by Chris Browning, REI Instructor

REI Training Instructor, Anthony “Nugget” Reep, explained in an earlier newsletter article the threat of Bluetooth Low Energy (BLE) devices being used to track people without their knowledge. The current Apple AirTag, which uses this technology, was released in April of 2021. REI began studying tracking devices at length due to increased calls from our Law Enforcement partners. Since then, software improvements from Apple have been released, and our methods of detecting them have also improved. It has been reported that 20 million AirTags were sold in 2021, and 35 million units in 2022; we have not seen estimates for 2023. Regardless, 55 million tracking devices sold in a 2-year time period is something to think about.

It can be assumed that the vast majority of these tracking devices are being used for legitimate purposes, and in the intended manner for which they were developed. However, we also know that many are being used in a manner for which they were not designed – to discover the location of a person without their knowledge. Originally this seemed to be a “trend” that would soon pass. From a Law Enforcement perspective, we do not believe that the AirTag is the optimal tracking device to track someone in real-time. There are several reasons why this is a true statement, but foremost among them is the fact that people will eventually be notified by Apple that there is an unknown AirTag potentially traveling with them.

Apple has tried to build in features to prevent AirTags being used to track someone without their knowledge, but we continue to get calls about detecting and locating Apple AirTags being used for deceitful purposes. Interestingly, we do not recall a single inquiry since April of 2021, regarding any of the other commercial BLE tracking tags such as SmartTag, Tile, etc… Why? I think Apple summed it up the best with 2 words – “Beautifully simple”. Simple to purchase. Simple to activate. Simple to locate someone. There are rumors that the next generation of AirTag will be released in October of 2024. The rumor also claims that the AirTag 2 will allow for location viewing on a 3D, wraparound map, which will allow for increased accuracy.

The Apple Airtag continues to be the guardian of people’s prized belongings, as well as the silent spy that can report your location without your knowledge. Both scenarios make use of Apple’s expansive “Find My” network. That network, without your knowledge or the ability to control it, utilizes over 2 billion active Apple Devices to report the location of any AirTag that they have “Seen”. We doubt that users realized they gave permission when they accepted the long end-user agreement, that none of us read. It seems that we allow technology convenience into our lives, we give up some privacy.

If anyone reading this is wondering whether or not their agency or organization should be concerned about this threat, I can give you over 55 million (AirTag) reasons why you should be aware of this potential threat.

MESA 2.0 WIFI DETECTION Detects/locates WiFi devices

  • APs (Access Points)
  • Clients (Connected/Not-connected)
  • Portable devices
  • Cameras and microphones
  • Drones & controllers
  • 2.4GHz and 5Ghz networks
  • RSSI meter for locating devices
  • View device in Spectrum View

Bluetooth – Detects Bluetooth Classic and BLE devices through version 5.0

  • MAC address
  • Name
  • Power (dBm)
  • RSSI meter for locating devices
  • Export lists
  • Detect Trackers & AirtTags

Updating REI Product Firmware

REI continuously works to improve existing product firmware for performance, efficiency, bug fixes and often to introduce new or better features. When firmware updates are available for public release, they’re published to the REI website for download at reiusa.net/support/product-downloads.  They can also be found in the Downloads side bar on Product pages along with manuals and product brochures.

Be sure to follow installation instructions for each specific product. Should you need to return your equipment to REI for an upgrade, visit the Product Repairs page to get started.

REI Training Center Expands

COOKEVILLE, TN | The REI Training Center recently completed an expansion project adding 6,000 sq. ft. (550 sq. m) and includes:

  • A 4th classroom with 15 student workstations
  • 5 new project rooms totaling 17 hands-on simulation exercise rooms
  • A 7th fulltime instructor

This expansion is due to increased demand for training that offers basic and advanced methods for conducting TSCM (Technical Surveillance Counter-measures) investigations.  The rapidly growing commercial market for cameras, microphones, and other types of illicit surveillance technology, is fueling security threats to businesses, government agencies, and law enforcement everywhere.

REI Training courses are much more than product training. They blend classroom instruction with hands-on exercises in target-rich project rooms where students perform exercises in live environments.  The newer project rooms offer advanced test features, including a security system for testing alarm systems and wiring.

The REI Training Center conducts more than 50 week-long scheduled classes and numerous customs courses. Remote training is also available.  Click here for a complete list of courses and to register.


Spring 2024 Tradeshow Calendar

It has been a full year of meeting with customers, experiencing new and familiar places, and connecting with others in the TSCM field. As 2023 comes to a close, REI is already preparing for these upcoming 2024 shows:

• World Defense Show | 4-8 February | Kingdom of Saudi Arabia
• World Police Summit | 5-7 March | Dubai
• Security and Policing | 12-14 March | Farnborough, UK
• Milipol Asia-Pacific | 3-5 April | Singapore
• ISC West | 10-12 April | Las Vegas, Nevada

Additionally, customers can see REI equipment during ANZIF, 19-22 February.
Customers can also expect a training event before ISC West in Las Vegas and a product demonstration in Washington D.C. More information will be available in 2024.
We look forward to seeing you in 2024!

headline illustration wifi firmware2

WiFi security vulnerabilities, as with all RF technologies, can be a threat to sensitive information. WiFi Audio and video surveillance devices are smaller, better and cheaper than ever before and they’re being hidden in just about any kind of product. MESA® 2.0 provides tools for detecting WiFi networks and devices, Bluetooth, and Mobile Bands. MESA® 2.0 is also a high-performance portable spectrum analyzer for detecting RF activity of all kinds to 6GHz (12 GHz with the Downconverting antenna).

A new MESA® 2.0 firmware update significantly enhances WiFi features making it one of the most advanced WiFi detectors available. This new level of detection includes the ability to detect and locate:

  • WiFi Access Points (APs), secured and unsecured
  • WiFi Client devices, both connected to access points and not connected to access points (NC) such as cell phones, computers, WiFi cameras, etc.
  • Bluetooth devices such as cell phones, watches, fitness devices, Bluetooth speakers, Bluetooth tracking devices such as AirTag, Tile, SmartTag, etc.
  • Various other WiFi and Bluetooth devices (Evil Twin, Piggybacking, Cracking and Sniffing, pineapple…)

MESA® 2.0 WiFi mode scans 2.4GHz and 5GHz WiFi networks and logs a list of all the detected WiFi Access Points and Clients. The longer the MESA® 2.0 scans, the more devices it will detect due to intermittent activity.

The device list includes additional information about the devices:

  • Type of device:
  • MAC (Media Access Control) address of the device
  • SSID/Name (Service Set Identifier) if broadcast
  • Manufacturer (if available)
  • Signal Strength (dBm)
  • Channel(s)
  • User defined Threat classification (Friendly, Threat, Unknown, or Inactive)

WiFi Mode can filter probe requests and inactive devices. NC (Not Connected) Clients constantly send out probing requests when looking for networks to connect to, so it may be necessary to narrow the collection to the desired search area. MESA 2.0 can filter NC Clients to be ignored when scanning WiFi networks.

In areas with high volumes of WiFi traffic (the amount of data being transmitted), the Threshold feature narrows the collection to signals above a specified signal strength.

The device Detail screen displays additional information about the device including:

  • Frame Count – the running number of device frames received (this provides an indication if the device is actively transmitting, or if it was just a probe request)
  • Byte Count – the running total number of bytes (again, providing detail about the activity of the device)
  • Average Update – the average update frequency
  • Last Seen – the time of last seen activity
  • Channels – the channels the device transmitted on
  • Frames – the number of frames per channel
  • AP/Client Connections: displays associations between APs and Clients
  • Threat Level Selector – Friendly, Threat, Unknown, Inactive (user selectable)
  • RSSI Meter – a colored meter indicating the strength of the signal for locating the transmitter
  • RSSI Histogram – a histogram showing the activity and signal strength over time for locating the transmitter
  • View Spectrum – displays the signal in a spectrum analyzer view with waterfall display
  • Notes – a field for the user to add documenting notes and observations about the device

The RSSI meter, Histogram and Spectrum View tools can be used to locate devices by moving about the inspection area watching the changing signal strength. MESA® 2.0’s portability is key to locating transmitting devices.

RSSI meter can be used to locate devices.


RSSI Histogram displays signal activity over time. 


View WiFi signals in Spectrum View with Waterfall display

WiFi, SmartBars™ and Mobile Bands modes are integrated with the Spectrum View so that a detailed view of a signal in any of these modes provides a way to show it in the RF Spectrum View. MESA® 2.0s WiFi on-board data tools provide immediate feedback without requiring laptops or external software. This is beneficial when trying to locate devices. The 7” touchscreen display is easy to use. Data and screen captures can be exported to a USB storage for report generation.

MESA® 2.0 has one of the most advanced WiFi detectors on the market built into a complete system of RF detection and analysis tools. This version of the firmware is currently shipping with new units.  The firmware update is available free on the REI website and is easy to download and install.  Firmware version 1.45.0 (248 MB) can be installed on MESA 2.0 or older MESA models, and fixes many bugs from the previous version.  New WiFi features in this release, however, are only available to MESA 2.0 models.  Older models will see no change in the WiFi mode.

Remember to register for the Countermeasures Core Level 1 and MESA® Course at the REI Training Center. For more information or to find out more, visit the REI Training Courses page on our website.

The REI Training Center is offering a TTK (Tactical TSCM Kit) training course August 14-18, 2023.  The 5-day TTK Course covers operation and deployment of products included in the TTK:

  • MESA 2.0 Mobility Enhanced Spectrum Analyzer for detecting and locating illicit or unknown RF transmissions using various detection and analysis tools
  • ANDRE Nearfield Broadband receiver
  • ORION 2.4 HX NLJD (Non-Linear Junction Detector
  • CMA-100 Countermeasures Amplifier
  • Other testing tools included in the TTK
  • RF search techniques

The TTK course is for current TTK owners, or for anyone considering purchasing a TTK. There are no prerequisites. The class is limited to 6.  Contact sales@reiusa.net for pricing.

Click here for more information or to register: TTK Course

A complete course schedule through Dec 2023 is available here:  REI Training Courses

It’s been a full and busy spring for our sales managers as REI exhibited at 7 tradeshows and hosted 4 product demonstrations throughout the US. This fall is guaranteed to be just as busy and we can’t wait to connect with you at these upcoming shows:

Additionally, REI is scheduled to host in-person product demonstrations in Washington D.C. on August 29 for Government customers & August 30 for corporate customers!

You can also find REI equipment at the MSPO show in Poland from September 5-8.

We look forward to seeing you this fall on the tradeshow floor!

