Dry Runs and Probes


taliban_militia_001.jpgIn an interview published today, India's former Foreign Affairs Chief, Jaswant Singh, calls the hijacking of Indian Air 814 on December 24, 1999 a "dry run" for the terrorist attacks of 9/11.

Singh led the negotiations with the Taliban and Pakistani terrorists that resulted in a prisoner-for-hostage exchange. One-hundred and sixty-six airplane passengers were swapped for convicted terrorists Omar Sheikh, Maulana Masood Azhar and Mushtaq Ahmed Zagar — all three of whom now have considerably more blood on their hands, including Daniel Pearl's.

I have written about Indian Air 814, interviewed Dr. Jeanne Moore — the only American hostage on board — and maintain that this hijacking is a key to understanding the origins of the nexus of terror between Al Qaeda, Pakistani terrorists, the Taliban and Pakistan's ISI.

The collaborative efforts of these terrorist groups and their state sponsors continues today and the situation is as perilous now as it was on December 23, 1999 and September 10, 2001 — as far as aviation security is concerned. Al Qaeda operative Rashid Rauf was sprung from prison last month — with the help of Pakistani police. Rauf is the alleged mastermind of the London Planes Plot of 2006. He is also related by marriage to Maulana Masood Azhar. 

From 'In Service of Emergent India': An Interview with Jaswant Singh by Susan Weinstein: 

Q: What was your strategy for dealing with the terrorists who hijacked an Indian airplane? Are there lessons for the United States in India's experience?

A: [Janswant Singh] The hijack of IC-814 [Indian Airlines Flight 814; Dec. 24, 1999] from Kathmandu finally to Kandahar in Afghanistan was a most painful episode. It was the worst possible site to deal with the situation. There was not even a telephone connection. And it was Christmas Eve. The world was celebrating, while there were 166 human beings confined in a small space in bitter cold with one toilet. You cannot have a strategy when the situation is changing by the hour. Because the Taliban controlled Kandahar, it was possibly the worst place for India to negotiate the release of its citizens. And we had intelligence saying they would blow the plane up on New Year's Eve for the year 2000, so sitting them out was not an option. They asked for $500 million and the release of 36 terrorists in captivity. Government had a responsibility to negotiate. We broke down the demands to the release of three terrorists by Dec. 31. Of course it is only later that I realized the manner in which the hijack was conducted, using an aircraft as a weapon of destruction, had an uncanny similarity to the subsequent attacks on New York's twin towers and the Pentagon. It was a kind of dry run for what was to come. I shared this view at the time with friends in the U.S. but it is partly human nature that unless you experience the danger yourself, it is difficult to heed warnings. 

This TSA Suspicious Incident #177, Unclassified but For Official Use Only (U//FOUO), "has many of the elements of pre-operational terrorist planning" according to TSA Office of Intelligence. It was leaked to me earlier today in my ongoing efforts to compile terrorist dry runs and probes on airplanes.

A FFDO (Federal Flight Deck Officer — i.e. armed pilot) flying in non-mission status on October 24, 2007, on a flight from Washington D.C. to Milwaukee, identified himself to flight crew in advance of take-off. When flight crew witnessed suspicious behavior by four passengers, they reported the information to the FFDO. The following unfolded: 

(U//FOUO) Suspicious Activity Onboard Flight to Milwaukee

(U//FOUO) On 24 October 2007, crewmembers aboard a Reagan-Washington National to Milwaukee General Mitchell International Airport flight reported to a Federal Flight Deck Officer (FFDO) flying in non-mission status that they noticed suspicious behavior by four passengers.

One of the subjects entered and exited the rear aircraft lavatory three times and failed to comply with crewmembers' verbal instructions. The FFDO seated himself near this subject to observe his behavior.  Shortly afterward, two more of the subjects moved into the aisles and entered both lavatories.  After one of the subjects vacated the rear left lavatory, the FFDO searched it, noting that the mirror above the sink was not properly latched. 

He exited the lavatory and a fourth subject was waiting second in line with a passenger in front of him. The FFDO offered the fourth subject access to the right lavatory, but the subject declined, claiming the right lavatory was dirty.The FFDO noted the right lavatory was clean, and the subject reluctantly entered the right lavatory and remained there for an extended period of time. (TSA/SD-10-3849-07)

(U//FOUO) TSA Office of Intelligence Comment: Although there is no information that the aircraft was being specifically targeted for a future terrorist attack, the actions of the four passengers are highly suspicious. FFDO confirmation of possible tampering of the lavatory mirror in one of the lavatories could be indicative of an attempt to locate concealment areas for smuggling criminal contraband or terrorist materials.  In this case, it appears the left lavatory was the sole area of interest for the passengers. One subject's excuse that the right lavatory was dirty when it was confirmed to be clean shows the four passengers had a specific, operational objective. Although unconfirmed at this time, this incident has many of the elements of pre-operational terrorist planning. 

