grid-83862 (u les) global and regional intelligence digest - 20111201

1 GRID-83862-2011-12-01

UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE

3

(U) Warning: This document is UNCLASSIFIED//FOR OFFICIAL USE ONLY (U//FOUO). It contains information that may be exempt from public release under the Freedom of Information Act (5 U.S.C. 552). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public, the media, or other personnel who do not have a valid “need-to-know” without prior approval of an authorized TSA official. No portion of this report should be furnished to the media, either in written or verbal form. The information marked Law Enforcement Sensitive (U//LES) in this document is the property of the originating agency and may be distributed within the Federal Government (and its contractors), US intelligence, law enforcement, public safety or protection officials and individuals with a need to know. Distribution beyond these entities without the originating agency’s authorization is prohibited. Precautions should be taken to ensure this information is stored and/or destroyed in a manner that precludes unauthorized access. Information bearing the LES caveat may not be used in legal proceedings without first receiving authorization from the originating agency. Recipients are prohibited from subsequently posting the information marked LES on a website or an unclassified network. This product contains U.S. Person (USPER) information that has been deemed necessary for the intended recipient to understand, assess, or act on the information provided. It has been highlighted in this document with the label USPER and should be handled in accordance with DHS intelligence oversight or information handling procedures. Other USPER information has been minimized. Should you require the minimized USPER information, please contact the TSA Office of Intelligence, Production and Dissemination Branch at [email protected].

GRID-83862-2011-12-01



1 December 2011


2 GRID-83862-2011-12-01


1 December 2011

(U) GLOBAL AWARENESS…………………………………………………………………4 (U) TURKEY: Ferry Hijacked Near Istanbul (U) EUROPE: European Union (EU) Adopts Body Scanner Guidelines (U//FOUO) WORLDWIDE: Cyber Jihadists Provide Tactics to Counter FBI-DHS Suspicious

Behavior Indicators (U) AUSTRALIA: Man Arrested at Railway Station was Targeting Sydney Harbor

(U) REGIONAL ROUND-UP (U) AREA 1…………………………………………………………………………………….6 (U//FOUO) MASSACHUSETTS: Artfully Concealed Currency at Boston Logan Airport (BOS) (U) NEW YORK: Lasing Incidents at LaGuardia Airport (LGA).

(U) AREA 2…………………………………………………………………………………….7 (U//FOUO) PENNSYLVANIA: Artful Concealment at Philadelphia Airport (PHL)

(U) AREA 3…………………………………………………………………………………….8 (U//FOUO) VIRGINIA: Suspicious Item Detected at Washington Dulles Airport (IAD) (U//FOUO) NORTH CAROLINA: Rail Car Tampering in Pembroke

(U) AREA 4…………………………………………………………………………………….9 (U//FOUO) FLORIDA: Suspicious Item Discovered in Rental Car at Sanford Airport (SFB)

(U) AREA 5……………………………………………………………………………………10 (U) NSTR

(U) AREA 6……………………………………………………………………………………11 (U//FOUO) ILLINOIS: Suspicious Package Discovered at Chicago O’Hare Airport (ORD) (U//FOUO) ILLINOIS: Artfully Concealed Ammunition at Chicago Midway Airport (MDW) (U//FOUO) IOWA: Suspicious Behavior at Cedar Rapids Airport (CID) (U//FOUO) INDIANA: Artfully Concealed Razor Blade at Indianapolis Airport (IND) (U//FOUO) ILLINOIS: Live Incendiary Device at Chicago O’Hare (ORD) Mail Facility (U//FOUO) IOWA: Suspicious Item Causes Checkpoint Closure at Cedar Rapids Airport(CID)


3 GRID-83862-2011-12-01


(U) AREA 7……………………………………………………………………………………13 (U//FOUO) KANSAS: Suspicious Liquids Discovered on Flight Inbound to Wichita Airport

(ICT) (U//FOUO) MISSOURI: Suspicious Item Discovered at Neff Rail Yard in Kansas City

(U) AREA 8……………………………………………………………………………………14 (U//FOUO) TEXAS: Suspicious Item Detected at Houston Hobby Airport (HOU)

(U) AREA 9……………………………………………………………………………………15 (U//FOUO) OREGON: Suspicious Item Discovered on Portland TriMet MAX Train (U//FOUO) OREGON: Suspicious Activity Causes Train Derailment in Eugene