The SCRAMBLER™, aka. ACS-2, was an important product in REI’s history, not only because of its popularity, but also because SCRAMBLER™ sales funded the development of the OSCOR 5000 Spectrum Analyzer, a flagship product for nearly 2 decades.

The SCRAMBLER was developed in the mid-1980s, before modern cell phones existed and when the majority of commercial communications were analog.  It was a product that attached to almost any landline phone set and used a technique known as speech spectrum inversion.   The Scrambler protected sensitive conversations between 2 or more users by electronically converting normal, clear speech to unintelligible, scrambled speech. The properly coded matching unit then reconstructs the scrambled speech back to clear speech. The Scrambler had 13,122 user selectable codes with 52,488 combinations and featured a natural sound quality so that the individual on the other end of the line was easily recognized. This digital speech inversion technology was powered by a nine-volt battery. The SCRAMBLER to this day remains an iconic piece of REI history.

REI is presenting TSCM product demonstrations in Washington DC this August. These free demonstrations will include the MESA® Spectrum Analyzer’s new WiFi detection features for detecting and locating hidden WiFi transmitters, the TTK Tactical TSCM Kit – a portable deployment ready sweep kit, and a preview of other product developments in the works.

Hilton Alexandria Old Town
1767 King St. Alexandria, VA 22314

Government: Aug 29th, 9 a.m. or 1 p.m. Register here.

Corporate Security, Law Enforcement and Private Security: Aug 30th, 9 a.m. Register here.

________________________________________
TBI team search Nashville DA’s offices
https://www.youtube.com/watch?v=qOtwmyTlN48
Nashville News Channel 5 – YouTube
________________________________________
Poland detains Russian spy, says Interior Minister
https://www.reuters.com/world/europe/
Reuters
________________________________________
Spanish judge hits pause on Pegasus espionage probe
https://www.aa.com.tr/en/europe/
Anadolu Agency (AA)
________________________________________
Man charged with using GPS device to track former girlfriend
https://www.wsmv.com/2023/05/24/man-charged-with-using-gps-device-track-former-girlfriend/
WSMV Channel 4 Nashville, TN
________________________________________
Russia’s Lease Cancellation prevents potential ‘eavesdropping’ on Parliament
https://www.skynews.com.au/
Skynews.com.au
________________________________________
China threat group accused of hospital Espionage in Europe
https://cybernews.com/security/china-espionage-europe-hospital/
Cybernews.com
________________________________________
Mali accuses UN of ‘espionage’, calls for pullout of UN peacekeepers
https://northafricapost.com/68827-mali-accuses-un-of-espionage-calls-for-pullout-of-un-peacekeepers.html
The North Africa Post
________________________________________

COOKEVILLE, TN |   In 2023, Research Electronics International (REI) will be celebrating 40 years in business designing and manufacturing electronic security equipment.

So much technology has changed since 1983 when Bruce Barsumian, a young, self-taught inventor launched REI. Ronald Reagan was in his first term as U.S. President. Macintosh and Dell computers didn’t exist yet, nor did the 3.5 inch floppy disk, cellular phones, or the internet (aka World Wide Web). But espionage and information security was nothing new and Barsumian had a talent for making products to protect against eavesdropping.

Barsumian set up shop in Cookeville, TN and with a small staff began designing, producing, and selling their products. 40 years later REI is respected as a world leader in the design and manufacture of Technical Surveillance Countermeasures (TSCM) equipment serving government agencies, law enforcement, corporate and private security operations all over the world.

During a recent interview, Barsumian said “I never imagined REI would become an industry leader…at first, we just wanted to make the best products we could.”

REI President and long-time business partner, Tom Jones, stated “With the simple mission in mind of making the best products, REI has grown, matured and adapted to a lot of change over the years. As we celebrate our 40th anniversary, we hope you’ll celebrate along with us.”

 

Be sure to keep up with us on our website, in our newsletters, and through our social media, and if you see us at a tradeshow or seminar, stop and say “hello.” We’d love to see you.

For more information about REI visit reiusa.net or follow along on LinkedIn.

REI now offers a Tactical TSCM Kit (TTK) week-long training course starting February 6. The course will cover deployment and operation of TTK equipment, including the MESA, ORION, ANDRE, CMA and more. Click here for more details or to register for the TTK Course.


The weather has gotten colder in the northern hemisphere where 87% of the world’s population lives. Cooler temperatures mean short days, cozy sweaters, and static electricity. Colder, drier air outside causes us to turn on heat indoors further lowering humidity, which adds to the conditions that promote static electricity.  Today’s electronic components and assemblies tend to be smaller, more efficient, and also more delicate and sensitive to ESD and can be affected by even the smallest unseen, unfelt electrical charge. ESD can cause erratic operation, shortened electronic life expectancy, or catastrophic failure.

At REI our production teams take extra precautions to prevent static electricity, and here are a few tips to keep your products functioning properly.

  1. Review the product user manual.
  2. Prep your work area – use a grounding work surface or mat when possible.
  3. Check the humidity levels of the environment you’re sweeping in, take extra ESD precautions when working in a dry environment.
  4. Transport and store the equipment in the original manufacturer’s case to prevent accidental ESD events.
  5. To discharge built up ESD on your person, touch a piece of metal before handling any electronic equipment.
  6. Practice social distancing – keep charged materials about a foot from your devices. Be aware of how close you’re keeping plastic, foam, scotch tape, and other materials that can build up a charge.
  7. Try not to overdrive your equipment inputs.

    Taking precautions for ESD can save time in your sweeps and money.

    REI is heading to California to host four in-person seminar’s featuring the TTK –TSCM Travel Kit and MESA 2.0 portable spectrum analyzer. MESA® 2.0 is a portable, handheld RF spectrum analyzer that detects, known, unknown, eavesdropping and interfering transmissions.

    The TTK (Tactical TSCM Kit) is a carry-on, deployment-ready equipment package for the frequent traveler who needs a portable sweep kit with a lot of capability.
    Two sessions will be offered on Tuesday, February 28, at 9 AM and 1 PM in San Francisco. Likewise, two sessions will be provided in San Diego at 9 AM and 1 PM.

    These demonstrations will explore the TTK’s contents including the MESA 2.0, ANDRE, ORION and CMA.
    For more information visit https://reiusa.net/news/ttk-road-show/

    Curso de formación de español

    REI esta ofreciendo un paquete de Curso en Español que incluye Los Conceptos Principales de Contramedidas-Nivel 1 y un curso combinado de RF OSCOR y TALAN -Nivel 2.

    Próximos cursos

    6 de marzo – 17 de marzo de 2023

    Nota: El entrenamiento comienza a las 8:30 a. m. CST y normalmente termina a las 4:30 p. m.

    Titulo:  Conceptos Principales de Contramedidas – Nivel 1

    Descripcion

    El segmento de los Conceptos Principales de Contramedidas se enfoca en la introduccion a los procedimientos y equipo de contramedidas de vigilancia. Los estudiantes seran introducidos a las pruebas de telefonos, tecnicas de busqueda basica RF, como procedimientos basicos de investigacion. Esta parte del curso esta diseñada para introducir y familiarizar al especialista en seguridad tecnica con varios productos de contramedidas de vigilancia y sus procedimientos basicos de barrido.

    Topicos del Curso:

    • Investigaciones Basicas Tecnicas, cubriendo los conceptos de procedimiento para integrar seguridad tecnica con la seguridad de instalaciones que existe
    • Vision de Conjunto de Amenaza de dispositivo comercialmente disponible
    • Ver más información


    Titulo:  RF OSCOR y TALAN Curso Nivel 2

    Requisito Previo: Conceptos Principales de Contramedidas – Nivel 1

    Descripcion

    Esta parte del curso se enfocara primordialmente en la operacion y despliegue del Analizador de Espectro OSCOR RF y la del Analizador de Linea y Telefono TALAN. El curso iniciara con un breve realce de las Contramedidas de Vigilancia Tecnica, amenazas basicas, detectores de uniones no lineales y detectores de banda ancha. La porcion de entramiento de telefonos digitales provee instruccion en pruebas de los sistemas de telefonos digitales y el analisis de amenazas tecnicas, incluyendo la operacion del Analizador de Linea y Telefono TALAN de REI.

    Topicos del Curso:

    • Indicadores de Perdida de Propiedad Intelectual
    • Inspecciones de Seguridad Tecnica Reaccionaria
    • Ver más información

    Never let your wireless key fob out of your control.
    https://counterespionage.com/wireless-fob-key-security/
    Kevin’s Security Scrapbook
    ________________________________________

    Investigation Bureau probes alleged classified intelligence leak
    https://focustaiwan.tw/politics/202301160009
    focustaiwan.tw
    ________________________________________

    The biggest risks of using Bluetooth trackers like Apple AirTag, Tile
    https://www.cnbc.com/2023/01/14/the-biggest-security-pros-and-cons-of-using-bluetooth-gps-trackers.html
    cnbc.com
    ________________________________________

    India: Tapping Of Phone Lines Or Recording Calls Without Consent Is A Violation Of Right To Privacy 
    https://www.mondaq.com/india/privacy-protection/1270670/tapping-of-phone-lines-or-recording-calls-without-consent-is-a-violation-of-right-to-privacy-enshrined-in-article-21-of-the-constitution-of-india
    Montaq.com
    ________________________________________

    Government, military orgs targeted by Dark Pink APT
    https://www.scmagazine.com/brief/threat-intelligence/government-military-orgs-targeted-by-dark-pink-apt
    www.scmagazine.com

    The MESA, Mobility Enhanced Spectrum Analyzer, is a high-performance, portable spectrum analyzer that detects RF signals up to 6GHz, (12GHz with the Downconverter Antenna).

    The Spectrum Analyzer mode on the MESA is quite versatile for detecting and inspecting unknown signals with features like the Patented SmartBars® mode that quickly detects new signals in an environment.

    However, MESA is also a Mobile Bands, Wi-Fi, and Bluetooth detector, all in one. Each detection mode offers signal analysis tools unique to the signal category.

