US Ambassador to El Salvador Ronald Johnson Tweets Stuff

 

Uh-oh! @StateDept’s Travel Provider Gets Hacked, Pays $4.5M in Bitcoin

 

Reuters reported last week that CWT (formerly Carlson Wagonlit Travel) was hit with a strain of ransomware called Ragnar Locker, which encrypts computer files and renders them unusable until the victim pays for access to be restored. “Hackers who stole reams of sensitive corporate files and said they had knocked 30,000 computers offline.”
Elsewhere it is reported that the hackers “may have stolen 2 terabytes of data, allegedly including thousands of global executives credentials. This is particularly worrisome given CWT provides travel services to as much as 33% of the Fortune 500.”
ITNews notes that “CWT, which posted revenues of US$1.5 billion last year and says it represents more than a third of companies on the S&P 500 US stock index, confirmed the attack but declined to comment on the details of what it said was an ongoing investigation.”
The news mainly talks about the 2 terabyte of sensitive files exfiltrated which supposedly include global executive credentials, but a CWT division, CWTSatoTravel is one of two contractors awarded a master contract by GSA “responsible for soliciting and managing travel for the U.S. military and government clients.” Government clients include the State Department where Carlson Wagonlit manages its travel management center.
According to GSA, the U.S. Federal Government is the largest consumer of travel services in the world.  ETS2, the government’s current Travel & Expense management solution, serves an active user base of over 1 million Civilian Government employees, and was used for 86 percent of all civilian agency travel in 2017.

ETS2 is a competitively bid master contract with two vendors providing agencies travel and expense software, hosting, and support services based on fixed-price transaction fees, which is a unique program within the Federal Acquisition Service (FAS).

Competitively bid ETS2 contracts were awarded to:

      • Concur Technologies, Inc., of Redmond, WA, in June 2012; and
      • CWTSatoTravel, of Arlington, VA, in September 2013.

CWTSatoTravel is the division of Carlson Wagonlit Travel (CWT) responsible for soliciting and managing travel for the U.S. military and government clients. CWT is a global leader specialized in managing business travel and meetings and events.

The 2019 DOS Financial Report describes its Travel Systems Program

In 2016, the Department successfully transitioned to the next generation of the E-Government Travel Services (ETS2) contract with Carlson Wagonlit Travel. In 2016, the Department also implemented the Local Travel module allowing for the submission of local travel claims for expenses incurred in and around the vicinity of a duty station. The Department expanded the use of the Local Travel feature to also accommodate non-travel employee claims previously submitted through an OF-1164. In the Local Travel module, approvers will electronically approve claims and provide reimbursement to the employee’s bank account via EFT. The Department has completed this implementation for 118 posts overseas.

The Department continues to work with our bureaus and posts to identify improvements that can be made to the travel system. The Department also participates with other agencies to prioritize travel system enhancements across the Federal Government landscape. The Department worked with Carlson Wagonlit Travel to enhance the functionality of the Local Travel feature to more closely align with the temporary duty travel functionality for foreign currency and approver expense reduction options. The Department continues to work with Carlson Wagonlit Travel on enhancements to support integration improvements with our financial systems. The Department continues to work with Carlson Wagonlit Travel on enhancements to support the implementation of the Local Payments module domestically and has initiated work to implement mobile capabilities for approvals and reservations.

Somebody asked if anyone has  publicly acknowledged that the initial hack may imply a massive potential personally identifiable information  (PII) leak on the scale of the eQIP compromise.” 
The company released a statement to The Register saying “we have no indication that PII/customer and traveller information has been affected.”
Has Foggy Bottom said anything?

 

Fourth of July 2020: Who’s Doing What Where During This Global Pandemic?

 

U.S. Embassy Brasilia, Brazil

U.S. Embassy Prague, Czech Republic

U.S. Embassy Bangkok, Thailand

U.S. Embassy Belgrade, Serbia

U.S. Embassy Phnom Penh, Cambodia

U.S. Embassy The Hague, The Netherlands

U.S. Embassy Seoul, South Korea

U.S. Embassy Athens, Greece

 

U.S. Embassy Singapore, Singapore

U.S. Embassy Kuala Lumpur, Malaysia

US Embassy Kabul, Afghanistan

(Same stock photo used by US Embassy Prague, attributed here to Getty Images).

