OODA Analysis and Briefs

Home > OODA Analysis and Briefs

Analysis

HLS: Serious or Not Serious III-VI

Fox, welcome to the hen house. Zorro, recepción a la casa de la gallina. We’re looking, but we’re not seeing. On the immigration bill “compromise” . . . let me see if I get this right: the longer you’ve been breaking the law, the better the deal, is that it? Are you f***king kidding me?…
Leak Vs. Authorized Disclosure

Leak: What you do when you pass classified to people not authorized to recieve it. Authorized Disclosure: What you do when you pass classified to people you think should have it when you have the authority to declassify.
Where is the value?

If you have been following the developments surrounding what has been found in the captured Iraqi documents, you’re aware that they portray a dramatic and sometimes shocking state of affairs in pre-war Iraq. Some have asked how the US intelligence community could ignore these documents when they apparently contain such bombshells. The easy and predictable…
Connect the Dots Indeed

Sen. Patrick Leahy (D-Vt.) blasted the DOJ and the FBI division for a recent five-year, $12 million contract for ChoicePoint to provide investigative analysis software to the FBI. In February 2005, ChoicePoint announced a data breach after criminals set up fake businesses that purchased private information from the data broker. “What in heaven’s name are…
It would be nice to think so

The CIA DI leads a cheer that should be read in full: Nearly one year ago, President Bush’s commission on weapons of mass destruction released its report identifying shortcomings in the intelligence community. Many of the commission’s judgments dealt with analysis, the discipline I lead at the CIA. The primary criticism was that our analysts…
Seize the High Ground

Time to revisit an old favorite via Captain’s Quarters:
Everybody has one . . .

. . . some just smell worse than others. Who would I rather team up with: Amateurs or fabricators . . . hmmmm.
When you see Bob G. in the hall . . .

. . . blow him a kiss: The Pentagon’s Defense Intelligence Agency has awarded contracts for a system to improve information retrieval. The sysetm is designed to simplify the process of identifying important information from multiple sources often ignored by analysts swamped by data.
New JP 3-13

FAS provides a copy of the latest IO doctrine . . . and the sign you’ll only see at the NDU-NPS championship football game:
Entertaining & Instructive

Bruce puts his signature where his mouth is: It is in this spirit I announce the (possibly First) Movie-Plot Threat Contest. Entrants are invited to submit the most unlikely, yet still plausible, terrorist attack scenarios they can come up with. If you worked in the biz on and immediately after 9/11 you’ve got at least…
Does this (reform) make me look fat?

The House Intelligence Committee voted Thursday to withhold funding from the nation’s intelligence director over concerns that his office, which was created to streamline operations in the nation’s spy community, is instead becoming bloated and bureaucratic. […] The bill would require the nation’s intelligence director, John D. Negroponte, to present a detailed rationale for any…
Angry at Face? Remove Nose.

The House Intelligence Committee on Thursday rejected a proposal to withhold money from the National Security Agency if the White House did not reveal information about the cost of the agency’s warrantless surveillance program. In a session closed to reporters, only Rep. Heather Wilson, R-N.M., who heads a subcommittee that oversees the NSA, voted with…
Back to School

When FBI Director Robert S. Mueller III went before a House subcommittee Tuesday to explain the Bureau’s budget request, one of the success stories he gave involved Mercyhurst College. Two FBI employees are enrolled in their first year of Mercyhurst’s two-year graduate program in applied intelligence. The Bureau may send another three in September, according…
Rudderless Ship

Former CIA spy hunter Paul Redmond, who helped catch notorious Moscow mole Aldrich Ames, has withdrawn from consideration to become the Bush administration’s top counterspy, U.S. intelligence officials say. Mr. Redmond had been selected to be national counterintelligence executive, but backed out after the FBI held up his formal appointment by conducting a lengthy background…
Yellow: The New Blue

A bipartisan push on Capitol Hill to strip the hue from the government’s color-coded terrorist alert system is gaining momentum. A package of legislation moving through the House eliminates the Department of Homeland Security’s use of colors to change the threat level, and calls for more specific threat information to be shared with the private…

Briefs

UK Bank Santander Will Block Payments to Crypto Exchanges

UK bank Santander is set to block real-time payments to crypto exchanges next year. According to an email to customers first reported by Reuters, the move is intended to protect consumers from scams. Santander has not said when in 2023 the change will take effect. In the short term, the bank is going to enforce…
Understanding the macroeconomic impact of cryptocurrency and stablecoin economics