    REI has engineered new software and hardware updates to the MESA making it the new MESA 2.0. The MESA 2.0 provides improvements to the Wi-Fi detection mode, by adding client device detection in addition to access point detection, including device details like:

    • Mac Address
    • SSID/Name*
    • Average update
    • Last seen
    • Packets stats, number of Frames & Bytes
    • Channel
    • Manufacturer*
    • RSSI graph with signal strength range for locating transmissions
    • Sort signal lists on type, MAC, SSID, Signal Strength, Channel, Threat Class
    • User-defined power threshold
    • User-specified threat level (Friendly, Threat, Unknown, Inactive)
    • Jump to zoomed Spectrum Analyzer View of selected signal
    • Save and export list data to USB
      *Depending on the device broadcast information

       Additional MESA 2.0 features include:

      • I/Q Recording – records raw samples of sophisticated signals
      • Probe/Antenna Quick Disconnect – eases antenna and cable removal to prevent pin damage (pictured right)

      A MESA 2.0 Upgrade Package is being developed for purchase to allow original MESAs to be converted to MESA 2.0. This upgrade will require factory hardware and firmware modifications. Check the MESA 2.0 product page for the release of the upgrade package.

      MESA® 2.0 is currently in production and replaces the original MESA model. The TTK – Tactical TSCM Kit now includes a MESA® 2.0.

      The MESA 2.0 is a completely integrated product, meaning it does not need a separate CPU, SDR (software-defined radio) or other components. It comes with all the antennas, probes and batteries to be put in service in minutes.

      What is VoIP Plus+?

      VoIP Plus+ is a feature that allows the TALAN Telephone & Line Analyzer to view and analyze VoIP packet traffic across data and telephone networks.

      To better understand the concept of VoIP and how the VoIP Plus+ application works we should briefly review some communication history. The first long-distance communication tool was the telegraph. Morse code was transmitted across miles of wire by pulsing the current flowing through the line to create a message. The current duration translated to quick dots or longer dashes which corresponded to letters of the alphabet.Operators could send an entire message using a simple device and manually control the on/off current supplied to the line. Next, the Bell Analog Telephone came onto the scene in the late 1800s. This telephone worked similarly in concept, except now the current in the wire was modulated with audio – a person’s voice.

      The concepts and applications of analog communication changed little until the 1970s. With the rise of computerization and digital communication tools were developed, primarily to provide more secure communications during the Cold War. Digital communication tools were faster, more efficient, and more secure than analog. While the information was still running along a hard-wired connection from point A to point B, the methodology dramatically changed. Communications became based on binary code sequences (1’s and 0’s; similar to the original concept of Morse code). Once the code was sent, another computer would receive and decode the numbers back into audio.

      Fast forward to present day. Today we have wireless internet all around us and are no longer tethered to the limitations of Ethernet and telephone cables. Internet communications are a new spiderweb of connections and pathways. Information sequences of binary data are now chopped up into many smaller pieces and some are known as Voice over Internet Protocol (VoIP) packets. Now, the audio data can travel more quickly and accurately across multiple pathways. Packets are “addressed” with a final location and sent along various routes until they all meet back at their destination. This is not unlike Waze or Google Maps rerouting your path of travel for construction or a wreck. Today, packets navigate through cyberspace much more efficiently than prior analog or digital technologies. Similar to following a Waze map, if some packets are lost or delayed, there is automatic resending and re-routing so that there is no loss in transmitted data.

       

      TALAN and VoIP Plus+

      Now that we have established a conceptual basis of how communication is transported over telephones and computers we can better understand the Talan’s VoIP Plus+ countermeasure abilities. The VoIP Plus+ feature can help diagnose software attacks on a phone.

      The primary indicator of an attacked phone is the presence of voice packets when the phone is on-hook and idle. Voice packets are sent using a protocol called Real-time Transport Protocol (RTP). When a phone is on-hook there should be no RTP packets. RTP traffic has a very distinguishable pattern, and the TALAN VoIP Plus+ software can display the presence of RTP packets in four ways.

      1. By sorting packets into lines of communication called Network Packet Streams.
        1. A Network Stream of RTP packets will increase in the number of packets very quickly and is
          easily identifiable when compared to other Network Packet Streams.
      2. By performing a Fast Fourier Transform (FFT) against the network stream and displaying packets based on frequency.
        1. RTP has a clearly defined packet frequency setting it apart from other packet types and
        2.  making the pattern easily recognizable.
      3. By examining the payload. RTP packets are all the same size (see image 2).
      4. Showing the packet hits or packets per second is consistent and repetitive.

      For Defensive TSCM purposes, this analysis will identify if the phone is transmitting audio data when it should NOT; indicating that it has been compromised. Key questions to ask yourself are: Is this phone working like it should? Should it be passing that type of information or that quantity of data? With  TALAN analysis, no further demodulation or decoding is required to indicate a problem. The TSCM professional is made aware of the compromised communications.

      Note: While demodulation is not required, as described above, the TALAN does provide four codecs for basic non-secure VoIP demodulation. Other codecs designed for higher security cannot be demodulated.

      The primary TSCM concern for a VoIP system is to insure there is no voice packet traffic when the device is on-hook and in idle condition. Fortunately, VoIP traffic has an easily recognizable pattern that TALAN’s VoIP Plus+ will display in an easy-to-read format. For information about TALAN please visit our

      product page HERE. For additional questions or educational resources please contact sales@reiusa.net.

      Learn more about VoIP Plus+ with our free online seminar on Dec. 14. Register Here.

      In 1983, Bruce Barsumian along with a handful of employees relocated a small electronic R&D business to Cookeville, TN to start what would become an international manufacturing leader of technical surveillance countermeasures (TSCM) equipment.

      Bruce Barsumian, Founder of Research Electronics Int'l

      “At first we just wanted to make the best products we could,” said Barsumian.

      This simple goal would guide the company over the past 40 years to achieve some significant accomplishments:

      • In-house manufacturing operation
      • Renowned international Training Center
      • PCB production
      • Research and design engineering
      • International sales network
      • Products distributed to over 100 countries

      Barsumian is a true pioneer in the field of TSCM with over 14 design patents and countless product developments including phone voice scrambler, spectrum analyzers, telephone and line analyzers, acoustic noise generators and non-linear junction detectors to name a few.

      To read more on Barsumian’s legacy, click here.

      The REI Training Center is offering a new TTK (Tactical TSCM Kit) training course and is accepting registrations for the first round of courses in 2023.  The 5-day TTK Course covers the operation and deployment of products included in the TTK:

      • MESA Mobility Enhanced Spectrum Analyzer for detecting and locating illicit or unknown RF transmissions using various detection and analysis tools
      • ANDRE Nearfield Broadband receiver
      • ORION 2.4 HX NLJD (Non-Linear Junction Detector
      • CMA-100 Countermeasures Amplifier
      • Other testing tools included in the TTK
      • RF search techniques

      Initial course dates are:

      • Feb 6-10
      • May 15-19

      The TTK course is for current TTK owners, or for anyone considering purchasing a TTK. There are no prerequisites. The class is limited to 6.  Contact sales@reiusa.net for pricing.

      Click here to register or for more information: NEW TTK Course

      A complete course schedule through Jun 2023 is available here:  REI Training Courses

      The current supply chain disruptions are impacting component suppliers and unfortunately lead times and availability can change without notice.  Please coordinate time sensitive requirements with your REI Sales Manager or REI Authorized Reseller; REI is doing everything we can to reduce lead times and minimize delays.

      Find the REI Team at these tradeshows in early 2023:

      • IDEX | Feb. 20-23
      • Security and Policing | March 14-26
      • ISC West | March 29-31

      Additionally, you can catch REI in California for a TTK Roadshow from February 27 – March 2! Details will be announced in the next newsletter.

      Detecting Bluetooth Trackers with MESA Spectrum Analyzer

      by Anthony Reep, REI Instructor

      People are becoming more dependent on Bluetooth technology. Even though Bluetooth was invented in the mid-80s, it has only recently taken over commonly used products like headphones, watches, cars, health monitors, heart monitors, keyboards, and even medical equipment like stethoscopes. There seems to be no end to its application. Bluetooth (BT) efficiently transmits information at 2.4 GHz frequency for relatively short distances. Most people are familiar with the process of pairing devices, a method of establishing a connection between BT devices. Your phone and your wireless headphones, for example, transmit data back and forth once a connection is established.


      Bluetooth is a short range frequency hopping data exchange between 2 or more devices, transmitting data packets within the 2.4 GHz band.


      Bluetooth (BT) trackers have recently grown in popularity.  They work as locators for anything you put them in or on. In other words, they help you keep track of things.

      Life360 Tile, Samsung Galaxy SmartTag, and Apple AirTag are popular brands of BT trackers. Apple AirTags actually notify a person they are being tracked, however this applies only if the person has an Apple product to detect the AirTag. BT trackers are often put on computer bags, wallets, key rings, pets, and even on items loaned to friends. The idea is very convenient. However, in the security world, convenience usually means less secure and often dangerous.

      BT trackers use Bluetooth Low Energy (BLE) technology. Standard BT devices can remain connected a few seconds to a few hours vs BLE which remains in sleep mode unless a connection initiates, which means much less power consumption and longer battery life (as much as a year or more).

      BT tracking devices do not have cellular connections and do not require a monthly plan like traditional mobile phones or GPS trackers. Almost everyone today has a mobile phone or two and often carry other items with a Wi-Fi/BT connection in addition to their phones. BT trackers use these devices to form “networks” from which location data is gathered. Simply put, BT trackers use other nearby connectable BT devices to figure out where they are. The battery life of these devices is very good since they do not have to stay connected or transmit often. Apple’s AirTag, for instance, can operate for 12 months or more on one CR2032 coin cell battery. For people who lose or misplace things, this can be quite handy. Having a BT tracker on your pet’s collar could save time searching neighborhoods with your head out the window yelling for Sparky the family dog to come home. You can simply open your app and locate the BT device. Some Trackers can notify the user if they get within a specified distance from the tracker.

      Some interesting features of the Apple AirTag include:

      • When an Apple AirTag is lost, any nearby Apple phone can be notified.
      • The “Find My” app will help locate the tracker and when close to it the phone can receive contact information to quickly arrange return of the item to the owner.
      • If the AirTag is lost for extended time, it can periodically emit an audible chirp to help bring attention to itself.
      • The Apple AirTag is more reliable than other devices because it uses any iPhone in the vicinity to connect, whereas other Android based tracking devices only use phones that contain the proper App and the App must be active.

      All of this sounds amazing, right? Millions of these devices have been sold, and certainly they have been a valuable tool saving people heartache and stress.

      So, what’s the danger?

      REI Training Center instructors receive many calls from law enforcement agencies where people are being notified that they have a device tracking them. Their phones are telling them they have a tracker travelling with them. This happens with Apple phones when an AirTag that is not connected to their account has been in their vicinity for an extended amount of time. This doesn’t happen if the owner of the AirTag is with them. It only happens when the AirTag is away from its owner. The danger in this is that the Apple phones only indicate if an Apple AirTag is tracking them. If the tracked person has an Android device, no alert is given. The same is vice versa. In other words, an iPhone will not alert to a Tile BT tracking device (unless the phone has the Tile App active), and an Android phone will not alert to an Apple AirTag.

