S2 Underground

A busy week has reached us once again, quite a lot of news to catch up on throughout the week. This week I decided to break up the content into two separate videos; this first part, which is the standard news update, and a second part (which I'm editing right now) that covers some more in-the-weeds ideas of the recent Russian/Chinese incursion flight that occurred a few days ago. That incident was quite interesting, but also quite boring and probably not particularly immediately useful to everyone, so I decided to separate it out into it's own video. That Part 2 video will be uploaded by tonight.

Youtube link: https://youtu.be/fW2iIsVSMAc

00:00 - Northeast Region 

05:32 - Midwestern Region 

08:10 - Southwestern Region 

11:40 - Western Europe 

20:02 - Red Sea/HOA 

21:35 - Far East 

23:33 - GhostNet Reports

//The Wire//2100Z July 26, 2024//

//ROUTINE//

//BLUF: FRENCH RAIL NETWORK SABOTAGED AS OLYMPICS BEGIN. PENTAGON IT PROVIDER IMPACTED BY DATA BREACH AND DOCUMENT LEAK.//

 -----BEGIN TEARLINE-----

-International Events-

Europe: The Olympic Games began today in Paris. Security has been tight over the past few weeks leading up to the event, as the risk of terrorism remains persistently elevated throughout Europe. This morning, the TGV high-speed rail network was targeted by malign actors, who shut down the network via acts of sabotage and arson. French authorities report that several lines were taken out of action due to coordinated sabotage teams, who disabled the rail network at several sites throughout the country simultaneously. No word yet on which organization or group conducted these attacks.

-HomeFront-

Washington D.C. – Concern is mounting with regards to a major cybersecurity breach of Leidos that became public a few days ago. Allegedly, malign actors leaked documents that were obtained from a previous breach of the Diligent Corporation. The breach at this third-party vendor allowed documents from Leidos to be stolen and leaked. AC: Leidos is a major defense contractor, who primarily serves as an IT services provider for the Department of Defense.

Texas: Two major arrests of senior Sinaloa cartel officials occurred last night in El Paso. Joaquin Guzman Lopez (son of El Chapo) and Ismael "El Mayo" Zambada Garcia (a senior Sinaloa kingpin) were arrested under unclear circumstances. Both men have been high-value individuals for some time, for crimes related to cartel operations.

-----END TEARLINE-----

Analyst Comments: The events in El Paso are possibly related to a power-play within the Sinaloa. Mainstream media sources claim that El Mayo was deceived by another high-ranking Sinaloa official into flying into a small airstrip in El Paso instead of another location. El Chapo’s son was on the same flight, and was captured alongside El Mayo. Due to the nature of counter-narcotics operations, very few of these details can be independently confirmed. However, if these arrests were as strategically damaging to the Sinaloa as many media outlets indicate, conflict along the U.S. border with Mexico could intensify in retaliation.

Analyst: S2A1

//END REPORT//

//The Wire//2030Z July 25, 2024//

//ROUTINE//

//BLUF: RUSSIAN, CHINESE BOMBERS INTERCEPTED IN ALASKA ADIZ. IRAN MAKES MAJOR PROGRESS WITH RAIL LOGISTICS NETWORKS. INDICATORS MOUNT REGARDING POTENTIAL ISRAELI INVASION OF LEBANON.//

 -----BEGIN TEARLINE-----

-International Events-

Western Asia: Iran celebrated the opening of the Rasht-Caspian Railway, a major rail project in Iran’s northern Gilan province. High ranking Russian officials were present at the inauguration event in the Iranian city of Rasht. This project completes one of the major segments of the larger project, the International North-South Transport Corridor (INSTC), which is intended to link the Caspian Sea with the Persian Gulf. This event takes place on the heels of another separate (but also significant) rail logistics network becoming operational in the eastern districts of Iran.

Red Sea/HOA: Tensions between Italy and the Houthi-controlled government in Yemen have increased following Israeli airstrikes last week. The Italian Air Force provided aerial refueling for the Israeli aircraft that conducted the strikes in the Yemeni port city of Hudaydah. In response, the Houthis have threatened to target the Italian base in Djibouti if Italy continues to militarily support Israel.

