Saudi infiltration of Twitter

Saudi infiltration of Twitter
Date	2014-2015
Cause	Alleged Saudi spies working inside Twitter
Target	Saudi dissidents' Twitter accounts
Outcome	Personal data of over 6,000 Twitter accounts was acquired on behalf of Saudi operatives
Arrests	1, as of July 1,2021

Last updated December 10, 2023

In 2014 and 2015, a team of Saudi agents allegedly stole proprietary and sensitive personal data from the American social media platform Twitter, in order to unmask anonymous dissidents of Saudi Arabia. Email addresses, phone numbers, internet IP addresses, dates of birth and a history of all the users' activity of Saudi dissidents, opponents and others, were among the stolen materials.^[1]

Human rights groups ANHRI and Prisoners of Conscience have observed that some anonymous Saudi political activists on Twitter were identified and detained after the infiltration, and suspect that it is related. A Saudi scholar in exile in the United States sued Twitter, alleging that dozens of anonymous political activists he was in contact with have died, were tortured, or remain behind bars as a result of being found to have a connection to him.

Background

With roughly 10 million Twitter users, Saudi Arabia is the service's top Arab market. Not requiring use of real names further made Twitter a leading platform for political dissent in the country.^[3]

Saud al-Qahtani, one of Saudi Crown Prince Mohammed Bin Salman's top confidants at the time, posted a warning against masked Twitter accounts using his own verified Twitter account in August 2017. Asserting that governments can know the true names of those using Twitter anonymously, he brought up "technical methods" for tracing a person's IP addresses, as well as a "secret I'm not going to reveal."^[4]^[5] Twitter permanently banned al-Qahtani's account in September 2019, claiming "violations of our platform manipulation policies."^[6]

Incident

Perpetrators

Ali Alzabarah, a Saudi national, and Ahmad Abouammo, a U.S. citizen, were the two former Twitter employees that funneled the data, the complaint asserts.^[2]

Another Saudi national, Ahmed Almutairi, also known as Ahmed Aljbreen, worked as a middleman between Alzabarah, Abouammo, and representatives of the Saudi Royal Family. Almutairi is known for co-founding SMAAT, a Riyadh social-marketing firm that is controlled by the royal family and had a history of running political and commercial influence operations.^[7]^[8]

Bader al-Asaker, a Saudi official who heads the private office of Prince Mohammed and is a board member of Misk Foundation, a philanthropic organization affiliated with MBS, was also involved in the conspiracy, according to the complaint.^[9]

Timeline

Ali Alzabarah joined Twitter as a site reliability engineer in August 2013. Being involved in keeping the site up, he was given broad access.^[10]

In November 2013, Abouammo, who joined the firm as a member of Twitter's global media team to head the Middle East partnerships, met Alzabarah there.^[11]

In 2014, Abouammo was asked to authenticate an account belonging to a Saudi news personality by a public relations agency representing the Saudi Embassy. This request for a blue checkmark was followed by a request from a US-Saudi business group in Virginia to visit Twitter's headquarters. Bader al-Asaker was to be part of the visit, which was nominally for entrepreneurs.^[11]

On June 13, 2014, al-Asaker traveled to San Francisco to meet Abouammo.^[12]

Months later, Abouammo met al-Asaker in 2014 in London, where he was given a $20,000 watch. A week after returning to Twitter's headquarters, Abouammo accessed the system he used to verify users and obtained information about at least two Saudi dissidents, later passing the data to al-Asaker. That system, according to insiders who have used it, retains information such as email addresses, phone numbers and the latest log-in time – personal information usable to track a user in real life.^[11]

In February 2015, Abouammo got his operators in touch with Alzabarah. Alzabarah's ambitions were straightforward: he wanted to work in a high-ranking job for a "charitable organization run by al-Asaker."^[11]

In May 2015, and within the first week of arriving in San Francisco from Washington, D.C. where he met with al-Asaker, Alzabarah "began to access without authorization private data of Twitter users en masse." Over 6,000 users were compromised in six months, according to the FBI. 33 of those users, the Saudi government has already requested Twitter to provide their personal information through emergency disclosure demands.^[13]

Later in 2015, Abouammo departed Twitter for a position at Amazon in Seattle. Over the next two years, well over $300,000 in bank transfers were made from al-Asaker to Abouammo's various bank accounts.^[14]

On December 2, 2015, Alzabarah reportedly acknowledged to his superiors that he examined user data out of curiosity. His work-owned laptop was taken, and he was removed from the office. He returned to Saudi Arabia the next day after communicating that night with al-Asaker and then Dr. Faisal Al Sudairi, the Saudi consul general in Los Angeles. Alzabarah has not been seen since, according to authorities.^[15]

After arrival in Saudi Arabia, Alzabarah became the CEO of the Misk Initiatives Center, a branch of Mohammed bin Salman's Misk Foundation, which he created in 2011 and whose secretary-general was al-Asaker.^[16]^[17]

On October 20, 2018, FBI agents in Seattle questioned Abouammo about his efforts on behalf of Saudi officials. In an attempt to hinder the inquiry, Abouammo purportedly lied to the investigators and supplied them with a forged invoice.^[13]

On November 5, 2019, as part of the complaint, federal warrants for both Ali Alzabarah and Almutairi were issued.^[15] Both were accused of operating as undeclared agents of a foreign government.^[18]^[19] On the same day, Abouammo was apprehended in Seattle, WA, and had his first federal court appearance in Seattle on November 6, 2019.^[2]

On February 24, 2021, a federal judge rejected a request to dismiss charges against Abouammo.^[20]

Reaction

Twitter response

On the condition of anonymity, a business representative of Twitter told The Washington Post in 2019 that access to the instrument panel is now restricted to a small group of "trained and vetted" workers, citing worries about staff safety.^[21]

Criticism

According to former employees, Twitter did not have plans to handle situations in which a personnel with access to sensitive data built strong ties with foreign powers. A former colleague of Abouammo's said that US, UK, and Israeli security agencies all pressured members of Twitter's media team for private information.^[11]

The departure of Ali Alzabarah didn't cause a stir in Twitter. "One day the general counsel came to me and said there was this crazy thing that happened. They're out of the company," a former Twitter executive remarked. "You can never talk about it," "inside, it was a total nonthing. No one in the rank and file who had ever heard of it. It was a nonissue."^[11]

Omar Abdulaziz, a dissident who was connected to writer Jamal Khashoggi, feels that criticizing the Saudi Arabian regime on social media is now risky. "We were using Twitter ten years ago to expose our opinion on what was really going on there, and we felt safe," he added. "For us, it was a safe platform. That's no longer the case."^[11]

Aftermath

Known victims

Although Twitter has not revealed the identity of those who may have been unmasked as a result of the claimed attack, human rights groups, such as ANHRI, linked three Saudis detained since 2015 with using Twitter handles @sama7ti, @coluche_ar, and @mahwe13, all critical of the Saudi government. Another human rights organization, Prisoners of Conscience, reported an additional case of a Saudi male who posted critical comments on Twitter under the handle @albna5y and was imprisoned in September 2017.^[22]

Turki bin Abdulaziz al-Jasser (@coluche_ar)

Al-Jasser, a Saudi man suspected of running an anonymous Twitter account, was apprehended in early 2018. He was linked to @coluche_ar, one of the accounts obtained by the Twitter breach, according to ANHRI.

Though al-Jasser was reported to have died in jail after being tortured, Saudi officials notified a United Nations team monitoring enforced disappearances in February that he was being kept at Al Ha'ir Prison near Riyadh, according to MENA Rights Group.^[22]

Abdulrahman al-Sadhan (@sama7ti)

Following a March 2018 arrest and charges that he used a popular parody account to criticize the Saudi government, Abdulrahman al-Sadhan, a 37-year-old Red Crescent relief worker, was convicted by Saudi Arabia's specialized criminal court and sentenced to 20 years in prison followed by an additional 20-year travel restriction.^[23]

Lawsuits

Omar Abdulaziz's account was one of those breached. On February 17, 2016. A message from Twitter's security staff notified him that his and a limited number of other users' personal information had been compromised due to a "bug." "The email address and phone number linked to your account was viewed by another account," said the message. He later filed a lawsuit against the company for allegedly failing to disclose the event.^[24] The accusations are false, according to Twitter.^[25]