      One trend we are seeing is college students are being tracked and getting an alert. The Apple app tells them after the alert they should go to the local police department for help. Local police departments then have the task to attempt to locate these trackers and remove them.

      Imagine a predator looking for its prey. The predator needs to establish a target and then a routine. If a predator were to use a BT tracker on a person at work, in a bar, concert, or mall, they could simply sit back and monitor the tracker for a few days. The stalker may be able to gather information like patterns of behavior, work place, home, or even a person’s precise location in a large crowd. This is very dangerous.

      Thinking hypothetically, what if a law enforcement officer is working a case that stands to put a criminal in prison for a very long time. Let’s say a drug dealer. Someone working with the drug dealer could slip a BT tracker in the officer’s pocket or computer bag and now can observe the officer’s movements, patterns, find out where he lives, works etc., or worse, visit the officer’s home when he/she is away. You can see how dangerous this would be.

      Tracking devices can effectively be used to track people in criminal situations such as kidnapping targets, vehicle thefts, spouses tracking exes or jealous boyfriends and girlfriends, and people with restraining orders.

      So, what do we do? First, it’s good to understand the weaknesses and how these BT trackers can be exploited. Trackers depend on other devices for their location services. There are phone apps to help locate BT trackers. The problem with most of the apps is that the sensitivity of the phone’s Wi-Fi/BT chip is not made for locating. These are designed to connect and make your phone more enjoyable.

      MESA detects Airtag and Bluetooth Trackers

      TSCM Approach – Detect and Locate

      The MESA, Mobility Enhanced Spectrum Analyzer, has a Wifi/BT feature that detects Bluetooth Low Energy (BLE) devices and can also be used to direction find individual devices using the Received Signal Strength Indicator (RSSI) graph. The MESA’s built in Wi-Fi/BT antenna is internal and requires no other probes- this really helps in narrowing down to the area of the tracker. In Bluetooth mode the screen lists all detected BT devices. The list shows the broadcasted MAC address, device name (if available), received signal strength (dBm), and type of BT device. The populated list can be ordered according to signal strength. Select the device you want to locate and proceed to move through the area with the MESA, observing changes in signal strength. The RSSI graph will indicate a stronger signal and greater color intensity as you get closer to the device.


      This MESA Bluetooth screen shot shows a Tile detection (Dave’s Tracking Tile). The RSSI graph indicates the MESA was very close to the Tracker.

      Removing known BT transmitters from the search area greatly improves MESA’s locating efficiency. Most spectrum analyzers and broadband detectors don’t allow the user to select a specific device and single out its energy from other overlapping signals. The Wifi/BT area of the spectrum is very busy- making it impossible to determine one spike of energy from the next. A broadband detector like the ANDRE can help to locate strong areas of RF energy. The shortcoming here is that in order to detect with a broadband detector, you have to be in the extreme nearfield of the BT tracker to distinguish the BT tracker signal from other normal environment RF. If you have no idea where the tracker is, it requires a meticulous physical sweep. In an area with a high concentration of RF, broadband detectors can be overwhelmed with other signal activity. You need to be very comfortable with your broadband detector to notice when you’re in the nearfield of such a low power transmitter.

      Some tracking devices have built-in safety features that cause them to emit sounds to alert others that a tracking device is nearby in case it is being used illicitly. However, silent modified trackers with the speakers removed or disabled are now being sold on Etsy, eBay and other online stores. It is very easy to make these trackers silent which just makes them harder to find.

      If you suspect BT trackers the MESA is one of the best tools to detect and locate these threatening devices. Also be sure to exercise necessary physical inspections.

      Be alert, because the “bad guys” are always on the clock!

      The ORION 2.4 HX has an IP rating of 63 and is designed and manufactured to be extremely durable, including water resistance. This video demonstrates the use of second and third harmonic test tags before and after the ORION has experienced varying contact with water. The ORION is sprayed with water for approximately one minute and then doused with a substantial amount of water a few moments later. Viewers will note the test tags’ response each time and the power level change indicated by the green LED bar on the head of the ORION. To watch the full video CLICK HERE.

      To learn more about the ORION and its technical specifications please visit our website reiusa.net

      The REI Team is excited to be exhibiting at several shows this fall including:

      Additionally, REI will be hosting four TTK Demonstrations this fall.

      The first sessions will be held in Washington D.C. at the Embassy Suites Alexandria Old Town on August 23, with morning and afternoon sessions. Registration forms for D.C. can be found HERE.

      The remaining TTK Demonstrations will be held on September 15 at 9 am and 1 pm at the Hampton Inn & Suites Atlanta-Downtown after the conclusion of GSX. To register for a demonstration in Atlanta, CLICK HERE.

      If you haven’t seen REI’s YouTube channel lately, there are several helpful product videos and feature highlights. Our YouTube channel is a practical resource for anyone new to TSCM interested in learning about REI products. Many of the videos provide equipment overviews, research, and application.

      To learn more about our products and resources visit REI’s YouTube, website, or Linked In.

      TSCM in the News

      Historic

      Cold War Spy Gear – history.com

      https://www.history.com/news/pigeon-cameras-and-other-cia-cold-war-spy-gear


      Illegal Surveillance
      American Idol winner, Laine Hardy, arrested for eavsdropping –
      execsecurity.com

      https://execsecurity.com/news/american-idol-winner-laine-hardy-arrested-for-eavsdropping/

      UCSB Student Arrested for Hiding Cameras in Bathroom – dailynexus.com

      https://dailynexus.com/2022-02-27/ucsb-student-arrested-for-hiding-cameras-in-i-v-bathroom-released-from-custody-charges-reduced/

      Activist Arrested in China for Allegedly Using Eavesdropping Equipment –  NDTV.com

      https://www.ndtv.com/world-news/activist-probing-factories-making-ivanka-trump-shoes-in-china-arrested-says-labour-group-1706108


      Spying

      Facebook Catches Iranian Spies Catfishing US Military Targets – wired.com

      https://www.wired.com/story/facebook-iran-espionage-catfishing-us-military/

      Cybercriminals Can Hack E-Scooters to Eavesdrop on Riders – gadgets360.com

      https://gadgets360.com/transportation/news/cybercriminals-can-hack-e-scooters-to-eavesdrop-on-riders-researchers-2170474


      Espionage

      Five Individuals Charged with Stalking, and Spying on U.S. Resisdents for PRC Secret Police – execsecurity.com
      https://execsecurity.com/news/spies-planting-surveillance-devices-for-prc/

      Hackers Eavesdrop Using Light Bulbs – gadgets360.com

      https://gadgets360.com/science/news/hackers-light-bulbs-eavesdrop-on-conversations-2247002

      Hidden CCTV Cameras with Hidden Microphones Could Be Eavesdropping – express.co.uk

      https://www.express.co.uk/news/science/1609118/china-spy-fears-cctv-cameras-hidden-microphones-eavesdrop-brits-security-risk

      TSCM is the art of protecting organizations against undesired surveillance.  Historically, TSCM did not have the need or concern for drone surveillance. However, with the modern proliferation of drones, there are certainly situations where security and protection from drone surveillance is a great concern.

      For every good drone application, there are probably 2 bad ones.  The bad applications are often privacy related, but there are many others that may not be as obvious, including:

      • Military exercises or technology demonstrations
      • VIP security or paparazzi protection (politicians, dignitaries, celebrities…)
      • Law enforcement: stakeouts, stings, swat operations, hostage situations & negotiations
      • Corporate events: such as product demonstrations, technology experiments
      • Product development and outdoor product testing
      • Prisons and delivery of contraband
      • Terrorism: drones used to carry dangerous payload
      • Air traffic and emergency services interference

      Many technologies are marketed for drone mitigation and detection.  As it relates to TSCM, the MESA® is a portable and tactical Spectrum Analyzer with an inherent capability that can be used for drone detection. The MESA® Deluxe – Mobility Enhanced Spectrum Analyzer – includes a directional log periodic Down Converter antenna that easily and quickly detects drone RF communication signals at a distance far beyond visible and audible detection.

      MESA Down Converter Antenna
      MESA Down Converter (Log Periodic) antenna

      REI conducted some simple tests and demonstrations at its facility in Tennessee, U.S.A. using 2 commercial drones: DJI Phantom 3 and DJI Spark (mini drone). These commercial drones use ISM bands to transmit video; mainly using 2.4GHz and 5.8GHz WiFi based IP cameras to transmit streaming video back to the drone controller.

      During the test, the MESA® was able to detect the drone’s video transmission far beyond sight and hearing, relying on the high gain directional Log Periodic antenna. In the MESA® screen shots below, the waterfall shows brighter (stronger) signal activity when the MESA® antenna was pointed in the direction of the drone.  When it was pointed away from the drone the signal appears much weaker or disappears altogether. It should be noted that the MESA® was next to a building with significant Wifi transmissions which can also be seen in the red Peak Trace and waterfall.

       DJI Phantom 3 Drone:

      • Transmit Frequency – 2.4 GHz WiFi Video
      • Signal detected 200 meters altitude, 250 meters range
      • Outside of audible and limited visual range

      MESA Signal Response for Drone Detection

      Here (above) the MESA® detects the DJI Phantom 3 and demonstrates the signal response when the antenna is pointed at and then away from the detected drone.

      Drone Arial view of MESA

      The DJI Phantom 3 captures a birds-eye view of the MESA® at 200 m height and 250 m distance.

      DJI Spark Drone:

      • Transmit Frequency – 5.8 GHz WiFi
      • Detection location – 150 meters altitude, 200 meters range
      • Outside of audible and limited visual range
      • Max range of the controller (no antenna improvement)

      MESA Signal Response for Drone Detection

      Above the MESA® detects the DJI Spark Drone at its maximum distance from the controller and demonstrates the signal response when the antenna is pointed directly at and then away from the detected drone.

      Drone Arial View of MESA

      The DJI Spark captures an aerial view of the MESA® demonstrating the detection range.

      MESA's Wifi Mode

      MESA’s Wi-Fi Mode (and internal Wi-Fi chip/antenna) can also detect the drone operator as a Wi-Fi access point when the operator is nearby, as shown in the above screenshot detecting the remote control of a DJI Phantom 3.  However, when trying to detect a drone, you are likely to be closer to the drone and detect the RF from the drone using the MESA Log Periodic antenna, rather than the drone remote control which would be much farther away.