(U) AREA 10…………………………………………………………………………………..16 (U//FOUO) COLORADO: Suspicious Activity at Denver Rail Yard

(U) AREA 11…………………………………………………………………………………..17 (U//FOUO) CALIFORNIA: Contraband in Wrapping Paper Detected at Los Angeles Airport

(LAX) (U//FOUO) CALIFORNIA: Passenger Arrested After Contraband Discovered During

Checkpoint Screening at San Diego Airport (SAN)

(U) AREA 12…………………………………………………………………………………..18 (U//FOUO) ARIZONA: Suspicious Image Observed at Tucson Airport (TUS) (U//FOUO) ARIZONA: Individual Arrested Following Lasing Incident at Phoenix Airport (PHX)

(U) INTELLIGENCE BULLETINS OF NOTE…………………………………………….19


4 GRID-83862-2011-12-01


(U) TURKEY: Ferry Hijacked Near Istanbul. According to open source reporting, on 11 November, a hijacker seized a passenger ferry in the Gulf of Izmit near Istanbul. The ferry was en route to Golcuk from Izmit and was carrying 18 passengers and six crew members. The hijacker claimed he was carrying 450 grams of A4 plastic explosives on his body, which he would detonate if attempts were made to intercept the ferry. The hostage crisis lasted 12 hours before Turkish commandos stormed the vessel, killing the hijacker. Law enforcement officials discovered a device described as “designed to look like a bomb,” and consisting of bottles and wires. Government officials stated the hijacker did not make any demands. The Kurdistan Workers’ Party (PKK) did not claim responsibility for the hijacking; however, Turkish officials stated the hijacker was a PKK member. [Source: Associated Press]

(U) EUROPE: European Union (EU) Adopts Body Scanner Guidelines. According to open source reporting, on 13 November, the EU adopted new guidelines on body scanners at airports. EU member states and airports will not be obligated to deploy security scanners; however, airports that choose to deploy scanners will have to comply with the EU-wide operational standards. Under the new EU law, security scanner images cannot be stored or copied, and security personnel analyzing the images must be in a room separate from where the actual screening is conducted. In addition, passengers must be informed and be given the right to choose an alternative method of screening. Because of health concerns, only scanners that operate in the millimeter wave radio frequency band, known as millimeter-wave scanners, are acceptable. The EU banned scanners that use X-ray technology. (U) The EU delayed implementing body scanner standards because of privacy concerns. EU member states have been mulling the expanded use of security scanners since 2009 when Umar Farouk Abdulmutallab attempted to detonate explosives hidden in his underwear on a flight from Amsterdam to Detroit. Previously, security scanner use was limited and conducted under a patchwork of different national operational procedures. The scanners to be used under the new construct were tested in France, Italy, and Finland as well as other countries and have been deployed at airports in Britain and the Netherlands. Other EU member states, including Germany, have stated that they will not deploy scanners. [Source: Associated Press]

(U) Historical Flashback December 2000 Rizal Day Bombings

(U) A series of bombings occurred in metro Manila on 30 December 2000 that killed 22 people and injured over 100. 100. The attacks, which were in close succession, targeted the Ninoy Aquino Airport cargo handling area, the Metro Manila Light Rail Transit, and a passenger bus. Other locations targeted were Plaza Ferguson, near the U.S. Embassy and a gas station. Authorities stated the explosives contained 1 kilogram of black powder and used timing devices. The bombings occurred on Rizal Day, which is a holiday in the Philippines. (U) Following the attacks, the extremist groups Abu Sayyaf, the Moro Islamic Liberation Front (MILF), and the Jemaah Islamiyya (JI) were named as possible suspects. In January 2009, three men were convicted for their involvement in the Rizal Day bombings. Authorities claimed the three men were MILF associates and that one individual received explosives training from the JI. One individual, who was arrested at the Cagayan de Oro airport, had covered his body with a plaster cast to disguise himself as a car crash victim for the purpose of avoiding detection.

(U//FOUO) TSA Office of Intelligence Comment: The PKK is a Kurdish separatist group that has been waging an insurgency against Turkey since 1984. According to open source reporting, hijacking is not a common attack method employed by the PKK. However, in 1998 Kurdish rebels hijacked a Turkish Airlines plane at Ankara airport.


