The Apprentice

It was a decision that played straight into decades-long depictions of Clinton as secretive and duplicitous when it came to concealing the family’s alleged misdeeds. The committee was, reasonably, outraged that she had deleted a massive stockpile of messages without allowing any outsider to review what was being destroyed.

The controversy remained under wraps until The New York Times broke the story several months later, on March 2, saying Clinton’s use of private email “may have violated federal requirements that officials’ correspondence be retained,” and reignited lingering concerns about the Clintons’ “lack of transparency and inclination toward secrecy.” Immediately, the Clinton campaign was on its heels.

A week later, in a tense press conference, Clinton said that in using her private email address she had “opted for convenience,” and acknowledged that “it would have been better if I’d simply used a second email account.” Republicans rushed forward with sinister interpretations, implying that she was hiding incriminating messages about Benghazi or other scandals. The panel issued a subpoena for all of her communications, hoping to stave off any further email destruction. At the same time, the State Department came under court order to start publicly releasing batches of Clinton emails after they had been internally reviewed. The result was a disaster for Clinton—monthly dumps for the media to sift through, generating a seemingly endless stream of stories on the very issue that Trump and Putin would come to see as one of her most acute vulnerabilities.

State Department investigators subsequently determined that “classified information may exist on at least one private server and thumb drive that are not in the government’s possession.” Because some of the sensitive information in the emails belonged not to State but to spy agencies, the inspector general for the entire intelligence community examined a sample of forty Clinton emails and found that at least four contained classified material. He then relayed that finding to the Justice Department. The fallout from that referral would be devastating to her chances of becoming president.

IN THE SPRING OF 2016, NEARLY A YEAR AFTER THE DUTCH HAD ALERTED Washington to the penetration of the DNC, a second wave of Russian hackers converged on Clinton-related targets. These new intruders were working not for Russia’s foreign intelligence service, but its military spy agency: the Main Intelligence Directorate of the General Staff, otherwise known as the “GRU.” Long seen as inferior to other Russian services, the GRU had invested heavily in cyber capabilities and had raised its standing in the Kremlin through one successful hacking operation in particular.

The head of the Russian military, General Valery Gerasimov, had delivered an address in 2013 that American spies studied closely.[3] Reprinted in a Russian publication called the Military-Industrial Courier, the speech spoke of a new era of hybrid warfare, one in which “the role of nonmilitary means of achieving political and strategic goals has grown, and, in many cases, they have exceeded the power of force of weapons.” The GRU had tested this theory in Ukraine in 2014, where it used a series of cyberattacks to shut down telecommunications systems, disable websites, and jam the cell phones of Ukrainian officials before Russian forces entered the Crimean peninsula.

After the Russian military had seized control of key Crimean facilities, GRU turned its information warfare troops loose to rally public support among Crimea’s largely ethnic Russian population to break with Ukraine and support annexation by Moscow. To do so, GRU psyops teams blitzed social media platforms, including Facebook and the Russian-language social network VKontakte, with fake personas and pro-Russian propaganda. In one week alone GRU cyber teams targeted dozens of Ukrainian activist groups, hubs of protesters on social media, and English-language publications, sowing confusion and creating the impression of a groundswell of support for Russian intervention.

Three years later, the GRU joined the Putin-ordered operation to damage or defeat Clinton. Working out of a building on Komsomolsky Prospekt in Moscow, a GRU cyber-operative named Aleksey Lukashev sent a spearphishing email to Clinton campaign chairman John Podesta on March 19, 2016. Lukashev had used a popular online service for shortening website addresses to help mask his baited missive and make it look like a legitimate security notification from Google. The breach was enabled when one of Podesta’s aides saw a supposed security warning from Google and had asked a computer technician to evaluate it. “This is a legitimate email,” the technician wrote. “John needs to change his password immediately.” With the ensuing mouse click, Russia gained access to a trove of messages stored on Podesta’s account. Within two days, Lukashev and his GRU unit had made off with more than 50,000 emails.