U.S. Embassy Banjul, The Gambia

U.S. Embassy London, UK

U.S. Consulate Thessaloniki, Greece

U.S. Embassy Kolonia, Micronesia

U.S. Consulate Calgary, Canada

 

U.S. Embassy Managua, Nicaragua

U.S. Embassy Lusaka, Zambia

 

U.S. Mission Italy

U.S. Embassy Antananarivo, Madagascar

U.S. Consulate Milan, Italy

U.S. Embassy Podgorica, Montenegro

U.S. Embassy Mexico City, Mexico

U.S. Consulate General Toronto, Canada

US Embassy Sofia: What’s Happening in Bulgaria?

Via Embassy Sofia/FB:
The challenge is on! Ambassador Mustafa and her diplomat band perform a favorite Bulgarian song, and challenge 3 Bulgarian musicians to respond. Who got the challenge? What’s the song? Will the challenge be accepted? Find out in our video!

@StateDept Senior Leadership “Requests” US Embassy Seoul to Take Down BLM Banner

On June 13, we posted this: US Embassy Seoul Displays Giant #BlackLivesMatter Banner In Support of Fight Against Racial Injustice.
US Embassy Seoul’s BLM banner that went up on Saturday came down on Monday. CNN reports that senior State Department leadership asked the embassy in Seoul to take down the Black Lives Matter sign that Ambassador Harry Harris had hung from the building’s façade . A spokesman for the embassy confirmed to CNN that the large Pride flag has also come down. Via CNN:
“The request from the department’s 7th floor — where Secretary of State Mike Pompeo‘s offices are located — cited as its reason the fact that Black Lives Matter is a non-profit organization and that the US government does not encourage contributions to the group or promote any specific organization, the source said. It is not clear why the Pride flag — which was hung in late May, according to the embassy’s Facebook page — was removed and no explanation has been offered yet.”
According to Bloomberg “on Monday, after the banners were removed, the embassy said that U.S. Ambassador to South Korea Harry Harris did not intend “to support or encourage donations to any specific organization. To avoid the misperception that American taxpayer dollars were spent to benefit such organizations, he directed that the banner be removed.”

Around the World: Protests Over George Floyd’s Death

 

LONDON

DUBLIN

BERLIN

COPENHAGEN

MEXICO CITY

VANCOUVER

TORONTO

AUCKLAND

Matt Armstrong on Understanding the White House’s Attack on VOA

Matt Armstrong served as the Executive Director of the U.S. Advisory Commission on Public Diplomacy in 2011.  From August 2013 through January 2017, Matt served as a Governor on the Broadcasting Board of Governors, since renamed the U.S. Agency for Global Media. He is an MPhil/PhD candidate at King’s College London in the Defence Studies Department (since January 2020), an Associate Fellow at King’s Centre for Strategic Communication at King’s College London, and an Adjunct Lecturer for the Joint Special Operations University.

US Embassy Lima: Avianca Airlines May Have Outbound Flights For #StuckinPeru Americans

 

According to the US Embassy in Lima, Peru, on Wednesday, March 18, 2020, the Peruvian Ministry of Health (MINSA) has 145 confirmed cases of COVID-19 in Peru, with 13 hospitalized.
For Americans stranded in Peru, the embassy provided a link to Avianca Airlines’ sign up page for travelers interested in departing Lima. It looks like there are flights for March 19 and 23, 2020 from Cusco to Lima, and Lima to Miami, as well as to other non-US destinations. Avianca’s sign-up page says that the airline is trying to program new flights based on the request of embassies with nationals in the country. Travelers are asked to complete a short form to  confirm their interest in purchasing a flight.  “In case there are enough passengers confirming interest in flying, we will notify you so that you can purchase it through the different Avianca channels. In case the flight does not operate, we will also contact you” (rough translation).
As of March 19, one social media account tracking the number of those stranded in country estimates there are over 1,660 U.S. citizens in the country from 48 states plus the District of Columbia and Puerto Rico.
Below via US Embassy Lima:

Avianca Airlines notified the U.S. Embassy it has created an online signup page here for travelers to express interest in flights departing from Lima and Cusco to destinations including the United States.  If you are interested in this offer, please respond immediately through the link.  You are encouraged to keep contacting your airline for reservation and flight updates.  To contact major airlines with flights from Peru to the United States, below are their customer service telephone numbers:

  • The Peruvian government declared a national state of emergency on March 15, 2020, at 8:00 PM Peru local time.  Under the state of emergency, Peru enacted 15 days of mandatory quarantine, starting at 00:00 on March 16, 2020.  At 23:59 PM on March 16, 2020, the Peruvian Government closed all international borders (land, air, and maritime) and suspended all interprovincial travel within Peru (land, air, and river).  American Citizens who remain in Peru should arrange lodging for the duration of the quarantine period and plan to limit their movements.  Limited quarantine exemptions include movement to obtain food and medical care.  Travelers currently in country should consult iPeru for the latest guidance for tourists.  The Embassy will provide a daily update on this page as this situation develops.
  • As of March 17, Jorge Chávez International Airport in Lima is closed to the public.  Please contact your airline carrier for updates on flight information.
  • The Peruvian government issued a decree on March 14 suspending the docking of all cruise ships in Peruvian ports for 30 days.
  • American Airlines announced via its website on March 14 that it will suspend service from Dallas/Fort Worth and Miami to Lima, Peru effective end of day March 16, after flying all legs scheduled through the end of that day.  This suspension will last through May 6.
  • On March 13 the Peruvian government issued a decree to suspend all flights to and from Europe and Asia, beginning on March 16, for 30 days.
  • On March 12 President Martín Vizcarra announced the suspension of classes at university and vocational educational institutions, following his March 11 announcement suspending primary and secondary school classes through March 30.

 

Snapshot: ShareAmerica’s “Debt-trap Diplomacy” Narrative Via Facebook/Twitter Campaigns

 

Via @StateDept’s FY 2018 Annual Performance Report | FY 2020 Annual Performance Plan (PDF/p149)

Key Indicator: Number of engagements generated by ShareAmerica content delivered to impact targeted narratives

Indicator Analysis. The Department is moving to align its content production more closely with trending social media narratives in target countries on Administration priority issues. Achieving this will require reallocation of internal resources and development of new editorial procedures. Because significant changes to IIP’s organization/mission are in the process of being implemented, IIP is unsure of the future of this particular indicator, and are not able to provide out-year targets at this time. While ShareAmerica will continue to operate, the direction and methods of evaluation for the program may be impacted.

A recent content team effort illustrates how this new editorial model can work. More specifically, the team:

• Employed analytics tools to monitor African conversations on the subject of Chinese aid. More specifically IIP sought to determine whether/how Africans drew distinctions between Chinese and American efforts;

• Identified key narratives and even phrases (“Debt-trap Diplomacy”) gaining traction in selected English, French, and Portuguese-speaking African nations and audience segments most likely to engage in those narratives;

• Developed content specifically tailored − down to the headline (“How U.S. aid avoids ‘debt-trap diplomacy’”) − to impact those narratives by contrasting development aid best practices with those that enmesh recipients in debt. IIP did not specifically address Chinese aid, but knew from our research that the target audiences could connect the dots; and

• Created Facebook and Twitter advertising campaigns (total expenditure: $1,000 total, or $8 per day/platform in each country) specifically targeting the audience segments identified during research phase.

Results:

• Digital analytics measure “post momentum” (engagement rate over previous 24 hours) at 76 times above average;

• 74 percent of respondents clicked-through to read the article;

• Fully 10 percent of respondents shared the article to their own social feeds, shares being the highest level of engagement and clearest indicator of success; and

• Facebook campaign (reach: two million) netted useful benchmarking data, allowing more precise, and inexpensive, future targeting for message reinforcement.

Indicator Methodology :

ShareAmerica content is meant to be distributed primarily on social media. IIP will assess whether social media audiences are finding the content engaging and interesting on those platforms. As a proxy for link clicks and for an engagement metric usable for a large set of articles, IIP will look at the total number of social media engagements (retweets, shares, likes, and comments) on Department ShareAmerica social media posts.

Clips:

Newly Gilded Bureau of Super Talent Talks About Self, Super Heroes on Earth 2

We received a question of which we have no answer:
Sender A asks, “how much time can they dither while the place collapses?”
What are you talking about?
Oops, folks, you were supposed to change your signature blocks as soon as possible, but preferably no later than last Monday!  Yes, yes, this is terribly very serious. You can’t be a bureau of super talent if you don’t have the approved signature block!
Meanwhile on Earth 2:

On the other hand, things are not as peachy on Earth 1:

Also on Earth 1, also not peachy: