Monday
5 Feb 2007
American Graffiti or Al Qaeda Threat?
By Annie Jacobsen in category U.S. Homeland Security
The first time flight attendant Charlotte Smith* found the mysterious writing inside the bathroom cabinet of a 757 aircraft while flying for a major airline, she got spooked. It was February 23, 2005. A flight attendant for twelve years, Charlotte was working the coach class cabin of flight 853 traveling from New Jersey to California. Everything was normal, until her discovery.
In the first of a series of interviews, Charlotte explained:
“By a fluke, I opened up a compartment in the mid-galley lav [lavatory] and there it was, on the back of the cabinet behind where you refill the paper towels:
CHENAULT LIVES
ZATU”

The three words Charlotte found were handwritten in black marker and in capital letters. Puzzled by the presence of odd handwriting on an area of an airplane that is off limits to passengers, Charlotte began to look further. She then opened up each of the compartments in that lavatory, carefully examining each panel wall. That’s when she discovered another set of words, also written in black marker, but inside a different cabinet.
Those words were:
“CHENAULT IS KING“
Charlotte documented the incident. She noted the time, the flight number and the aircraft identification number. Charlotte brought the unusual discovery to the captain’s attention. The captain was not concerned. Instead, he told Charlotte he would make sure the cleaning crew cleaned it up.
At home, Charlotte filed a report about the incident with the airline’s Flight Safety Reporting System program, or FASRS. But the story of the enigmatic writing does not end there. Charlotte didn’t think much more about the incident until fourteen months later. On April 22, 2006, Charlotte found it again.

Charlotte explained:
“It was 23:05 [11:05 p.m.] at night, in flight. It was a red-eye from the west coast going back east. It was my job to check the bathroom. I started opening up the cabinets to do the check. And there it was again, hidden away behind a different panel, running along a black wire on the cabinet:
CHENAULT IS KING
ZATU“
That wasn’t all, Charlotte then opened up all the compartments. “On top of where you stuff paper towels, a second thing was written,” Charlotte explained.
There, it read:
CHENAULT LIVES
Now Charlotte was seriously concerned. “I told the captain immediately. Immediately! It was a 757 aircraft again. And when I checked the aircraft number, I discovered it was the same aircraft number as I’d put in my report [14 months] before. Aircraft number 5428, I was not comfortable with that. There are, I think, thirty-something 757’s in the carrier’s fleet. I said to myself, this is the same plane and it’s similar writing in a different place. It’s been over a year.”

Charlotte reported the incident to the captain. She pointed out the similarities and the differences between what she’d witnessed previously and the situation she was witnessing now. The captain told Charlotte the writing wasn’t something to worry about. But Charlotte was not convinced. Using her cell phone camera, she photographed the evidence. This time, when she filed a second safety report through the airline’s reporting system, Charlotte demanded an answer. She wanted to make sure someone was looking into this second, suspicious incident involving the air carrier’s planes. In her report, she checked the box that would notify her union.
No answer came. Not from the airlines corporate security and not from the union. Not from Homeland Security or the FBI. If one is a coincidence, two begins a pattern. Flight attendant Charlotte Smith was officially alarmed.
What is Federal Protocol For Reporting Suspicious Behavior?
After 9/11, Congress signed into law the Homeland Security Act of 2002 and the Department of Homeland Security (DHS) was born. Of the five major functions of DHS outlined in the Bill, the first function is “information analysis.” To prevent another terrorist attack inside the United States, the authors of the Bill determined that no single function of DHS is more important than information gathering and analysis.
Indeed, many of the 180,000 DHS employees would be the eyes and ears in the field. Homeland Security agents would gather information and send it up the chain of command. That information would be assessed and analyzed and, if appropriate, sent further up the chain. Section 203 of the Homeland Security Act establishes the Homeland Secretary’s “entitlement” to information. Unless the President himself directs otherwise, DHS Secretary Michael Chertoff is entitled to all information gathered in the field.
One of the few areas where people in the civil sector are obligated to provide information to the federal government occurs in the aviation domain. Airline crews are required to report suspicious behavior in the field to federal officials. Even in a post 9/11 world, this was not always the case. In the early days of Homeland Security, airline reporting procedures were vague and directed to airline corporate security. This made for a gap in aviation security. Former FAA security chief, Billie Vincent, explains why this system was flawed: “I would doubt that any U.S. airline security departments have the capability or the training to detect any level of surveillance.” And so the security hole was plugged.
The way the hole was fixed was by tasking the Federal Air Marshal Service (FAMS) with the job. In 2003, the FAMS briefed airline corporate Security Directors on how to instruct flight crews to report suspicious incidents. The new protocol is for airline crews to contact the Department of Homeland Security via the newly created email address xxxxxxxxxx@dhs.gov.
From a Federal Air Marshal Service directive made available to The Aviation Nation:
Reporting of Suspicious Incidents
Briefing to Airline Corporate Security Directors
Airline Corporate Security Directors will inform their personnel of the following:
• All reports will be vetted and forwarded to the National JTTF [Joint Terrorism Task Force] for appropriate analysis and investigation
• Follow-up investigation will be coordinated with the local FAMS Field Office, airport police agency and local FBI JTTF or FBI Field Office
This directive to airline corporate Security Directors couldn’t have been more clear: raw data gathered in the field needs to go to federal law enforcement agencies. It’s the job of federal law enforcement, not the airlines, to decide what raw data mandates further investigation and what does not. Federal law enforcement agents, trained in analysis, are the ones equipped to do the job.
But Charlotte, like an overwhelming number of the more than fifty flight attendants I’ve interviewed in the past two years, was never made aware of the email address to DHS, and did not know she was supposed to report suspicious incidents directly to the Federal Air Marshal Service. She’d been trained only to file a report with the airline’s Flight Attendant Safety Reporting System, or FASRS – which is exactly what she did.
More Puzzling Words on the Aircraft Lavatory Walls, And More Still
August 19th, 2006 was a particularly anxious time for flight crews. Nine days earlier, British Metropolitan police and MI5 broke apart a terrorist airplane mega-plot, one in which as many as 10 UK-US bound airplanes were to be blown up, simultaneously, mid-flight over the Atlantic ocean. The U.S. Department of Homeland Security put the aviation domain on “red-alert” — the first time since 9/11. Tension was high with federal officials warning the public that as many as five terror suspects were still on the loose. The air carrier’s planes were named as being targeted in the foiled terror plot.
That day, Charlotte was working flight 577, a Chicago to Sacramento flight. This is from her official FASRS report of the flight:
“I was in the aft [back] galley waiting for catering to finish. I went to the aft LAV to do my preflight check. I opened one of the components and found the names written in black marker. CHENAULT IS KING. SHACK KCAHS [written in reverse]. This is the 3rd time I have found this and other names in 757 lavatories since Feb. 2005.”
Immediately after finding the words, Charlotte took the information to the captain. She told the captain the history of her finding messages written on the walls of the aircraft bathroom cabinets. The captain did not see this situation as a security threat; Charlotte did. “I couldn’t fly,” Charlotte explained, “I’ve never done that before. I could not fly.”
Before Charlotte left the aircraft, Charlotte documented the incident. Again, using her cell phone camera, she took photographs. At home, Charlotte filled out what would be her third FASRS incident report for the airlines. Four days later, she received this in an email from corporate security:
“Please feel free to report any issues at any time. If you have photos, please send them to me at WHQSE. Ill [sic] pass this info on to our investigators for any action they feel relevant.”
Charlotte provided corporate security with her photographs. No one from federal law enforcement followed up. Had the airlines’ corporate security department failed to share this raw data with the U.S. Department of Homeland Security and the Federal Bureau of Investigation?
Federal Air Marshals On Board
Nine days later, on September 2, 2006, Charlotte was working a flight with Federal Air Marshals on board. She told one of the air marshals about the three incidents of hidden writing on aircraft lavatory component walls. The air marshal asked Charlotte to email him the photographs. Five days later, the air marshal sent Charlotte this email in response:
To:
From:
Sent: Thu, 7 Sep 2006 11:20 AM
Subject: RE: xxx xx PicsHey girl,
I have attempted to gather some more info on these words/names with little luck. My personal opinion though, is that I do not believe this has a nexus to terrorism. I do find these occurrences extremely odd due to being specific to a certain types of aircraft etc, but do not believe there is any danger posed to these aircraft independent of any additional factors. Let me know if you find any more or receive any more info.
Take care,
(name omitted)
Charlotte had not asked the Federal Air Marshal for his personal opinion. Indeed, the air marshal’s personal opinion is irrelevant when it comes to reporting procedures and federal law enforcement protocol. The protocol that a U.S. Federal Air Marshal is required to follow was established by the Homeland Security Act of 2002; a Federal Air Marshal is part of the “personnel structure to support the Secretary” of Homeland Security.
The reporting procedure for a Federal Air Marshal when receiving raw data is explicit. According to documents shown to The Aviation Nation, protocol requires an air marshal to report suspicious incidents — either by an electronic Surveillance Detection Report (SDR) or by a written Mission Report — which gets forwarded to an air marshal working in the Joint Terrorism Task Force – or JTTF. That JTTF air marshal, in turn, has three direct reporting chains of command:
- The FBI Supervisor
- The Federal Air Marshal, Special Agent-in-Charge
- The Federal Air Marshal Service Investigative Branch
By having three streams into which the raw data can flow, the system of checks and balances is in place. No single person is tasked with the immediate decision of deciding if raw field data is or is not worthy of further analysis or investigation.

Another Crew Member Finds Suspicious Writing
Charlotte continued to do her job with perseverance, commitment and with the safety and security of the airline passengers in mind. And so now, while doing her job, Charlotte carried with her the photographs she’d collected of the puzzling and suspicious writings on the aircraft lavatory component walls. Charlotte began to ask other flight attendants to be on the lookout for this kind of writing as well. One of the flight attendants Charlotte asked was Jane Green**, a flight attendant for seventeen years.
Jane told me in our interview:
“Charlotte showed me her pictures, I made a mental note. Every time I was assigned to check the bathrooms, I did with extra care. December 29th [2006] it was flight #9915, a 737B. I was in the aft right lav, refilling the Kleenex box. I pull down, pull out and there I see,
CHENAULT LIVES.”
Jane was so surprised when she too found the cryptic message, she asked her flying partner to take a picture of the words with his cell phone as well. “You had to be looking for it to see it,” Jane explained.

Now Jane was alarmed. Of the air carrier’s fleet of 741 planes, Jane was shocked to find the writing on one of her assigned flights. But the incidents of suspicious writing did not stop there. Twelve days later, on January 10 [2007], Jane was working an international flight on one of the airline’s wide-bodied 777 aircraft.
“It was the last minute, right before landing and I was re-stuffing the tissue box. It was the forward lav, left side I was working in. I had to literally pull the compartment panel down, stick my hand up there to get the box to change. There’s metal up there inside, and the tissue box is housed upside down. I’m tugging on it, I literally have to crane my neck around to see the tissue box, I’m almost upside down and I see it, ‘CHENAULT LIVES.’ Then it says, ‘ZATU.’”

The next time Jane was flying with Federal Air Marshals, she told one of the air marshals what she’d found. “The air marshal laughed at me,” Jane explained, “‘You’re paranoid,’ he said.”
I asked Jane if she thought the strange writings could be explained as being graffiti. Jane said, “The average graffiti artist wants his or her work seen. This writing is hidden to everyone but the person who is looking for it. You have to pull something open to find it. You have to literally turn your neck upside down. When I pass under a bridge and I see, ‘I love Suzie,’ I think, that’s graffiti. You don’t think of ‘ZATU’ hidden behind a bathroom component wall as being just graffiti.”

And even if it were just graffiti, isn’t that up to the U.S. Department of Homeland Security, the Joint Terrorism Task Force, and the FBI to decide?
In my interviews with Charlotte, Jane and other flight attendants, from reviewing their photographs, their flight attendant safety reports and email correspondences, what is clear is that there’s a lot of raw data that, pursuant to the Homeland Security Act of 2002, federal agents have an obligation to review.
CHENAULT IS KING, CHENAULT LIVES, SCHAK SHACK, KCAHS, ZATU, LU and the numbers 2000 and 06 have appeared:
-
In at least 12 separate instances on the air carrier’s planes
-
As reported by at least 3 flights attendants
-
Witnessed by at least 5 flight attendants
-
Photographed by at least 3 flight attendants
-
Involving at least 4 Flight Safety Reporting System reports
-
Brought to the attention of at least 5 Federal Air Marshals
-
Involving at least 3 separate aircraft types (777, 757, 737)
-
On international and domestic flights…
(To see all twelve photographs of these incidents, Click Here)
In the Absence of DHS and FBI, Where is The Di Vinci Code Author, Dan Brown?
I thought I’d take a gander at what I would come up with as far as what “Chenault is King,” “Chenault Lives” and “Zatu” might mean. To do this, I enlisted the help of a federal counterterrorism agent, someone who spent decades as a criminal investigator before his post 9/11 call to arms. Together, we did a few Google searches and here’s what we found:
Chenault is King: A Google search of this phrase sends you to the Ohio History Online Encyclopedia where you can read the following:
Marcus Chenault, a twenty-one year old, African-American man from Ohio, murdered Alberta Williams King — the mother of Martin Luther King, Jr., on June 30, 1974, while she was playing the organ during a church service in the Ebenezer Baptist Church in Atlanta, Georgia. Chenault also killed a church deacon in the assault. It remains unclear why Chenault killed King but after the incident, Chenault shouted, “all Christians are my enemies.” Chenault — diagnosed a schizophrenic — was tried and sentenced to death but died in prison in 1995. (Read more about Chenault in TIME magazine)

Chenault: A Google search of the word “Chenault” by itself sends you to the Chenault Family National Association, an organization dedicated to perpetuating the understanding of the Chenault family lineage. Originally spelled “de Cheneau,” the family has an interesting crest — one that, like the flag of Islam, bears an icon of a red crescent:
Zatu: One Google search for “Zatu” delivers a Spanish Wikipedia entry about a popular rap star whose real name is Saturnino Rey. Translated into English the word “Rey” becomes “King.” But “Zatu” has another meaning in the ancient, Middle Eastern world. Another search of “Zatu” delivers the Dictionary of Islam from Answering-Islam.org.uk. There, you learn that “Zatu” means the road to Iraq.
“On each of the city stages, various roads lead to Makkah [Mecca, Saudi Arabia] there are at a distance of about five or six miles from the city stages called Miqat. The following are the names. On the Medina road, the stage is called Zu’l-Halifah; on the Iraq road, Zatu ‘Arq…”
Considering that we are at war with Iraq, that Al Qaeda believes all Christians are its enemies, and Al Qaeda aims to fly the red crescent flag of Islam all over the globe, you may call me Dan Brown if you like — but I say, call in Homeland Security and the FBI.
To Be Continued…
* Not her real name
** Not her real name