Lukashev was part of a GRU hacking group designated by its unit number, 26165. That same month, the hackers began probing the DNC network for gaps in defenses, seemingly oblivious to the fact that another Russian intelligence service was already rummaging through the files. U.S. spies said it was not uncommon for Putin to unleash separate agencies on the same target. In April, the Russian unit found an indirect route into the DNC system, stealing the computer credentials of an employee at a sister organization, the Democratic Congressional Campaign Committee, which occupied the same office and worked to help elect congressional candidates. Another spearphishing operation did the trick, luring the DCCC employee into clicking a link that effectively gave the GRU the keys into the network.

Once inside, Lukashev’s group installed a program known as X-Agent malware on at least ten DCCC machines, enabling them to steal passwords and data from other employees, and even monitor their keystrokes and take photos of their computer screens as they typed away unsuspectingly. The hackers tried to hide their tracks by transmitting the pilfered information to a server the GRU had leased in Arizona (paid for not with rubles or dollars but with bitcoin cryptocurrency). By April 18, the GRU used its access to the passwords and files of the DCCC—some of whom also had access to the DNC network—to sneak across a digital bridge into the main party organization’s network.

In April, GRU operatives registered a new internet domain—dcleaks.com—after discovering that the first address they wanted, “electionleaks.com” was already taken.

For all its advances, the GRU made a number of costly blunders that would help U.S. investigators reconstruct the incursion. The Russian hackers often used the same computers, email addresses, and phony online accounts for multiple transactions related to the operation—registering the dcleaks.com domain, accessing URL-shortening services, and facilitating bitcoin payments.

Those clues would be collected and revealed nearly two years later. But even at the time, the GRU arrived inside the DNC system with all the stealth of a cymbal crash. At long last, the committee’s overmatched security team finally encountered an intruder that its systems could detect.

The GRU’s hackers were “like a thunderstorm moving through the network,” recalled one investigator involved in the case. “They were actively compromising systems. They were remote accessing into systems in the middle of the night. They were deleting logs. They were opening up files on administrators’ desktops. They were archiving massive amounts of files.” At one point, the GRU crew began stashing pilfered material in a massive single file, presumably to make it easier to drag out when the raid was done. But they stuffed so much into the single container that it crashed the system they had set up to export their stolen data in the first place. Left behind, the copy of the busted file provided investigators a comprehensive inventory of the loot—but no firm sense of how much other material the GRU might have captured in other smash-and-grabs.

On April 29, little more than two months after the February Joe’s Cafe meeting between special agent Hawkins and three members of the DNC’s IT group, Tamene’s team of contractors saw strange activity on the network. He promptly notified his supervisors at the DNC and—after so many months deflecting calls from the FBI—dialed Hawkins to inform him of what he had found.

It had now been eight months since the FBI had first reached out to the DNC.

CHAPTER 2

PUTIN’S TROLLS

VLADIMIR PUTIN, A NATIVE OF LENINGRAD, NOW ST. PETERSBURG, was born in 1952 in the lingering shadow of World War II. His father had been badly wounded in combat and his mother barely survived the 900-day siege of Leningrad when the Nazis tried to starve the city into surrender. The death toll in Leningrad was 640,000, including one of Putin’s brothers. Both parents got factory jobs after the war and Putin grew up in a walk-up communal apartment building where he recalled chasing rats in the stairwells. “There was no hot water, no bathtub,” Putin said many years later. “The toilet was horrendous. It ran smack up against a stair landing. And it was so cold—just awful—and the stairway had a freezing metal handrail.” A bright boy, Putin attended a school for the city’s best students. He also studied judo, earning a black belt, a skill that invested the diminutive young man with a quiet confidence.

After earning a law degree at Leningrad State University, Putin joined the KGB in 1975. “I was driven by high motives,” he said of his choice of profession. “I thought I would be able to use my skills to the best of society.” He had an undistinguished career, however, making it only to the rank of lieutenant colonel. He served in counterintelligence, monitoring foreigners in Leningrad, and then as an officer in Dresden, a backwater assignment, where he almost certainly attempted to recruit Westerners who came to East Germany. With the fall of the Berlin Wall, Putin returned to his native city and attached himself to the administration of the reformist mayor, Anatoly Sobchak, one of his old law professors. A fluent German speaker, Putin established a reputation as a competent but colorless bureaucrat who worked well with foreigners. His real skill was his ability to vault upward, almost unnoticed, on the coattails of powerful patrons.

In 1996, after Sobchak lost his reelection bid, Putin moved to Moscow, holding a series of positions in the administration of President Boris Yeltsin, until he was appointed director of the FSB, the intelligence and security agency that was rebuilding its power following the dismantling of the KGB. In August 1999, Putin was appointed prime minister in the chaotic Yeltsin administration, marked by the increasing decrepitude and alcoholism of the president. When Yeltsin resigned on December 31, 1999, Putin—looking very much like a nervous, pale junior staffer—became acting president. He won election to the post three months later with 53 percent of the vote.

The rich and powerful around Yeltsin had backed Putin’s rise because they believed he was malleable, but Putin, as ruthless as he was cunning, viewed them as a threat to his rule. He gradually used the powers of the state and the court system to bring the oligarchs under control, imprisoning those who crossed him and seizing their property. The man who’d once seemed destined for the background became the new tsar, and the country’s media, also brought to heel, portrayed the vigorous Putin as the embodiment of Russia’s revival, a state that he had returned to its proper place as a global power able to rival the United States—“the main enemy,” in the parlance of the KGB.

Seen from Moscow, the operation to sway the U.S. election had a long prologue. It was carried out by a regime that has fine-tuned the politics of grievance into a sophisticated propaganda weapon. Putin believes the United States engineered the breakup of the Soviet Union, eagerly plundered the fallen empire’s spoils, and has been using its influence ever since to keep Russia weak. His innovation has been to sharpen and magnify those charges into his raison d’état—and to point to them to show why responding to U.S. aggression was not only justified but a necessity.

His resentments, nurtured over many years of perceived slights and betrayals, had found a particular focus in his animus for Hillary Clinton. As Russians voted in the parliamentary election on December 4, 2011, videos documenting widespread fraud at the ballot box rocketed around the internet. The next day, Clinton offered her view on the sidelines of a conference in Bonn, Germany. “Russian voters deserve a full investigation of all credible reports of electoral fraud and manipulation,” she told reporters. “The Russian people, like people everywhere, deserve the right to have their voices heard and votes counted.”

As she spoke, activists in Moscow were readying a protest of the election results in the city center. They had registered an expected five hundred attendees with the police; five thousand showed up, the biggest anti-government demonstration of the Putin era. The frustrations of an urban middle class that increasingly yearned for not just material well-being but also for political freedom burst into the open. It would take months for the protests, which soon drew some hundred thousand participants, to subside.

Putin was furious. To him, the fact that the first protests erupted just hours after Clinton’s remarks was far from a coincidence. His German biographer Hubert Seipel described Putin’s anger that day as a seminal moment in shaping his disdain for Clinton and his conviction that the United States sought regime change in Russia.

“I saw the first reaction of our American partners,” Putin told supporters a few days later. “The first thing the secretary of state did was to characterize and evaluate the elections and say that they were dishonest and unfair, even though she had not yet received the materials from the [election] observers. She set the tone for certain actors [in] this country—she gave them a signal. They heard that signal and, with the support of the U.S. State Department, began their active work.”

Putin would survive the challenge and eagerly start pushing back—with the same tools he accused the West of using against him.

FEBRUARY 2016 BROUGHT ST. PETERSBURG SNOW FLURRIES AND ICE fog, a curtain of crystals in the frigid air. The districts that hug the northern bank of the Neva River had for decades been dotted with factories that rose during the nineteenth century. The area had seen its fortunes fade with the Soviet Union’s collapse. But its tree-lined streets, historic apartment buildings, and green spaces had maintained their charm, and the closed factories gradually gave way to office buildings beckoning a digital-friendly generation of Russians and internet start-ups.

The shuttered factories had been well situated alongside the ancient waterways that braided Russia’s intersection with Europe. But now, with steamships replaced by fiber optics, those with enough know-how, funding, and cleverness could access different sorts of currents. The firm that leased the four-story building at 55 Savushkina Street seemed to be among this new breed of Russians who in their own modern ways were following in St. Petersburg’s mercantile tradition.

The name of the company, the Internet Research Agency, sounded vaguely impressive if uninspired. A street sign in front of the building warned cars to slow down for children crossing on the next block. A short stroll away, on a verdant island in the Neva, were tennis courts, a museum, and a palace overlooking the water that served as a summer retreat for Tsar Alexander I. Not that the tech-savvy employees of the Internet Research Agency had time for such diversions. Each morning they filed in for cubicle-bound jobs that combined two of their generation’s consuming pastimes: crafting posts for social media and clicking refresh to see whether their creations had gone viral.

On February 10, 2016, as the fog outside thickened, employees received new instructions for an important project. An internal memo directed the company’s “specialists” to devote their social media skills to a single target—the U.S. presidential election. The aims were explicit: “use any opportunity to criticize Hillary and the rest (except Sanders and Trump—we support them).”

The Internet Research Agency memo represented a distillation of a remarkable effort only alluded to in the company’s name. Since its founding, the agency had devoted inordinate attention to studying the political climate in the United States, with special focus on issues that seemed to strike deep emotional chords with Americans—guns, Islamist terrorism, and race. By April 2014, the firm had set up a special department for what was referred to internally as the “Translator Project,” an effort to infiltrate America’s dominant social media platforms—YouTube, Facebook, Instagram, and Twitter. And unlike the costly stratagems of the Cold War—planting sleeper agents, recruiting and running Western turncoats, launching satellites and spy planes, underwriting proxy wars—the disruptive potential of the internet was vast and unbelievably cheap.

The project required an immersive understanding not only of the way Americans interacted online but also the fault lines of the country’s political landscape. In June 2014, two of the company’s employees boarded flights for the United States. Aleksandra Krylova and Anna Bogacheva spent the next three weeks crisscrossing America, making stops in at least nine states, including California, Texas, Michigan, Louisiana, and New York. Posing as tourists, the travelers studied the contours of the country’s charged political atmosphere. The report they compiled upon their return was valuable enough that the agency sent another employee on a subsequent excursion, in November, to Atlanta, for a more focused, four-day mission whose purpose remains murky.

Even by tech start-up standards, the Internet Research Agency had an unusual business model. There were normal-seeming departments—graphics, data analysis, search-engine optimization—but no evident source of revenue. Nor were there any meetings with clients; the agency’s “research” was all consumed in-house. And yet it had kept adding employees, hundreds of them, with an annual budget in the millions of dollars.

The firm’s founder had no apparent background or expertise in online ventures. The incomplete accounts of his life indicate that Yevgeny Prigozhin was born in St. Petersburg in 1961 and appeared headed for athletic glory as a cross-country skier before being imprisoned in 1981 for crimes including robbery. After his release amid the Soviet Union’s 1991 collapse, Prigozhin opened a hot dog stand, but the move that truly altered his fortunes in Russia came seven years later, with his purchase of a rickety vessel that he turned into a floating food establishment. New Island Restaurant, as it was called, attracted a different category of clientele—most notably another St. Petersburg native, Vladimir Putin. Prigozhin endeared himself to the future Russian president with an attention to detail and a willingness even as proprietor to engage in the more quotidian aspects of running a restaurant. Putin “saw how I built my business starting from a kiosk,” Prigozhin said in an interview with a St. Petersburg magazine. “He saw how I was not above serving a plate.”