The World Economic Forum’s Digital Currency Governance Consortium has published a comprehensive analysis of the macroeconomic impact of cryptocurrency and stablecoins. The impetus for this research was a rising concern around the potential spillover effects of crypto and stablecoins on the financial system. Because of this, regulation and safeguards for crypto are at the top of…
Crypto Hackers Take Over YouTube Channel of Valorant to Promote Scam

In one of the most recent crypto scam attacks, the official YouTube channel for the Valorant Champions Tour is compromised. Scammers have taken control of the channel, which has over 597k subscribers, and are promoting cryptocurrency fraud. A journalist named George Geddes shared the information after posting a screenshot of the hacked channel. Scammers wasted no…
US DOJ announces seizure of $3.36B in cryptocurrency

The U.S. Department of Justice on Monday announced that law enforcement seized $3.36 billion of bitcoin from a man who “unlawfully obtained” over 50,000 bitcoin from darkweb market Silk Road over a decade ago. The U.S. Attorney for the Southern District of New York said that James Zhong of Gainesville, Georgia, pleaded guilty on November 4…
Japan Joins Key NATO Cyber Agency

According to a recent announcement, Japan has become the latest country to join NATO’s Cooperative Cyber Defence Centre of Excellence (CCDCOE). The move is likely to anger Moscow amid tensions regarding the war in Ukraine and recent cyberattacks. However, the move was announced roughly four years ago when former Prime Minister Shinzo Abe confirmed that…
Armenia, Azerbaijan trade blame for shootout before US talks

Armenia and Azerbaijan have accused each other of a shootout along their border before the two countries were to attend US-mediated peace talks. The shootout occurred hours before the meeting in Washington D.C. where Armenian Foreign Minister Ararat Mirzoyan and Azerbaijani counterpart Jeyhun Bayramov will discuss another round of peace talks. The European Union and…
White Helmets accuse Russia over deadly strikes on camps

Syria’s military and its ally Russia have been accused of killing nine civilians in strikes on camps in the north-west of the country. First responders, the White Helmets said cluster bombs hit camps for displaced peoples in Idlib province on Sunday. Women and children were among those killed in the strike. 4.1 million people that…
FBI – Beware of Cyber-Threat from Russian Hacktivists

The FBI has warned that pro-Russia hacktivists continue to target critical infrastructure with DDoS attacks. The FBI warning comes as several attacks have occurred and an uptick in activity has been detected. The Private Industry Notification was published last Friday and detailed the threat facing critical infrastructure organizations. The FBI also stated that although the…
LockBit Claims Ransomware Attack on Continental

The LockBit hacking group has allegedly claimed responsibility for a cyberattack that occurred in August and targeted a multinational automotive group named Continental. The ransomware group posted the announcement to its leak site on Wednesday. Additionally, the group threatened to publish the company’s data unless the ransom demands were met. The group has not released…
Developers need to stop crypto hackers — or face regulation in 2023

Third-party data breaches have exploded. The problem? Companies, including cryptocurrency exchanges, don’t know how to protect against them. When exchanges sign new vendors, most just innately expect that their vendors employ the same level of scrutiny as they do. Others don’t consider it at all. In today’s age, it isn’t just a good practice to…
FriesDAO hacked and $2.3 million stolen

Since the beginning of one of the harshest crypto winters, investors have been inundated with negative news. FriesDAO has been compromised. Unknown assailants have stolen $2.3 million in tokens from FriesDAO, a decentralized autonomous organization. This comes amid a rush of breaches and attacks this month, as October appears to be an especially awful month…
Gala Games Dismisses Hacking Speculations After GALA Plunged 90%

Blockchain gaming company Gala Games urged its community for calm after misplaced fears of a multi-billion dollar rug pull or hack caused the GALA token to temporarily crash 25.6%. The initial panic, which Gala Games later implied was unfounded, came after a single wallet address appeared to mint over $2 billion GALA tokens out of thin…
It’s obvious that crypto exchanges need to double down on security

