UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE
NATIONAL SITUATIONAL INFORMATION REPORT
FEDERAL BUREAU OF INVESTIGATION
Activity Alert
CRIMINAL INVESTIGATIVE DIVISION
SACRAMENTO DIVISION
(U) Approved for Release:
(U) SIR Number: NSIR-00328015082
(U//FOUO) Unidentified Darknet User(s) Sent Personally Identifiable Information of
Federal Law Enforcement Officials to Darknet Website Administrators
(U) Source: An anonymous tip reported to a monitored FBI e-mail account.
(U//LES) The purpose of this National Situational Information Report is to advise law enforcement personnel
and public safety officials about threats to life by unidentified Darknet user(s) using the name DEEPSTATE.
(U) LAW ENFORCEMENT SENSITIVE: The information marked (U//LES) in this document is the property of the Federal
Bureau of Investigation and may be distributed within the federal government (and its contractors), US intelligence,
law enforcement, public safety, or protection officials and individuals with a need to know. Distribution beyond
these entities without FBI authorization is prohibited. Precautions should be taken to ensure this information is
stored and/or destroyed in a manner that precludes unauthorized access. Information bearing the LES caveat may
not be used in legal proceedings without first receiving authorization from the originating agency. Recipients are
prohibited from subsequently posting the information marked LES on a website on an unclassified network without
first obtaining FBI approval.
(U) Warning: This is an information report, not finally evaluated intelligence. It is being shared for informational
purposes but has not been fully evaluated, integrated with other information, interpreted or analyzed. Receiving
agencies are requested not to take action based on this raw reporting without prior coordination with the FBI.
(U) Note: This product reflects the views of the SACRAMENTO DIVISION and CRIMINAL INVESTIGATIVE DIVISION.
UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE
1
UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE
(U//LES) Based on reporting from 2018, Darknet user(s) sent personally identifiable information (PII) of six
current and former federal LEOs to multiple administrators of Darknet marketplaces. The sender(s), using the
name DEEPSTATE, also threatened to kill the LEOs, stating the first murder would occur within 18 months of
the initial send date of the message. The LEOs in the message are publically linked to investigations involving
the Darknet.
(U//LES) The sender(s) also instructed the recipients of the PII to implicate the LEOs in various activities in the
following ways:
(U//LES) Register Darknet marketplace servers in the names of the LEOs
(U//LES) Deposit traceable drug money into offshore bank accounts and list the LEOs as beneficiaries
(U//LES) Use the LEOs’ addresses as return addresses on mail
(U//LES) Register companies in the LEOs’ names and use those companies to launder money
(U//LES) Open cryptocurrency exchange accounts in the LEOs’ names and use them to launder money
(U//LES) Use the LEO’s identities in international arms trade transactions
(U//LES) Message chemical vendors on guidechem.com, asking for fentanyl precursor quotes
(U//LES) Write letters to Iranian, Russian, and North Korean embassies in the LEOs’ names discussing
centrifuges
(U//LES) Register domain names and web hosting services in the LEOs’ names and post WikiLeaks
content to the sites
(U//LES) Use aliases that appear to belong to the LEOs when posting online
(U//LES) Mail free computer equipment with backdoors installed to the LEOs and use the compromised
equipment’s Internet Protocol address to log into the Darknet marketplaces.
(U//LES) FBI Comment: The Darknet is a portion of the Internet that can be accessed only by using
specialized software. The most common software used to access the Darknet is Tor, formerly known as The
Onion Router. Darknet marketplaces are used to buy and sell illicit goods such as drugs, weapons, and
falsified identification documents. Darknet marketplaces include sites such as the Silk Road and AlphaBay.
Administrators manage the hardware and software used to run Darknet marketplaces.
(U//LES) FBI Comment: This information is from an unknown date in 2018. An anonymous individual sent
it to the FBI on 23 June 2019.
(U//LES) FBI Comment: According to the information provided to the FBI, DEEPSTATE claims to be an
intelligence entity set up to protect Darknet Marketplace administrators from arrest and extended prison
sentences. The self-described group claims to have conducted surveillance on one of the identified federal
agents.
(U//LES) FBI Comment: According to open source searches, guidechem.com is a China-based e-commerce
website that allows buyers and sellers to trade chemical products globally.
(U) This report has been prepared by FBI Sacramento and the Criminal Investigative Division of the FBI.
Comments and queries may be addressed to the Criminal Investigative Division at 202-324-8779.
UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE
2
UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE
Distribution
ALL FBI FIELD OFFICES
ALL FUSION CENTERS
LAW ENFORCEMENT ENTERPRISE PORTAL
INTELLINK-U
UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE
3
UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE
FBI Customer Satisfaction Survey
Please take a moment to complete this survey and help evaluate the quality, value, and relevance of our product.
Your response will help us serve you more effectively and efficiently in the future. Thank you for your cooperation and
assistance. Please return to:
Federal Bureau of Investigation
CRIMINAL INVESTIGATIVE DIVISION
Customer and Product Information
SIR Tracking ID: NSIR-00328015082
Product Title: Unidentified Darknet User(s) Sent Personally Identifiable Information of Federal Law
Enforcement Officials to Darknet Website Administrators
Dated: ___________________________________________
Customer Agency: ___________________________________________
Relevance to Your Intelligence Needs
1. The product increased my knowledge of an issue or topic. (Check one)
___5. Strongly Agree
___4. Somewhat Agree
___3. Neither Agree or Disagree
___2. Somewhat Disagree
___1. Strongly Disagree
Actionable Value
2. The product helped me decide on a course of action. (Check one)
___5. Strongly Agree
___4. Somewhat Agree
___3. Neither Agree or Disagree
___2. Somewhat Disagree
___1. Strongly Disagree
Timeliness Value
3. The product was timely to my needs. (Check one)
___5. Strongly Agree
___4. Somewhat Agree
___3. Neither Agree or Disagree
___2. Somewhat Disagree
___1. Strongly Disagree
Comments (please use reverse or attach separate page if needed):
UNCLASSIFIED//LAW ENFORCEMENT SENSITIVE
4