Middle East: Following PM Netanyahu’s address to Congress, rhetoric has shifted to indicate an increasing likelihood of an Israeli invasion of Lebanon. Various Israeli officials overnight increased such rhetoric, along with military officials claiming that military preparations for such an invasion are complete. AC: In this war, rhetoric is nearly meaningless as all sides have frequently made false claims. Israeli politicians call for increasing military operations daily, and various IDF spokespersons have stated that preparations for an invasion are “complete” at least four times over the past few months. Nevertheless, the implications and sentiments expressed during PM Netanyahu’s visit to Congress have led many to theorize that Netanyahu has (in effect) been given the “green light” for such an invasion. This idea will be impossible to confirm with any reliability, however even before Netanyahu’s very specifically timed visit, the U.S. was unlikely to intervene when/if Israel decides to carry out a land-based advance in to Lebanon. On the other side of the wire, Hezbollah is not doing Lebanon any favors, with many missile and rocket strikes being carried out targeting Israeli cities. For the most part Hezbollah has mostly engaged in harassing attacks, with more substantial rocket attacks being triggered in response to particularly egregious Israeli actions in Gaza. However, as tensions remain perched on the knife edge between the conflict simmering down, and expanding greatly, it would not take much for a conflagration to occur in the region (even by accident) which allows Israel more leeway in the international arena to conduct operations in Lebanon.

-HomeFront-

New Jersey: Senator Bob Menendez has resigned from the US Senate (effective Aug. 20) following his bribery convictions. AC: As a reminder, Menendez was convicted of 16 felony counts of bribery for accepting cash and gold payments from Egyptian and Qatari agents, in exchange for services rendered in Congress that benefit the interests of these governments.

Washington D.C. – Cleanup operations following yesterday’s demonstrations/unrest have begun as many monuments, buildings, and other structures were defaced by demonstrators. Criticism of the handling of the unrest has been mounting as very few of the violent demonstrators (specifically those who defaced monuments) were arrested. This morning the US Park Police issued a statement explaining that only 29 officers were designated for crowd control, which prevented any sort of mass arrest operation from being feasible.

California: This morning Governor Newsom signed Executive Order N-1-24, which mandates the

//The Wire//2130Z July 24, 2024//

//ROUTINE//

//BLUF: PM NETANYAHU ADDRESSES CONGRESS AMID DEMONSTRATIONS. PRESIDENT BIDEN SCHEDULED TO ADDRESS THE NATION TONIGHT.//

 -----BEGIN TEARLINE-----

-International Events-

Europe: The situation regarding immigration continues to intensify following several recent events around the continent. In Ireland, the local resistance to a migrant center in Coolock has slowly been increasing over the past few months. A few days ago another potential site for a migrant center was burned down by locals who do not support illegal migrants being housed in their community. This latest event follows weeks of demonstrations and more kinetic events, such as the destruction of construction equipment. In the U.K. similar tensions have been building as PM Starmer has made the continuance of immigration a key part of his platform. AC: Increasingly numerous knife attacks, assaults, and otherwise violent behavior perpetrated by illegal migrants over the past few years has exacerbated tensions on the island nation. As such, in some of the more localized areas which have been forced to accept migrants into their communities, resistance to these efforts is mounting (resistance which is increasingly cracked-down on by authorities).

-HomeFront-

Washington D.C. – Preparation continues for President Biden’s address to the nation tonight, as well as PM Netanyahu’s address to Congress. Various groups of demonstrators protested the event, and limited fortifications and obstacles have been emplaced at strategic sites around the National Capitol Region (NCR). During PM Netanyahu’s address, the demonstrations outside became more kinetic, and Capitol Police dispersed some of the larger groups. Also, 6x people were arrested for disruptive behavior in the Gallery.

-----END TEARLINE-----

Analyst Comments: Most of the demonstrators in Washington D.C. appear to have been bused in for the event. As with most high-profile political events such as Netanyahu’s speech, the potential for information warfare is elevated. Though more analysis is needed in this specific case, events of this nature often result in protesters and counter-protesters that are in reality (mostly) paid activists funded by the same sources. This is worthy of note, as these events (ones that appear to be hosted by professional protesters) present a higher likelihood of both violence (on the part of the protesters) and entrapment (on the part of agitators). Generally speaking, the less organic a “protest” is, the higher the potential is for more wide-ranging impacts to be felt, even outside the original demonstration area.