5 GRID-83862-2011-12-01


(U//FOUO) WORLDWIDE: Cyber Extremist Provide Tactics to Counter FBI-DHS Suspicious Behavior Indicators. In early November, a cyber extremist distributed FBI-DHS’s Bomb-Making Materials Awareness Program flyer to Internet forum members. The author stated that jihadists should “shop cleverly” when purchasing ingredients for explosives to minimize the prominence of bomb-making materials. Other recommendations were to avoid acids, peroxide, and acetone; improvise with materials from household items; and never purchase bulk explosive materials. The author noted the FBI-DHS flyer was distributed to private businesses requesting they report any suspicious activity. For further information, please see: Central Florida Intelligence Exchange Jihadist News Brief - For the Individual Mujahid - “DHS Bomb Making Materials Awareness Program”. [Source: SITE Intelligence] (U) AUSTRALIA: Man Arrested at Railway Station was Targeting Sydney Harbor. According to open source reporting, on 9 November, a man was arrested at the Lidcombe railway station in suburban Sydney for carrying a small homemade bomb. Australian authorities stated the man planned to detonate the device at the Sydney Harbor. The man was stopped during a drug detection operation. Authorities discovered a 10 – 12 centimeter long homemade pipe bomb inside an eyeglasses case. Authorities speculated the bomb would have caused minimal damage. Following a search of the man’s residence, police seized a gun, ammunition, a spear gun, and a substance believed to be methylamphetamine. The man was arrested and charged with possessing an explosive in a public place and possessing a knife. [Source: Agence France Presse]

https://team.ishare.tsa.dhs.gov/sites/ISAC/Communities/programs/Field%20Intelligence%20Officers/Nashville%20Document%20Library/TTP/CFIX%20Brief%20%5b11-11-26%5d_For%20the%20Invidual%20Mujahid-%20DHS%20Bomb%20Making%20Materials%20Awareness%20Program.pdf�

https://team.ishare.tsa.dhs.gov/sites/ISAC/Communities/programs/Field%20Intelligence%20Officers/Nashville%20Document%20Library/TTP/CFIX%20Brief%20%5b11-11-26%5d_For%20the%20Invidual%20Mujahid-%20DHS%20Bomb%20Making%20Materials%20Awareness%20Program.pdf�


6 GRID-83862-2011-12-01


Area 1: New York, Connecticut, New Hampshire, Rhode Island, Maine, Vermont, Massachusetts POC: [email protected]*

(U) Incident (U) TSA-OI Comment

(U) AVIATION (U//FOUO) MASSACHUSETTS: Artfully Concealed Currency at Boston Logan Airport (BOS). On 10 November, a mass was detected in the checked baggage of a Southwest 408 (Boston - Baltimore) passenger. A physical bag search revealed eight vacuum-sealed packages of unknown amounts of U.S. currency inside the lining of the bag. Massachusetts State Police confiscated the currency and bag. There was no impact to airport operations. [Source: TSA-11-12481-11] (U) NEW YORK: Lasing Incidents at LaGuardia Airport (LGA). According to open source reporting, six lasing incidents occurred at LGA over the weekend of 4 November. Law enforcement officials stated the lasers emanated from a point approximately five miles southwest of the airport, illuminating the planes as they were over Brooklyn and Queens. The six incidents occurred between 6 p.m. and 8 p.m. The pilots were able to land the aircrafts without incident. [Source: CBS New York] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//FOUO) TSA Office of Intelligence Comment: Please see Area 12 about a lasing incident at the Phoenix Airport.

(U//FOUO)


7 GRID-83862-2011-12-01


Area 2: New York, Pennsylvania, New Jersey, Maryland, Delaware POC: [email protected]*


(U) AVIATION (U//FOUO) PENNSYLVANIA: Artful Concealment at Philadelphia Airport (PHL). On 31 October, the explosives detection system alarmed on the checked bag of a Southwest 405 (Philadelphia - Las Vegas) passenger. During a physical bag search, Transportation Security Officers (TSOs) discovered artfully concealed currency totaling $35,000 in the passenger’s checked bag. The currency was concealed in an envelope that was located inside a magazine wrapped in carbon paper. The Drug Enforcement Agency and Immigrations and Customs Enforcement confiscated the currency and interviewed the passenger, who stated he did not know how the money got in his bag. Law enforcement officers conducted checks on the passenger, with negative results, and allowed him to rebook. [Sources: TSA-10-12094-11; INC2011BDL0238] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//FOUO) TSA Office of Intelligence Comment: The use of carbon paper to conceal illicit items remains an observed tactic. Passengers employ this method due to false claims that carbon paper blocks X-rays. In December 2010, Bradley TSOs discovered seven vacuum sealed bags of currency wrapped in black carbon paper in the carry-on bag of a passenger.

(U//FOUO)


8 GRID-83862-2011-12-01


Area 3: District of Columbia, Virginia, North Carolina, South Carolina, Georgia POC: [email protected]*


(U) AVIATION (U//FOUO) VIRGINIA: Suspicious Item Detected at Washington Dulles Airport (IAD). On 6 November, an explosives detection system alarmed on the checked baggage of a British Airways 264 (Washington Dulles - London Heathrow) passenger. During a physical bag search, officials determined that an oxygen bomb calorimeter caused the alarm. Metropolitan Washington Airports Authority Police and the Metropolitan Washington Airports Authority K9 Unit interviewed the passenger, who stated that he is a wood chemist and uses the machine to test wood. The Transportation Security Specialist – Explosives official conducted an explosives trace detection screening on the item, with negative findings, and cleared it for travel. LEOs conducted checks on the passenger, with negative findings, and allowed him to continue. [Source: TSA-11-12342-11] (U) FREIGHT RAIL (U//FOUO) NORTH CAROLINA: Rail Car Tampering in Pembroke. On 12 November, a CSX engineer, during a routine stop, discovered several freight cars had been tampered with in Pembroke, Robeson County. The conductor discovered several air brake levers and hoses were tampered with, resulting in the uncoupling of an unspecified number of freight cars. The Robeson County Sheriff’s Department conducted a search of the area; however, no suspects were found. There was minimal impact to train operations while cars were recoupled. [Source: Transportation Security Operations Center Reporting] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//FOUO) TSA Office of Intelligence Comment: TSA personnel occasionally encounter passengers employed in the science and medical fields traveling with items that may raise alarms. In November 2011, Transportation Security Officers in Cleveland encountered a scientist traveling with a vial of Hexane and a vial of Cyclohexane, which are crystals that can be hazardous.

(U//FOUO)


9 GRID-83862-2011-12-01


Area 4: Florida, Puerto Rico, U.S. Virgin Islands POC: [email protected]*


(U) AVIATION (U//FOUO) FLORIDA: Suspicious Item Discovered in Rental Car at Sanford Airport (SFB). On 1 November, an AlamoUSPER rental car cleaner discovered an expended flash-bang grenade inside a returned car. A Port Canaveral Explosive Ordnance Disposal (EOD) unit with K-9s swept the vehicle and the area, with negative findings. Local law enforcement officers telephonically interviewed the previous driver of the rental car, who stated he owned a business in Tennessee that manufactured flash-bang grenades and he left one on the car’s dashboard by mistake. The Tennessee businessman had dropped off the car and flown to Tennessee on an Allegiant flight on 31 October. [Source: TSA-11-12118-11] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//FOUO)


10 GRID-83862-2011-12-01


Area 5: West Virginia, Ohio, Michigan, Indiana POC: [email protected]*


(U) NSTR


11 GRID-83862-2011-12-01


Area 6: Illinois, Wisconsin, Minnesota, Iowa, Nebraska, South Dakota, North Dakota POC: [email protected]*


