Sun Tzu and the Art of Fake News

Sun Tzu and the Art of Fake News

by Philip Ingram MBE

“That is #FakeNews” is one phrase that has rocketed to fame last year. President Trump’s legacy has already been left in Twitter land but why has it come to the fore, is it new and more importantly is it something that individuals or enterprise should be concerned about?  Philip Ingram MBE  takes a look at fake news, but with a 6th century twist.

There are elements of the press who seem to suggest that fake news is something new, it isn’t, and it has its roots back to the 6th century, but before I delve that far back I want to take a quick look to only 74 years ago. The Second World War shows just how important “fake news” was to the war effort; fake news, when targeted for an effect is also known as Propaganda. William Brooke Joyce, nicknamed Lord Haw-Haw, an American-born, Anglo-Irish Fascist who became the Nazi propaganda broadcaster to the United Kingdom during World War II was probably the most famous mouth of fake news, but the Japanese had English speaking female broadcasters who were nicknamed Tokyo Rose.

The use of fake news or propaganda was not limited to the Germans or Japanese and arguably the greatest military success of the Second World War, D Day, was enabled by fake news through an operation called Operation Fortitude.  With this being linked to a military operation this is where I want to bring in 6th century teachings.

Sun Tzu the 6th century Chinese general, military strategist, and philosopher, arguably the greatest military tactician and strategic thinker ever, said in his book the Art of War, “All warfare is based on deception. Hence, when we are able to attack, we must seem unable; when using our forces, we must appear inactive; when we are near, we must make the enemy believe we are far away; when far away, we must make him believe we are near.” His teachings have stood the test of time!

Operation Fortitude was a massive deception operation conducted by the Allied Forces to lead the Germans to believe that they would be landing in Pas-de-Calais and Norway, masking the true invasion through Normandy.

The aim was also to make them believe that the Normandy landings in May 1944 and in the south of France in June 1944 were mere diversions, so that the German army would concentrate its troops in the wrong place. The German authorities clung to their belief that the landing would occur in Pas-de-Calais right until September 1944.  Operation Fortitude held onto the principals set out so eloquently by Sun Tzu. The bluff worked but highlights how a country with extensive national intelligence assets looking at a situation unfolding, can be deceived.

The Russian term маскировка (maskirovka) literally masking, was defined in the International Dictionary of Intelligence from 1990 as the Russian military intelligence (GRU) term for deception. Vladimir Putin would have “grown up” in an organisation where maskirovka was a normal part of everyday thinking.  At every level of my military training we studied maskirovka, so imagine my surprise when Robert Hannigan, the ex-director of the UK spy agency CGHQ, said of the Russian threat in an interview this year, ‘We didn’t see Russian use of disinformation coming‘.  It clearly demonstrates a naivety with the UK’s senior intelligence officials, charged with keeping our politicians abreast of the threat to that which underpins our way of life, democracy.

This failure highlights that those self-same senior intelligence officials have forgotten one of Sun Tzu’s most famous quotes. “If you know your enemies and know yourself, you will not be imperilled in a hundred battles; … if you do not know your enemies nor yourself, you will be imperilled in every single battle.”

Should we be worried? Well in my professional opinion, I think we should be extremely worried.  This is not just something targeted country on country, it is being exploited by terrorists and so-called ISIS are masters at it, it is being exploited to gain commercial advantage especially when rumours can be generated in the money markets, huge sums can be gained, or lost.

In May last year many respected media outlets reported concerns by the US Securities and Exchange Commission (SEC) over false reporting.  The FT outlined that the regulators were concerned that fake news was affecting investment decisions and reported evidence that seemingly independent outlets were being paid to promote stories.  They reported the SEC as saying, “keep in mind that fraudsters may generate articles promoting a company’s stock to drive up the stock price and to profit at your expense.

Supporters of so called ISIS are very quick to post across their networks details and pictures from any attack, thereby taking de facto responsibility in the eyes of their supporters even before any official statements are released.  This has the effect of stimulating potential copycat or other attacks as well as giving “oxygen” to their terror message, to paraphrase Margaret Thatcher. The manipulation of media messaging is extensively used by todays terror organisations.

The one factor that enables fake news to have such a rapid impact today is control, or lack of it.  Operation Fortitude was a carefully orchestrated national plan controlled at the highest levels, so all messaging was coherent and worked to a common aim. Today, fake news can be delivered to millions of people at the click of a button via social media and the average person in the street can send a message that the President of the US may read personally, without it going through his normal staffing and advisory chain.  The power of social media is phenomenal.