Source: TSA Suspicious Incidents Report #177

Before August 2006, the TSA refused to admit publicly that terrorists took dry runs and probes on U.S. aircraft (after the London Planes Plot, the White House stated, "we know they do dry runs" and TSA quietly agreed). Unless there have been 177 such incidents in the past fifteen months, one wonders when TSA Suspicious Incident Reports #1-#176 occurred — and what information they contain?

Frontier Airlines spokesman Joe Hodas has confirmed the incident on Flight 623 which occurred Sunday, October 7, on a Denver-to-Detroit flight. The security incident involved an Arab man who locked himself in the first class lavatory (adjacent to the cockpit) and refused to come out despite orders to do so from flight crew. The FBI met the flight — along with more than a dozen law enforcement officers. 

In our interview, Hodas told me, "[The Passenger] was very intently watching the flight attendants. Before he went in [to the bathroom] for so long, he was up and down in between his seat and the bathroom. We alerted the FBI. After the flight landed, the FBI took over. I was told the passenger was shaving in the bathroom. The passenger did nothing that was hampering the immediate safety of the aircraft, but our flight crew felt his behavior was suspicious and that's why took the actions we did. Our flight attendants know how to recognize behavior that might jeopardize an aircraft." 

Ten points for Frontier Airlines. Fifty points for the alert flight attendant. This kind of proactive behavior by a sharp-thinking flight crew, coupled with a supportive airline, illustrates to groups like the Council on American-Islamic Relations (CAIR) — financiers of the Flying Imams' federal lawsuit — that suspicious behavior on airplanes will not be tolerated. And that flight crew will not be bullied into silence for fear of egregious lawsuits sponsored by groups like CAIR.

And another ten points to Frontier passenger, Timothy Furnas, who originally contacted me about this incident. Without eye-witnesses who are willing to come forward with their accounts, we are left knowing only what that Department of Homeland Security is willing to tell. 

 

This morning, I discussed Frontier Flight 623 with Greg Allen on his radio show, The Right Balance

On Tuesday, police at Panama City's Tocumen International Airport arrested six Syrian men traveling on Copa Airlines Flight 231 after other passengers feared "the suspects were going to storm the cockpit armed with cutlery," and told crew about it. (Go, Juan and Juanita Doe!)

According to Panama's National Police director, Rolando Mirones, the Syrians approached the cockpit "apparently with the intention of opening a door." Police Director Jose Ayu Prado issued a statement this morning stating that the Syrians had indeed "approached the cockpit door and tried to open it."

The Syrians say they approached the cockpit by mistake and that they were looking for the bathroom.

Also at issue on the Cuba-to-Panama flight was a missing knife. Reporter Juan Zamorano has more from Police Chief Mirones in a story for the Associated Press:

Copa Airlines crew simply notified authorities on the ground that a knife was missing after they served the meal in the first-class cabin, where the Syrians were sitting. He did not say whether the Syrians were suspected of taking the knife.

Mirones said the suspects "did not commit any violent acts inside the airplane, but they raised suspicions," adding: "That is why we are investigating."

The Syrians, ages 17 to 30, were on their way to Haiti and Jamaica via Panama.  

The cockpit-door-mistaken-for-the-bathroom ruse has been used in other aviation security probes before, including one by a Saudi student traveling on a Southwest Airlines flight — before 9/11. This incident is listed in The 9/11 Commission Report as a dry run (the student was deported after 9/11). A similar ruse was more recently used in by three Egyptian nationals trying to get into the cockpit during a Prague-to-Oslo flight. Instead of looking for the bathroom, these Egyptians claimed they were looking "to buy some chewing gum." Czech Intelligence Agency, BIS, wrote in its 2006 annual report that three “Egyptians [were] suspected of [taking part] in the preparation of a terrorist attack on a civilian aircraft.”  

Further reading: Dry Runs and Probes, Czech Republic's Official Report on Terrorist Dry Run, DHS Report on Northwest Flight 327.

UPDATE: Putting the public's right to know before the TSA's desire to conceal, MSNBC has posted the unclassified bulletin which outlines the "dry run" incidents at four US airports. All of the incidents involve passengers carrying what appear to be mock IEDs (improvised explosive devices). The first took place in September 2006 and the most recent occurred this month. Earlier today, after the TSA discovered the bulletin had been leaked, spokesperson Ellen Howe had this to say to the Associated Press:

"There is no credible, specific threat here," TSA spokeswoman Ellen Howe said Tuesday. "Don't panic. We do these things all the time."  

I asked a Federal Air Marshal what he thought of the TSA's advisory bulletin to law enforcement; he said he had not received anything from TSA on the threatening "surge in recent suspicious incidents." What this means is that the public is better informed about the current terrorist threat to airplanes — thanks to MSNBC — than our own, US Federal Air Marshals are. But don't panic. We do these things all the time.

Here is the bulletin, cut and pasted. The MSNBC link to the original document is below. Bold letters are TSA's.

(U) Incidents at U.S. Airports May Suggest Possible Pre-Attack Probing
 
(U//FOUO) A surge in recent suspicious incidents at U.S. airports may indicate terrorists are conducting pre-attack security probes and “dry runs” similar to dress rehearsals. Past terrorist attacks and plots show that such testing generally indicates attacks will soon follow, according to a joint FBI and Homeland Security assessment.
 
(U//FOUO) Transportation security personnel and law enforcement officers nationwide have intercepted several items at airports resembling improvised explosive device (IED) components. These items include wires, switches, pipes or tubes, cell phone components, and dense clay-like substances. The unusual nature and increase in number of these improvised items raise concern, and TSA personnel should continue vigilance for groupings of ordinary items that look like IED components. Terrorists may repeat operational tests to desensitize, distract, or adapt plans for specific environments. Linking repetitious probing incidents or associated items possibly could alert authorities to future terrorist plots, tactics, and personalities.

(U//FOUO) Recent Suspicious Incidents
(U//FOUO) Individuals involved in these incidents were of varying gender, and initial investigations do not link them with criminal or terrorist organizations. However, most passengers’ explanations for carrying the suspicious items were questionable, and some investigations are still ongoing. Many of the incidents caused airport terminal evacuations and at times, brief closures:

(U//FOUO) 5 July 2007, San Diego, CA–A U.S. Person’s (USPER) checked baggage contained two icepacks covered in duct tape. The icepacks had clay inside them rather than the normal blue gel.

(U//FOUO) 4 June 2007, Milwaukee, WI–The carry-on baggage of a USPER contained several items resembling IED components, such as a wire coil wrapped around a possible initiator, an electrical switch, batteries, three tubes, and two blocks of cheese.

(U//FOUO) 8 November 2006, Houston, TX–A USPER’s checked baggage contained a plastic bag with a 9-volt battery, wires, a block of brown clay-like minerals, and pipes.

(U//FOUO) 16 September 2006, Baltimore, MD–The checked baggage of a couple contained a plastic bag with a block of processed cheese taped to another plastic bag holding a cellular phone charger.

(U//FOUO) Past Examples of Dry Runs

(U//FOUO) A recent joint FBI and Homeland Security assessment provides some examples of past terrorist attacks and plots where dry runs or probing played a major operational role:

(U) August 2006 Plot to Blow up Airliners Using Liquid Explosives–Terrorists discussed dry runs to test airport security procedures.

(U) 7 July 2005 London Bombings–The operatives discreetly practiced a mock attack while riding the London subway in late June 2005.

(U) 11 September 2001 Attacks–The hijackers rehearsed events aboard transcontinental flights just months prior to the attacks.

(U) 1994 “Operation Bojinka” Plot– Ramzi Yousef planned to simultaneously bomb multiple airplanes while flying over the Pacific Ocean and his group conducted dry runs in environments similar to that of the intended targets.

(U//FOUO) The terrorist plots and attacks listed above demonstrate that operational test results hold unlimited value for terrorist planners and may even prepare terrorist operators for stress experienced on the actual attack day. Identifying dry runs and probes—even though they are often seen in the end stages of pre-attack planning—is key to preventing future terrorist attacks on transportation modes.

Link to view TSA advisory:
http://msnbcmedia.msn.com/i/msnbc/sections/NEWS/pdfs/airport%20warning.pdf

TSA statement: http://www.tsa.gov/press/happenings/intelligence_bulletin.shtm

The Transportation Security Administration (TSA) has issued a bulletin warning the aviation sector of possible terror attacks based on what appear to be "dry runs" and "pre-attack security probes" at US airports. The warning comes after TSA screeners at airports in San Diego, Houston, Milwaukee and Baltimore confiscated several items from passengers that strangely resemble IEDs (improvised explosive devices). NBC news obtained a copy of the bulletin

According to the bulletin, dated July 20, TSA personnel have confiscated items "resembling improvised explosive device (IED) components." The items included wires, switches, pipes and "dense clay-like substances," and were found not only at Lindbergh Field, but also at Milwaukee, Houston and Baltimore's airports. The finds were described as a "surge in recent suspicious incidents."