Analyst: S2A1

//END REPORT//

//The Wire//2300Z July 23, 2024//

//ROUTINE//

//BLUF: POLITICAL INSTABILITY CONTINUES IN U.S. DEMONSTRATORS OCCUPY U.S. CAPITOL.//

 -----BEGIN TEARLINE-----

-International Events-

Red Sea/HOA: Attacks on commercial shipping continue to escalate. A few days ago, the M/V PUMBA was attacked via a variety of platforms. The vessel first reported being attacked by a drone, before being targeted by an Unmanned Surface Vessel (USV). This attack failed as the embarked security team successfully engaged the USV with small arms and crew-served weapons, which prematurely detonated the explosives onboard. The M/V PUMBA continues towards her next port of call with minimal damage.

-HomeFront-

Washington D.C. – The White House has announced that President Biden will address the nation tomorrow night, following concerns of his status. This afternoon, Articles of Impeachment have been filed against Vice President Harris for “high crimes” related to her handling of the border crisis.

Washington D.C. – Anti-Israel protesters occupied the US Capitol rotunda today, demonstrating against arms shipments to Israel as PM Netanyahu conducts a state visit. After some time, most demonstrators were detained and removed from the Capitol.

-----END TEARLINE-----

Analyst Comments: There are very good reasons as to why a candidate would drop out of a political race in person, with a televised address, particularly if that person is an incumbent. The alternative course of action is already playing out; by “ghosting” the nation, Biden has given the taxpayers cause for questioning whether or not he’s even fit to finish out his current term. As the world awaits his (allegedly) live address tomorrow night, these considerations are likely contributing factors for unrest as political machinations continue to escalate during this election season.

Analyst: S2A1

//END REPORT//

//The Wire//1900Z July 22, 2024//

//ROUTINE//

//BLUF: BIDEN WITHDRAWS FROM RACE. ISRAEL COUNTERATTACKS HOUTHIS IN YEMEN. HEARINGS BEGIN IN CONGRESS ON FAILURES OF USSS.//

 -----BEGIN TEARLINE-----

-International Events-

Middle East: Saturday night, Israeli forces counterattacked Houthi positions in Yemen, following the successful Houthi drone strike on Tel Aviv last week. Israeli forces targeted the POL facilities in Hudaydah, along with maritime facilities in the port city. AC: At the moment, it’s not clear as to if this is a tit-for-tat retaliation, or the beginning of a more prolonged campaign. Israel is likely not capable of sustaining extreme-long-range expeditionary operations over a long period of time, but probably can carry out a limited bombing campaign of Yemen for a few weeks. However, with chaos in the White House and the tensions with Lebanon remaining elevated, the confidence that Israel may have had in support from the United States (to carry out such prolonged and expensive operations) is likely not as surefire as in the past.

South Asia: The situation in Bangladesh has deteriorated significantly, despite compromise being made to appease demonstrators. A few days ago the Supreme Court ruled to scale back the controversial civil service hiring quota law, tempering the preferential treatment given to various groups (and veterans of the 1971 war of independence). Nevertheless, demonstrations have continued to grow in size and severity, and a de facto state of martial law has been implemented. AC: So far, details are hard to verify as a nationwide curfew is in effect, with citizens reportedly being allowed to leave their homes for two hours per day to run errands. A nationwide internet blackout was implemented last week, greatly hindering information gathering efforts. What little information has made it out of the country has come via satellite communications.

-HomeFront-

Texas: Friday night, the First Baptist Church of Dallas suffered a catastrophic fire which destroyed the Sanctuary. AC: Due to the structural integrity issues following the fire, investigators have not been able to access some parts of the structure. As such, the cause of the fire has not yet been determined.

Washington D.C. – This morning, Congressional hearings began regarding the conduct of the USSS in the wake of the Trump assassination attempt. AC: Today’s round of testimony has generated far more questions than answers, and has not yet resulted in any useful details coming to light.

Washington D.C. – President Biden has withdrawn from the 2024 Presidential race, and issued an endorsement of Kamala Harris. Harris has not provided any indication of who her running mate will be, and continuing talks indicate that the DNC may move towards an open convention.

-----END TEARLINE-----

Analyst Comments: Several details remain questionable regarding Biden’s withdrawal from the Presidential race. For instance, his withdrawal letter was not written on official White House letterhead, and Biden’s signature very obviously does not match his handwriting on recent documents. Additionally, no press conference was called to discuss this event, as is typical in such a situation. Biden has also not been visually seen by the public since his withdrawal letter was posted on Twitter/X with no other amplifying information. Several members of Congress have called for Biden to make a public appearance and/or confirm his withdrawal in a video. The White House has not responded to these requests, however various staffers have implied that Biden will make remarks later this week. However, as of right now, Biden’s official schedule has been cleared for this week, with no official events on his calendar.