      MESA’s unique way of detecting and locating drones focuses on detecting the drone’s video signal.

      Some important considerations:

      • The Log periodic antenna is necessary to identify RF energy in the sky.
      • An IP camera will have a similar WiFi signature and may be difficult to distinguish from a drone.
      • This approach may be difficult in a city environment with many WiFi signals and buildings.
      • A small handheld spectrum analyzer that can search both 2.4 and 5.8 bands, and with good sensitivity and portability is required.

       MESA Mobility Enhanced Spectrum Analyzer

      More about the MESA®
      The MESA® was introduced by REI in 2020 as a portable, handheld RF spectrum analyzer capable of detecting known, unknown, illegal, disruptive, or interfering transmissions throughout a wide frequency span up to 6 GHz (12 GHz with Down Converter antenna). The MESA® Deluxe includes an assortment of RF antennas for various frequency ranges and applications. It also provides tools to test visible light, IR, carrier current, ultrasonic and acoustic leakage threats.

      The MESA® is a unique product with the right characteristics to provide a practical drone detection solution in addition to its other TSCM solutions. More information can be found on REI’s website at www.reiusa.net.


      Places where there’s a high concentration of RF (like big cities) make it difficult to use a Non-Linear Junction Detector (NLJD) without running into interference from other signals. It’s important to find a quiet transmit channel to avoid interference from or with other devices and equipment.  Some NLJDs claim to be frequency agile, meaning they can search for quiet transmit channels, but don’t provide a way to view the channels within the spectrum, or manually select a channel.

      The *ORION HX series are the only NLJDs in the world with a built in spectrum analysis view of the transmit, and 2nd and 3rd harmonic frequencies. This ensures the ability to operate on a clear frequency band and eliminate interference and false alarms in a dense RF environment. Channel selection can be done manually or automatically.

      ORION NLJD searches quiet frequencies
      ORION TSCM NLJD searches quiet frequencies to look for hidden electronics

      In the Frequency Adjust screen shot above, captured from an ORION 900HX in Sao Paulo, Brazil; there was clearly strong RF activity in the fundamental transmit frequency, 2nd and 3rd harmonic frequencies.

      The operator was able to see the activity in all of the bands between 840.0 and 960.0MHz and tune to a quiet channel. At 939MHz, the ORION was able to be used without interference.

      This and other features of the ORION Non-Linear Junction Detectors combine to minimize interference and deliver improved detection of hidden electronics.  For more information on the ORION, check into any of the following resources:

      * The frequency cannot be adjusted on the ORION 900 HX Commercial CE compliant model – it transmits only on a single frequency, 869.525 MHz.

      REI has recently returned from several tradeshows, the first since March 2020 and we were excited to see new and old customers while demonstrating our latest TSCM products.

      In July 2021, REI exhibited at NATIA, ISC West in Las Vegas and hosted a One-Day ANDRE Training. REI was also fortunate to exhibit internationally during the fall of 2021. The first was International Security Symposium in Brasilia and then at MILIPOL Paris where attendees got to see the Tactical TSCM Kit (TTK).

      As we look toward the New Year we are excited to have a full schedule of domestic and international exhibitions to show our products.

      For a list of 2022 Tradeshows and events check out the Events sidebar at https://reiusa.net/


      REI MESA and Tactical TSCM Kit – TTK at Milipol exhibition in Paris France

      MESA’s New RF Jammer/Interference Detection

      A firmware update is available for the MESA spectrum analyzer that includes a new Jamming/Interference Detection feature in the Mobile Bands mode.  In our last Newsletter, we discussed jammers and the role TSCM plays in the detection and location of RF jammers.

      Criminal use of RF jammers continues to trouble law enforcement, military, corporate and private security and public safety.  The presence of an illicit jamming signal is typically an indication of some other illegal activity or security threat.  RF security is one of the main concerns of TSCM, therefore it is important to know when jammers or other forms of interference are present.

      MESA Mobile Bands Mode Displaying Jammer/Interference Detection Alerts

      The MESA’s Jammer/Interference Detection feature is enabled by default and generates alerts when an increased density of RF energy in a frequency band is detected.

      The image above shows an example of an active jammer detected in Band 2 (835-850 MHz). A Jammer Detection might appear in a single band or multiple bands depending on the frequencies being targeted. Bands 4 and 6 in the image above indicate a jammer or interference was detected in the past but is no longer active in these bands.  Because the MESA Mobile Bands are customizable, the user can create a detection band at any frequency up to 6GHz. Double-clicking on a Band displays a spectrum view of that Band. Below is a screenshot of a zoomed-in view of a jamming signal from Mobile Band 2. Notice the Mode icon outlined in blue still shows Mobile Bands while displaying the spectrum view. Clicking on the magnifying glass icon   will return to the Mobile Bands screen.
      MESA detects jammer

      A Signal Overload can also occur when the receiver is saturated with strong RF energy from a jammer or interference and will show red throughout all of the bands. When this happens, moving away from the transmitter or adjusting the Attenuation may help reduce the overload status.

      The Jammer/Interference feature provides configuration adjustments for power, sensitivity and alerts settings. The Band titles can be customized as well as the frequency spans of the Bands.

      Jammer Detector Log
      Jammer/Interference Detection logs activity and can be viewed and saved to a USB storage device.  The time, date, frequency and power history of the interference is recorded.

      Lock
      The Lock option provides a way to prevent the Jammer Detection feature or any of the settings from being changed or disabled.  Operations can still be monitored in a dimmed display but settings can’t be changed unless unlocked with the user-defined pin.

      The MESA’s Jammer Detection feature is one example of REI’s continuous product improvement.  The free MESA firmware update (version 1.1.9) that includes the Jammer/Interference Detection feature is available to download from the REI website along with update instructions.


      Beyond Non-Alerting, a Common Mistake

      We often get asked about “non-alerting” ways to keep an eavesdropper from knowing the security products and technical surveillance countermeasure equipment (TSCM) being used.  In Sun Szu’s Art of War, he describes the need for secrecy when making tactical decisions.

      Sun Szu’s Art of War, Chapter 6

      “O divine art of subtlety and secrecy! Through you we learn to be invisible, through you inaudible; and hence we can hold the enemy‘s fate in our hands…
      In making tactical dispositions, the highest pitch you can attain is to conceal them; conceal your dispositions, and you will be safe from the prying of the subtlest spies, from the machinations of the wisest brains.”

      However, the question of being “non-alerting” is usually asked from the perspective of how security measures are performed, and the process for purchasing products and services is often missed as one of the most “alerting” actions.

      Public tenders for acquiring intelligence security products can expose existing security weaknesses while also advertising the types of countermeasures being purchased. Public tenders are typically intended to promote competition, secure the best price, provide fair opportunity for all, and make the tender process transparent.  But with intelligence products, an argument can be made that full transparency may not be the best strategy.  There’s a point where transparency can be synonymous with exposure.  All security products have limitations.  So if you know the security products being used, you can also figure out its vulnerabilities.

      When playing cards, the dealer usually slides your cards face down so other players can’t see them.  And the cards are usually kept face down or held up close, to keep other players from peaking at your hand. Unless you want to lose, you don’t lay them on the table for everyone to see.  Purchasing security equipment should, as much as possible, be the same. Federal government and law enforcement agencies around the world use closed processes to purchase TSCM equipment.

      There are other reasons public tenders can produce undesirable results including:

      • Slow process
      • Confusion about technical requirements or the specifications are too broad
      • Suppliers of inferior products may claim compliance when in fact they do not meet required specifications or needs
      • Process puts communication barriers between provider and customer
      • Difficult to know when cheaper, poor quality materials/labor are used
      • After sales support, repairs, and training are often not accurately accounted for in procurement
      • Post award changes can be very costly

      Too often we hear stories from people who find the perfect product solution to a problem, but end up with a lesser or ineffective product as a result of the public tender process. Usually, because the person processing the tender weighed price over feature and performance criteria, or didn’t fully understand or specifically define the desired solution.

      Sole source justification is one way of protecting intelligence product purchases from public exposure and to clearly define the purpose and application of the procurement.  Sole Source definition according to Office of Justice Programs, U.S. Department of Justice Sole Source Justification Fact Sheet:

      “Procurements by noncompetitive proposals, referred to as sole source procurement, is procurement through solicitation of a proposal from only one source. Recipients may conduct competitive (‘sole source’) procurement through solicitation of proposals from only one source when one or more of the following circumstances apply:

      • The item is available from only one source
      • The public exigency or emergency for the requirement will not permit a delay resulting from competitive solicitation
      • Competition is determined inadequate after solicitation of a number of sources”

      Because of the sensitive nature of security products and the unique technical requirements, REI recommends considering closed procurement methods where appropriate.  This not only ensures that the proper equipment is purchased, but also that the security capability is not exposed, which can lead to an even greater security risk.

      When you make efforts to increase security capabilities, be sure not to disclose them, either during security activities or the procurement process.

      REI does not propose sidestepping good contracting practices, or using sole source justification to avoid competition.  Government and commercial procurement agencies can, and should verify manufacturer pricing to ensure it is fair, reasonable and equitable, and free from conflict of interest.

      If you are considering a non-alerting purchase of REI products and need sole source information, contact us at sales@reiusa.net.


      GPS Tracking Devices and the ANDRE®

      GPS tracking devices leave a minefield of malicious threat opportunities. This can include the endangerment of military personnel by having their location revealed, the discovery of secret business meetings, or someone being tracked by an abusive partner. GPS tracking can expose anyone to unwanted surveillance.

      A GPS tracker receives signals transmitted by satellite to determine its location on earth. A tracker usually receives location signals from at least four satellites, while additional satellites help refine and improve location data. With the boom of mobile devices, GPS has improved to incorporate the use of cell tower, Wi-Fi and Bluetooth information to help pinpoint locations. Location accuracy depends on the type of GPS device being used and the location data it can receive.

      Three Types of GPS Devices

      GPS tracking devices come in three types: data logging, data pushing and data-pulling devices. Data Logging devices only use satellite signals and the information is stored on the tracker. This type of device must be retrieved to access the information. Data Pushing trackers receive satellite information and then continuously push the information to a cellular network. The data gets transferred to a server and then to the internet, where location data can be viewed through an app or browser. Data-pulling devices receive location information and broadcast this information to the person doing the tracking at set intervals, when a predefined parameter has been met, or at the user’s request. Parameters may include geofencing, movement, speed, when a car is turned on, etc. For example, the device may be programmed to send a notification when the vehicle arrives at specific location, like an office, stadium, house, etc.