…law enforcement and airport officials are urged to be aware that terrorists "may be" conducting "pre-attack security probes" or "dry-runs" at airports across the country, including San Diego.

Two separate incidents involving mock IEDs were alarming in their similarities: 

In two of the four incidents, the TSA said blocks of processed cheese were connected to wires and an electrical switch, or the cheese was taped to a bag holding a cell-phone charger.

Sounds like a mock IED? Of course it does. Why would any airplane traveler in their right mind travel with such a thing during an already jittery summer where people are still trying to wrap their brains around the newest item on a terrorists' resume: medical doctor. (Those who can cure you will kill you.) But could the TSA make a link to terrorism? Of course they couldn't. 

While the people found carrying the items were not linked to terrorist organizations, the TSA said, "most passengers' explanations for carrying the suspicious items were questionable, and some investigations are still ongoing."

Why does this sound familiar? Because it is. Just a few months ago, I wrote a column for WomensWallStreet.com about Fadhel al-Maliki, the Iraqi national caught at Los Angeles International Airport with a mock IED hidden up his rectum. That wasn't "officially" linked to terrorism either. So what were the wires for? Read on:

On March 6, 2007 Fadhel al-Maliki, a 35-year old Iraqi national, attempted to board an early morning, cross-country, US Airways flight out of Los Angeles International Airport. Hidden in his rectum was a device containing electrical wires, chewing gum and a rock. An airport screener noticed that al-Maliki was acting suspiciously. "He was nervous and sweating," I was told by the FBI.

Al-Maliki was asked to step aside and answer a few questions. Also according to my interview with the FBI, only after some heavy questioning about his odd behavior, and after being repeatedly asked by federal agents why he was sweating, did the former security guard admit to the untoward items hidden inside his lower body cavity. "They are for therapeutic reasons…to relieve stress," al-Maliki said. He claimed the rock was from another planet. The bomb squad was called in.

Larry Fetters, security director for the Transportation Security Administration (TSA) at the airport, told reporters that al-Maliki "was secreting these items in a body cavity and that was a great concern because there were also some electric wires associated with that body cavity." Then Fetter stated, "there never was a threat."  

People around the country began to have a prurient, scatological field day with the circumstances under which al-Maliki had been caught. Newspaper headlines like "Bum Threat Triggers Alert" helped the jokes roll along as did chuckles from law enforcement officials; the first FBI agent I spoke with laughed during our interview.What al-Maliki had done in trying to board an airplane with a "device" concealed up his bum  — no matter how suspicious (and/or perverted) it is — was not a crime. Then again Mohammad Atta was not a terrorist on September 10. But why was al-Maliki still being detained by Homeland Security as the hah-hah articles were going to print? It's all so funny — until the next plane disappears off the radar screen, I suppose. 

DHS declassified and issued a similar "dry runs" warning in November 2006 which I wrote about here:DHS Dry Runs Signal Imminent Terror Attack.

Further reading on Dry Runs and Probes: Men Arrested at Airport Charged in 7/7 Terror Attack and Czech Republic’s Official Report on Terrorist Dry Run.

I just got off the phone with Robert Hayden, the heroic subject of today's Boston Globe article, Graying Duo Keep Passenger in Check. Hayden — a former police chief and former Undersecretary of Public Safety in Massachusetts — was the passenger who handcuffed one man and subdued another man on Northwest Airlines Flight 720, last Saturday.

The two, security-threatening passengers — men allegedly from the Philippines — had been acting strangely during the flight. On both the ascent out of Minneapolis and the descent into Boston, both men simultaneously stood up. One laid down in the aisle, screaming, while the other man stood over the prostrated man.

As the plane was landing, Hayden took being a John Doe to a new level. In a crisis situation, Hayden didn't just see something and say something, he saw something and did something. From The Globe:

Shortly before landing, Bob Hayden and a flight attendant had agreed on a signal: When she waved the plastic handcuffs, he would discreetly leave his seat and restrain an unruly passenger who had frightened some of the 150 people on board a Minneapolis-to-Boston flight Saturday night with erratic behavior.