Security concerns around cryptocurrency are long-lived but the recent news of Deribit’s hacking has added a meaningful slug of fuel to the fire. The leading derivatives exchange was revealed to have lost $28 million in a hot wallet hack earlier this week, with losses centered on Bitcoin, Ether, and USDC. The following (seemingly rushed) company statement…
Crypto exchange Binance helped Iranian firms trade $8 billion despite sanctions

Crypto giant Binance has processed Iranian transactions with a value of $8 billion since 2018 despite U.S. sanctions intended to cut Iran off from the global financial system, blockchain data show. Almost all the funds, some $7.8 billion, flowed between Binance and Iran’s largest crypto exchange, Nobitex, according to a review of data from leading U.S.…
World’s Most Expensive Observatory Floored by Cyber-Attack

The Atacama Large Millimeter Array (ALMA) observatory in Chile has become one of the latest victims of a cyberattack. The attack forced the world-famous observatory offline, the facility states. The observatory contains the world’s most powerful telescope for observing molecular gas and dust. The facility announced the attack on Twitter earlier this week, stating that…
Xi, Scholz warn against ‘irresponsible’ nuclear threats over Ukraine

German Chancellor Olaf Scholz visited Chinese President Xi Jinping on Friday in the first visit by a G7 leader to China since the pandemic. At this meeting, both leaders condemned threats made by Russia to use atomic weapons in Ukraine. Scholz pressed Xi to influence Russia to end the war in Ukraine. In response, Xi…
Two-thirds of South Sudan at risk of severe hunger in 2023 – UN

On Thursday, United Nations agencies stated that as many as 7.8 million people in South Sudan could face sever food shortages during April to July in 2023. The two-thirds of the population is expected to experience these shortages due to floods, drought and conflict in the country. The shortages in the country now are worse…
Zelensky accuses Russia of ‘energy terrorism’

Russia has made a few gains on the battlefield and Ukrainian President Volodymyr Zelensky has accused the Kremlin of energy terrorism. After Russian attacks on Ukraine’s energy network, 4.5 million people were left without power. These strikes come as Russian troops are expected to withdraw from the southern city of Kherson. In the last month,…
The metaverse ushers in a new era of cyber threats

The reality of the metaverse, where builders aim to create a shared, immersive and interactive digital world that combines virtual reality (VR) and augmented reality (AR) with avatars, digital twins and Internet of Things (IoT) devices, is only a few years away. With all the chatter about the metaverse, many are beginning to get an…
With Hacks at a Record High, Crypto Needs to Find Better Ways to Keep Users Safe

The figures are in: October was the busiest month for crypto protocol exploits this year, with some $760 million stolen. The cumulative total for crypto hacks in 2022 is now at least $2.98 billion, already more than double the amount stolen through exploits in 2021, according to blockchain security firm Peckshield. Peckshield released those figures…
Skyward finance exploit allegedly results in $3M loss

Skyward finance, an initial DEX offering (IDO) platform enabling fair token distribution for projects on the Near Protocol, has reportedly been exploited for 1.1 million Near Protocol NEAR tokens, worth an estimated $3 at time of publication. The news was shared on Twitter by Aurora Lab’s community moderator Sanket Naikwadi, who stated that the exploit…
Cryptocurrency and how it impacts the environment

Bitcoin, the first ever cryptocurrency, was established in 2009 has grown in value astronomically according to Forbes. Forbes estimates that if you invested $1,000 in Bitcoin when it first launched, it would be worth $41.5 million today. As Bitcoin and other cryptocurrencies have grown, environmentalists like CWU Biology Professor Dr. Clay Arango have voiced concerns about…
The Ringleader of a Dark Web Drug Ring Who Laundered $2.3 Million in Crypto Was Given a Nine Year Sentence

The ringleader of a dark web drug drug trafficking operating was sentenced to nine years in state prison on Nov. 2, said Manhattan District Attorney Alvin Bragg in a statement. Chester Anderson, 48, sold hundreds of thousands of Xanax tablets and other controlled substances to buyers across the country through two dark web storefronts, in addition…
Pakistan ex-Prime Minister Imran Khan shot and wounded at protest march

Imran Khan, Pakistan’s former prime minister, was shot and wounded in the leg during an attack on his protest in Wazirabad, Pakistan. It remains unclear whether Khan was deliberately targeted or if he was the victim of stray or indiscriminate gunfire. Members of Khan’s PTI party confirmed that four other people were hurt in the…
Religious Minority Persecuted in Iran Targeted With Sophisticated Android Spyware