(U) AVIATION (U//FOUO) ILLINOIS: Suspicious Package Discovered at Chicago O’Hare Airport (ORD). On 1 November, a United employee received minor injuries when he attempted to clear a bag jam in the baggage make-up area. When the bag came loose, it fell and broke open. The debris from a broken gel battery sprang from the case striking the United employee. The Chicago Bomb and Arson unit, Chicago Police, FBI, and TSA established a perimeter, partially shut down the ventilation system, and closed the baggage in-line system. The bag belonged to a Continental 1585 (Houston Intercontinental - Chicago O’Hare) passenger, who was detained for questioning. The passenger stated he was an engineer and the bag contained batteries. The passenger speculated that the battery may have shorted out and caused the explosive-like reaction that injured the United employee. Officials allowed the passenger to continue. Source: TSA-11-12127-11] (U//FOUO) ILLINOIS: Artfully Concealed Ammunition at Chicago Midway Airport (MDW). On 13 November, 20 rounds of .380 caliber ammunition were detected artfully concealed in the pull handle of the carry-on bag of a Volaris 947 (Chicago Midway - Morelia, Mexico) passenger. Chicago Police confiscated the ammunition and interviewed the passenger, who stated he borrowed the bag from his cousin and did not know the ammunition was in the bag. Customs interviewed the passenger and allowed him to continue; however, he was denied boarding by the Federal Security Director. There was no impact to airport operations. [Source: TSA-11-12595-11] (U//FOUO) IOWA: Suspicious Behavior at Cedar Rapids Airport (CID). On 6 November, a recently fired CID restaurant employee was denied access to the sterile area after he claimed to be a secret shopper. Later that day, the former employee returned to the airport and local law enforcement officers located him in his vehicle. During a subsequent interview, the former employee fled. A warrant was issued for his arrest on state charges of “Driving while Barred” and “Fraudulent Registration”. There was no impact to airport operations. [Source: TSA-11-12350-11]

(U//FOUO) TSA Office of Intelligence Comment: The use of a suitcase to conceal illicit items is a frequently observed tactic, particularly concealing items in the liner of a bag. Other observed tactics include the use of false bottom suitcases and concealing items in the handles and rails.

(U//FOUO)

(U//FOUO)


12 GRID-83862-2011-12-01


Incident TSA-OI Comment

(U//FOUO) INDIANA: Artfully Concealed Razor Blade at Indianapolis Airport (IND). On 8 November, a razorblade was detected in the carry-on bag of a Delta 964 (Indianapolis - Minneapolis) passenger. The razor blade was artfully concealed in a chewing gum box. Indianapolis Airport Authority Police interviewed the passenger, who stated he did not know the razor blade was in the box. The passenger surrendered the item to TSA and was allowed to continue on the flight. There was no impact to airport operations. [Sources: TSA-11-12411-11; INC2008IND0127] (U//FOUO) ILLINOIS: Live Incendiary Device at Chicago O’Hare (ORD) Mail Facility. On 3 November, a live incendiary device was detected in a shipment at the Chicago O'Hare Mail Facility. Customs and Border Protection (CBP) reported that the shipment was targeted for outbound mail parcel and manifested as a “Military Training Dummy”. The shipment was postmarked for Chiba, Japan. The item was marked as a United States Military Cat. V Explosives and Energetic. The Chicago Police Department Bomb Squad confirmed the item as a live incendiary device, a Phosphorous-based flare M49A1. Authorities determined that the shipper acquired the item at an estate sale. A CBP investigation of the incident is ongoing. There was no impact to postal operations. [Source: TSA-1112216-11] (U//FOUO) IOWA: Suspicious Item Causes Checkpoint Closure at Cedar Rapids (CID). On 10 November, a passenger discovered a suspicious item in a trash can in the nonsterile area at CID Airport. The item appeared to be an object wrapped in a T-shirt and duct tape. An Explosive Ordnance Disposal team X-rayed the item and determined it to be a bottle of a liquid plumbing aid. Operations resumed after a 52-minute closure. [Source: TSA-11-12489-11] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//FOUO) TSA Office of Intelligence Comment: The use of chewing gum containers to conceal illicit items is an occasionally observed tactic. In July 2008, Indianapolis Transportation Security Officers discovered a knife concealed in the chewing gum package of a passenger.

(U//FOUO)

(U//FOUO)

(U//FOUO)

(U//FOUO)


13 GRID-83862-2011-12-01


Area 7: Kentucky, Tennessee, Alabama, Mississippi, Arkansas, Missouri, Kansas POC: [email protected]*


