u/Robert-Nogacki

The DOJ unsealed a 14-count superseding indictment last week (US v. Rafatnejad, S2 18 Cr. 94, SDNY) adding 8 defendants to the original 2018 case and extending the documented timeline to at least March 2022. The headline numbers (31.5 TB, 144 US universities, $3.4B in licensing value) got the coverage. The operational detail in the document itself is worth a closer look.

Three-phase university attack model

Phase 1: open-source reconnaissance on individual professors. Publications, research interests, co-authors, institutional network. The goal was a convincing impersonation before any contact.

Phase 2: spearphishing email appearing to come from a professor at a peer institution, referencing the target's actual recent publications and offering links to related papers. Clicking resolved to a typosquatted domain (single character off the legitimate university URL, or an alternate TLD) hosting a cloned login page for that specific institution. Credentials logged.

Phase 3: using stolen credentials to log into victim accounts and exfiltrate everything accessible: journals, dissertations, monographs, raw data. In many cases, automated forwarding rules were set on the compromised account, silently copying all subsequent incoming and outgoing mail to attacker-controlled servers. Persistent access even after a password reset.

Private sector targets got a different approach: password spraying against employee email lists compiled via OSINT. Lower sophistication, higher volume. Same forwarding rule technique on success. Full mailbox exfiltration.

The commercial layer is what makes this operationally unusual. The stolen academic access was not only delivered to the IRGC. Two websites, Megapaper.ir and Gigapaper.ir, resold it inside Iran. Megapaper sold individual articles to Iranian public universities on invoice. Gigapaper offered subscriptions: customers received persistent access to a compromised Western professor's library account for direct browsing. Iranian universities were confirmed paying customers. State-sponsored IP theft with a working B2B revenue model built on top of it.

Two of the defendants were simultaneously FATA members (Iran's internal cyber police) and Mabna contractors. One had also developed a website for the Supreme Leader's office. The overlap between the domestic surveillance apparatus and foreign offensive operations is documented explicitly in the indictment.

Every frontier model since 2023 has been American and Chinese labs trail by about seven months (Epoch). Meanwhile Chinese open models reached 41 percent of Hugging Face downloads, Qwen passed 700 million downloads with more derivatives than Google and Meta combined, and inference cost at fixed capability fell about 280 times in two years. The argument: capability is a leak rate, not a stock, because a model can be copied through its own API, and in that world second place given away free beats first place behind a meter.

Over the past few months my firm has been getting a steady stream of inquiries built on the same package: a Paraguayan residence card (about USD 1,500 to 2,500, 16 to 32 weeks to obtain, no minimum stay, one entry a year keeps it alive in practice), plus a single-member US LLC to invoice clients, plus the promise of paying nothing because Paraguay only taxes local income. The marketing is slick. The law is not impressed. We published a full breakdown for the Polish case, but the mechanics apply far beyond Poland, so here is the short version.

The card answers the question of who may live in Paraguay. Your home country answers the question of whether you have actually left. In Poland that test is the center of vital interests: where your family, home and economic base are. Filings are declaratory; they report a change that already happened in real life, they do not create it. Keep the apartment, the registered business and the family at home and you have not changed residency, you have signed up for a dispute about it. Most European countries run some version of this test.

Paraguay adds a specific problem: Poland has no tax treaty with it, and Paraguay's treaty network is one of the smallest in the world. No treaty means no tie-breaker rules when two countries both claim you. The whole fight happens under your home country's law, with the burden of proof on you.

The money side is worse than the legal side. If your income has any royalty or licensing component (design, content, software), source countries withhold at payout; with a territorial system there is no tax at home to credit it against, so a 20 percent withholding becomes a dead loss. A single-member LLC is disregarded for tax purposes: while you remain tax resident at home, its income is simply your income plus US paperwork, and an intermediary with no real function is textbook anti-avoidance bait. Some countries also charge an exit tax on the way out; Poland does, above roughly PLN 4 million in financial assets.

None of this means relocation is impossible. Real moves to treaty countries with a genuine base work fine. Paper residency is a lawsuit with extra steps. A structure whose defense costs more than its construction is better identified before the first invoice than during the first audit.

Dopamine agonists, prescribed for Parkinson's, trigger impulse-control disorders in roughly one patient in six; pathological gambling in one in twenty (DOMINION, n=3,090, funded by a manufacturer).

The doctrinal twist: this side effect does not present as a symptom. It presents as the patient's own decisions, which means the standard remedy of failure-to-warn law, a better warning, reaches everyone except its intended addressee.

Courts have split on what follows.

A Minnesota jury answered with $8.3 million, $7.8 million of it punitive, over a label updated five years after the first publications. France's Cour d'appel de Rennes awarded 197,000 euros and framed it as ineffective warning of a known risk. Australia resolved 172 claims in an approved class settlement. Italy is the natural experiment: the same drug class produced both a 484,000 euro affirmed judgment and a line of dismissals, and the only variable was proof of causation in the individual plaintiff.

The most instructive influence-operation case file of the decade is now fully public, and it reads like an expense report. Start with the Eleventh Circuit opinion of August 5, 2026, in United States v. Romain: beyond affirming the convictions, it quotes the Ionov chats at length and settles a point with real collection implications, namely that "direction" under 18 U.S.C. § 951 means guidance, not control. Legally, tasking artifacts alone can now carry a case.

Then pair the two Treasury designations. Release jy0899, of July 29, 2022, names Ionov and his Anti-Globalization Movement of Russia, designated under E.O. 14024 on the same day as the raids, with a Rewards for Justice offer attached. Release jy1572, of June 23, 2023, supplies the FSB side of the ledger: Yegor Popov, Ionov's primary handler, who simultaneously ran Natalya Burlinova's operation, and his unit chief Aleksei Sukhodolov, both of the 2nd Service. A detail buried in that release deserves more attention than it got: in late 2021 Sukhodolov was drafting grant applications for his co-optees through a Russia-based institution. The funding pipeline was being institutionalized. Round it out with RFE/RL's reporting on the leaked chats, which added two more officers to the account, Vistoropsky and Mityagin, and preserved the epitaph of the whole operation: "trash the phones."

Three tradecraft takeaways. The co-optee model buys coordination, not conviction: the ideology pre-existed, and roughly seven thousand dollars, wired as two payments of $3,476.20, bought calendars, slogans and logistics. The detection signature is the reporting loop: Moscow's own bureaucracy demands receipts, so hunt for demands for links, photos and headcounts flowing upstream. And handler hygiene failed: one officer channel serviced multiple co-optees, so a single compromise unspooled the network.

Two numbers from the FBI IC3 2025 report that usually get blurred together: crypto investment fraud (the pig butchering pattern) was 7.2B USD, the largest single loss category, while the broader "cryptocurrency mentioned as payment rail" descriptor was 11.37B, up 22 percent year over year. Different things. The first is the scheme, the second is every crime that touched crypto on the way.

What the case files show about rail design, in order of appearance:

Stage one is fiat and boring: a plain SEPA or domestic transfer to a mule account in the victim's country, opened on a rented identity, drained within hours.

Stage two is card on-ramps: the victim buys USDT or BTC through legitimate processors, the merchant descriptor on the bank statement looks clean, and the crypto goes to an address dictated in chat.

Stage three is the elegant one: an account at a real exchange gets opened with the victim's own KYC documents, extracted earlier under a courier or ticket-booking pretext. Then the account gets linked to the operator's infrastructure: withdrawal address whitelists, sub-accounts, sometimes API keys. Every deposit the victim makes drains out on its own. On-chain and on paper, the victim looks like the launderer. That is not a side effect, that is the design goal.

Zoom out and the scale makes sense: UNODC's Inflection Point report describes industrial scam centers in Southeast Asia clearing close to 40B a year, and TRM's 2026 crypto crime report puts roughly 35B moving into fraud schemes over the year. This is logistics, not romance.

Practical takeaways for this sub: withdrawal whitelist changes and API key grants on a fresh account are the tell; exchanges hold exactly the evidence prosecutors need (KYC, device IDs, IP logs, linkage between accounts), and a properly targeted preservation request early in a case does more than any on-chain sleuthing later. If someone you know is "investing with a partner they met online," check whether they can withdraw ten dollars. The answer settles the question.

On July 30, Colin Gray received 15 years for the Apalachee High School shooting carried out by his son, the first murder conviction of a parent in this context. He fired no shot and did not know the plan; the theory was criminal negligence feeding a predicate of child cruelty.

The linked analysis lays out both positions at their strongest. The regulatory case: roughly three quarters of school shooters arm themselves at home per the Secret Service; Georgia has no safe storage law and its furnishing ban covers handguns only, so gifting the AR-15 was legal; the post-shooting statute (HB 268) addressed schools, not home storage; on this view the prosecution is regulation by other means. The liberty case: Heller protects ready self-defense; an elastic negligence standard judged in hindsight raises fair notice problems; the families prosecuted so far are poor and broken rather than affluent owners of identical arsenals; and fear of liability may push parents to hide a child's troubles instead of seeking help.

Questions for discussion: Should the boundary of parental duty be set by statute or case by case by juries? Does a police visit function as adequate notice, a caesura after which a parent assesses risk at his own peril? Is there any evidence that prosecuting parents deters?

Disclosure: I wrote the linked piece.