Despite how these indicators strongly suggest a bloodless coup may have taken place, the other possibility is that the shame and political embarrassment of this event has resulted in a

Another week of craziness it has been, but also lots of good opportunities to learn a lot. After i get caught up on the book club videos (and get another poll ready, I promise I haven't forgotten), I am going to prioritize another Election Readiness video, focusing on some more in-the-weeds things that I plan to prepare for/focus on as the election gets closer.

Youtube link: https://youtu.be/NX1VBuzEZUg

00:00 - Northeast Region 

20:20 - Southwest Region 

23:49 - Red Sea/HOA Region 

28:58 - South China Sea 

32:02 - GhostNet Reports 

34:10 - Closing Thoughts

//The Wire//1300Z July 19, 2024//

//PRIORITY//

//BLUF: MAJOR CROWDSTRIKE CYBER ISSUE STRIKES ALMOST ALL MICROSOFT WINDOWS ENTERPRISE SYSTEMS GLOBALLY. HOUTHI DRONE STRIKES TEL AVIV.//

 -----BEGIN TEARLINE-----

-International Events-

Middle East: Last night a Houthi drone successfully struck Tel Aviv. One long-range drone successfully evaded all Israeli and American defenses in the region to strike Tel Aviv for the first time. PM Netanyahu has reportedly canceled (or more likely delayed) his upcoming trip to the United States as a result of this incident.

-HomeFront-

USA: This morning, almost all Windows Enterprise-based networks were brought down via an inadvertent software update from CrowdStrike. The CrowdStrike CEO has stated that this incident was not a cyberattack. The impacts of this incident have been widespread. Many airlines have grounded flights. Banks are reporting issues, many businesses can’t process payments, 911 call centers have been reported to be down, media organizations, radio stations, medical facilities, telecoms networks have all reported being affected by the outage in some way. No timeline for recovery has been provided yet, as engineers are still working on solutions.

-----END TEARLINE-----

Analyst Comments: The drone attack in Tel Aviv, while significant in its own right, could also have had more wide-ranging effects. The drone impacted what appeared to be a random target just a few hundred meters from the U.S. Consulate in Tel Aviv. While it’s likely that the guidance systems onboard Houthi munitions are not precise enough to impact on a point target from thousands of miles away and therefore was probably not deliberately targeting the United States, the potential for more direct (but somewhat accidental) U.S. involvement in this conflict remains.

Regarding today’s massive IT outage, this incident is looking to be one of the largest IT disasters in history. As such, this is another reminder of how a company most people have never heard of can push a random update in the middle of the night, and crash most IT systems around the world.

Analyst: S2A1

//END REPORT//

 GhostNet Document Download: https://github.com/s2underground/GhostNet Combat Intel Cycle: https://youtu.be/J_fjLoa5rBo 
Intelligence Prep of Battlespace: https://youtu.be/oIJDMbwziOI 
Incident Response: https://youtu.be/i9lu-Zso1ok 
NOTAMS: https://youtu.be/HLg0VW49l_U 
Tactical SIGINT 1: https://youtu.be/iGdJCENreDY 
Tactical SIGINT 2: https://youtu.be/lWOU4UeiUEE 
GhostNet Playlist: https://www.youtube.com/playlist?list=PL93ufUXbUR1rXnjw6QxueJXfVWxJSxkaX 

00:00 - Introduction 
04:08 - Initial Notification (and Vulnerability) 
07:54 - Security 
08:41 - Potential for Larger Incident 
11:13 - Establishing Comms 
12:28 - Explaining the Wire 
19:30 - Strategic Indicators 
28:24 - Time Management 
31:33 - GhostNet Drill 
36:50 - Psychological Effects 
38:48 - Follow-on Information 
45:22 - Information Space Concerns 
48:05 - Closing Thoughts and Concerns 