(U) AVIATION (U//FOUO) KANSAS: Suspicious Liquids Discovered on a Flight Inbound to Wichita Airport (ICT). On 1 November, an AirTran 683 (Atlanta - Wichita) passenger, who was served a bottle of water from a flight attendant, realized the substance in the bottle was not water. The passenger stated the contents smelled like alcohol. Upon landing, a Transportation Security Specialist – Explosives official tested the water, which was determined to be ethanol. The Wichita FBI Joint Terrorism Task Force is investigating the incident. [Source: TSA-11-12139-11] (U) FREIGHT RAIL (U//FOUO) MISSOURI: Suspicious Item Discovered at Neff Rail Yard in Kansas City. On 14 November, a car foreman discovered a suspicious item attached to the right side truck bolster at the A-end of a box car in the Neff Yard in Kansas City. A Union Pacific special agent determined the item to be seven cardboard tubes taped together with two screws and model rocket detonation cord protruding from the tubes. The special agent reported the item was designed to resemble an explosive device and the discovery of spent fireworks inside one of the tubes. The special agent removed the item from the rail car. There was no impact to operations. [Source: TSA-11-12631-11] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//FOUO) TSA Office of Intelligence Comment: Suspicious activity at Neff Yard in Kansas City has been previously reported. In September 2011, a Union Pacific employee working at the Neff Yard was approached by an individual claiming to be a Kansas City police officer. For further information, please see the Global and Regional Intelligence Digest, 3 October 2011

(U//FOUO)

https://team.ishare.tsa.dhs.gov/sites/ISAC/Library/ISAC%20Documents/GRID-83755%20(U%20LES)%20Global%20and%20Regional%20Intelligence%20Digest%20-%2020111003.pdf�




14 GRID-83862-2011-12-01


Area 8: Louisiana, Texas, Oklahoma POC: [email protected]*


(U) AVIATION (U//FOUO) TEXAS: Suspicious Item Detected at Houston Hobby Airport (HOU). On 9 November, a suspicious image was detected in the carry-on bag of an American Eagle 3210 (Houston Hobby - Dallas/Fort Worth) passenger. A Transportation Security Specialist - Explosives official conducted an explosives trace detection test, with negative findings. The image was determined to be a CD case and a watch. During the physical bag search, prescription medications in different names were also discovered. Houston Police confiscated the medications. Local law enforcement officers arrested the passenger on a state charge of “Possession of Prescription Drugs Without a Prescription”. There was no impact to airport operations. [Source: TSA-12-12437-11] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//FOUO)


15 GRID-83862-2011-12-01


Area 9: Alaska, Washington, Oregon, Nevada POC: [email protected]*


(U) MASS TRANSIT (U//FOUO) OREGON: Suspicious Item Discovered on Portland TriMet MAX Train. On 4 November, a suspicious item was discovered on board a TriMet MAX train at the Rose Quarter Transit Center in Portland. A passenger on the train reported a suspicious item in a small bag behind a seat. The TriMet Transit Police and Metro Explosive Disposal Unit identified the item as a small purse containing Christmas ornaments, taped together and filled with a liquid. The device was X-rayed and the liquid was determined to be paint. A Metro Explosive Disposal technician removed the item from the train. [Source: TSA-11-12234-11] (U) FREIGHT RAIL (U//FOUO) OREGON: Suspicious Activity Causes Train Derailment in Eugene. Between 8 and 9 November, unidentified individuals pulled 600 rail spikes and 300 rail plates from 500 feet of track on a curve at Coos Bay Rail Milepost 670.4 near Eugene, which cause the derailment of two locomotives and four freight cars on 11 November. There were no injuries, fatalities, or HAZMAT release associated with this incident. The Lane County Sheriff’s Department is investigating the incident. [Source: TSA-11-12540-11] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above


16 GRID-83862-2011-12-01


Area 10: Montana, Wyoming, Colorado, Utah, Idaho POC: [email protected]*


(U) FREIGHT RAIL (U//FOUO) COLORADO: Suspicious Activity at Denver Rail Yard. On 8 November, a dark sports utility vehicle (SUV) pulled into the 31st Street Rail Yard at mile post 541.2 in the Brush subdivision in Denver. Burlington Northern Santa Fe (BNSF)USPER reported that four individuals exited the vehicle and aligned a switch, then re-entered the SUV and departed the yard. BNSF Police is investigating the incident. There was no impact to rail traffic at the yard. [Source: Transportation Security Operations Center Reporting] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above