Od połowy kwietnia Przemysław Kral z Zondacrypto zdążył być w Monako, skąd datował pożegnalne oświadczenie, w Izraelu, dokąd wysłały go doniesienia prasowe, w Republice Południowej Afryki, którą przez pewien czas wskazywała lokalizacja jego konta na X, w Botswanie, gdzie miał zostać zatrzymany, i wreszcie nad Zatoką Perską, gdzie według Rzeczpospolitej negocjuje z prokuratorem. Pięć adresów w trzy miesiące. Jak na człowieka, którego od kwietnia nikt publicznie nie widział, podróżuje imponująco. Człowiek nie może być w pięciu miejscach naraz. Informacja może.

Housekeeping first: everything below comes from the anonymized translation of the Romanian indictment and from court documents; the brothers deny all allegations and the presumption of innocence applies. No victim names, no graphic detail; the point here is the mechanism, because it repeats across cases far beyond this one.

The indictment is unusual in that it folds full forensic psychological evaluations into the file. The experts describe a complete grooming sequence: mapping a woman's needs, manufacturing hope those needs will be met, building trust, presenting an irresistible life, then isolation and the takeover of decisions. The vulnerability profile that makes it work: a cold family history, a deficit of attention, a heightened need to be chosen. The control architecture after recruitment reads like an operations manual: a daily schedule covering food, activities and appearance; 12-hour streams with a 5-minute break; fines for every deviation; financed surgeries creating debt; a ban on the women discussing their relationships with each other; engineered financial dependence, in the defendant's own reported words, as the condition of trust.

The part most people find hardest to understand is why victims go back and even publicly defend the accused. The experts' answer is simple and brutal: admitting that the man she loved was the one harming her would mean annulling her own judgments, so she chooses the interpretation that preserves hope. Add fear (weapons in the house, doxxing threats against her and her parents) and the fact that prosecutors documented instructions for how women recording defense videos should look, plus recorded talk of pressuring witnesses, and the loyalty videos start looking like weak evidence rather than exoneration.

One more thread: the U.K. complaints from 2015 collapsed partly because the women did not fit the "ideal victim" template (they drank, went back, wrote tender messages). The police watchdog opened a gross-misconduct inquiry this year and the investigation was reopened after a decade.

Facts in two sentences. The CPS charged the Tate brothers (59 counts combined after the July expansion: rape, trafficking, assault, indecent images of a child) and refused to disclose the complainants' identities until the brothers are surrendered from abroad; the brothers sought judicial review. On June 26, Chamberlain J refused permission, holding neither ground arguable.

Ground 1 (irrationality). No statutory right to the names at this stage; the common law requires at most a multifactorial balancing by the prosecutor. The decision was taken by a specialist prosecutor who had met the complainants and assessed their vulnerability. The defendants' reach mattered (the judgment notes a single X account with more than 10.5 million followers), and calling them notorious was fair despite technical good character.

The point I find most consequential: the prosecutor did not need to find disclosure by the defendants more likely than not. A precautionary approach was lawful, given the public interest in not deterring complainants in serious sexual cases. The security-backed undertakings (10,000 pounds each, later doubled, plus an offer to be interviewed under caution in Romania) failed twice over: no enforcement mechanism, and a deposit prices the harm rather than mitigating it.

Ground 2 (Article 6(3)(a)). Arguably engaged from the charging decision, but fairness is assessed holistically: the accused know the offenses and date ranges, will learn the identities upon surrender and before first appearance, and retain an abuse-of-process stay in the Crown Court if late disclosure genuinely prejudices the defense.

On the U.S. side, this now runs through the standard two floors: certification under 18 U.S.C. § 3184 (identity, dual criminality, probable cause; rule of non-inquiry), then the Secretary of State's discretion. The political-offense exception has no purchase on common crimes of sexual violence, and the Romanian court's sequencing order (extradition to the U.K. only after the Romanian trial) binds Romania, not third states.

Sportradar has been FIFA's match fixing watchdog since 2017, with the contract extended through 2031. In April, two research firms (Muddy Waters and Callisto) alleged that a third of the 800 platforms it serves operate illegally, including sites in Iran and Russian occupied Crimea; the stock dropped 23% in a day and a securities class action followed in New York. The company denies everything and points out, fairly, that both authors are short sellers who profited from the crash. What I find genuinely unresolved: the conflict is built into the model. The firm that flags suspicious betting volume for FIFA also earns from betting volume. Can the same company credibly police a market it participates in, or do leagues need integrity monitoring that is structurally independent of the betting industry?

Quick background: Jedwabne, Poland, site of a 1941 massacre. The 2001 dig ran under limits negotiated with the religious community, so the experts could sieve the grave fill but never take up a bone. The lab work on what the sieves yielded is what interests me here. Of ninety-seven casings, forty-nine carried stamped dates from 1907 to 1915, twenty-nine were categorically fired from an MG-42 with three more probable on identical neck crimps, and the weapon did not exist until 1942. The star exhibit, a supposed nine-millimeter bullet, turned out to be a stamped metal capsule with fibrous filling. Eight casings were never tested and two got lost in the lab, which means they prove nothing in either direction.

I wrote up the full evidence picture, disclosure: my piece.