COVID-19 Exploited by Malicious Cyber Actors (San Francisco Police Department)

Emma North-Best filed this request with the San Francisco Police Department of San Francisco, CA.
Tracking #

P011752-042420

Multi Request COVID-19 Exploited by Malicious Cyber Actors
Est. Completion May 18, 2020
Status
No Responsive Documents

Communications

From: Emma North-Best


To Whom It May Concern:

Pursuant to the California Public Records Act, I hereby request the following records:

* Records mentioning, describing or generated in response to CISA Alert AA20-099A, FBI/IC3 Alert I-032020-PSA, or the CDC alert titled "COVID-19-Related Phone Scams and Phishing Attacks"
* Records mentioning, describing or generated in response to COVID-19 related phishing attempts, such as those described in the CDC alert, FBI/IC3 Alert I-032020-PSA and CISA Alert AA20-099A
* Records mentioning, describing or generated in response to fake CDC emails, such as those described in FBI/IC3 Alert I-032020-PSA
* Records mentioning, describing or generated in response to APT groups using the COVID-19 pandemic as part of their cyber operations, such as those described in CISA Alert AA20-099A
* Records mentioning, describing, or generated as part of or in response to the assessment that the above activities' "goals and targets are consistent with long-standing priorities such as espionage and “hack-and-leak” operations", as described in CISA Alert AA20-099A

I am a member of the news media and request classification as such. I have previously written about the government and its activities, with some reaching over 100,000 readers in outlets such as Gizmodo, MuckRock, Motherboard, Property of the People, Unicorn Riot, and The Outline, among others. As such, as I have a reasonable expectation of publication and my editorial and writing skills are well established. In addition, I discuss and comment on the files online and make them available through non-profits such as the library Internet Archive and the journalist non-profit MuckRock, disseminating them to a large audience. While my research is not limited to this, a great deal of it, including this, focuses on the activities and attitudes of the government itself. As such, it is not necessary for me to demonstrate the relevance of this particular subject in advance.

As my primary purpose is to inform about government activities by reporting on it and making the raw data available, I request that fees be waived.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 10 calendar days, as the statute requires.

Sincerely,

Emma Best

  • COVID-1920Exploited20by20Malicious20Cyber20Actors207C20CISA.pdf

  • COVID-19-Related20Phone20Scams20and20Phishing20Attacks207C20CDC20Online20Newsroom207.pdf

  • FBI20Sees20Rise20in20Fraud20Schemes20Related20to20the20Coronavirus20COVID-1920Pande.pdf

From: San Francisco Police Department

Dear Emma Best:

Thank you for your interest in public records of the San Francisco Police Department ("SFPD").

The San Francisco Police Department ("SFPD") received your request, dated April 24, 2020 and given the reference number P011752-042420 for tracking purposes.

Record(s) Requested: To Whom It May Concern:

Pursuant to the California Public Records Act, I hereby request the following records:

* Records mentioning, describing or generated in response to CISA Alert AA20-099A, FBI/IC3 Alert I-032020-PSA, or the CDC alert titled "COVID-19-Related Phone Scams and Phishing Attacks"
* Records mentioning, describing or generated in response to COVID-19 related phishing attempts, such as those described in the CDC alert, FBI/IC3 Alert I-032020-PSA and CISA Alert AA20-099A
* Records mentioning, describing or generated in response to fake CDC emails, such as those described in FBI/IC3 Alert I-032020-PSA
* Records mentioning, describing or generated in response to APT groups using the COVID-19 pandemic as part of their cyber operations, such as those described in CISA Alert AA20-099A
* Records mentioning, describing, or generated as part of or in response to the assessment that the above activities' "goals and targets are consistent with long-standing priorities such as espionage and “hack-and-leak” operations", as described in CISA Alert AA20-099A

I am a member of the news media and request classification as such. I have previously written about the government and its activities, with some reaching over 100,000 readers in outlets such as Gizmodo, MuckRock, Motherboard, Property of the People, Unicorn Riot, and The Outline, among others. As such, as I have a reasonable expectation of publication and my editorial and writing skills are well established. In addition, I discuss and comment on the files online and make them available through non-profits such as the library Internet Archive and the journalist non-profit MuckRock, disseminating them to a large audience. While my research is not limited to this, a great deal of it, including this, focuses on the activities and attitudes of the government itself. As such, it is not necessary for me to demonstrate the relevance of this particular subject in advance.