The text version of the Wire can be found on Twitter: https://twitter.com/s2_underground And on our Wire Telegram page here: https://t.me/S2undergroundWire If you would like to support us, we're on Patreon! https://www.patreon.com/user?u=30479515 And if you don't like Patreon, we're also on Playeur! https://playeur.com/c/S2Underground Disclaimer: No company sponsored this video. In fact, we have ZERO sponsors. We are funded 100% by you, the viewer. All of our funding comes from direct support from platforms like Patreon, or from ad revenue on YouTube. Please note that even though it hurts our income, we still offer ad-free watching via alternative platforms like Odysee, Gab, and (for now) Rumble. Odysee: https://odysee.com/@S2Underground:7 Gab: https://gab.com/S2underground Rumble: https://rumble.com/c/theunderground BitChute: https://www.bitchute.com/channel/P2NMGFdt3gf3/ Just a few reminders for everyone who's just become aware of us, in order to keep these briefings from being several hours long, we can't cover everything. We're probably covering 1% of the world events when we conduct these briefings, so please remember that if we left it out, it doesn't necessarily mean that it's unimportant. Also, remember that we do these briefings quite often, so we might have covered an issue previously that you might not see if you are only watching our most recent videos. We're also doing this in our spare time, so again we fully admit that these briefings aren't even close to being perfect; we're going for a healthy blend of speed and quality. If we were to wait and only post a brief when it's "perfect" we would never post anything at all. So expect some minor errors here and there. If there is a major error or correction that needs to be made, we will post it here in the description, and verbally address it in the next briefing, whenever that is. Also, thanks for reading this far. It is always surprising the number of people that don't actually read the description box to find more information. This content is purely educational and does not advocate for violating any laws. Do not violate any laws or regulations. This is not legal advice. Consult with your attorney. Our Reading List! https://www.goodreads.com/user/show/133747963-s2-actual The War Kitchen Channel! https://www.youtube.com/channel/UCYmtpjXT22tAWGIlg_xDDPA 

//The Wire//2000Z July 18, 2024//

//ROUTINE//

//BLUF: RIOTS BEGIN IN BANGLADESH. WIND TURBINE DEBRIS CLOSES NANTUCKET BEACHES. FINANCIAL DISCREPANCIES HIGHLIGHT TRUMP SHOOTING ISSUES.//

 -----BEGIN TEARLINE-----

-International Events-

South Asia: Riots have emerged in Bangladesh following tensions that have been developing over the past few years. A few months ago, tensions escalated as students began to intensify protests against a controversial 1971 law that affects the hiring practices of civil servants. Those protests continue today, and have expanded to include most major universities throughout the nation. Conversely, as demonstrations have expanded, so has the crackdown, with clashes between protesters/rioters and police becoming increasingly more violent.

-HomeFront-

Massachusetts: Most of the beaches in Nantucket have been closed for cleanup operations as debris from destroyed wind turbines washes ashore. Last weekend, storm damage caused a catastrophic failure of turbine AW38 in the Vineyard Wind field which resulted in large fields of fiberglass and foam debris washing ashore over the past few days. 

Texas: Controversy has emerged following financial data that has come to light following the attempted assassination of President Trump. One day before the assassination attempt, Austin Private Wealth LLC (an investment firm located in the Austin area) disclosed a large put option against $DJT (Trump’s media group) of 12,000,000 shares. Some sources claim that this disclosure is a quarterly filing (which also included other positions, not just DJT), and therefore no nefarious activity occurred. However since these records have come to light, the company has amended the filing and issued a statement that a “clerical error” was the reason for such activity.

-----END TEARLINE-----

Analyst Comments: For many people, the financial data surrounding the attempted assassination of President Trump is suspicious. Of course, the potential for error always exists, and statistically speaking is often underrepresented as the cause for incidents like this.

More broadly, the fact that the company felt the need to address these claims is telling enough. Even as many financial advisors balk at the potential for nefarious activity in the financial sector regarding this incident, and scold any layperson who may think some investigation is worthwhile, the honest truth is that the majority of the entire financial sector is built on a bedrock of sketchy trades, or suspiciously-timed investment moves. Most of the time, investment groups can safely ignore claims of inside knowledge, even for high profile incidents involving politicians. In this case, the company responding to these claims strongly indicates that even the company admits this looks really suspect, and therefore an explanation was required. The company itself has not clarified whether or not the report filing was in error, or if those shorts had really been made, but backtracked on upon the failure of Trump’s assassination attempt. Many are asking the question of, if the assassination had been successful, and DJT crashed…would this “clerical error” have been corrected or would it have been tied up (or covered up) in some way? In any case, significant forensic analysis of this incident would be reassuring for what many laypersons not involved in the financial sector consider to be a smoking gun.

Analyst: S2A1

//END REPORT//