Hayden, a 65-year-old former police commander, had enlisted a gray-haired gentleman sitting next to him to assist. The man turned out to be a former US Marine.

"I had looked around the plane for help, and all the younger guys had averted their eyes. When I asked the guy next to me if he was up to it, all he said was, 'Retired captain. USMC.' I said, 'You'll do,' " Hayden recalled. "So, basically, a couple of grandfathers took care of the situation."

According to my interview with Hayden, the two, South East Asian men — acting in consort — were suspicious from the get go. "Before the flight took off, the flight attendants had to repeatedly tell the men to get in their seats." The plane took off. Immediately after the Captain made the first announcement, Hayden told me that, "like clockwork, the first [SE Asian] guy got out of his seat and laid on the floor and started yelling. The other guy [traveling with him] stood over him, mumbling and gesturing. To me, it looked strange. It looked staged. So I got up and walked the aisle to see if there was anyone else on board who might be part of it." 

Hayden didn't sense that there was anyone else in the duo's group. "For the next two hours, they made people pretty upset," Hayden said. "One of the guys was wild-eyed and strange looking," Hayden said. "He kept walking the aisles. The other guy pulled his luggage out from the overhead and started sifting through it. People were scared." Hayden offered to help the flight attendant if she needed assistance, identifying himself as "an ex-cop." 

As the plane started its descent, the Captain made another announcement. Hayden explained what happened next: "Like clockwork, these two guys pop up out of their seats like something from The Manchurian Candidate. One lays down on the floor and starts yelling and the other guy is over him."

That's when the flight attendant gave Hayden the signal. Hayden and the former US Marine subdued the two Asian men using a set of plastic handcuffs given to them by the flight attendant. They also used a seat belt.

I asked Hayden what he thought happened on Northwest Flight 720. "There seem to be two possibilities of what happened on that flight," Hayden told me. "One, they were insane. But it's unlikely that two insane people would be traveling together. Two, it was a diversion or a probe to see how people react. It was bizarre and it was prompted. As soon as the Captain said something, on ascent and on descent, they were up out of their seats like Siamese twins." 

According to The Globe, State police troopers escorted the men off the flight. No word on whether or not Homeland Security officials are involved.

At the end of our interview, Hayden directed me to his favorite part of The Globe article — the part about his wife:  

Hayden's wife of 42 years, Katie, who was also on the flight, was less impressed. Even as her husband struggled with the agitated passenger, she barely looked up from "The Richest Man in Babylon," the book she was reading.

"The woman sitting in front of us was very upset and asked me how I could just sit there reading," Katie Hayden said. "Bob's been shot at. He's been stabbed. He's taken knives away. He knows how to handle those situations. I figured he would go up there and step on somebody's neck, and that would be the end of it. I knew how that situation would end. I didn't know how the book would end."

Hayden gave me a few more details. "We left the airport, drove home, stopped at the grocery store, bought some groceries — the whole time my wife didn't say a thing about the flight. As we were getting ready to go to bed, she comes over, stands up and gives me a kiss. 'By the way' she says to me, 'Good job on the airplane.'"  

(Thanks to Roger Baumgarten and Colonel Dave Gavigan) 

Who says you can't appear in The New York Times and on FOX News in the same week? Finally, both left and right agree on what I've been saying about Flight 327 all along. From The New York Times (subscription required):

The New York Times

It’s Not Paranoia If They’re Really Out to Get You

May 30, 2007

In June 2004, Annie Jacobson and her family were flying from Detroit to Los Angeles when she observed suspicious behavior on the part of several Muslim-looking passengers and warned the crew. The article she wrote about it for WomensWallStreet.com caused a minor sensation, with conservatives saying it proved that the government was falling down on the job of protecting air travelers, and liberals telling her to take a “chill pill.”

(Disclosure: in what seems another lifetime, Jacobson was a college acquaintance.)

Now the Department of Homeland Security has released its report on the incident (you can find it on Jacobson’s site, here) and, in the opinion of Ed Morrissey at Captain’s Quarters, it “confirms that Annie Jacobsen accurately recounted suspicious activities on a Northwest flight from Detroit to Los Angeles in the summer of 2004, and that a number of Syrians attempted a dry run for a terror attack. Eight of the 12 had already been flagged for criminal or suspicious behavior, and the apparent leader was involved in a similar incident later as well.”

— Tobin Harshaw

For more details, you can read the 51-page declassified DHS report (USG, 2007) or read my book on the subject, "Terror in The Skies, Why 9/11 Could Happen Again" (Spence Publishing, 2005). 

Next Page »