As my primary purpose is to inform about government activities by reporting on it and making the raw data available, I request that fees be waived.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 10 calendar days, as the statute requires.

Sincerely,

Emma Best

Attachments:

https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/COVID-1920Exploited20by20Malicious20Cyber20Actors207C20CISA.pdf
https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/COVID-19-Related20Phone20Scams20and20Phishing20Attacks207C20CDC20Online20Newsroom207.pdf
https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/FBI20Sees20Rise20in20Fraud20Schemes20Related20to20the20Coronavirus20COVID-1920Pande.pdf
Upload documents directly: https://https://www.muckrock.comhttps://www.muckrock.com/

Your request is being forwarded to the appropriate department(s) for processing and you will be notified once the request is complete.

From: San Francisco Police Department

--- Please respond above this line ---

April 24, 2020
Via email requests@muckrock.com

Emma Best
MuckRock News DEPT MR 92075 411A Highland Ave
Somerville, MA 02144

RE: Public Records Request, dated April 24, 2020, Reference # P011752-042420

Dear Emma Best:

The San Francisco Police Department (SFPD) received your Public Records Act request, dated April 24, 2020, on April 24, 2020.

You requested, " To Whom It May Concern:"

Pursuant to the California Public Records Act, I hereby request the following records:

* Records mentioning, describing or generated in response to CISA Alert AA20-099A, FBI/IC3 Alert I-032020-PSA, or the CDC alert titled "COVID-19-Related Phone Scams and Phishing Attacks"
* Records mentioning, describing or generated in response to COVID-19 related phishing attempts, such as those described in the CDC alert, FBI/IC3 Alert I-032020-PSA and CISA Alert AA20-099A
* Records mentioning, describing or generated in response to fake CDC emails, such as those described in FBI/IC3 Alert I-032020-PSA
* Records mentioning, describing or generated in response to APT groups using the COVID-19 pandemic as part of their cyber operations, such as those described in CISA Alert AA20-099A
* Records mentioning, describing, or generated as part of or in response to the assessment that the above activities' "goals and targets are consistent with long-standing priorities such as espionage and “hack-and-leak” operations", as described in CISA Alert AA20-099A

I am a member of the news media and request classification as such. I have previously written about the government and its activities, with some reaching over 100,000 readers in outlets such as Gizmodo, MuckRock, Motherboard, Property of the People, Unicorn Riot, and The Outline, among others. As such, as I have a reasonable expectation of publication and my editorial and writing skills are well established. In addition, I discuss and comment on the files online and make them available through non-profits such as the library Internet Archive and the journalist non-profit MuckRock, disseminating them to a large audience. While my research is not limited to this, a great deal of it, including this, focuses on the activities and attitudes of the government itself. As such, it is not necessary for me to demonstrate the relevance of this particular subject in advance.

As my primary purpose is to inform about government activities by reporting on it and making the raw data available, I request that fees be waived.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 10 calendar days, as the statute requires.

Sincerely,

Emma Best

Attachments:

https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/COVID-1920Exploited20by20Malicious20Cyber20Actors207C20CISA.pdf
https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/COVID-19-Related20Phone20Scams20and20Phishing20Attacks207C20CDC20Online20Newsroom207.pdf
https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/FBI20Sees20Rise20in20Fraud20Schemes20Related20to20the20Coronavirus20COVID-1920Pande.pdf
Upload documents directly: https://https://www.muckrock.comhttps://www.muckrock.com/

Although SFPD has 10 calendar days to respond to your request, we are invoking an additional 14 day extension of time to respond to your request pursuant to Government Code section 6253(c) because of the need to search, collect, review, and consult with another department. Once it has been determined whether or not the information you request is responsive and subject to disclosure we will advise you as soon practicable but no later than May 18, 2020.

