http://www.washingtonpost.com/world/national-security/fbi-is-increasing-pressure-on-suspects-in-stuxnet-inquiry/2013/01/26/f475095e-6733-11e2-93e1-475791032daf_story.html

FBI is increasing pressure on suspects in Stuxnet inquiry

By Peter Finn

January 26, 2013

Federal investigators looking into disclosures of classified information about a cyberoperation that targeted Iran's nuclear program have increased pressure on current and former senior government officials suspected of involvement, according to people familiar with the investigation.

The inquiry, which was started by Attorney General Eric H. Holder Jr. last June, [1] is examining leaks about a computer virus developed jointly by the United States and Israel that damaged nuclear centrifuges at Iran's primary uranium enrichment plant. The U.S. code name for the operation was Olympic Games, but the wider world knew the mysterious computer worm as Stuxnet. [2]

Prosecutors are pursuing "everybody -- at pretty high levels, too," said one person familiar with the investigation. "There are many people who've been contacted from different agencies."

The FBI and prosecutors have interviewed several current and former senior government officials in connection with the disclosures, sometimes confronting them with evidence of contact with journalists, according to people familiar with the probe. Investigators, they said, have conducted extensive analysis of the e-mail accounts and phone records of current and former government officials in a search for links to journalists.

The people familiar with the investigation would speak only on the condition of anonymity because of the sensitivity of the matter. The Justice Department declined to comment.

The Obama administration has prosecuted six officials for disclosing classified information, more than all previous administrations combined. But the Stuxnet investigation is arguably the highest-profile probe yet, and it could implicate senior-level officials. Knowledge of the virus was likely to have been highly compartmentalized and limited to a small set of Americans and Israelis.

The proliferation of e-mail and the advent of sophisticated software capable of sifting through huge volumes of it have significantly improved the ability of the FBI to find evidence. A trail of e-mail has eased the FBI's search for a number of suspects recently, including John Kiriakou, [3] the former CIA officer who was sentenced Friday to 30 months in prison for disclosing to a journalist the identity of a CIA officer who had spent 20 years under cover.

Late last year, retired Gen. David H. Petraeus resigned as CIA director [4] after the FBI discovered e-mails in one of his private accounts showing that he had an extramarital affair with his biographer. [5]

Holder appointed Rod J. Rosenstein, the U.S. attorney for Maryland, to lead the Stuxnet inquiry after a New York Times article [6] about President Obama ordering cyberattacks against Iran using a computer virus developed in conjunction with Israel. Other publications, including The Washington Post, followed with similar reports about Stuxnet and a related virus called Flame. [7]

At the same time, Holder named Ronald C. Machen Jr., the U.S. attorney for the District of Columbia, to head a criminal investigation into leaks concerning the disruption of a bomb plot [8] by al-Qaeda in the Arabian Peninsula. Holder's action followed complaints from members of Congress, including the heads of the intelligence committees, about both leaks.

Machen is examining a leak to the Associated Press that a double agent inside al-Qaeda's affiliate in Yemen allowed the United States and Saudi Arabia to disrupt the plot to bomb an airliner using explosives and a detonation system that could evade airport security checks.

"People are feeling less open to talking to reporters given this uptick," said a person with knowledge of Machen's inquiry. "There is a definite chilling effect in government due to these investigations."

Since the probes were announced, there has been little publicity about the ongoing inquiries.

The Justice Department declined to provide statistics on how many leak investigations were launched during Obama's first term. Between 2005 and 2009, according to an April 2010 Justice Department letter that was sent to a Senate committee, intelligence agencies notified the department 183 times about leaks. The FBI opened 26 investigations and identified 14 suspects.

Lisa Monaco, the head of the Justice Department's National Security Division who was named Friday as the president's new counterterrorism adviser, told the Senate in 2011 [9] that there has been "a stepped-up effort, and indeed a priority placed on the prosecution of leak matters." Monaco said that leaks "do tremendous damage" and that unauthorized disclosures should be "prosecuted and pursued, either by criminal means or the use of administrative sanctions."

Former prosecutors said these investigations typically begin by compiling a list of people with access to the classified information. When government officials attend classified briefings or examine classified documents in secure facilities, they must sign a log, and these records can provide an initial road map for investigators.

Former prosecutors said investigators run sophisticated software to identify names, key words and phrases embedded in e-mails and other communications, including text messages, which could lead them to suspects.

The FBI also looks at officials' phone records -- who called whom, when, for how long. Once they have evidence of contact between officials and a particular journalist, investigators can seek a warrant to examine private e-mail accounts and phone records, including text messages, former prosecutors said.

Prosecutors and the FBI can examine government e-mail accounts and government-issued devices, including cellphones, without a warrant. They can also look at private e-mail accounts without a warrant if those accounts were accessed on government computers.

The investigation of Kiriakou grew out of an inquiry by the Justice Department into how high-value detainees at Guantanamo Bay came to have photographs of some intelligence officials in their cells. E-mails eventually led the FBI to exchanges between Kiriakou and a journalist that revealed the name of a covert officer. That name was passed to an investigator working for the American Civil Liberties Union and finally made its way into a classified filing by the ACLU.

In the case of Petraeus, the FBI started with five threatening, anonymous e-mails sent to a Florida woman. [10] After several weeks of following the trail, the bureau found itself confronting explicit exchanges between Petraeus and his mistress. They also found what have been described as flirtatious e-mails between Gen. John Allen and the Florida woman. Petraeus was not charged with a crime, and Allen was cleared of wrongdoing [11] last week.

Julie Tate contributed to this report.

[1] http://www.washingtonpost.com/politics/attorney-general-eric-holder-names-attorneys-to-investigate-leaks/2012/06/08/gJQANhGiOV_story.html

[2] http://articles.washingtonpost.com/2012-06-01/world/35459494_1_nuclear-program-stuxnet-senior-iranian-officials

[3] http://www.washingtonpost.com/local/former-cia-officer-john-kiriakou-sentenced-to-30-months-in-prison-for-leaks/2013/01/25/49ea0cc0-6704-11e2-9e1b-07db1d2ccd5b_story.html

[4] http://www.washingtonpost.com/world/national-security/fbi-investigation-of-broadwell-reveals-bureaus-comprehensive-access-to-electronic-communications/2012/11/17/5f27d636-3012-11e2-9f50-0308e1e75445_story.html

[5] http://articles.washingtonpost.com/2012-11-15/world/35504207_1_petraeus-foreign-policy-paula-broadwell

[6] http://www.nytimes.com/2012/06/01/world/middleeast/obama-ordered-wave-of-cyberattacks-against-iran.html

[7] http://www.washingtonpost.com/blogs/blogpost/post/flame-faq-all-you-need-to-know-about-the-virus/2012/06/20/gJQAAlrTqV_blog.html

[8] http://www.huffingtonpost.com/2012/05/07/al-qaeda-bomb-plot-foiled_n_1497734.html

[9] http://www.washingtonpost.com/politics/justice-department-top-leadership-team-stabilizes-with-senate-confirmations/2011/07/01/AGzshmwH_story.html

[10] http://articles.washingtonpost.com/2012-11-13/national/35506816_1_david-khawam-social-ambassador-military-brass

[11] http://www.washingtonpost.com/world/national-security/gen-john-allen-cleared-in-misconduct-inquiry/2013/01/22/479c776a-64dd-11e2-9e1b-07db1d2ccd5b_story.html