      Adding Technical Surveillance Counter-Measures (TSCM) to the Mix

      TSCM can help protect privacy and information from GPS threats. The ANDRE Broadband Receiver is good for detecting GPS pushing and pulling trackers. The ANDRE can detect the RF transmission from the tracker to the cellular tower, even as fast as 1/1000th of a second. Because the ANDRE is a broadband receiver, it displays the amplitude of the strongest RF signal; regardless where in the 6GHz (or 12GHz with the Down Converting antenna) it occurs, which will be mostly in the cell phone band for trackers. This ensures almost 100% probability of intercept (POI).

      ANDRE Data Logging Software shows potential GPS Signal Pattern

      Practical Application

      Typical search procedures and methods for working with the ANDRE to detect GPS devices include:

      • Set up the ANDRE Deluxe and whip antenna in the center of the vehicle
      • Activate the Data Logging feature (ANDRE Deluxe)
      • Drive the vehicle to check for geofencing, speed, interval, Bluetooth and/or Wi-Fi perimeter triggers
      • You may also choose to leave the ANDRE in the vehicle for a period of time (up to 250 hours) to look for transmit patterns
      • Turn on the “Chart Audio/Live Audio” feature on the ANDRE to hear distinctive pings from the transmission of GPS data to a cellular tower
      • Block off all incoming cellular tower signals to the GPS tracker. Once cellular frequencies are available again the GPS will quickly have more active connection “frenzy” while re-establishing communication with a tower. This may give the ANDRE a stronger signal to detect.
        • Eliminating signal activity may be possible by isolating the vehicle from cell towers using natural barriers or by using a sterile RF environment.
        • Jamming the surrounding signals may also be possible; however the use of jammers is highly regulated. Know the responsibility you have using a jammer and the legal/regulatory implications.

      As good as the ANDRE® is, it doesn’t replace the necessity for a physical search. The longer an enemy has to install an illicit tracker, the more sophisticated the installation can be – making the TSCM search more difficult. GPS trackers require either a physical retrieval or a transmission of RF energy to view target location data. For a tracker that requires retrieval, or transmits only upon request, nothing replaces a thorough physical search of the vehicle.  For other transmitting GPS devices the ANDRE Deluxe provides the best chance of detecting unknown GPS trackers.


      Online Seminar Schedule Through June 2022

      Training at REI is back to regularly scheduled classes, but COVID-19 continues to restrict open travel for many who want or need TSCM training. REI’s online seminars provide an opportunity to learn fundamental TSCM concepts from anywhere, regardless of skill level.

      These seminars are free 1 hour live presentations on a variety of TSCM related topics. The interactive seminars are presented by an REI Training instructor and include opportunities for questions and answers.

      If product-focused remote learning is needed, REI’s E-Training courses offer 1-2 day online training for anyone with equipment. E-Training is an effective way to get refresher training.

      Remote working may be here to stay and REI is pleased to offer new learning opportunities for TSCM professionals.  To sign up for one of the free seminars, visit: https://reiusa.net/online-seminars

      REI's new portable TTK Tactical TSCM KitRecent news and information around the world regarding TSCM, espionage, intellectual property theft and many other topics of interest to security professionals.

      Wiretapping

      Bangladesh Live News
      Bangladesh High Court dismisses writ demanding investigation on eavesdropping and leaking of telephonic conversation
      https://www.bangladeshlivenews.com/en/bangladesh/details/high-court-dismisses-writ-demanding-investigation-on-eavesdropping-and-leaking-of-telephonic-conversation


      Corporate Espionage

      Source: Daily Maverick
      BAT’s UK headquarters oversaw and financed a South African corporate spy ring
      https://www.dailymaverick.co.za/article/2021-10-01-bats-uk-headquarters-oversaw-and-financed-a-south-african-corporate-spy-ring/


      Countersurveillance

      Source: Post Magazine
      Surveillance and countersurveillance in China: the former private detective who went from installing spy cameras to rooting them out
      https://www.scmp.com/magazines/post-magazine/long-reads/article/3150750/surveillance-and-countersurveillance-china


      Espionage History

      Source: nation.lk
      10 Innovative Devices from the History of Espionage
      https://www.nation.lk/online/10-innovative-devices-from-the-history-of-espionage-125423.html


      Competitive Intelligence

      Source: NewsDay
      Competitive intelligence in Africa
      https://www.newsday.co.zw/2021/09/competitive-intelligence-in-africa/


      Hidden Microphones

      Source: Central Recorder
      Secret Hearing Focuses on Hidden Microphones at Guantánamo Prison
      https://centralrecorder.com/secret-hearing-focuses-on-hidden-microphones-at-guantanamo-prison/


      Hidden Cameras

      Source: Mirror
      Ikea Workers find hidden cameras above toilets and locker rooms at distribution centre
      https://www.mirror.co.uk/news/uk-news/ikea-workers-find-hidden-cameras-25107416

      TTK - TSCM Travel Kit REI’s New TSCM Travel Kit (TTK) Packs It In! TTK is easy to transport
      If you need a small portable TSCM sweep kit, now is a perfect time to look at the new REI TSCM Travel Kit (TTK). The TTK is a professional carry-on, deployment-ready sweep kit for detecting and locating hidden electronics and RF transmitters.
      Weighing less than 25 lbs./11.3kg, the TTK is designed as a durable non-alerting tactical sweep kit for the frequent traveler.


      MESA® handheld Spectrum Analyzer for portable RF detection and analysis to 12 GHz

      • 10kHz to 6 GHz spectrum analyzer (12 GHz with Down Converter Antenna)
      • Sweeps 200GHz per second
      • SmartBars™ Mode for rapid detection (Patented)
      • Mobile Bands Mode showing RF levels of customize-able spans
      • Wi-Fi and Bluetooth modes to identify access points
      • Touchscreen controls, with visual, audible, and haptic alerts
      • Cached Peak Function (Patent Pending)


      ANDRE® Broadband Detector for near-field detection and location of RF transmitters

      • Broadband RF detection up to 12GHz, plus Infrared and Visible Light
      • Histogram display of signals over varying time spans up to 24 hours
      • Quick and easy to use
      • Provides short-range detection
      • Fast Detection with POI of 10nsec pulses for the full 6GHz band


      ORION® 2.4 HX Non-Linear Junction Detector for finding hidden electronics (active or inactive), FCC 3.3W or G 6.6W

      • 2.4GHz Digital Spread Spectrum transmit signal
      • Spectral analysis for frequency channel selection with more than 60 available channels
      • Digitally correlated 2nd and 3rd harmonic response
      • Touch screen display showing unique harmonic histogram and a spectrum view of operational bands
      • Visual, audible, and haptic vibration alerts


      CMA-100 Countermeasures Amplifier for detecting wired surveillance devices

      • 110dB of Gain
      • Built-in AC/DC voltmeter
      • Variable bias voltage available from -15V to +15V DC

      FLIR DM285 Industrial Imaging Multimeter (US only, not included in exported kits)

      All of the products and accessories fit in a Pelican™ Air 1535 case with REI custom foam inserts. Whether in a congested airport or coming to and from the job site, the retractable extension handle and quiet rolling wheels make the TTK simple and easy to transport.
      Antennas and probes for the MESA and ANDRE include Whip Dipole, VLF, and the Log Periodic Down Converter (12GHz) antenna. The MESA also includes the Fixed Dipole and the MCP Multi-Carrier Probe for carrier current testing. A complete accessories list is available here.

      No one else provides an REI Spectrum Analyzer, Broadband Detector/receiver, digitally correlated NLJD, and audio amplifier in a single light-weight travel-friendly package like the TTK. Contact sales@reiusa.net for a quote or more information.

      When you’re in a Jam

      RF Jammers are used to block or interfere with the physical transmission and reception of wireless communications.  In most cases, they work by generating RF energy to overwhelm or confuse RF transmissions.  They can deny service indiscriminately or they can target specific classes of transmission (GPS, Wi-Fi, Bluetooth, cell phone, etc.).

      Jamming technology has not been historically considered in TSCM applications, but the fact that jammers may interfere and disrupt RF transmissions means the necessity to investigate for jammers will undoubtedly increase.

      New technologies and the Internet of Things (IoT) are being developed all the time that use wireless communications and so are opportunities to interfere, disrupt, and manipulate them.  Causing denial of service can be disruptive and, possibly, extremely dangerous.

      A quick list of wireless applications that can be affected shows just how harmful illegal or illicit jamming can be:

      • GPS (location, navigation, tracking, mapping, timing)
      • Cell phones (emergency 911 calls)
      • Bluetooth devices
      • Key-fob/car locks
      • Wi-Fi communications
      • RF equipment+
      • Satellites
      • Security equipment
      • Radio transmissions
      • Industrial controls
      • Home automation
      • Fleet management
      • Drones

      Despite the illegality of jammers (in most countries), they are commercially available, inexpensive, and used privately, often marketed as security devices, but criminals use them to conceal illegal operations, disrupt law enforcement or first responder communications, disrupt surveillance efforts by law enforcement, block or disrupt wireless security equipment, block GPS trackers, even parole ankle bracelets.  Types of jammers include 5G/4G/LoJack/XM, GSM/GPS, Walkie-Talkie, Wi-Fi, Bluetooth, and more.

      Can Jammers Be Defeated?

      There are only a few ways to practically defeat a jammer:

      1. Move out of its range:
        • Distance – getting out of range of the jamming signal. Without knowing the location of the jammer, this will be difficult.
        • Frequency -searching for quiet channel or possibly selecting a different frequency modulation scheme.
        • Amplitude – using power management techniques, increase the transmit amplitude for outbound transmissions (attempt to overcome the jammer interference)
      2. Detect, locate and disable the jammer source.

      This is where TSCM skills come into play.  Jammers, by design, transmit strong RF signals, meaning the transmit signal can be detected with a spectrum analyzer.  The right spectrum analyzer for detecting and possibly locating an RF jammer should include:

      Portability:   The spectrum analyzer must be portable and mobile so it can sweep and rapidly analyze energy in different areas.

      Frequency Range:  The spectrum analyzer needs to cover a wide frequency span.  A signal strength indicator alone, like most basic RF detectors have doesn’t provide the information needed to differentiate a jamming signal from other RF activity. Some jammers flood multiple frequency spans simultaneously while others target specific spans, so it’s important to have a spectrum analyzer that shows the scope of the jamming signal.

      Analysis Capability:  A spectrum analyzer that can isolate jamming signals into frequency bands (cell phone, Wi-Fi, Bluetooth) provides an excellent method for quickly identifying targeted devices.  Spectrum view, Waterfall and Persistence display also provide additional perspective on the signal’s activity over time.