If you have any questions, please contact me at 415-837-7395.

Thank you for your attention.

Sincerely,

Michael Andraychak
Media Relations

This is an auto-generated email and has originated from an unmonitored email account. Please DO NOT REPLY.

From: San Francisco Police Department

--- Please respond above this line ---

May 20, 2020 Via email requests@muckrock.com

Emma Best
MuckRock News DEPT MR 92075 411A Highland Ave
Somerville, MA 02144
RE: Public Records Request, dated April 24, 2020, Reference # P011752-042420
Dear Emma Best:
The San Francisco Police Department (SFPD) received your Public Records Act request, dated April 24, 2020, on May 20, 2020.
You requested, " To Whom It May Concern:"

Pursuant to the California Public Records Act, I hereby request the following records:

* Records mentioning, describing or generated in response to CISA Alert AA20-099A, FBI/IC3 Alert I-032020-PSA, or the CDC alert titled "COVID-19-Related Phone Scams and Phishing Attacks"
* Records mentioning, describing or generated in response to COVID-19 related phishing attempts, such as those described in the CDC alert, FBI/IC3 Alert I-032020-PSA and CISA Alert AA20-099A
* Records mentioning, describing or generated in response to fake CDC emails, such as those described in FBI/IC3 Alert I-032020-PSA
* Records mentioning, describing or generated in response to APT groups using the COVID-19 pandemic as part of their cyber operations, such as those described in CISA Alert AA20-099A
* Records mentioning, describing, or generated as part of or in response to the assessment that the above activities' "goals and targets are consistent with long-standing priorities such as espionage and “hack-and-leak” operations", as described in CISA Alert AA20-099A

I am a member of the news media and request classification as such. I have previously written about the government and its activities, with some reaching over 100,000 readers in outlets such as Gizmodo, MuckRock, Motherboard, Property of the People, Unicorn Riot, and The Outline, among others. As such, as I have a reasonable expectation of publication and my editorial and writing skills are well established. In addition, I discuss and comment on the files online and make them available through non-profits such as the library Internet Archive and the journalist non-profit MuckRock, disseminating them to a large audience. While my research is not limited to this, a great deal of it, including this, focuses on the activities and attitudes of the government itself. As such, it is not necessary for me to demonstrate the relevance of this particular subject in advance.

As my primary purpose is to inform about government activities by reporting on it and making the raw data available, I request that fees be waived.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 10 calendar days, as the statute requires.

Sincerely,

Emma Best

Attachments:

https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/COVID-1920Exploited20by20Malicious20Cyber20Actors207C20CISA.pdf
https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/COVID-19-Related20Phone20Scams20and20Phishing20Attacks207C20CDC20Online20Newsroom207.pdf
https://cdn.muckrock.com/outbound_composer_attachments/EmmaBest/83130/FBI20Sees20Rise20in20Fraud20Schemes20Related20to20the20Coronavirus20COVID-1920Pande.pdf
Upload documents directly: https://https://www.muckrock.comhttps://www.muckrock.com/
The Police Department has determined there are no responsive documents to your request. If you have any questions, please contact Michael Andraychak at 415-837-7395.
Thank you for your attention.
Sincerely,
Sergeant Michael Andraychak
Officer in Charge
Media Relations

This is an auto-generated email and has originated from an unmonitored email account. Please DO NOT REPLY.

Files

pages

Close
  • 04/22/2020

    COVID-1920Exploited20by20Malicious20Cyber20Actors207C20CISA.pdf

  • 04/22/2020

    COVID-19-Related20Phone20Scams20and20Phishing20Attacks207C20CDC20Online20Newsroom207.pdf

  • 04/22/2020

    FBI20Sees20Rise20in20Fraud20Schemes20Related20to20the20Coronavirus20COVID-1920Pande.pdf