In June 2020, Ali al-Ahmed, a Saudi scholar living in exile in the United States, sued Twitter over the 2016 breach, alleging that the company's negligence resulted in the loss and torture of dissidents within Saudi Arabia. al-Ahmed claimed to have been in continuous contact with a number of anonymous Twitter accounts maintained by Saudi state employees and pro-democracy advocates in the period leading up to the breach. Exposing their phone numbers and email addresses, dozens of those who were in direct touch with Ali have died, were tortured or remain behind bars as a result of being found to have a connection to him, he claims.^[26]

Related Research Articles

A dissident is a person who actively challenges an established political or religious system, doctrine, belief, policy, or institution. In a religious context, the word has been used since the 18th century, and in the political sense since the 20th century, coinciding with the rise of authoritarian governments in countries such as Fascist Italy, Nazi Germany, Imperial Japan, Francoist Spain, the Soviet Union, Saudi Arabia, North Korea, Turkey, Iran, China, and Turkmenistan. In the Western world, there are historical examples of people who have been considered and have considered themselves dissidents, such as the Dutch philosopher Baruch Spinoza. In totalitarian countries, dissidents are often incarcerated or executed without explicit political accusations, or due to infringements of the very same laws they are opposing, or because they are supporting civil liberties such as freedom of speech.

The Citizen Lab is an interdisciplinary laboratory based at the Munk School of Global Affairs at the University of Toronto, Canada. It was founded by Ronald Deibert in 2001. The laboratory studies information controls that impact the openness and security of the Internet and that pose threats to human rights. The organization uses a "mixed methods" approach which combines computer-generated interrogation, data mining, and analysis with intensive field research, qualitative social science, and legal and policy analysis methods. The organization has played a major role in providing technical support to journalists investigating the use of NSO Group's Pegasus spyware on journalists, politicians and human rights advocates.

Human rights in Saudi Arabia are a topic of concern and controversy. The Saudi government, which mandates both Muslim and non-Muslim observance of Islamic law under the absolute rule of the House of Saud, has been accused of and denounced by various international organizations and governments for violating human rights within the country. The authoritarian regime ruling the Kingdom of Saudi Arabia is consistently ranked among the "worst of the worst" in Freedom House's annual survey of political and civil rights.

Yasser Saeed Al-Qahtani is a former Saudi footballer who played as a forward for Al-Hilal FC in the Saudi Professional League. He was also captain of the Saudi Arabia national team. Yasser is widely recognised as one of the greatest Asian footballers of the 21st century.

Jamal Ahmad Khashoggi was a Saudi journalist, dissident, author, columnist for Middle East Eye and The Washington Post, and a general manager and editor-in-chief of Al-Arab News Channel who was assassinated at the Saudi consulate in Istanbul on 2 October 2018 by agents of the Saudi government at the behest of Crown Prince Mohammed bin Salman.

The Ministry of Interior and General Investigation, commonly known simply as the Mabahith, is the secret police agency of the Presidency of State Security in Saudi Arabia, and deals with domestic security and counter-intelligence.

Multiple forms of media including books, newspapers, magazines, films, television, and content published on the Internet are censored in Saudi Arabia.

Ali Abbas al-Ahmed (Arabic: علي عباس آل أحمد, Gulf pronunciation: ; born 1966, is a Saudi analyst focusing on the politics of the Persian Gulf region: including terrorism, Islamic movements, Wahhabi Islam, Saudi political history, Saudi-American relations, and the history of the al-Saud family. He is the founder and director of the Institute for Gulf Affairs, an independent think tank in Washington, D.C. focused on providing analyses and disseminating information on political issues in the Persian Gulf region and particularly Saudi Arabia, and U.S.-Gulf relations. IGA also convenes conferences, conducts independent research and investigations, and works with the media and policymakers to foster a deeper understanding of Arab states of the Persian Gulf by providing them with up-to-date and exclusive information and connecting them with reliable analysts.

The Saudi Civil and Political Rights Association (ACPRA) is a Saudi Arabian human rights non-governmental organisation created in 2009. On 9 March 2013, the Saudi court sentenced two of its prominent leaders to at least 10 years in prison for "offences that included sedition and giving inaccurate information to foreign media", while dissolving the group. The association is also known in Arabic by its acronym HASEM.

The following is a timeline of the 2011–2012 Saudi Arabian protests since July 2012. The 2011–2012 Saudi Arabian protests are a series of ongoing protests taking place in Saudi Arabia, which began in January 2011, influenced by concurrent protests in the region.