17 GRID-83862-2011-12-01


Area 11: California POC: [email protected]*


(U) AVIATION (U//FOUO) CALIFORNIA: Contraband in Wrapping Paper Detected at Los Angeles Airport (LAX). On 9 November, TSA officers observed bulk mass alarms and discovered two large bags of marijuana in the checked baggage of a Continental 1579 (Los Angeles – Cleveland) passenger. Each checked bag contained suspected marijuana that was wrapped in Christmas gift paper and weighed from 50 to 70 pounds. Additional explosive trace detection screening and physical searches of the bags were negative for prohibited items. The Los Angeles World Airports Police determined the substance to be marijuana, confiscated the contraband and arrested the passenger on a state charge of “Transport of a Controlled Substance”. [Source: TSA-12469-11] (U//FOUO) CALIFORNIA: Passenger Arrested After Contraband Discovered During Checkpoint Screening at San Diego Airport (SAN). On 8 November, a Southwest 379 (San Diego - Las Vegas) passenger was referred for Unpredictable Screening Protocol (USP). During USP, the passenger’s footwear showed signs of tampering and it was determined that the shoe had synthetic marijuana, which is not an illegal substance in California, artfully concealed under the sole. An unknown substance was also discovered in the passenger’s carry-on bag. Harbor Police determined the substance was cocaine. Local law enforcement officers confiscated the cocaine and arrested the passenger on a state charge of “Possession of a Controlled Substance”. [Source: TSA-11-12408-11] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//FOUO) TSA Office of Intelligence Comment: The use of shoes to conceal drugs is an observed tactic. Shoes have also been used to conceal other prohibited items, particularly razor blades. Illicit items have been discovered concealed in soles and under shoe tongues and inserts.

(U//FOUO)


18 GRID-83862-2011-12-01


Area 12: New Mexico, Arizona, Hawaii, Guam, Saipan/Tinian, Samoa POC: [email protected]*


(U) AVIATION (U//FOUO) ARIZONA: Suspicious Image Observed at Tucson Airport (TUS). On 2 November, an opaque image was detected in the carry-on bag of a Southwest 3869 (Tucson - Albuquerque) passenger. TSA conducted an open bag search, which revealed a camera that contained a loose item inside. The passenger was referred for additional screening because of suspicious behavior. During additional screening, the passenger’s behavior escalated, and Tucson Airport Authority Police and the FBI were notified. Local law enforcement officers interviewed the passenger, who stated he bought the camera from a friend for $20. The camera’s USB and SD card slots were removed and metallic material resembling a brake pad was glued in the slots. The FBI determined the passenger was not a threat to aviation security but is a person of interest, and they will continue an investigation. The FBI confiscated the passenger’s camera and allowed him to continue. There was no impact to airport operations. [Sources: TSA-11-12168-11; FBI] (U//FOUO) ARIZONA: Individual Arrested Following Lasing Incident at Phoenix Airport (PHX). On 9 November, a green laser illuminated the cockpit of a US Airways 491 (Denver-Phoenix) flight. Local law enforcement officers (LEOs) responded to the gate and interviewed the pilot-in-charge, who stated the laser event occurred five miles east of Glendale at 5000-feet. Phoenix Police dispatched their helicopter to search in the vicinity, and the cockpit of the helicopter was also illuminated by a green laser. LEOs responded to the residence where the laser originated and interviewed the resident, who stated he illuminated the aircraft accidentally. LEOs arrested the resident on local charges of “Aggravated Assault and Pointing a Laser at Air 4.” There was no impact to airport operations. [Sources: TSA-11-12487-11; Federal Aviation Administration (FAA)] *For further information regarding specific incidents please email the Regional Field Intelligence Manager at the address listed above

(U//LES) TSA Office of Intelligence Comment: The potential for electronic devices such as cameras to be modified for nefarious purposes is a potential concern. In 2006, an Islamist extremist called for “fresh suicide attacks on passenger jets using mini-bombs in pens and disposable cameras.” (U//FOUO) TSA Office of Intelligence Comment: According to the FAA, in 2011, the Phoenix metro area has had the most lasing incidents with 96. Please see Area 1 about a lasing incident at LaGuardia Airport.

