknown whether HRC has filed for the necessary police permits for this protest.

Sectors: COMMERCIAL FACILITIES; ENERGY; GOVERNMENT FACILITIES 4. Update: Natural Gas Drilling Events That May Draw Unruly Crowds

In continuation of research (PIB Nos. 107 and 113) regarding flashpoints for confrontations over natural gas drilling in Pennsylvania (including those in the Marcellus Shale formation), the following upcoming meetings have been singled out by anti-drilling activists: 2 August 2010: South Branch Tunkhannock Creek Watershed meeting, at Keystone College in La Plume, at 19:00. (Lackawanna County) 2 August 2010: Fell Township Supervisors Meeting, specific location has not yet been identified by the anti-drilling activists (Lackawanna County) 3 August 2010: Tunkhannock Commissioners meeting, at the town court house, at 9:00. (Wyoming County) 12 August 2010: EPA Meeting in Binghamton, New York 11 September 2010: Pennsylvania Forestry Association meeting to discuss initiatives/activities in the Marcellus Shale formation. Location unidentified, but indications are Mechanicsburg. (Cumberland County) The following public events have also been cited by anti-drilling activists as appropriate venues for providing information or protesting: 11 August 2010: The Gas Drilling Awareness Coalition (GDAC) will be holding an informational meeting at the First United Methodist Church in Dallas, at 19:00. (Luzerne County)3 12 August 2010: Musikfest in Bethlehem. (Lehigh and Northampton Counties)

http://gasdrillingawarenesscoalition.wordpress.com/ 5 of 10

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

14 August 2010: Christy Mathewson Day Parade in Factoryville at 10:00. (Wyoming County) 14 August 2010: Cabot Community Picnic at the Montrose High School, from 10:00 to 14:00. Note: The Gas Drilling Awareness Coalition has released a special communication harshly ridiculing and criticizing this event. (Susquehanna County) 21 August 2010: Gas Stock 2010, an environmentalist rally focused on the Marcellus Shale drilling, at the Luzerne County Fairgrounds in Dallas; scheduled from 11:00-19:00. (Luzerne County)4 28 August 2010: An environmentalist rally in Chenango Valley State Park, near Binghamton in New York. Also of note in this regard is the upcoming screening of the anti-drilling movie Gasland on 5 August 2010 in Pittsburgh (AIR Studio, 518 Foreland St.). ****** ANALYSIS ****** T/I/W Rating: LOW-to-MODERATE

Analysts Note: Expect most of the aforementioned events and meetings to draw peaceful and legal protests; however, exceptions are very possible depending on the size and type of the crowd. For example, a 14 July 2010 hearing of the Delaware River Basin Commission (DRBC) in Trenton was disrupted by over 600 environmentalist activists (PIB No. 113). The activists, drawn from across the Eastern Seaboard, oppose natural gas drilling currently under discussion in the Delaware River Basin. They had heated confrontations with members and supporters of the Northern Wayne Property Owners Alliance (NWPOA) - who are in favor of preserving the right to sell their properties in the Delaware River Basin to energy companies - when the groups met outside the building where the DRBC hearing took place. The escalating conflict over natural gas drilling in Pennsylvania may define local fault lines and potentially increase area environmentalist activity or eco-terrorism. GDAC communications have cited Northeastern Pennsylvania counties, specifically Wyoming, Lackawanna and Luzerne, as being in real "need of our help" and as facing a "drastic situation." For its part, the NORTH EAST ANARCHIST NETWORK (NEAN) recently focused on the Marcellus Shale natural gas industry in its targeting and motivational communications.5 Furthermore, recent EARTH FIRST! networking communications have also focused on the Marcellus Shale natural gas industry as a high priority target in the New York-Pennsylvania region. Researchers point out that the areas of significant drilling activity in Pennsylvania have also been the scene of eco-terrorist vandalism to drilling equipment.
4 5

http://dothemountain.wordpress.com/2010/07/24/gas-stock-2010/ http://www.neanarchist.net/ 6 of 10

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

Local officials and law enforcement agencies should remain aware of the potential for large, sometimes hostile confrontations between landowners, anti-drilling environmentalist militants and gas drilling company employees (e.g., the abovementioned Cabot Community Picnic in Susquehanna County). Such confrontations may be triggered by further high-profile public meetings on the issue or by regional gas industry activities. Communities with small police departments are advised to review contingency plans in the event that such meetings or confrontations escalate significantly. It is unknown at this time whether the necessary police permits have been obtained by any of the protesting groups.

No emerging Indicators, Threats and/or Warnings at this time for the following sectors:

AGRICULTURE AND FOOD BANKING AND FINANCE CHEMICAL INDUSTRIES COMMERCIAL NUCLEAR REACTORS, MATERIALS & WASTE CRITICAL MANUFACTURING DAMS DEFENSE INDUSTRIAL BASE EMERGENCY SERVICES GOVERNMENT FACILITIES6 INFORMATION TECHNOLOGY NATIONAL MONUMENTS AND ICONS POSTAL AND SHIPPING PUBLIC HEALTH AND HEALTHCARE TELECOMMUNICATIONS TRANSPORTATION SYSTEMS WATER

Educational Facilities Sub-Sector: Security directors, students and faculty of all Pennsylvania-based colleges and universities participating in educational exchange programs abroad need to remain cognizant of emerging, countryspecific threats, indicators and warnings.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

7 of 10

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

OHS Goal: Situational Awareness Among All Stakeholders


- The Information-Sharing Community -

Owner/Operator Security Mgr Firefighters EMS Associated Federal & State Law Enforcement Agencies Public Works/Utilities PEMA Area Office US DHS Municipality Officials County Officials

CIKR Site

Surrounding County EMC Public Health Officials PA National Guard Emergency Preparedness Liaison Officers

Adjacent State Intelligence Centers

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

8 of 10

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

THREAT / INDICATOR / WARNING RATING

DESCRIPTION
Available intelligence and recent events indicate that hostile elements currently have little intent or capability to take action against the target. Although it cannot be ruled out, an attack is unlikely based on currently available intelligence. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. An attack is likely to be a priority and might well be executed. Available intelligence and recent events indicate that hostile elements currently have the intent and capability to take action against the target. Additional information is also available on the nature of the threat. An attack on the target is a priority and is likely. Available intelligence and recent events indicate that hostile elements not only have the intent and capability, but also are actively planning to take action against the target within a matter of days (up to two weeks). An attack or action is imminent.

LOW (Level 4)

MODERATE (Level 3)

SEVERE (Level 2)

CRITICAL (Level 1)

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

9 of 10

Pennsylvania Intelligence Bulletin No.118, 30 July 2010

Source Summary Statement

The Institute of Terrorism Research and Response (ITRR) produces this document specifically for the Pennsylvania Office of Homeland Security in support of National Priority #3: Implement the National Infrastructure Protection Plan (NIPP) and all public and private sector, critical infrastructure protection-related initiatives and strategies. The ITRR, a commercial information research and analysis organization, uses open-source, human and closedsource intelligence resources to derive patterns, trends, assessments and time-sensitive products. ITRR used only native-tongue researchers (English, Hebrew, French, Arabic and Spanish) in the collection, interpretation, translation, analysis and production of this product. The analysis is performed by former law enforcement officials, counter-terrorism experts and military intelligence personnel.

Pennsylvania Office of Homeland Security | 2605 Interstate Drive | Harrisburg, PA 17110 | 717.651.2715

10 of 10

You might also like