<span class="mw-page-title-main">Mohammad Fahad al-Qahtani</span> Saudi human rights activist (born c. 1965)

Mohammad Fahad Muflih al-Qahtani is a human rights activist, economics professor and political prisoner currently jailed at Al-Ha’ir Prison in Riyadh co-founding and later leading the Saudi Arabia human rights organisation Saudi Civil and Political Rights Association prior to his arbitrary 2012 arrest. Alkarama described al-Qahtani as "one of [the Saudi Arabian judiciary's] most eloquent and fervent critics". On 9 March 2013, al-Qahtani was sentenced to ten years in prison followed by a ten-year travel ban, ostensibly for "co-founding an unlicensed civil association". He has carried out several hunger strikes to protest Saudi prison conditions endured during his politically motivated incarceration. As of 2022, he remains jailed and has been intermittently kept in solitary confinement since 2018.

Iman al-Qahtani ايمان القحطاني is a Saudi journalist and activist.

Yahya Assiri is a Saudi Arabian human rights activist and former member of the Royal Saudi Air Force.

Qahtān to distinguish between the tribe and the Qahtanite peoples, is an Arab tribal confederation. Qahtan is composed of three main tribes: Sanhan, Junb, and Rufaida. Today, members of the tribe and its sub-tribes are based in Yemen, Saudi Arabia, Qatar, Bahrain, Kuwait, Morocco and the United Arab Emirates.

On 2 October 2018, Jamal Khashoggi, a Saudi dissident journalist, was killed by agents of the Saudi government at the Saudi consulate in Istanbul, Turkey. Khashoggi was ambushed and strangled by a 15-member squad of Saudi operatives. His body was dismembered and disposed of. The consulate had been secretly bugged by the Turkish government and Khashoggi's final moments were captured in audio recordings, transcripts of which were subsequently made public.

Saud bin Abdullah al-Qahtani is a Saudi Arabian consultant and former royal court advisor. Prior to his dismissal in late 2018, he worked as an advisor to King Abdullah of Saudi Arabia and crown prince Mohammed bin Salman.

Prince Mohammed Bin Salman College of Business and Entrepreneurship (MBSC) (Arabic: كلية الأمير محمد بن سلمان للإدارة وريادة الأعمال) is a co-ed higher education business administration college in King Abdullah Economic City, Saudi Arabia. Established in 2016, it is the first college in Saudi Arabia which offers postgraduate degree as well as executive education. The college was named after its founder, Mohammed bin Salman, the Deputy Crown Prince of Saudi Arabia from 2015 to 2017 and later Crown Prince of Saudi Arabia since 2017.

Turki bin Abdulaziz al-Jasser was a Saudi journalist arrested and tortured to death while being held in a Saudi prison. News of his death came only one month after the murder of another Saudi journalist, Jamal Khashoggi. Al-Jasser was running what he thought was an anonymous Twitter account called Kashkol as a "proxy public square" for Saudi citizens to express their opinions, but instead became a forum for army 'trolls' to poison debate, harass dissidents and spread misinformation. In 2018 his identity was revealed by the Twitter office in Dubai.

Omar Abdulaziz Al-Zahrani is a Saudi Arabian dissident video blogger and activist living in exile in Montreal, Canada. He was close friends and worked with Jamal Khashoggi, as recounted in the film The Dissident (2020). He is a member of the National Assembly Party.

The Bees Army or Geish al-Nahl, also called the "Electronic Bees", refers to an opposition movement aimed at confronting what the movement describes as Saudi Arabian government propaganda. The movement consisted of 600 members as of 2018 and was supported by Jamal Khashoggi, who was assassinated by agents of the Saudi government. In May 2021, the Saudi Arabian authorities commenced an arrest campaign to detain the people whom were claimed to be the members of the movement.