The connection ultimately helped position Prigozhin for a series of lucrative catering contracts, supplying food to schools in St. Petersburg and the Russian military. (His bond with the increasingly powerful politician paid off in other ways, too: in 2002, Putin brought world leaders, including President George W. Bush, aboard the New Island for meals taken while drifting along the city’s waterways.) Those deals led to even greater riches as Prigozhin branched out, earning billions from contracts that came to include providing soldiers for hire to guard oil wells in Syria. Prigozhin family social media accounts offered glimpses of sprawling estates, private airplanes, and Yevgeny’s adult children cavorting on a luxury yacht. As he ascended into the ranks of the Russian oligarchs, the entrepreneur who so impressed Putin by personally busing dishes acquired the nickname “Putin’s cook” and was soon handling other kinds of dirty work.

According to a top-secret NSA report issued more than a year after the U.S. election, the Internet Research Agency conducted information warfare along several fronts. One was referred to internally as “govnostrana”—which the NSA translated as “crap country”—and referred to attacks meant to damage a nation’s reputation and sap its citizens’ confidence. This effort involved the creation of two types of trolls (the term for online provocateurs), one focused on influencing public opinion by amassing loyal followings, and another that used teams of four or five people to churn out a mass volume of posts to overwhelm any competition from those posting contrary opinions.

In a February 2018, interview with The Washington Post, Marat Mindiyarov, a teacher by training, explained that he began working at the agency in late 2014 because it was close to home and he needed to make money during a stretch of unemployment. “I immediately felt like a character in the book 1984,” he recalled. The agency, he said, was “a place where you have to write that white is black and black is white. Your first feeling, when you ended up there, was that you were in some kind of factory that turned lying, telling untruths, into an industrial assembly line.” Others hired at the Internet Research Agency described their assignments and the atmosphere there as similarly Orwellian. Lyudmila Savchuk, an activist and journalist who infiltrated the Internet Research Agency in 2015 as part of an investigation of the outfit, said, “Their top specialty was to slip political ideas inside a wrapping that was as human as possible.”

Like many employees at the agency, Mindiyarov’s main tasks involved producing pro-Putin propaganda for Russian-speaking audiences, particularly to drum up support for Russia actions in Ukraine. A former Soviet republic, Ukraine had since the fall of communism struggled to balance its close cultural and economic ties to Moscow against a desire to build a more independent and Western identity, developing democratic institutions and pursuing closer ties to Europe. That struggle had first taken on a frightening new dimension in 2004. During that year’s presidential campaign, reform candidate Viktor Yushchenko had become badly disfigured after ingesting what authorities later determined was a near-lethal dose of the same dioxin used in Agent Orange, a poisoning that few seemed to doubt had been carried out by the Kremlin. Yushchenko survived only to lose the race to a rival politician, Viktor Yanukovych, who was seen as a puppet of Moscow.

Amid evidence of widespread electoral fraud, Ukraine had been convulsed by prodemocratic protests that came to be known as the Orange Revolution. It was one in a series of popular uprisings inside and outside Russia that unnerved Putin, who came to suspect clandestine interference by the United States. A revote ordered by the country’s supreme court reversed the disputed outcome, handing the election to Yushchenko. Putin looked to the Russian military and intelligence services to undermine the democratically elected leader, and some of the strategies that did just that would be models for his later intervention in the American presidential contest.

Yushchenko was unable to fully stabilize the country, and after five years the pro-Moscow Yanukovych regained power. Drawing upon (and paying heavily for) the advice of an American consultant, Yanukovych lasted four years before an uprising removed him from office. Moscow responded to the disintegration of the government it backed by sending in Russian forces—the insignias stripped from their green uniforms—to begin dismembering the country. Russia annexed the Black Sea peninsula of Crimea and sent arms and “volunteers” from the ranks of its own military to bolster pro-Russia separatists in eastern Ukraine. Putin claimed that Russian speakers in Ukraine needed to be protected in the wake of a nationalist revolution, but much of the world saw the Russian invasion as a violation of international law and Ukraine’s sovereignty.