Title: OAKSTAR Weekly Update – 8 March 2013

Release Date: 2018-03-20

Document Date: 2013-03-01

Description: This internal NSA technical update from March 2013 describes a source of information codenamed MONEYROCKET, which provides data on users of the digital currency Bitcoin: see the Intercept article The NSA Worked To “track Down” Bitcoin Users, Snowden Documents Reveal, 20 March 2018.

Document: TOP SECRET//COMINT//NOFORN

OAKSTAR Weekly Update

Program Highlights Week of: March 2-8, 2013
ETS:

Derived From: NSA/CSSM 1-52
Dated: 20070108
Declassify On: 20320108

TOP SECRET//COMINT//NOFORN

TOP SECRET//COMINT//NOFORN

MONKEYROCKET: (TS//SI/NF) Collection loss for pail of March 5 and 6th. High side
data diode in error. Tweaked some of the diode parameters and rebooted server to rectify.

(TS//SI//NF) Due to larger influx of traffic from the partner, the NIAGARAFILES was
not sending data quick enough via the ftp process to the XKeyscore causing the disk
space to fill up and data forwarding delays. A parameter was tweaked in the
NIAGARAFILES configuration to poll the directories at a timeout of 3 seconds vice 60
seconds.

(TS//SI//NF) Partner provided inclusion of fhst/last name parameters for the XKeyscore
external metadata table information. Updates were made to the modification scripts to
adjust the ingest.

ODD:

Overview:

(S) OAKSTAR 2013 serialized product report totals: 329 reports and 1943 GISTs.
(S) There are no open/active REMEDY tickets for OAKSTAR.

TOP SECRET//COMINT//NOFORN

TOP SECRET//COMINT//NOFORN

MONKEYROCKET: Day 225

(LM 2013 = 1 report (they were 1 of 43 sources for the report, but hey, it’s the 1st).

(S//SI//REL) MARINA is transitioning to CLOUDRUNNER and our daily and
weekly metrics have hit another error. A new ticket has been created to address
this issue on 04March 2013 and updated 11 March 2013. Ticket number:
MARINA-9940. (SNM)

TOP SECRET//COMINT//NOFORN

TOP SECRET//COMINT//NOFORN

(TS//NF) No data on 11 March 2013 and we are working with engineering to pin
point the issue.

(TS//NF) SSG11 analysts have found value in the MONKEYROCKET access to
help track down senders and receivers of Bitcoins (a decentralized digital
currency system, wherein the units are known as Bitcoins or BTC.) (SNM)

(TS//NF) S2F214 is hoping to use the access for their mission of looking at
organized crime and cyber targets that utilize online e-currency services to move
and launder money. These illicit finance networks provide user access to
international monetary systems, while providing a high-degree of anonymity.
(SNM)

TOP SECRET//COMINT//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh