Category: NCTC Speeches, Testimonies and Interviews

Source: US Department of Homeland Security

WASHINGTON – On Tuesday, President Donald J. Trump issued a Proclamation recognizing the United States Border Patrol on the eve of its 101^st anniversary. 

“For more than a century, the men and women of the Border Patrol have stood on the front lines of national security as America’s original watchmen. The threats may change, but the mission remains: protect the homeland,” said Department of Homeland Security Secretary Kristi Noem. “On Border Patrol’s 101st anniversary, we honor and thank all who’ve worn the uniform. A nation without borders is no nation at all.”  

As noted by the Proclamation, President Donald Trump has delivered the most secure border in American history, with border crossings at their lowest ever. 

“For 101 years, members of the United States Border Patrol (USBP) have courageously served as guardians of our sovereignty and protectors of our homeland against invasion, aggression, and violence,” President Trump said in the Proclamation. “Every day, Border Patrol agents selflessly risk their lives to repel the flow of deadly drugs, weapons, criminals, and terrorists — many of whom come to our shores from jails, prisons, and mental institutions in far-flung countries across the globe. On this anniversary of the United States Border Patrol, we honor every agent for their honorable service and pledge to support them in their mission to keep Americans safe.” 

Read the Proclamation here.

###

Source: US Department of Homeland Security

Visit to include meeting with Israeli PM Netanyahu, Visits with Victims of Terrorism

WASHINGTON – Following the recent terrorist attack in Washington, D.C., President Donald J. Trump has asked Secretary of Homeland Security Kristi Noem to travel to Israel. During the visit, she will meet with Israeli Prime Minister Benjamin Netanyahu and victims of terrorism.

WHEN: Sunday, May 25- Monday, May 26.

IDT (GMT+3)

Sunday, May 25, 2025

7:30 PM          THE SECRETARY arrives in Israel
                       Ben Gurion Airport

9:15 PM          THE SECRETARY visits the Western Wall
                       Batel Mahase Street
                       Traveling press            

Monday, May 26, 2025

9:00 AM          THE SECRETARY meets with the Minister of Foreign Affairs
                       Sderot Yitzhak Rabin 9, Jerusalem
                       American and Foreign press

3:45 PM          THE SECRETARY arrives Ben Gurion Airport
                                
4:15 PM          THE SECRETARY departs Ben Gurion Airport en route Poland. 
                   
Please RSVP media@hq.DHS.gov if you plan to cover the events. Times are subject to change. 
 

Source: US Department of Homeland Security

The ACLU’s dangerous campaign to keep violent criminals in the United States is falling apart.

WASHINGTON – Homeland Security Secretary Kristi Noem announced that the American Civil Liberties Union’s (ACLU) latest attempt to wage lawfare against the Department was dropped. This lawsuit tried to prevent DHS from removing dangerous criminal illegal aliens from the country. 

“We are glad to see the ACLU’s meritless, frivolous, and frankly dangerous lawsuit fall apart,” said Assistant Secretary Tricia McLaughlin. “That they claim to be a civil rights organization while advocating on behalf of foreign criminal gang members is laughable. They clearly could care less about the Americans that these illegal alien criminals victimize.”

The lawsuit was filed on March 1, 2025, by the ACLU on behalf of 10 illegal aliens who were being transferred to a detention facility at Guantanamo Bay in preparation for their removal. Most of these criminal illegal aliens were removed from the country, while the remaining volunteered to drop the suit. 

Fortunately, these criminals will no longer to be able to victimize American citizens. The Department will continue to use all available resources to remove the dangerous criminal illegal aliens who were let into our country by the previous administration. 

###

Source: US Department of Homeland Security

President Trump and Secretary Noem are getting vicious criminals out of our country while activist judges are fighting to bring them back onto American soil

WASHINGTON – The Department of Homeland Security (DHS) today released records on the eight convicted murderers and rapists that an activist judge halted their deportation. All eight of these barbaric criminal illegal aliens have final orders of removal and have been convicted in a court of law. These records reveal even more details about these illegal aliens’ heinous crimes.  

To download the documents, click here.

“Today, DHS released the rap sheets for eight of these uniquely monstrous, criminal illegal aliens who have final deportation orders that the U.S. government is actively trying to deport. The American public should know the heinous crimes of these murderers, rapists, and pedophiles that this activist district court judge is trying to bring back to American soil,” said Assistant Secretary Tricia McLaughlin. “As he spits in the fact of victims, this Massachusetts district court judge is stalling the final removal of these barbaric individuals from the country and wants taxpayers to continue to foot the bill to keep these criminals in DHS custody overseas. It is deranged.”  

Below are excerpts of the rap sheets of each of the criminal illegal aliens, detailing heinous crimes.  

Nyo Myint: Convicted sexual assault of a mentally disabled woman 

Nyo Myint, an illegal Burma and registered sex offender was arrested by ICE St. Paul on February 18, 2025. Myint is convicted of first-degree sexual assault involving a victim mentally and physically incapable of resisting; sentenced to 12 years confinement. Myint is also charged with aggravated assault-nonfamily strongarm. He was issued a final order of removal on August 17, 2023.

Image

Enrique Arias-Hierro: Convicted homicide, armed robbery 

Enrique Arias-Hierro, an illegal alien from Cuba, was arrested by ICE Miami on May 2, 2025. His criminal history includes convictions for homicide, armed robbery, false impersonation of official, kidnapping, robbery strong arm. He was issued a final order of removal on September 13, 1999.

Image

Tuan Thanh Phan: Convicted of first-degree murder and second-degree assault 

On May 3, 2025, ICE Seattle arrested Tuan Thanh Phan, an illegal alien from Vietnam. Phan is Convicted of first-degree murder and second-degree assault; sentenced to 22 years confinement. Prior to that, he was charged with possession of a dangerous weapon on a school facility as a juvenile in 1999. He was issued a final order of removal on June 17, 2009.

Image

Jose Manuel Rodriquez-Quinones: Convicted of first-degree murder 

On April 30, 2025, ICE Miami arrested Jose Manuel Rodriguez-Quinones, an illegal alien from Cuba. He has been convicted of attempted first-degree murder with a weapon, battery and larceny, cocaine possession and trafficking. Additionally, he was charged with attempted first-degree murder, trafficking and possessing cocaine, assault, credit card fraud, and theft. He was issued a final order of removal on December 4, 2012.

Image

Dian Domach: Convicted of robbery  

Dian Domach is an illegal alien from South Sudan that ICE first encountered in 2011 and was charged as a deportable alien. While in the U.S. Domach was convicted of robbery and possession of a firearm, of possession of burglar’s tools and possession of defaced firearm and driving under the influence. He was arrested by ICE on May 8, 2024, and was issued a final order of removal on July 19, 2011.

Image

Thongxay Nilakout: Convicted Murderer Sentenced to Life in Prison 

Thongxay Nilakout, an illegal alien from Laos, was arrested by ICE Los Angeles on January 26, 2025. Nilakout was convicted of first-degree murder and robbery; sentenced to life in prison. He was issued a final order of removal on July 12, 2023.

Image

Jesus Munoz-Gutierrez: Convicted murderer sentenced to life in prison 

On May 12, 2025, ICE Miami arrested Jesus Munoz-Gutierrez, an illegal alien from Mexico. He is convicted of second-degree murder; sentenced to life confinement. He was issued a final order of removed on June 16, 2005.

Image

Kyaw Mya: Convicted of rape of a child 

Kyaw Mya, an illegal alien from Burma was arrested by ICE St. Paul on February 18, 2025. Mya is convicted of Lascivious Acts with a Child-Victim less than 12 years of age; sentenced to 10 years confinement, paroled after 4 years. He was issued a final order of removal on March 17, 2022.

Image

###

Source: US Department of Homeland Security

Harvard is being held accountable for collaboration with the CCP, fostering violence, antisemitism, and pro-terrorist conduct from students on its campus.

WASHINGTON – Today, Homeland Security Secretary Kristi Noem ordered DHS to terminate the Harvard University’s Student and Exchange Visitor Program (SEVP) certification. 

This means Harvard can no longer enroll foreign students and existing foreign students must transfer or lose their legal status. 

Harvard’s leadership has created an unsafe campus environment by permitting anti-American, pro-terrorist agitators to harass and physically assault individuals, including many Jewish students, and otherwise obstruct its once-venerable learning environment. Many of these agitators are foreign students. Harvard’s leadership further facilitated, and engaged in coordinated activity with the CCP, including hosting and training members of a CCP paramilitary group complicit in the Uyghur genocide.

“This administration is holding Harvard accountable for fostering violence, antisemitism, and coordinating with the Chinese Communist Party on its campus,” said Secretary Noem. “It is a privilege, not a right, for universities to enroll foreign students and benefit from their higher tuition payments to help pad their multibillion-dollar endowments. Harvard had plenty of opportunity to do the right thing. It refused. They have lost their Student and Exchange Visitor Program certification as a result of their failure to adhere to the law. Let this serve as a warning to all universities and academic institutions across the country.”

On April 16, 2025, Secretary Noem demanded Harvard provide information about the criminality and misconduct of foreign students on its campus. Secretary Noem warned refusal to comply with this lawful order would result in SEVP termination.

This action comes after DHS terminated $2.7 million in DHS grants for Harvard last month. 

Harvard University brazenly refused to provide the required information requested and ignored a follow up request from the Department’s Office of General Council. Secretary Noem is following through on her promise to protect students and prohibit terrorist sympathizers from receiving benefits from the U.S. government.

Facts about Harvard’s toxic campus climate:

• A joint-government task force found that Harvard has failed to confront pervasive race discrimination and anti-Semitic harassment plaguing its campus.
• Jewish students on campus were subject to pervasive insults, physical assault, and intimidation, with no meaningful response from Harvard’s leadership.
• A protester charged for his role in the assault of a Jewish student on campus was chosen by the Harvard Divinity School to be the Class Marshal for commencement.
• Harvard’s own 2025 internal study on anti-Semitism revealed that almost 60% of Jewish students reported experiencing “discrimination, stereotyping, or negative bias on campus due to [their] views on current events.”
• In one instance, a Jewish student speaker at a conference had planned to tell the story of his Holocaust survivor grandfather finding refuge in Israel. Organizers told the student the story was not “tasteful” and laughed at him when he expressed his confusion. They said the story would have justified oppression.
• Meanwhile, Pro-Hamas student groups that promoted antisemitism after the October 7 attacks remained recognized and funded.

Instead of protecting its students, Harvard has let crime rates skyrocket, enacted racist DEI practices, and accepted boatloads of cash from foreign governments and donors. 

###

Source: US Department of Homeland Security

Source: US Department of Homeland Security

Source: US Department of Homeland Security

WASHINGTON – The Department of Homeland Security today announced that Immigration and Customs Enforcement (ICE) lodged a detainer for a 24-year-old illegal alien from Venezuela who posed as a teenager to attend an Ohio high school. 

On May 19, the Perrysburg Ohio Police Department arrested and charged Anthony Emmanuel Labrador-Sierra with forgery. On May 20, ICE issued a detainer. 

Image

Mug shot from Wood County Jail.

“Anthony Emmanuel Labrador-Sierra is a 24-year-old illegal alien from Venezuela who has been posing as teenager and attending Perrysburg High School in Ohio,” said Assistant Secretary Tricia McLaughlin. “Labrador was arrested and charged with forgery by the Perrysburg Ohio Police Department on May 19 for using fake documents to become enrolled in the high school. ICE lodged a detainer to ensure that this criminal illegal alien is removed from this community and no longer able to prey on the students of Perrysburg High School. It is disturbing that a grown man would impersonate a teenager and infiltrate the lives of underage girls and boys to fool them into doing God knows what.”

Labrador has illegally been in the U.S. since March 24, 2020. 

###

Source: US Department of Homeland Security

Summary

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint advisory to disseminate known tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) associated with threat actors deploying the LummaC2 information stealer (infostealer) malware. LummaC2 malware is able to infiltrate victim computer networks and exfiltrate sensitive information, threatening vulnerable individuals’ and organizations’ computer networks across multiple U.S. critical infrastructure sectors. According to FBI information and trusted third-party reporting, this activity has been observed as recently as May 2025. The IOCs included in this advisory were associated with LummaC2 malware infections from November 2023 through May 2025.

The FBI and CISA encourage organizations to implement the recommendations in the Mitigations section of this advisory to reduce the likelihood and impact of LummaC2 malware.

Download the PDF version of this report:

For a downloadable copy of IOCs, see:

Technical Details

Note: This advisory uses the MITRE ATT&CK^® Matrix for Enterprise framework, version 17. See the MITRE ATT&CK Tactics and Techniques section of this advisory for threat actor activity mapped to MITRE ATT&CK tactics and techniques.

Overview

LummaC2 malware first appeared for sale on multiple Russian-language speaking cybercriminal forums in 2022. Threat actors frequently use spearphishing hyperlinks and attachments to deploy LummaC2 malware payloads [T1566.001, T1566.002]. Additionally, threat actors rely on unsuspecting users to execute the payload by clicking a fake Completely Automated Public Turing Test to tell Computers and Humans Apart (CAPTCHA). The CAPTCHA contains instructions for users to then open the Windows Run window (Windows Button + R) and paste clipboard contents (“CTRL + V”). After users press “enter” a subsequent Base64-encoded PowerShell process is executed.

To obfuscate their operations, threat actors have embedded and distributed LummaC2 malware within spoofed or fake popular software (i.e., multimedia player or utility software) [T1036]. The malware’s obfuscation methods allow LummaC2 actors to bypass standard cybersecurity measures, such as Endpoint Detection and Response (EDR) solutions or antivirus programs, designed to flag common phishing attempts or drive-by downloads [T1027].

Once a victim’s computer system is infected, the malware can exfiltrate sensitive user information, including personally identifiable information, financial credentials, cryptocurrency wallets, browser extensions, and multifactor authentication (MFA) details without immediate detection [TA0010, T1119]. Private sector statistics indicate there were more than 21,000 market listings selling LummaC2 logs on multiple cybercriminal forums from April through June of 2024, a 71.7 percent increase from April through June of 2023.

File Execution

Upon execution, the LummaC2.exe file will enter its main routine, which includes four sub-routines (see Figure 1).

The first routine decrypts strings for a message box that is displayed to the user (see Figure 2).

If the user selects No, the malware will exit. If the user selects Yes, the malware will move on to its next routine, which decrypts its callback Command and Control (C2) domains [T1140]. A list of observed domains is included in the Indicators of Compromise section.

After each domain is decoded, the implant will attempt a POST request [T1071.001] (see Figure 3).

If the POST request is successful, a pointer to the decoded domain string is saved in a global variable for later use in the main C2 routine used to retrieve JSON formatted commands (see Figure 4).

Once a valid C2 domain is contacted and saved, the malware moves on to the next routine, which queries the user’s name and computer name utilizing the Application Programming Interfaces (APIs) GetUserNameW and GetComputerNameW respectively [T1012]. The returned data is then hashed and compared against a hard-coded hash value (see Figure 5).

The hashing routine was not identified as a standard algorithm; however, it is a simple routine that converts a Unicode string to a 32-bit hexadecimal value.

If the username hash is equal to the value 0x56CF7626, then the computer name is queried. If the computer name queried is seven characters long, then the name is hashed and checked against the hard-coded value of 0xB09406C7. If both values match, a final subroutine will be called with a static value of the computer name hash as an argument. If this routine is reached, the process will terminate. This is most likely a failsafe to prevent the malware from running on the attacker’s system, as its algorithms are one-way only and will not reveal information on the details of the attacker’s own hostname and username.

If the username and hostname check function returns zero (does not match the hard-coded values), the malware will enter its main callback routine. The LummaC2 malware will contact the saved hostname from the previous check and send the following POST request (see Figure 6).

The data returned from the C2 server is encrypted. Once decoded, the C2 data is in a JSON format and is parsed by the LummaC2 malware. The C2 uses the JSON configuration to parse its browser extensions and target lists using the ex key, which contains an array of objects (see Figure 7).

Parsing the c key contains an array of objects, which will give the implant its C2 (see Figure 8).

C2 Instructions

Each array object that contains the JSON key value of t will be evaluated as a command opcode, resulting in the C2 instructions in the subsections below.

1. Opcode 0 – Steal Data Generic

This command allows five fields to be defined when stealing data, offering the most flexibility. The Opcode O command option allows LummaC2 affiliates to add their custom information gathering details (see Table 1).

Source: US Department of Homeland Security

President Trump and Secretary Noem are working every day to get vicious criminals out of our country while activist judges are fighting to bring them back onto American soil

WASHINGTON – The Department of Homeland Security today hosted a press conference to set the record straight and to address the media’s misleading reporting on migrant flights to South Sudan. DHS conducted a deportation flight from Texas to remove some of the most barbaric, violent individuals illegally in the United States.  Now a federal judge in Massachusetts is trying to force the United States to bring these criminals back. 

“We are removing these convicted criminals from American soil so they can never hurt another American victim. It is absurd that an activist judge is trying to force the United States to bring back these uniquely barbaric monsters who present a clear and present threat to the safety of the American people,” said Assistant Secretary Tricia McLaughlin. “We have given the media the names of these monsters. I implore the media to stop doing the bidding of these criminals and to tell the stories of innocent Americans who have been victimized.”

Below are the individuals ICE removed from American communities.

Enrique ARIAS-Hierro, a Cuban national, was arrested by ICE on May 2, 2025. His criminal history includes convictions for homicide, armed robbery, false impersonation of official, kidnapping, robbery strong arm.

Image

On April 30, 2025, ICE arrested Cuban national, Jose Manuel RODRIGUEZ-QUINONES. He has been convicted of attempted first-degree murder with a weapon, battery and larceny, canine possession and trafficking.

Image

Thongxay NILAKOUT, a citizen of Laos, was arrested by ICE on January 26, 2025. NILAKOUT is Convicted of first-degree murder and robbery; sentenced to life confinement.

Image

On May 12, 2025, ICE arrested Mexican national, Jesus MUNOZ-Gutierrez. He is Convicted of second-degree murder; sentenced to life confinement.

Image

Dian Peter DOMACH, a citizen of South Sudan, was arrested by ICE on May 8, 2024. DOMACH is convicted of robbery and possession of a firearm, of possession of burglar’s tools and possession of defaced firearm and driving under the influence.

Image

Kyaw MYA, a citizen of Burma was arrested by ICE on February 18, 2025. MYA is convicted of Lascivious Acts with a Child-Victim less than 12 years of age; sentenced to 10 years confinement, paroled after 4 years.

Image

Nyo MYINT, a citizen of Burma was arrested by ICE on February 19, 2025. MYINT is convicted of first-degree sexual assault involving a victim mentally and physically incapable of resisting; sentenced to 12 years confinement. MYINT is also charged with aggravated assault-nonfamily strongarm.

Image

On May 3, 2025, ICE arrested Tuan Thanh PHAN, a Vietnamese national. PHAN is Convicted of first-degree murder and second-degree assault; sentenced to 22 years confinement.

Image

###