This thread has been locked, it will not receive new replies. |
Locked on 01/26/2004 2:00:53 PM PST by Admin Moderator, reason:
The size of this thread is causing FR to slow down whenever it is accessed. It is going to be locked and moved to the chat/general interest forum. If anyone wants to post a ‘Part 2’ thread, go ahead, but post it to chat. Thank You http://www.freerepublic.com/focus/f-chat/1065689/posts |
Posted on 11/03/2003 9:17:27 AM PST by tubavil
Edited on 01/26/2004 3:58:09 PM PST by Sidebar Moderator. [history]
Monday, November 3, 2003
A new message was posted in the last few hours by the Jeddah-based al-Qaeda-linked Al-Islah (Reform) society calling on Muslims to flee New York, Washington and Los Angeles in advance of major al Qaeda attacks in those cities. This is revealed by DEBKAfile.
The message accuses the United States of predetermining its end (doom) by its policies. ?The Jews rule the Pentagon by remote control and (are the cause) of Muslims being killed in every corner of the world. The United States should therefore expect more blows.?
The message is signed on behalf of the al Bayan (The Threat) movement by ?your warrior brother, Abul Hassan al Khadrami?.
Our Muslim expert identifies the name of the signatory as belonging to a Yemeni from Hadhrameuth, the Bin Ladens? place of origin where Osama enjoys substantial tribal support.
DEBKAfile?s counter-terror sources stress that warnings appearing on these forums are taken both very seriously and with caution by the intelligence services keeping track of the terrorist network?s electronic traffic.
Last November, Jeddah-based fundamentalist forums addressed a message to an Al Qaeda member, saying whoever understands ? understands; whoever knows, knows, but we are marching towards an operation that will take us to Paradise. Three days later, the Mombasa Paradise hotel was blown up killing 12 Kenyans and 3 Israelis and a failed shoulder-launched Strela anti-air missile missed an Israeli airliner at Mombasa airport.
I believe it was a FReeper that posted the links and documents. I believe the messages from "Daleel" are from a real terrorist.
Sorry for the confusion. Mea culpa.
Deeply saddened...
Malaysian e-mail virus exploits terrorism fears
A virus hidden in an e-mail purporting to warn of planned terrorist attacks is spreading in Malaysia, according to published reports.
Potential victims receive a message labeled "Urgent message to all citizens of Malaysia" that claims to warn of five planned terrorist attacks, with the times and places supposedly leaked by an anonymous Malaysian government source. The e-mail says it seeks to minimize the number of terrorist victims by spreading the information on the planned attacks.
The text of the e-mail contains a link that claims to connect to a Web site with important information regarding the supposed attacks. However, the Malaysian Computer Emergency Response Team (MyCERT) said clicking the link actually triggers the installation of a virus, which attempts to connect to three different Internet hosts. MyCERT's Web site said the virus was similar to the Backdoor.Tofger Trojan horse reported in early December 2003.
MyCERT also said, according to The Star, that the three Internet hosts to which the virus attempts to connect could have had their security compromised already. MyCERT has already notified the three hosts' system administrators.
Aaron Weisburd at Internet Haganah has discovered that Daleel Al-Mojahid is posting from Dubai, and doesn't seem to have any real connection with Al-Qaeda.
That IP address is assigned to an ISP run by the phone company in the United Arab Emirates, in Dubai. The IP address is also consistent with those posted on the previous day, which would indicate that it is not a dialup IP but a static or semi-static IP address (i.e. a business or an internet cafe perhaps).
Normally when you dial up you are assigned an IP address randomly from a pool of available IP addresses and it is rare to get the same IP address consistently. If you are on DSL, cable modem, ISDN, T1, or other always-on connection, you tend to retain the lease on the IP address for a set period of time. Either way, the ISP should be able to track the IP address to a user.
Back in early November Sabertooth started archives of Daleel's postings. Daleel was using IP address 194.170.173.50 which was also in Dubai.
See http://www.freerepublic.com/focus/f-news/1014397/posts?page=24#24
Yahoo, Hotmail, and the other freemail providers are nice enough to include the originating IP address in their headers :)
Header of Message
------------------------------------------------------------
From cave_of_darkness@y... Sun Dec 28 00:06:40 2003
Return-Path:
X-Sender: cave_of_darkness@y...
X-Apparently-To: daleelalmojahid@yahoogroups.com
Received: (qmail 60097 invoked from network); 28 Dec 2003 08:06:39 -0000
Received: from unknown (66.218.66.172)
by m11.grp.scd.yahoo.com with QMQP; 28 Dec 2003 08:06:39 -0000
Received: from unknown (HELO n24.grp.scd.yahoo.com) (66.218.66.80)
by mta4.grp.scd.yahoo.com with SMTP; 28 Dec 2003 08:06:39 -0000
Received: from [66.218.66.120] by n24.grp.scd.yahoo.com with NNFMP; 28 Dec 2003 08:06:39 -0000
Date: Sun, 28 Dec 2003 08:06:39 -0000
To: daleelalmojahid@yahoogroups.com
Message-ID:
User-Agent: eGroups-EW/0.82
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Length: 17971
X-Mailer: Yahoo Groups Message Poster
X-eGroups-Remote-IP: 66.218.66.80
From: "cave_of_darkness"
X-Originating-IP: 195.229.241.164
Subject: The Will of Muhammed bin Shathaf ash-Shihri
X-Yahoo-Group-Post: member; u=170343621
X-Yahoo-Profile: cave_of_darkness
Result of WHOIS on IP address 195.229.241.164
--------------------------------------------------------
Trying whois -h whois.ripe.net 195.229.241.164
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html
inetnum: 195.229.0.0 - 195.229.255.255
netname: AE-EMIRNET-971125
descr: Emirates Telecommunications Corporation
descr: Internet Service provider
country: AE
admin-c: AH1223-RIPE
admin-c: SAS88-RIPE
tech-c: SMA3-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: ETISALAT-MNT
mnt-routes: ETISALAT-MNT
changed: hostmaster@ripe.net 19971125
changed: hostmaster@ripe.net 20021230
source: RIPE
route: 195.229.240.0/22
descr: Etisalat
origin: AS5384
mnt-by: ETISALAT-MNT
changed: noc@emix.net.ae 20030630
source: RIPE
person: Sultan Al Shamsi
address: Emirates Telecommunication Corporation
address: P O Box 1150, Dubai, UAE
phone: +971 4 2025510
fax-no: +971 4 2948300
e-mail: sultan@uaenic.ae
nic-hdl: SAS88-RIPE
mnt-by: ETISALAT-MNT
changed: sultan@uaenic.ae 20010417
changed: sultan@uaenic.ae 20020714
source: RIPE
person: Abdulla Hashim
address: Emirates Telecommunication Corporation
address: P.O. Box 1150, Dubai, UAE
phone: +971 4 2025510
fax-no: +971 4 2948300
e-mail: hashim@emirates.net.ae
nic-hdl: AH1223-RIPE
mnt-by: ETISALAT-MNT
changed: fareedak@emirates.net.ae 19981026
changed: sultan@uaenic.ae 20010428
changed: sultan@uaenic.ae 20020714
source: RIPE
person: Saleem Mohd Albalooshi
address: Emirates Telecommunications Corporation.
address: P.O. Box 1150, Dubai, UAE
phone: +971 4 2022959
fax-no: +971 4 2228884
e-mail: saleemmb@emirates.net.ae
nic-hdl: SMA3-RIPE
mnt-by: ETISALAT-MNT
changed: fareedak@emirates.net.ae 19981027
changed: sultan@uaenic.ae 20020714
source: RIPE
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.