References

↑ Benner, Katie; Mazzetti, Mark; Hubbard, Ben; Isaac, Mike (October 20, 2018). "Saudis' Image Makers: A Troll Army and a Twitter Insider". The New York Times. ISSN 0362-4331 . Retrieved July 3, 2021.
1 2 3 "Two Former Twitter Employees and a Saudi National Charged as Acting as Illegal Agents of Saudi Arabia". www.justice.gov. November 7, 2019. Retrieved July 3, 2021.
↑ Silverman, Jacob; Ashford, Emma; Ashford, Emma; Silverman, Jacob; Silverman, Jacob; Heer, Jeet; Heer, Jeet; Silverman, Jacob; Silverman, Jacob (April 9, 2021). "Twitter Is Enabling Saudi Arabia's Brutal Crackdown on Dissent". The New Republic. ISSN 0028-6583 . Retrieved July 5, 2021.
↑ "سعود القحطاني on Twitter". Twitter (in Turkish). Archived from the original on September 26, 2018. Retrieved July 5, 2021.
↑ "Lord Of The Flies: An Open-Source Investigation Into Saud Al-Qahtani". bellingcat. June 26, 2019. Retrieved July 5, 2021.
↑ "Twitter Bans Saudi Official Implicated in Khashoggi Murder, Hundreds of Other Pro-Saudi Accounts". Gizmodo. Retrieved July 4, 2021.
↑ Paul, Katie (December 21, 2019). "Twitter suspends accounts linked to Saudi spying case". Reuters. Retrieved July 5, 2021.
↑ "Twitter removes 90,000 accounts linked to Saudi influence operation". Los Angeles Times. December 20, 2019. Retrieved July 5, 2021.
↑ Paul, Diane Bartz, Katie (November 7, 2019). "U.S. accuses two former Twitter employees of spying for Saudi Arabia". Reuters. Retrieved July 6, 2021.{{cite news}}: CS1 maint: multiple names: authors list (link)
↑ "Former Twitter employees federally charged with working for Saudis". ABC News. Retrieved July 7, 2021.
1 2 3 4 5 6 7 "How Saudi Arabia Infiltrated Twitter". BuzzFeed News. Retrieved July 4, 2021.
↑ "A Saudi Prince's Attempt to Silence Critics on Twitter". Wired. ISSN 1059-1028 . Retrieved July 6, 2021.
1 2 "Ex-Twitter worker arrested in Seattle is charged with spying for Saudi Arabia". The Seattle Times. November 6, 2019. Retrieved July 7, 2021.
↑ "Twitter Insiders Allegedly Spied for Saudi Arabia". Wired. ISSN 1059-1028 . Retrieved July 7, 2021.
1 2 "Former Twitter employees charged with spying for Saudi Arabia". The Guardian. November 6, 2019. Retrieved July 3, 2021.
↑ "FaceOf: Bader Al-Asaker, secretary-general of Misk Foundation". Arab News. May 28, 2018. Retrieved July 5, 2021.
↑ "UNESCO Said It Has No Plans To Renew A Deal With An Alleged Saudi Spy At Twitter "At This Time"". BuzzFeed News. Retrieved July 6, 2021.
↑ "ALI HAMAD A ALZABARAH". Federal Bureau of Investigation. Retrieved July 5, 2021.
↑ "AHMED SAAD M ALMUTAIRI". Federal Bureau of Investigation. Retrieved July 5, 2021.
↑ "Judge Rejects Bid to Drop Charges Against Alleged Saudi Spying Accomplice". www.courthousenews.com. Retrieved July 7, 2021.
↑ "Former Twitter employees charged with spying for Saudi Arabia by digging into the accounts of kingdom critics". Washington Post. ISSN 0190-8286 . Retrieved July 7, 2021.
1 2 Gallagher, Ryan (August 18, 2020). "Spies in Silicon Valley: Twitter Breach Tied to Saudi Dissident Arrests". Bloomberg. Retrieved July 5, 2021.
↑ "Saudi Arabia jails alleged satirist 'identified in Twitter infiltration'". The Guardian. April 9, 2021. Retrieved July 5, 2021.
↑ "'A direct trail of blood drops' leads from a Twitter hack to Jamal Khashoggi's murder". news.yahoo.com. Retrieved July 5, 2021.
↑ Blumberg, Peter (December 17, 2019). "Twitter Denies It Failed to Warn Saudi Dissident of Account Hack". Bloomberg. Retrieved July 6, 2021.
↑ Bostock, Bill. "A Saudi dissident suing Twitter over a massive 2016 hack says the platform's incompetence got multiple whistleblowers killed". Business Insider. Retrieved July 3, 2021.