(U//FOUO)


19 GRID-83862-2011-12-01


(U//FOUO) TSA; Modal Assessment; 10 November 2011; ASMT-83471-2011-11-10; “(U) Mass Transit and Passenger Bus Attacks (Reissue);” (U//FOUO) (U//FOUO) TSA; Modal Assessment; 10 November 2011; ASMT-83543-2011-11-10; “(U) Attacks Inside Passenger Train Cars (Reissue);” (U//FOUO)

(U//FOUO) TSA; Modal Assessment; 10 November 2011; ASMT-83706-2011-11-10; “(U) High Speed Rail (Reissue);” (U//FOUO)

(U//FOUO) FBI – Newark Division/New Jersey Transit Police Department; 17 November; “(U//FOUO) Enduring and Evolving Terrorist Al-Qa’ida Terrorist Threat to Mass Transit Systems, including Passenger Buses;” (U//FOUO)

(U//FOUO) FBI – Salt Lake City Field Office; Situational Information Report; 27 October 2011; “(U//FOUO) Circumvention of International Airports Security Checkpoints;” (U//FOUO)

(U) Tracked by: HSEC: 8.1, 8.2, 8.3

https://team.ishare.tsa.dhs.gov/sites/ISAC/Library/ISAC%20Documents/ASMT-83471%20(U%20FOUO)%20Mass%20Transit%20Bus%20Attacks%20REISSUE%20-%2020111110.pdf�

https://team.ishare.tsa.dhs.gov/sites/ISAC/Library/ISAC%20Documents/ASMT-83471%20(U%20FOUO)%20Mass%20Transit%20Bus%20Attacks%20REISSUE%20-%2020111110.pdf�

https://team.ishare.tsa.dhs.gov/sites/ISAC/Library/ISAC%20Documents/ASMT-83543%20(U%20FOUO)%20Attacks%20Inside%20Passenger%20Train%20Cars%20REISSUE%20-%2020111110.pdf�

https://team.ishare.tsa.dhs.gov/sites/ISAC/Library/ISAC%20Documents/ASMT-83543%20(U%20FOUO)%20Attacks%20Inside%20Passenger%20Train%20Cars%20REISSUE%20-%2020111110.pdf�

https://team.ishare.tsa.dhs.gov/sites/ISAC/Library/ISAC%20Documents/ASMT-83706%20(U%20FOUO)%20High%20Speed%20Rail%20Threat%20REISSUE%20-%2020111110.pdf�

https://team.ishare.tsa.dhs.gov/sites/ISAC/Library/ISAC%20Documents/ASMT-83706%20(U%20FOUO)%20High%20Speed%20Rail%20Threat%20REISSUE%20-%2020111110.pdf�

https://team.ishare.tsa.dhs.gov/sites/ISAC/Communities/programs/Field%20Intelligence%20Officers/Nashville%20Document%20Library/FBI/FBI%20-%20Al%20Qaida%20Terrorist%20Threat%20to%20Mass%20Transit%20Systems.PDF�



https://team.ishare.tsa.dhs.gov/sites/ISAC/SARanalysis/GRID%20Document%20Library/Region%2010/FBI-SLC%20SIR%20-%20Circumvention%20of%20International%20Airport%20Security%20Checkpoints,%2027%20Oct%202011%20vw.pdf�



Product Title:

DHS Form 6001 (7/10) - OMB CONTROL NUMBER: 1601-0013

1. Please select the partner type that best describes your organization.

3. How did you use this product in support of your mission?

2. Overall, how satisfied are you with the usefulness of this product?

4. Please rank this product's relevance to your mission. (Please portion mark comments.)

Integrated into one of my own organization’s finished information or intelligence productsShared contents with federal or DHS component partners If so, which partners?Shared contents with state and local partners If so, which partners?Shared contents with private sector partners If so, which partners?Other (please specify)

CriticalVery importantSomewhat importantNot importantN/A

5. Please rate your satisfaction with each of the following:

Very Satisfied

Somewhat Satisfied

Somewhat Dissatisfied

Very Dissatisfied N/A

Timeliness of product or supportResponsiveness to your intelligence needs

To help us understand more about your organization so we can better tailor future products, please provide: Name: Organization:Contact Number:

SubmitFeedback

OI Customer SurveyOffice of Intelligence

Position:State:Email:

Privacy Act StatementPaperwork Reduction Act Compliance Statement

Very Satisfied

Somewhat Satisfied

Somewhat Dissatisfied

Very Dissatisfied

Neither Satisfied Nor Dissatisfied

6. How could this product or service be improved to increase its value to your mission? (Please portion mark comments.)

CLASSIFICATION:

CLASSIFICATION:REV: 28 June 2011