A group of former US intelligence officers are challenging the assessment that Russia hacked the Democrats during the 2016 presidential election. They are also criticizing analysts for not looking at the forensic evidence.

The Veteran Intelligence Professionals for Sanity (VIPS) sent their first memo to President Donald Trump on Monday, challenging the claim that Russia “hacked” Democratic National Committee (DNC) computers during the 2016 presidential election.

The group focused on a new analysis from an individual known as the Forensicator, who uncovered evidence that the files stolen from the DNC by the hacker known as “Guccifer 2.0” were most likely leaked, not hacked.

The Forensicator analyzed metadata from the Guccifer 2.0 files, and showed that the files were transferred at a speed of 23 MB/s, making it “unlikely that this initial data transfer could have been done remotely over the Internet.” The Forensicator also found that the files were most likely copied to a USB drive by someone on the East Coast of the US, who had physical access to a computer connected to the DNC network.

Read more

“It has long been clear to us that the reason the US government lacks conclusive evidence of a transfer of a ‘Russian hack’ to WikiLeaks is because there was no such transfer,” Monday’s memo read. “Based mostly on the cumulatively unique technical experience of our ex-NSA colleagues, we have been saying for almost a year that the DNC data reached WikiLeaks via a copy/leak by a DNC insider.”

The former intelligence officers claimed that the new independent forensic analysis has “put a huge dent” in the intelligence community assessment from January 6, when they said that Guccifer 2.0 hacked the DNC on behalf of the Russian government and then handed the data to WikiLeaks.

VIPS criticized the analysts from the FBI, CIA and NSA, saying they did not give “any attention to forensics” on the original Guccifer 2.0 data. The group argued that the intelligence community was “agenda-driven” and argued their assessment was “not supported by any apparent evidence.”

“The pundits and politicians who have led the charge against Russian ‘meddling’ in the US election can be expected to try to cast doubt on the forensic findings, if they ever do bubble up into the mainstream media. But the principles of physics don’t lie; and the technical limitations of today’s Internet are widely understood. We are prepared to answer any substantive challenges on their merits,” the group said in their memo.

VIPS argued that the same person was behind two major leaks from the DNC. First, they said the files that were stolen on June 12, 2016 were leaked in order to expose the bias toward former Secretary of State Hillary Clinton. Then, they said the same person leaked files on July 5 in order to “pre-emptively taint anything WikiLeaks might later publish by ‘showing’ it came from a ‘Russian hack.’”

The group claims that since the DNC emails showed a pro-Clinton bias, her campaign “saw an overriding need to divert attention from content to provenance.”

Finally, VIPS pointed to WikiLeaks publishing original CIA documents that were labeled as “Vault 7.” Contained in those files were a number of cyber warfare tools developed by the CIA’s Engineering Development Group, including an obfuscation tool called “Marble Framework,” which could be used to conduct a “forensic attribution double game” or false-flag operation, with test samples in Chinese, Russian, Korean, Arabic and Farsi.

They went on to suggest the Trump White House should review that program.

VIPS was formed in 2003, sending a memo to former President George W. Bush after former Secretary of State Colin Powell gave a speech at the UN, warning of Iraq’s weapons of mass destruction. The group argued that the “unintended consequences were likely to be catastrophic” if the US attacked Iraq based on evidence that they saw was “fraudulent and driven by a war agenda.”

Previously, the group also sent a memo to former President Barack Obama, demanding that he disclose any evidence that WikiLeaks received DNC files from Russia.