The Russians continue to use maskirovka as part of their global engagement techniques. We are already seeing proof of their involvement in the US elections and likely in the UK Brexit referendum and more.  Sun Tzu highlighted how this works when he said, “Speed is the essence of war. Take advantage of the enemy’s unpreparedness; travel by unexpected routes and strike him where he has taken no precautions.”  Remember, Robert Hannigan said he didn’t see it coming and those unexpected routes were Facebook, Twitter, big data manipulation, main stream press and good old fashioned human influence, powered by the internet.

Arguably Kim Jong Un from North Korea knows how to play President Trump using Sun Tzu.  As the 6thcentury tactician said, “If your opponent is temperamental, seek to irritate him. Pretend to be weak, that he may grow arrogant. If he is taking his ease, give him no rest. If his forces are united, separate them. Attack him where he is unprepared, appear where you are not expected.” It is this last line that is keeping the world’s breath held.  Kim Jong Un’s understanding of President Trump’s temperament is clearly excellent when he applies Sun Tzu’s principal, “If your opponent is of choleric temperament, seek to irritate him.” Trump gets irritated easily by ‘Rocket Man.’

With the ease of spread of fake news and its ability to influence, it is something that enterprise should be concerned about.  The instability caused by state on state activity is one thing but there is clear evidence of state on enterprise actions in cyberspace with the theft of IP. Fake news is another cyber enabled activity and the potential for enterprise on enterprise use of fake news is growing.

As an intelligence officer looking at a threat you ask 2 questions.  The first, does the capability exist and the answer is yes.  The second, is there intent to use it, and again the proof is that the answer is yes. Now is the time for risk managers in companies to ensure the impact of Fake News is something they plan for, remember it is a cyber enabled threat.

In one of Sun Tzu’s opening statements he said, “If your enemy is secure at all points, be prepared for him. If he is in superior strength, evade him.” The time has come for preparedness as you cannot evade this threat.

Note: If you would like any further comment from Philip, please contact him by clicking HERE

Sergei Skripal – was it an assassination?

Sergei Skripal – was it an assassination?

Sergei Skripal – was it an assassination?

by Philip Ingram MBE

Updated 08 Mar

‪As someone who commanded an intelligence unit with a capability for the covert surveillance of Russian intelligence operations, I think I am qualified to do some analysis of detail that is coming out from the reporting of the Sergei Skripal incident. ‬

I will open this with a caveat, I am analysing press reporting which is already speculation heavy but there are enough ‘pointers’ to allow me to bring some informed comment to be brought out.  The detail is likely to change, especially regarding the potential attack vector, however, the analysis should remain sound.

The two questions an intelligence analyst asks about any incident are; does the capability exist and is there an intent to use the capability? Often one exists without the other, the threat is therefore considered low. Where the two exist, the threat is considered credible.

The Russians have the capability to carry out remote assassinations overseas and within the UK using sophisticated ‘poisons’ and they are not fixed on one agent. Georgi Markov was assassinated in London in 1978 by a Soviet-trained Bulgarian secret service agent using ricin, a highly toxic, naturally occurring compound, it was embedded in a pellet fired from an umbrella. In 2006, Alexander Litvinenko an ex-KGB officer died after drinking green tea laced with polonium-210, a rare and potent radioactive isotope, again in London.

The symptoms reported in the Daily Mail and elsewhere are consistent with poisoning by an organophosphate-based nerve agent of which SARIN or GB has hit the press recently with its use in Syria by Russian backed Syrian forces. Last year the North Korean leaders’ half-brother Kim Jong-Nam was assassinated in Kuala Lumper Airport in Malaysia by another organophosphate-based nerve agent VX which is an abbreviation for “venomous agent X.” The Russians have access to very sophisticated nerve agents including GB and VX, that act within seconds. VX or a derivative would be a referred agent as it is less volatile and it being more potent than Sarin, it can have fatal effects in smaller doses absorbed through the skin.

Of course, there are many other similar compounds in the organophosphate and carbamate groups that can cause these symptoms.  And with no confirmation of agent at the moment, the suggestion it could be novel or bespoke will remain.  Caveating my comments that VX is possible and has been used before, scientists could have developed some other mycotoxin specifically for this type of assassination attempt. An issue is at least one of the first responders didn’t show symptoms till the next morning which is unusual for a nerve agent contamination but may not be immediately related.

Now the government have confirmed that a nerve agent was used it is worth having a look at some of the derivatives of the G series and V series that have been developed.  I studied these as part of my first and masters degree courses, completing specialist projects on CBRNE threats, so again, I think I am qualified to do some analysis.