      These are just a few things to look for in a spectrum analyzer to aid in signal jammer search and detection. REI will soon be introducing new features in the MESA Mobile Bands function to help detect and locate RF jammers.  This feature will be available as a free firmware update on REI’s website and will be in new shipments beginning in July.  Watch for more information in the next edition of the REI Newsletter.

      Virtual Security & Policing 2021
      Tradeshows Update

      While the Team at REI has adapted to online tradeshows and continued to connect with our customers at events like Security and Policing (pictured above). The team at REI is excited to announce a list of Summer and Fall tradeshows we will be attending in person.

      NATIA – Tampa, FL – July 11-14

      ISC West – Las Vegas, NV -July 19-21

      *One-Day ANDRE Training – July 22

      DSEI– Excel, London – September 14-17

      GSX – Orlando, FL – September 27-29

      MILIPOL Paris – Paris, France – October 19-22

      AOC Annual Symposium – Washington, DC – November 30 – December 2

      *Additionally, REI will be hosting a One-Day ANDRE Training in Las Vegas at the end of ISC West. For more information go to https://reiusa.net/rei-training-center/andre-remote-training-2/

      To keep up with the REI Tradeshow schedule check out the Events section of our homepage: https://reiusa.net/

      E-Training

      REI offers online E-Training courses that provide introductory and refresher level instruction to anyone with an REI product who wants to learn its basic operations, but is unable to travel to REI’s Training Center. We currently offer 6-12 hours of E-Training on the ANDRE & ORION, MESA, OSCOR, and TALAN. The limited class size encourages higher student engagement, allowing students and instructors to explore topics more in-depth and answer more specific questions. Students are required to have their own equipment on hand to train on software navigation, functions, and accessories. REI’s E-Training does not replace in-person classroom training and exercises, but it does provide operational overview for users who are unable to travel.

      To learn more about REI’s E-Training options, click here.

      Curso de formación de español

      REI esta ofreciendo un paquete de Curso en Español que incluye Los Conceptos Principales de Contramedidas-Nivel 1 y un curso combinado de RF OSCOR y TALAN -Nivel 2.

      Próximos cursos

      septiembre 13, 2021 – septiembre 24, 2021

      Note: Training begins at 8:30 a.m. CST and typically ends at 4:30 p.m.

      Titulo:  Conceptos Principales de Contramedidas – Nivel 1

      Descripcion

      El segmento de los Conceptos Principales de Contramedidas se enfoca en la introduccion a los procedimientos y equipo de contramedidas de vigilancia. Los estudiantes seran introducidos a las pruebas de telefonos, tecnicas de busqueda basica RF, como procedimientos basicos de investigacion. Esta parte del curso esta diseñada para introducir y familiarizar al especialista en seguridad tecnica con varios productos de contramedidas de vigilancia y sus procedimientos basicos de barrido.

      Topicos del Curso:

      • Investigaciones Basicas Tecnicas, cubriendo los conceptos de procedimiento para integrar seguridad tecnica con la seguridad de instalaciones que existe
      • Vision de Conjunto de Amenaza de dispositivo comercialmente disponible
      • Ver más información

      Titulo:  RF OSCOR y TALAN Curso Nivel 2

      Requisito Previo: Conceptos Principales de Contramedidas – Nivel 1

      Descripcion

      Esta parte del curso se enfocara primordialmente en la operacion y despliegue del Analizador de Espectro OSCOR RF y la del Analizador de Linea y Telefono TALAN. El curso iniciara con un breve realce de las Contramedidas de Vigilancia Tecnica, amenazas basicas, detectores de uniones no lineales y detectores de banda ancha. La porcion de entramiento de telefonos digitales provee instruccion en pruebas de los sistemas de telefonos digitales y el analisis de amenazas tecnicas, incluyendo la operacion del Analizador de Linea y Telefono TALAN de REI.

      Topicos del Curso:

      • Indicadores de Perdida de Propiedad Intelectual
      • Inspecciones de Seguridad Tecnica Reaccionaria
      • Ver más información

      The REI Training Center is offering new online Basic E-Training courses to customers who own an REI product and want to learn its basic operations and functions. While E-Training courses do not replace in-person training at REI, these instructor led courses provide introductory level students and those who need refresher training, the opportunity to walk through menus and functions of the products.

      ANDRE® & ORION® E-Training
      The ANDRE & ORION E-Training is a one-day course, lasting approximately 6 hours, and covers ANDRE’s Histogram Display, Zoom View, Signal Information and Band Details, Audio Mode, Data Logging (Deluxe Feature). Additionally, trainers will review the ANDRE Antennas.

      ORION®
      ORION features to be covered include digitally modulated transmit signal, Correlated 2nd & 3rd harmonic response, Adjustable DSP gain, Histogram graph showing continuous history of harmonic response and power adjustment, Touch screen displays, alert tones and haptic (vibration).

      MESA®
      The MESA course will be held over two days (approximately 12 hours total) discussing sweep modes (SmartBars™, Spectrum Analyzer, Mobile Bands and Wi-Fi and Bluetooth®) display features, display and controls, various probes/antennas, remote access, signal list generation, and GPS.

      OSCOR®
      The OSCOR course runs two-days (approximately 12 hours total) covering Radio Frequency (RF) Detection, Radio Frequency (RF) Analysis, Spectrum Analysis, Signal Analysis, Eavesdropping Detection, Surveillance Equipment Detection and Electronic Surveillance Detection.

      TALAN®
      The final installment of the REI E-Training covers the TALAN Telephone & Line Analyzer. This two-day course will review all menu options, basic functions, and basic telephone line testing procedures.

      Students must have their own equipment and should be prepared to use it during the course.  Each E-Training will be held via Zoom, attendees are encouraged to test Zoom prior to the course start.  At the end of each E-Training course, students will receive a certificate of completion.

      For pricing options, course dates or more information, visit reiusa.net/e-training.

      It’s no secret the REI team misses connecting with customers in person at  tradeshows and conferences, and we hope to return to shows in the near future. In the meantime, REI along with IPS will host a booth at the annual Security and Policing show March 9-11. If you have already registered and would like to visit REI’s virtual booth, click the button below to get connected:

      Non-Linear Junction Detectors (NLJDs) have been used for decades to detect and locate hidden electronics, and REI’s ORION was among the earliest brands developed.  A number of NLJD manufacturers have since come and gone but ORION has remained, adapted to technology changes, and today is by all standards considered the leading NLJD internationally, and not because it outlived the others.  The ORION has many advanced features that make it stand out from the rest.

      Operational Features

      Advanced Transmit Signal

      OSCOR Spectrum View of ORION Spread Spectrum Transmit Signal and Analog NLJD Transmit SignalThe ORION antenna head radiates a low power 1.25 MHz-wide OFDM spread spectrum RF signal. Shown here is a screen shot from an OSCOR spectrum analyzer that demonstrates the difference between ORION’s wide digital spread spectrum signal compared to a narrow analog TX signal of a typical NLJD. The wider Digital Spread Spectrum signal provides higher probability of detection using less peak power.

      Touchscreen Display and Antenna Head Display

      ORION HX models are the only NLJDs with a touchscreen display delivering specialized data graphs that can be screen captured and saved to micro-SD for reporting. Display graphs include:

      • Frequency Adjust Screen – displays a graph of the ambient RF activity in the TX, 2nd and 3rd harmonic frequencies. This is necessary for selecting quiet channels to prevent interference in the transmit and harmonic frequencies
      • Spectrogram View – provides a spectral view of the 2nd and 3rd harmonic receivers
      • Histogram Display – a graph that displays a history of transmit power and harmonic activity over time (see below). No other NLJD can deliver this kind of data.

      All tools, settings and operations are controlled through the touchscreen menus. ORION HX also has an antenna head display for line of site monitoring of the target area.

      Frequency Avoidance

      ORION Spectrum View Comparing RF Interference in each Frequency Band to Tune to a Clear Channel

      The ORION is the only NLJD in the world with a built in spectrum analysis view for transmit, and both 2nd and 3rd harmonic frequencies. This ensures the ability to operate on a clear frequency band and eliminate interference and false alarms in a dense RF environment. In this screen shot taken in Sao Paulo, Brazil; there was clearly RF interference in each band, but the unit was easily tuned to a clear channel for reliable operation. Other competitive products claim frequency agility, but no other NLJD in the world has 60+ channels in which to find a quiet frequency and avoid interference.

      The ORION also provides several transmit frequency selection modes including Auto (automatically sweeps for a quiet channel) and Manual (user selects the TX frequency). Select models also include a Sweep mode (continually sweeps sequentially through channels), and Hop mode (randomly hops through channels).

      The ORION digitally modulates the transmit signal with OFDM technology that correlates the 2nd and 3rd harmonic when received by the ORION. This significantly increases detection gain and helps prevent false detections.

      Advanced Transceiver Technology

      The ORION has unparalleled receiver sensitivity: -140 dBm

      DSP Gain (Patented)

      Another feature unique to the ORION is the adjustable DSP (Digital Signal Processing) Gain feature. This setting configures the level of DSP integration used to process the received signals. Sensitivity increases as the DSP Gain is increased from Low to High.

      Alerts

      ORION provides 3 types of alerts when RX signals exceed adjustable thresholds.  Alerts are important for discreet sweeping and for sweep efficiency. Alerts include Audio (headphone or speaker), Visual (antenna and touchscreen displays), and Haptic (handle vibration). In most NLJDs, audio and/or visual may be available, but not all 3.

      Automatic Power Control (Patented)

      Transmit power level on the ORION can be changed manually or automatically.  In the Auto transmit power mode, the transmit power will automatically reduce whenever the receiver becomes saturated. In Manual, the transmit power remains at the same level until it is manually changed.

      Design

      Antenna Head Design

      The ORION 2.4 has a smaller antenna head that transmits a shorter wave length signal, which is better for smaller, modern electronics.  The ORION 900’s larger wavelength antenna is better for larger, older electronics, and it is also better for penetrating denser materials (bricks, walls, etc.). The ORION HX Deluxe includes both interchangeable antenna heads in a single package to provide better detection sensitivity throughout changing environments.

      The ORION’s unique Patented spiral antenna is circularly polarized to transmit and receive, removing the risk of missing a threat due to incorrect antenna polarization, improving reliability and sweep efficiency.

      The ORION is designed for harsh environments:

      • Water resistant
      • Protected from dust ingress
      • Operating temperatures -10° to 60°C / 14° to 140°F

      Regulatory

      FCC/CE

      ORION is the only NLJD available that has FCC AND CE mark models, which is very important to ensure safe operation and legal use around the world. No other NLJD meets the regulatory standards of the ORION.

