Title: OP HIGHLAND FLING – Event Log
Release Date: 2015-09-25
Description: This undated page from GCHQ’s internal GCWiki shows some of the background to the agency’s attack on Dutch SIM manufacturer Gemalto, specifically the harvesting of facebook cookies associated with the firm’s staff: see the Intercept article Profiled: From Radio to Porn, British Spies Track Web Users’ Online Identities, 25 September 2015.
TOP SECRET STRAP1 COMINT
The maximum classification allowed on GCWiki is TOP SECRET STRAP1 COMINT. Click to report
For GCWiki help contact: webteam
OP HIGHLAND FLING - Event Log
Jump to: navigation, search
OP HIGHLAND FLING - Event Log OP HIGHLAND FLING - DAPINO GAMMA OP HIGHLAND FLING - Workshop Strand - VPN and network analysis
BACK TO MAIN PAGE [editl Event Log Please enter most current date at the top of the log
Date Strand Tune SID Issue Action Outcome Comment
19Jan 2011 DAPINO GAMMA 1700 Find CNEEP targets Found 6 in total 5 France and 1 Poland VAs done to progress to CNE Wrap up meeting held - Write up to do
18Jan 2011 DAPINO GAMMA 1900 Find CNEEP targets France found 3 possible targets work up VA’s To do
18Jan 2011 DAPINO GAMMA 1800 Find CNEEP targets Get faccbook creds for existing implanted targets Cred obtained and sent to JTRIG for guidance on what to put in task tracker
18Jan 2011 DAPINO GAMMA 1800 Find pNE EP targets BKR - New account manager identified based in UK. New contact noted at higher level in operator of interest with Broadoak targeting updated for UK persons op-highland-fling-event-log-p2-normal.gif:
higher level France GEmalto employee -Possible target.
18Jan 2011 DAP1NO GAMMA 1800 Find CNEEP targets Get events from Gcmalto French gateway IP with links to Poland. Czech Republic and Dubai. has 2000 events for to analyse on 19/1/11 - email sent
18Jan 2011 DAP1NO GAMMA 1800 Find CNEEP targets Investigate Czech REpublic contact No further information found
18Jan 2011 DAP1NO GAMMA 1800 ■ Find CNEEP targets Polish netwrok mapping find IPs of interest No IPs found tied to GEmalto but some interesting individual employees being worked up
18Jan 2011 DAP1NO GAMMA 1800 - Find CNEEP targets JTRIG investigations to be done Information identified Technical Account Managers and facebook cookies enabling more info to be gleaned from Mutant Broth ongoing
17 Jan 2011 DAP1NO GAMMA 1650 - Progress update - The three strands arc - BRKR. FRANCE and POLISH offices Polish seed emails arc being worked and inforamtion found form CNE Single End point VA/ Polish network presence events investigated by BRKR - New account Manager identified and travel plans found forop-highland-fling-event-log-p3-normal.gif:
meeting on Friday 21st Jan. CNE implant idea investigated CNE legal said it would have to be high priority and last resort. France - Seed emails being investigated. French Gemalto network analysis scoping being undertaken Linked
names found for good targets - French mainly. JTRIG - Linked in work and task tracker created.
j—1 =j= ^=i i=