Archives Posts
Security vs marketing: how do you sell covert operations?
The conflict between secrecy and marketing within defense/security contractors has led to some entertaining gaffs in the U.S. The Spy Who Billed Me has followed up on some of the organisations openly monitoring the blog and made some interesting findings. Security contractors have to advertise their wares whilst attempting not to give away too much about the work they already do. The Spy Who Billed Me has decoded the marketing on one contractor’s web site (referred to as ‘Heckle and Jeckle’), using only publicly available contextual knowledge to reach the following conclusions:
…Heckle and Jeckle teams stand ready, custom-designed high-tech gadgets in hand, for clandestine missions in enemy territory to covertly and remotely intercept foreign communications or penetrate information systems. This can be done independently or in conjunction with SEAL or Delta or other secret squirrel teams on behalf of SOCOM and the CIA.
In other words, they set up black sites albeit a different type than has been in the news lately. To put it into context, such black sites such as covert listening posts in hostile territories and even in friendlier ones where discovery could create international tensions count among the Intelligence Community’s blackest secrets. And now, thanks to the About page on Heckle and Jeckle’s website, we know that the CIA is outsourcing this to Heckle and Jeckle, whose identity would make it somewhat easier to uncover the black collection sites.
…
Heckle and Jeckle also brag about a micro-electromechanical facility which becomes particularly interesting in conjunction with their job openings announcements. Reviewing the skill sets they’re looking for, it quickly becomes apparent that they design and program their own computer chips, so they’re clearly creating proprietary cutting-edge gadgets. It’s notable how frequently they’re searching for engineers with experience in one of the most miserable operating systems for mobile devices: Windows mobile. They’re also regularly seeking programmers versed in another mobile device language: Symbian. Now this information taken in conjunction with their specialty and their prior claims of micro-electromechanical facilities suggests they’re designing and creating a lot of mobile, hand held covert communications devices.
And here I’d venture a pure guess that these are probably designed to look like standard run-of-the-mill Treos and other smart phones, blending their “intelligent phones” into the mobile world. The largest consumer of such gizmos is, of course, the CIA’s DS&T, adding to suspicions that Heckle and Jeckle is a major DS&T contractor. The primary use of such covert communications gear is for communications with nonofficial cover officers (NOCs) and agents. So the information on Heckle and Jeckle’s site suggests that they are likely designing and creating the latest must-have accessories for NOCs and agents, a far cry from the clunky COVCOM gear of yesteryear. (And from the Agency’s point of view, knowledge of this would be a serious security breech. Keep in mind the CIA does not even allow contractors to acknowledge their affiliation with the Agency, let alone divulge the programs they are working on, particularly such sensitivities ones.)
…
Not only have CIA programs been compromised, so have SOCOMs. Judging from the job postings for positions in Florida, Heckle and Jeckle are doing data mining and analytical work for SOCOM. Among other things that can be deduced, they search for relational patterns of terrorist activity and affiliations, looking at a wide array of seemingly innocuous relationships using open source and clandestinely gathered data, particularly focusing upon financial transactional data. I’m betting they have a very sophisticated quantitative model that they’re constantly tweaking that underlies this process.
Again, Heckle and Jeckle job postings give us hints to other SOCOM programs. It appears that Heckle and Jeckle are involved in tracking SOCOM assets worldwide. Moving beyond Heckle and Jeckle’s own website to other open sources, it’s possible to learn some of the specs of related handhelds including whose low-earth orbiting satellites they use. Digging a little deeper, it’s also possible to discover the code name of Heckle and Jeckle’s RF geolocation program…





