      There are many intangible benefits that come with the ORION — in-house manufacturing for reliable quality control, training, experienced sales and product support, just to name a few.  At the end of the day, it’s important to have the right NLJD that provides the highest probability for finding electronics.

      REI has released two new free online seminars:

      The Radio Frequency Fundamentals
      This seminar is an introduction to the world of RF, its characteristics and limitations. Highlighted in the presentation are:

      • Basic RF Theory
      • Applicable terminology
      • Frequency classifications
      • Modes of propagation and attenuation/signal path loss

      This seminar also pairs well with the Technical Threats seminar to continue growing awareness of security vulnerabilities. Intellectual property theft and illicit eavesdropping causes countries and businesses billions in damages.

      OSCOR® Data Viewer Seminar
      This is an intermediate seminar covering best practices and technical applications of the Data Viewer software for analysis and reporting. Operations covered in the OSCOR Data Viewer Seminar include:

      • Analyzing OSCOR Blue Trace Record Waterfall or OSCOR Green Spectrogram files
      • Understanding trace files – Peak/Average
      • Layering multiple trace files can be layered in one graph view for comparison
      • Reviewing Signal Lists

      For more information or to register for an upcoming Online Seminar, click here.

      REI Product Overview Video LinkA new product overview video is available on the REI YouTube® channel. Click here to view:
      https://youtu.be/Bi4R8Y2AOqM

      When you take the best features of a portable, handheld broadband RF detector (size, portability, utility) and combine them with the analysis capability of a spectrum analyzer, you get the MESA® – Mobility Enhanced Spectrum Analyzer. The MESA® is a compact, full-featured portable spectrum analyzer with physical search capability similar to a broadband receiver.

      Display
      The first thing you may notice about the MESA® is how easy it is to navigate. Once you get a feel for the menus, icons, buttons and the main screen controls on the 7” capacitive touch screen, it may seem like you have it all figured out, but really, you’ve only begun to scratch the surface. Beneath the user friendly display is a powerful palette of tools and functions to help identify and locate signals.

      MESA Deluxe Antennas/ProbesAntennas
      MESA® is available in a Basic and Deluxe package (see the Accessories comparison chart). The MESA® Deluxe includes six RF antennas. The Fixed Dipole and Whip Antenna, are uniquely designed hybrid antennas that include a circular dipole for a higher frequency, and a longer mass antenna for low-frequency signals. The Down Converter antenna is a directional antenna with a frequency range from 500MHz to 12GHz. Other antennas include a Locator Probe, VLF probe, and low-frequency directional antenna. The QMA antenna input allows for non-REI antennas to be connected.

      MESA®  also has a Multi-Carrier Probe (carrier current), Ultrasonic, IR/Visible light, Audio Transformer and Audio Leakage probe. MESA® automatically recognizes REI antennas and probes when connected and adjusts the frequency display.

      MESA Spectrum AnalysisOperation Modes – Spectrum Analysis
      MESA®, like the OSCOR®, is a portable swept-tuned super heterodyne spectrum analyzer that sweeps to 6GHz (12GHz with the Down Converter antenna included in the Deluxe model), at a speed of >200GHz per second at 312.5 kHz resolution bandwidth.

      The Resolution Bandwidth (RBW) auto-adjusts depending on the frequency span.
      • The narrower the span the finer the resolution bandwidth
      • The wider the span, the higher the sweep speed

      MESA® displays a full range of frequency data including span, start and stop frequencies, dB, RBW, Peak/Average Trace, Persistence Trace (below 200MHz spans), raster waterfall, RSSI, Alerts, and signal lists.

      A new patented Cached Peak feature, preserves and displays 312.5kHz and 39kHz resolution Cached Peak traces as the span is zoomed in to higher resolutions, enabling peaks obtained at previous resolution bandwidths to be seen.

      SmartBars™ – Mobile Bands – WiFi/Bluetooth®
      SmartBars™ is a new patented mode that quickly detects and locates RF energy by displaying a bar graph of new signals, or increased RF energy, compared to a reference trace from outside the target sweep area. SmartBars™ offers a Fast Scan and a Signal Resolution scan which creates a signal list of signals that exceed the user-defined threshold.



      Watch this video for an overview of how SmartBars™ works.


      Additional display modes include Mobile Bands displaying RF energy levels for multiple RF Bands (i.e. WiFi, GSM, etc.) on one screen. Each Band is customizable to user-defined spans. This mode is excellent for quickly searching for RF energy in specific spans.

      WiFi and Bluetooth® modes display nearby WiFi access points and Bluetooth® devices, relative signal strength, and links to the Spectrum View to view it in live frequency trace mode.

      The MESA® is a completely new product that complements REI’s existing RF products – ANDRE® and OSCOR®. With the complexity and sophistication of new threats, multiple RF detection tools are required. Here are some of MESA’S benefits:

      • Easy to use spectrum analyzer in a handheld package with touch screen controls
      • Portable: 5 x 8 x 2 inches; (12.7cm x 20.3cm x 5.08cm), 1.08kg
      • Sweep speed:  >200GHz/second at 312.5kHz resolution; 30GHz/second at 39kHz resolution
      • Quiet, flat noise floor with no internal spurious signals
      • Quick to deploy and easy to use and walk around with, for fast effective site surveys.
      • Patented SmartBars™ function to quickly and easily identify new signals using inside to outside comparison.
      • Mobile Bands function displays RF energy level in user-defined spans
      • Built in ITU database provides additional band information on detected signals

      Applications
      This fast, hand-held spectrum analyzer has operational capabilities suited for detecting illegal, disruptive, rogue transmissions across a wide frequency range and is ideal for:

      • Communication systems site surveys
      • RF emissions analysis
      • Wireless service providers and installers
      • Investigations of corrupt RF spectrum misuse
      • Security surveys for eavesdropping detection

      REI Online SeminarsWhen COVID brought travel to a halt in early 2020, REI had to cancel many of its training courses, but customer demand for product and TSCM information never diminished. Since change and adaptation became the theme for 2020, REI instructors began searching for different ways to stay connected and at least try to satisfy some of the appetite for information.

      REI customer feedback has always concluded that virtual training will never achieve the standard of in-person training for a number of reasons (hands-on access to equipment, live exercises, personal instruction, and networking). Under the present circumstances; however, virtual webinars can certainly provide value in the absence of in-person training.

      REI instructors developed a series of free online Zoom Seminars to provide an overview of products and popular TSCM topics which includes ANDRE; OSCOR; TALAN; ORION; GPS Tracking; Basic Telephony; Introduction to VoIP, with more to come. Each seminar is approximately 1 hour long with Q&A at the end. The format is informal and interaction is encouraged. Capacity is limited to ensure optimal participation, so early registration is recommended.

      In-person training courses have resumed, but REI plans to continue offering the online seminars. Schedule and registration information for online seminars and REI Training courses are available through the links below.

      The REI Training Center recently added a new Level 2 course for REI’s newest product: MESA® – Mobility Enhanced Spectrum Analyzer.

      The 5-day MESA® course will review radio frequency energy fundamentals. This module will further explore the basic characteristics of radio frequency (RF) energy and how it behaves in a normal environment. The purpose of this segment will be to build on the student’s knowledge of RF energy as it relates to spectrum analyzers. 

      Trainees will be introduced to the MESA by examining its technical specifications, operational features and function compared to other REI RF products – ANDRE and OSCOR. Modes and features to be examined in hands-on exercises include Spectrum Mode, the patented SmartBars™Mobile BandsWi-Fi and Bluetooth® 

      The Countermeasures Core Concepts course is a prerequisite to the MESA Course.  Schedule and registration for the MESA® training course is available here.

      7 Ways to Protect Your Equipment from Electrostatic Discharge (ESD).

      The weather is changing and cooler temperatures mean short days, cozy sweaters, and static electricity. Colder, drier air outside causes us to turn on heat indoors further lowering humidity, which adds to the conditions that promote static electricity.  Today’s electronic components and assemblies tend to be smaller more efficient, and also more delicate and sensitive to ESD and can be affected by even the smallest unseen, unfelt electrical charge. ESD can cause erratic operation, shortened electronic life expectancy, or catastrophic failure.

      At REI our production teams take extra precautions to prevent static electricity, and here are a few tips to keep your products functioning properly.

      1. Review the product user manual.
      2. Prep your work area – use a grounding work surface or mat when possible.
      3. Check the humidity levels of the environment you’re sweeping in, take extra ESD precautions when working in a dry environment.
      4. Transport and store the equipment in the original manufacturer’s case to prevent accidental ESD events.
      5. To discharge built up ESD on your person, touch a piece of metal before handling any electronic equipment.
      6. Practice social distancing – keep charged materials about a foot from your devices. Be aware of how close you’re keeping plastic, foam, scotch tape, and other materials that can build up a charge.
      7. Try not to overdrive your equipment inputs.

      Taking precautions for ESD can save time in your sweeps and money.

             

      REI and parent company HEICO completed acquisition of 2 partner companies in August, 2020: Transformational Security (“TS”) and Intelligent Devices (“ID”).

      ID, which was founded in 1995 by Edmund Pirali, and TS, which was founded in 2004 by Jon Whittingham, are leading security technology companies that design, develop, manufacture and support state-of-the-art detection and monitoring systems used to protect critical spaces from wireless transmission exploitation, technical surveillance, and listening devices. Their products include hardware and software which detect, identify and analyze an array of information and radio frequency security threats.

      Laurans A. Mendelson, HEICO’s Chairman and Chief Executive Officer, along with Victor H. Mendelson, HEICO’s Co-President and Chief Executive Officer of its Electronic Technologies Group, and Mr. Jones, jointly commented, “We welcome all of the Intelligent Devices and Transformational Security Team Members to our HEICO family. The crucial TSCM field provides vital equipment and services to keep sensitive information from reaching the wrong hands and we are excited about the potential for all of our companies to bring great products to our customers.”

      TS specializes in advanced technology supporting In-Place Monitoring Systems (IPMS), LPI/LPD detection challenges, frequency management, multi-mission collection operations, security modeling, security consulting, access control systems, SCIF and safe rooms, and technical security hardware and software.  ID provides state of the art audio solutions to the professional audio, government and law enforcement community.

      More information on TS and ID will be announced in future newsletter. Learn more about both companies  on their website.

      REI will be closed on the following dates:

      • Christmas – December 23 – 25
      • New Year’s – Jan 1st

      We wish all our friends, family and business relations a blessed Christmas and holiday season.