Qahtani\u2019s proxy at the signing noted in a statement that \u201cthe strategic agreement will ensure [Saudi Arabia is] benefiting from the experience of an advisory team comprising senior officers who had held senior positions in the Cyber Command of the US Department of Defense.\u201d Alexander\u2019s for-profit cyber security firm IronNet would work closely with the Saudi Federation of Cybersecurity, Programming, and Drones, an affiliate of the college devoted to offensive cyber operations and at the time overseen by Qahtani.<\/p>\n\n
Saudi Arabia\u2019s\u00a0agreement with IronNet was part of a host of moves to step up its cyber capabilities, coinciding with a campaign against the kingdom\u2019s critics abroad. Khashoggi, then a Washington Post columnist and prominent Salman critic, received a series of threatening messages, including one from Qahtani, warning him to remain silent. Khashoggi, whose family and close associates discovered listening malware electronically implanted on their smartphones, was then lured to the Saudi Embassy in Istanbul.<\/p>\n
It was there that a team dispatched by Qahtani detained and tortured the Saudi government critic. Qahtani, according to reports, beamed in through Skype<\/a> to insult Khashoggi during the ordeal, allegedly instructing his team to \u201cbring me the head of the dog.\u201d Khashoggi was then dismembered with a bone saw.<\/p>\n IronNet\u2019s\u00a0agreement tied to the alleged mastermind behind the killing of Khashoggi is not listed on the IronNet website, and it is not known if the business relationship still stands \u2014 or what the extent of it ever was. IronNet and representatives of the Saudi government did not respond to repeated requests for comment. The Saudi Arabia relationship, according to former IronNet employees, has largely been shrouded in secrecy, even within the firm.<\/p>\n Qahtani\u2019s role of<\/u> enforcer on behalf of bin Salman, well known prior to the Khashoggi slaying, has closely followed the young prince\u2019s meteoric rise as the effective leader of Saudi Arabia.<\/p>\n In 2017, Qahtani played a pivotal role in the abduction and interrogation of hundreds of Saudi elites, who were held captive at the Ritz-Carlton in Riyadh, at which they were forced to pledge loyalty and money to Salman. Qahtani personally led the questioning efforts, according to reports.<\/p>\n Later that year, he reportedly participated in the interrogation of former Lebanese Prime Minister Saad al-Hariri, who was beaten and forced to resign. The following year, according to the brother of Saudi women\u2019s rights activist Loujain al-Hathloul, Qahtani also directly participated in the torture of al-Hathloul<\/a>, where he mocked her and threatened to have her raped.<\/p>\n On behalf of the kingdom, Qahtani has made it his personal quest<\/a> to acquire and expand Saudi cyberwarfare tools. Beyond the deal with IronNet and other top-flight American cyber experts, he has spent over a decade directly negotiating the accumulation of computer and phone infiltration technology.<\/p>\n Qahtani took the helm of official state-backed efforts to expand Saudi Arabia’s cyber offensive capabilities in October 2017, when he was named president of a committee called the Electronic Security and Software Alliance, later renamed the Saudi Federation for Cybersecurity, Programming, and Drones.<\/p>\n Earlier this year, SAFCSP signed an agreement with Spire Solutions, a consulting firm that partners with a wide range of cyber intelligence contractors. Haboob, another cyber venture promoted by Qahtani, is a private venture that recruits hackers on behalf of the Saudi government. Haboob’s chair, Naif bin Lubdah, is on SAFCSP\u2019s board of directors<\/a>.<\/p>\n In 2018, Chiron Technology Services, another American cyber consulting firm, also inked a memorandum of understanding to provide training to the same Saudi hacker school advised by IronNet. Chiron\u2019s team includes top talent recruited from the U.S. Air Force, Army, and NSA, including Michael Tessler, who previously worked at the NSA\u2019s Tailored Access Operations command, which handles high-profile computer infiltration missions of foreign governments.<\/p>\n Jeff Weaver, the chief executive of Chiron, said in an email that his company signed a memorandum of understanding “with the college to develop a cybersecurity curriculum in support of their technical degree programs. However, no collaboration ever occurred, and they never called on us to contribute. We haven\u2019t heard from them since 2018.”<\/p>\n Online cyber sleuths identified<\/a> Qahtani\u2019s multiple handles on online hacking forums, where he was an active member seeking to purchase hacking tools. A screen name used by Qahtani, for instance, appeared to have purchased a remote access trojan known as Blackshades, which can infect targeted computers to modify and seize files, activate the webcam, and record keystrokes and passwords.<\/p>\n Cybersecurity researchers have identified powerful hacking technology implanted on the phones of Khashoggi\u2019s family<\/a>, likely by agents of the United Arab Emirates, a close Saudi ally. Several received malicious texts that infected their phones with Pegasus, a tool created by the NSO Group to remotely access a target\u2019s microphone, text messages, and location<\/a>.<\/p>\n Qahtani, who briefly faced house arrest, was swiftly cleared of wrongdoing in Khashoggi\u2019s death by the Saudi government. Five of the hitmen in the squad sent to kill Khashoggi were sentenced<\/a> to death, including Maher Abdulaziz Mutreb, an intelligence officer who worked under Qahtani. Qahtani\u2019s current relationship with the institute is unknown. People hold posters of slain Saudi journalist Jamal Khashoggi, near the Saudi Arabia consulate in Istanbul, on Oct. 2, 2020.<\/p>\n \nPhoto: Emrah Gurel\/AP<\/p><\/div> In 2019, BAE Systems, a major defense contractor based in the U.S. and the U.K., entered<\/a> into a training agreement with the MBS College of Cyber Security. Last year, Cisco unveiled<\/a> a training relationship with the Saudi Federation of Cybersecurity, Programming, and Drones.<\/p>\n BAE, reached for comment, distanced itself from the deal. \u201cBAE Systems works with a number of partner companies based in Saudi Arabia,”\u00a0said a spokesperson for the company. “ISE, one of our Saudi partner companies, was awarded a contract in 2019 by the MBS College for Cyber Security to provide support services to establish the college, such as general staffing and facilities management but this contract wasn\u2019t activated and is still on hold.\u201d<\/p>\n Alexander has continued to do work in the region as a member of Amazon\u2019s board. Intelligence Online, a trade outlet for intelligence contractors, reported<\/a>,\u00a0\u201cAs a partner of Amazon, for which it offers native surveillance of its AWS’ cloud traffic, IronNet helps the company win public contracts, especially since CEO Keith Alexander has sat on Amazon’s board.\u201d<\/p>\n
\n![\"People](\"https:\/\/prod01-cdn04.cdn.firstlook.org\/wp-uploads\/sites\/1\/2022\/09\/AP20276467540984-1024x683.jpg\")
\n
\nFollowing Khashoggi\u2019s killing,<\/u> many U.S. firms faced pressure to exit business deals with Saudi Arabian entities. Yet, in the years following Khashoggi\u2019s murder, the Saudi cyberwarfare institute central to the plot has continued to do business with Western defense industry leaders.<\/p>\n