Kaspersky has warned of a previously undetected espionage campaign that is targeting the Persian-speaking religious minority Baha’i. The campaign is leveraging Android spyware to target the group with a malicious VPN application that claims to provide access to Baha’i religious resources that are banned in Iran. The application contains highly sophisticated spyware, Kaspersky says. The…
Pyongyang fires suspected ICBM

North Korea has fired an intercontinental ballistic missile that sparked an alert in Japan. The missile failed mid-flight and landed in the sea. There are escalating tensions in the region as there are fears that North Korea will soon conduct a nuclear test. After both South and North Korea fired missiles near each other’s waters…
Warring parties in Ethiopia agree on ‘permanent cessation of hostilities’

The Tigray People’s Liberation Front and the Ethiopian government have agreed to permanently end hostilities. This is a significant step towards ending the wr that has killed thousands and displaced millions. In a join statement, the two sides announced on Wednesday that they would end the two years of conflict. The Tigray revels will eventually…
Android Apps With a Million Downloads Led Users to Phishing Sites

Security experts at Malwarebytes have discovered a group of four apps totaling millions of downloads overall that have been infected with the HiddenAds malware. The apps are listed on google Play and were published by Mobile apps Group. The apps pertain to Bluetooth functions such as ‘Bluetooth Auto Connect’ and ‘Bluetooth App Sender.’ Malwarebytes detailed…
Bot Warning for Retailers Ahead of Busy Shopping Season

Imperva has released a new report titled State of Security Within eCommerce 2022. The report was created based on data gathered from the vendor’s engagements and activities within the eCommerce sector. The report warns that retailers should prepare for a surge in bot-driven account takeover attempts, DDoS attacks, card fraud, and more as the holiday…
Mobile Phishing Attacks on Government Staff Soar

Security firm Lookout has detailed a slew of mobile-based credential theft attacks that have been targeting federal government employees. The attacks have increased by 47% between 2020 and 2021, the security researchers state. This exposes agencies to a serious risk of breaches as it only takes one employee to fall for the phishing attempts. The…
How DeFi has contributed to its own collapse by ignoring security and using poor tokenomics

Early in 2021, decentralized finance (DeFi) drove the explosive expansion of cryptocurrencies, but since then, the value of the crypto market has collapsed. Global markets and developers’ carelessness with regard to cybersecurity and (sometimes self-serving) inflationary token structures have both played a part. Too much DeFi has been built on tokens created out of thin air…
DeFi Protocol Solend Struck by $1.26M Oracle Exploit

Solana-based decentralized finance (DeFi) protocol Solend has suffered an exploit in relation to pricing oracles, resulting in $1.26 million in bad debt. The exploit was centered around the hubble stablecoin (USDH) and affected the Stable, Coin98, and Kamino lending pools, according to a tweet by Solend. A pricing oracle is a source of data that…
$28M stolen from cryptocurrency exchange Deribit, details inside

Cryptocurrency options and futures exchange Deribit has been hacked, with $28 million being drained from its hot wallet. During an appearance on CoinDesk TV on Wednesday, Deribit’s chief commercial officer, Luuk Strijers, said client assets have not been affected but withdrawals have been temporarily halted as the exchange makes security checks. “Hackers have gained access…
Binance CEO sees no threat to crypto from central banks’ digital currencies

Plans by central banks to launch digital currencies are not a threat to other cryptocurrencies as they would validate blockchain technology and build trust among sceptics, the CEO of the world’s largest crypto exchange, Binance, said on Wednesday. Most major central banks, including the U.S. Federal Reserve, the Bank of England and the European Central Bank,…
Moneygram to enable users to buy, sell and hold cryptocurrency via mobile app

Global digital peer-to-peer payments company MoneyGram announced on Nov. 1 that users in nearly all U.S. states and the District of Columbia, can buy, sell, and hold cryptocurrency, specifically Bitcoin , via its MoneyGram mobile app. The digital payments company said that it plans to add more digital currencies to its app in 2023, as global regulations…
China-Backed APT10 Supercharges Spy Game With Custom Fileless Backdoor

Security researchers at Kaspersky have identified a Chinese-speaking threat actor called APT10 deploying sophisticated and fileless backdoors. The attacks are targeting think-tanks, media, diplomatic, governmental, and public sector organizations. Kaspersky states that the campaign has been active since at least March. The company has been tracking the LodeInfo malware family since 2019 and detailed the…
UN troops in DRC make ‘strategic withdrawal’ from key army base

The United Nations peacekeeping mission in the Democratic Republic of the Congo has ceded ground in the battle against the M23 rebel group. Troops have been withdrawn from the eastern military base of Rumangabo. The UN troops have been supporting Congolese forces in a battle against the M23. M23 launched a new offensive in October…
Bed Bath & Beyond Investigating Data Breach After Employee Falls for Phishing Attack

Bed Bath & Beyond, a large retailer, confirmed in an SEC filing last week that it suffered from a data breach after an employee fell for a phishing attack. The retailer has only revealed a few details as it works to investigate the full extent of the attack. Bed Bath & Beyond stated that it…
South hits back as North Korea fires most missiles in a day

In an escalation of hostilities, North and South Korea have fired a number of missiles into waters near each other. North Korea launched at least 23 missiles, its most in a single day, including one that landed less than 60km off the coast of South Korea’s city of Sokcho. Seoul responded with warplanes firing three…
Osaka Hospital Halts Services After Ransomware Attack

In Osaka, Japan, a major hospital has suspended routine medical services due to a ransomware attack that has disrupted the facility’s electronic medical record systems. Emergency operations are continuing, the medical center told reporters. However, the hospital system failed earlier this week and could not be accessed. The Osaka General Medical Center has contacted a…
Twitter Verified Status Users Flooded with Scams

Since Elon Musk’s arrival as the new owner of Twitter, verified users have reported an influx of phishing attempts via email and on the platform itself. Elon Musk has fired Twitter’s board to become the sole director and wants to initiate a big change to the way the platform handles verified users. Musk wants to…
White House Invites Dozens of Nations for Ransomware Summit

The White House has invited three dozen nations, the European Union, and several private-sector companies to join a two-day summit that was discuss ransomware attacks and how to best address them. This is the second time that the International Counter Ransomware Summit has occurred, and this year’s addresses will focus on priorities such as ensuring…
Implementing blockchain: Why a security strategy must come first

More industries are incorporating blockchain applications into their business, drawing the attention of threat actors — like the recent Axie attack, for example. As a result, many cybersecurity professionals are now finding they are responsible for securing blockchain systems. Unfortunately, even skilled cybersecurity professionals are ill-equipped to secure blockchain applications because it and other decentralized…
We’re Going Through A Machine Identity Crisis

Zero trust is an acknowledgment that legacy network controls like firewalls and VPNs are not enough to secure the enterprise. This has become increasingly true due to digital transformation, cloud computing and DevOps trends. The framework is built on the notion of “never trust, always verify” and views trust as a vulnerability. This has left identity…
Crypto-Linked Terror Attacks Probably Quadrupled, UN Official Says: Report

Crypto-financed terror attacks probably quadrupled in the past few years, according to a United Nations official interviewed by Bloomberg. Svetlana Martynova, a senior legal officer at the United Nations Counter-Terrorism Committee Executive Directorate, said that a couple of years ago 5% of terrorist attacks were viewed as crypto-financed or linked to digital assets. “Now we’re…
Cryptocurrency Industry Regulation Proposals by the Market Players

In view of the recent publishing by the Financial Stability Board (FSB) of the report on the proposed framework for international regulation of the cryptocurrency industry, which was a result of FSB’s research of the topic as was mandated by the G20, some market players also have expressed their thoughts on this hot topic. The FSB’s…
14 years since the Bitcoin white paper: Why it matters

Happy white paper day, Bitcoin. It’s been 14 years since Satoshi Nakamoto first sent an email to the Cypherpunk mailing list with the subject line, “Bitcoin P2P e-cash Paper.” The email included a link to the white paper, an outline of what would soon become a one trillion-dollar market. The first sentence of the email…
Label Giant Multi-Color Corporation Discloses Data Breach

Multi-Color Corporation, a label printing giant, has confirmed to employees that the company has suffered from a cyberattack that may have compromised employee information. MCC operated 100 label producing operations and is a global supplier of label solutions. The company boasts roughly 10,000 employees and offers its services to the food, chemicals, healthcare, beverage, automotive,…
FTC Takes Enforcement Action Against EdTech Giant Chegg

The Federal Trade commission (FTC) has filed legal action against Chegg, a popular EdTech player, due to allegations that the firm has not protected its customers from data breaches. Chegg has suffered from four data breaches since 2017, and the FTC reports that the company has taken shortcuts with the personal data of its customers,…
Hackers Target Australian Defense Communications Platform With Ransomware

Threat actors have launched a ransomware attack targeting a communications platform that is used by Australian military personnel. The platform, ForceNet, is one of the company’s external service providers and is also tasked with runnning one of its websites. Assistant Minister for Defence Matt Thistlethwaite stated that it does not appear that any data was…
Leaders head to Algeria for first Arab League summit in two years

The first Arab League summit since the COVID-19 pandemic will begin in Algeria, amid continuing political divisions among the organization’s members. Arab states are split over many issues including support for the Palestinian cause, the rehabilitation of Syria’s President Bashar al-Assad, the regional roles of Iran and Turkey and Algeria’s feud with Morocco. Algeria has…
Bolsonaro remains silent after Brazil presidential election loss

Luiz Inacio Lula da Silva was announced to be the winner of Brazil’s 2022 presidential election, beating incumbent Jair Bolsonaro. More than 24 hours after the election results were announced, Bolsonaro has not yet publicly acknowledged his loss. The delay has created concern that he will not cooperate with a transfer of power. After the…
More Than 130 People Dead in Cable Bridge Collapse in India’s Gujarat State

On Sunday, a bridge in the Indian state of Gujarat collapsed, killing more than 130 people. The bridge had been closed for renovations until recently and is a popular attraction. The government of Gujarat has opened a criminal inquiry pertaining to the agency tasked with maintaining the bridge. The investigation was opened on manslaughter charges.…
Google Introduces Cloud-Based Blockchain Node Service for Ethereum

Tech giant Google said Thursday it will be launching a cloud-based node engine for Ethereum projects. The company said its Google Cloud Blockchain Node Engine will be a “fully managed node-hosting service that can minimize the need for node operations,” meaning that Google will be responsible for monitoring node activity and restarting them during outages.…
Hong Kong Government Reconsiders Stance on Virtual Asset ETFs, Tokenized Securities, Retail Investors

Hong Kong’s Financial Services and Treasury Bureau issued a policy statement on virtual assets at the opening of the city’s flagship tech conference Hong Kong FinTech Week on Monday. Hong Kong is “ready to engage” with global virtual asset service providers and invite them to the city, the statement says. The jurisdiction’s Legislative Council is…
Chainalysis Sees Growing Push for Crypto Regulation Amid Record Hacks

Crypto, which was born during the 2008-2009 financial crisis, is about to see how it handles the next one. That is something Michael Gronager, CEO of blockchain data firm Chainalysis, finds very interesting, he told PYMNTS recently. The idea was, basically, to build this very transparent value transfer network — non-censorable, everyone had access, very open…
Relationship Between Blockchain and Cryptocurrency

Whenever the word blockchain is used, cryptocurrency automatically comes to mind, and it’s true the other way as well. Many people believe that the two are synonymous and, thus, are often used interchangeably, but it couldn’t be more wrong. Cryptocurrencies are a type of money that use blockchain technology to operate. Blockchain was first introduced…
Ransomware hackers hit Australian defence communications platform

Hackers have targeted a communications platform used by Australian military personnel and defence staff with a ransomware attack, authorities said on Monday, as the country battles a recent spike in cyberattacks across businesses. The ForceNet service, one of the external providers that the defence department contracts to run one of its websites, has come under…
South Korea Halloween Tragedy Claims Mostly Young Revelers

On Saturday night, 154 individuals died in the Itaewon district of Seoul, South Korea when a narrow alleyway that was overcrowded with Halloween party goers caused crowd crush. South Korean authorities are currently investigating the tragedy that took the lives of so many people, most of whom young adults. New information about the incident has…
Cranefly Cyberspy Group Spawns Unique ISS Technique

Security researchers have found that the hacking group Cranefly is deploying new techniques that leverage Internet Information Services (IIS) commands to deliver backdoors to targets. The technique has been used in intelligence gathering campaigns perpetrated by the hacking group. Security researchers at Symantec detailed the tactic, which uses a previously unidentified Trojan dubbed Geppei. The…