Nerve agents are compounds that have the capacity to inactivate the enzyme acetylcholinesterase which is there to ‘turn off’ a trigger signal in a nerve caused by acetylcholine.  If you cant turn it off the nerve keeps firing.  Some of the first agents to be developed were developed by the Nazi’s just before and during the second world war and were given the designator ‘G’ for German. The 3 most common are tabun (GA), sarin (GB), and soman (GD). The man credited with their development was Dr Gerhard Schrader who had been working on pesticides when he realised the power of what he had developed.

It was the British in1954 who first synthesized O-ethyl S-(2-diisopropylaminoethyl) methylphosphonothioate, the scientific name for what the Americans designated VX.  The ‘V’ agents are at least 10 times more toxic than the most common ‘G’ agent, sarin (GB).  One of the characteristics of the ‘V’ agents is that they were much less volatile than the ‘G’ agents and were therefore considered persistent agents, able to contaminate an area or individual for longer and not reliant on inhalation as much, their persistence and toxicity made skin absorption a significant exposure threat. There are other ‘V’ agents but much of the detail about them remains classified and they have code names like VE, V-gas, VG, and VM.  Of note, V-gas is the Russian equivalent of VX and with VE, VG and VM are much rarer but act in a similar way.  The world of chemical agents and especially nerve agents and mycotoxins is a complex, fascinating and frightening one, the rarer the agent used the easier it is to apportion blame once the substance has been identified as there are very few facilities across the globe with the sophisticated laboratories able to create and test new agents.

The Russians have the intent – Putin’s clear statements about what he thinks of those caught spying in a video that emerged in 2010 where he said, “Traitors will kick the bucket. trust me. These people betrayed their friends, their brothers in arms. Whatever they got in exchange for it, those 30 pieces of silver they were given, they will choke on them,” is a clear enough statement of intent. In addition, the Russian history of similar assassinations and the clear message it sends to those who may try to undermine Putin’s power base.  From a personal perspective, Putin will likely see Sergei Skripal as a traitor no matter what.

What is slightly more frightening is it also sends a message to the international community and to the UK in particular that the Russians are willing to operate with impunity across the globe. This is consistent with their military actions in Syria and their increased military presence globally as well as statements regarding new nuclear capabilities and pictures of new conventional weapon systems.

When in October 2017, Robert Hannigan, the former head of GCHQ, described Russia’s use of cyber-attacks as “a new way” of waging war against the country’s enemies he forgot his readings of Sun Tzu the 6th century Chinese general, military strategist, and philosopher, arguably the greatest military tactician and strategic thinker ever, said in his book the Art of War, “All warfare is based on deception.” He also clearly forgot the Russian doctrine of маскировка (maskirovka) defined in the International Dictionary of Intelligence from 1990 as the Russian military intelligence (GRU) term for deception. Vladimir Putin would have “grown up” in an organisation where maskirovka was a normal part of everyday thinking and is part of their aggressive information operations doctrine.

The frightening analysis of Hannagan’s statement is that the UK intelligence services have taken their eye off the Russian threat. Resources monitoring it have been reallocated to the counter-terror threat whilst the Russians and other intelligence agencies have kept their numbers and activities at the same or greater levels in the Cold War. The UK has become an open playground for unmonitored espionage.

Putting all of this together, it is highly probable that this was a sanctioned assassination with a motivation to send a message to some of Putin’s opposition in the run-up to the Presidential Election and show ‘strength’ to his domestic audience as well as settle a score!  Of course, it won’t be obvious that it was definitely Putin sanctioned as it is not unusual for Russian agencies to use plausibly deniable outlets for their “dirty work”.  The BBC Series Mc Mafia had more than an element of truth running through its drama. The pictures of the extremely professional emergency services response show how credible the threat was and how all precautions were being taken.  The fact that the investigation was quickly handed over from Wiltshire Constabulary to the MET suggests that the national implications were recognised quickly.  I would assess that the agent used was a thickened version of one of the ‘V” group, possibly thickened V-gas but this is not based on any hard evidence.

Detailed analysis by DSTL Porton Down will be able to identify the cause and recommend the most appropriate medical treatments for Sergei Skripal‬ and his daughter, as well as the others, affected as there can be long-term effects. Their luckiest break is that it happened only a short distance from Porton Down, one of the world’s leading chemical defence research centres.  It is probable that whoever is ultimately responsible for this attack, they will have created a lot of false trails to generate an air of plausible deniability to act as a smokescreen.  However, the authorities will know the culprits with some certainty.

Note: This blog will be updated as new information is received.  The current version was updated at 2000 on 8th March 2018 – if you would like any further comment from Philip, please contact him by clicking HERE