NewsClick

NewsClick
  • हिन्दी
  • Politics
  • Economy
  • Covid-19
  • Science
  • Culture
  • India
  • International
  • Sports
  • Articles
  • Videos
search
menu

INTERACTIVE ELECTION MAPS

image/svg+xml
  • All Articles
  • Newsclick Articles
  • All Videos
  • Newsclick Videos
  • हिन्दी
  • Politics
  • Economy
  • Science
  • Culture
  • India
  • Sports
  • International
  • Africa
  • Latin America
  • Palestine
  • Nepal
  • Pakistan
  • Sri Lanka
  • US
  • West Asia
About us
Subscribe
Follow us Facebook - Newsclick Twitter - Newsclick RSS - Newsclick
close menu
×
For latest updates on nCOVID-19 around the world visit our INTERACTIVE COVID MAP
Politics
India

Bhima Koregaon: Forensic Report Finds Malware Use to Plant Evidence Against Jailed Activists

After the US firm’s report was made public by the Washington Post,  Wilson’s lawyer Sudeep Pasbola filed a petition in the Bombay High Court on Wednesday seeking dismissal of the case against him, according to an ANI report.
Newsclick Report
10 Feb 2021
Bhima Koregaon Case

New Delhi: In a damning new report, a US-based digital forensics firm has found that “incriminating” evidence using malware was planted in a laptop of activist Rona Wilson by the police probing the Bhima Koregaon case. Wilson is among a group of 15 activists, lawyers and academics, who have been jailed in Maharashtra after being accused of having ‘Maoist’ links, following the violence that took place on January 1, 2018 and an alleged plot to assassinate prime minister Narendra Modi.

Citing the report by Arsenal Consulting, the Washington Post said the US forensic firm “found that an attacker used malware to infiltrate a laptop belonging to activist Rona Wilson before his arrest and deposited at least 10 incriminating letters on his computer,” reports Scroll-in.

It is these letters that the Pune Police used as its primary evidence in the chargesheet they filed in the Bhima Koregaon case.

Incidentally, the Bhima Koregaon case,  was taken over from the Pune Police and handed over to the central National Investigation Agency or NIA in January last year after the Bharatiya Janata Party  (BJP) lost the Maharashtra Assembly polls. BJP is ruling the central government and the NIA falls under the Ministry of Home Affairs, headed by minister Amit Shah.

 Read Also: Centre-State Fireworks in Offing After NIA Takes Over Bhima Koregaon Case

“The report also found that among these 10 letters was one that the police claimed Wilson had written to a Maoist militant, discussing the need for guns and ammunition as part of an intricate Maoist conspiracy, and even urging the banned group to assassinate Prime Minister Narendra Modi. The report found the letters had been planted in a hidden folder on Wilson’s laptop,” said the Scroll report.

After the US firm’s report was made public by the Washington Post,  Wilson’s lawyer Sudeep Pasbola filed a petition in the Bombay High Court on Wednesday seeking dismissal of the case against him, according to an ANI report.

Pasbola has attached the report by Massachusetts-based forensic firm Arsenal Digital, which was approached by him to examine the electronic copy of his client's laptop, said ANI.

However, the forensic report did not identify the perpetrator of the hacker, but noted that Wilson was not the only victim.

“The same attacker deployed some of the same servers and IP addresses to target other accused in the case over a period of four years, it stated. The accused in other “high-profile Indian cases” were also targeted, the report said.

Modus Operandi

Raising serious questions over the “fairness” of the probe, the US forensic report also mentions that Wilson’s laptop was compromised “for just over 22 months”, adding that the hackers’ primary goals were “surveillance and incriminating document delivery”.

“This is one of the most serious cases involving evidence tampering that Arsenal has ever encountered,” the report said, citing the vast time span between the time the laptop was first compromised and the moment the attacker planted the last incriminating document, reports Scroll.in.

According to the Arsenal report, Wilson’s laptop was compromised in June 2016, after a series of suspicious emails from someone using 80-year-old poet-activist and co-accused Varavara Rao’s account.

“During the course of the conversation, the person using Rao’s account made multiple attempts to get Wilson to open a particular document, which was a link to download a statement from a civil liberties group,” said the report.

When Wilson complied, the link deployed NetWire, a commercially available form of malware that allowed a hacker to access Wilson’s device, the report said.

NetWire malware can easily be procured for $10 and the Netherlands-based company also provides an easy guide to use the malware, said the report.

According to the Washington Post, Arsenal discovered records of the malware logging Wilson’s keystrokes, passwords and browsing activity, and also recovered file system information showing the attacker creating the hidden folder to which at least 10 incriminating letters were planted.

These letters were created using a newer version of Microsoft Word that did not exist on Wilson’s computer, the forensic report said.

Arsenal report said it also found no evidence that the documents or the hidden folder were ever opened.

Commenting on the Bhima Koregaon report, Mark Spencer, the Arsenal President, tweeted: “My team has worked relentlessly on the massive volume of electronic data provided to us in the Bhima Koregaon case, and I believe we have set an extremely high bar for the practice of digital forensics in the future...”

A brief statement from Arsenal President Mark Spencer regarding Report I in the Bhima Koregaon case. #DFIR pic.twitter.com/UHiSK2YYXm

— Arsenal Consulting (@ArsenalArmed) February 10, 2021

As per a report in TheWire, Spencer said they had been approached by Wilson’s defence team to the examine the electronic evidence on July 31, 2020.

 “The attacker responsible for compromising Wilson’s laptop had extensive resources including time and it is obvious that their primary goals were surveillance and incriminating document delivery,” the report concludes.

Government sources, however, denied the Washington Post report that evidence was “planted”.

An NIA official told Times of India that the report of Arsenal Consulting was as “attempt to tarnish the investigation and the evidence collected.” He stated that there was nothing to suggest in the Pune FSL report that evidence was planted or the accused Rona Wilson’s device was “compromised.”

Read Also:Bhima Koregaon: NIA Files Charge-Sheet Against Eight Including Stan Swamy, Gautam Navlakha

The Bhima Koregaon case, as per NIA, relates to the accused “inciting people and giving provocative speeches” during an Elgar Parishad event organised by the Kabir Kala Manch at Shaniwarwada in Pune on December 31, 2017, which the NIA claims “promoted enmity between various caste groups and led to violence resulting in loss of life and property and state-wide agitation in Maharashtra”.

Among the activists arrested, jailed and denied bail are lawyer Sudha Bharadwaj, poet-activist Varavara Rao, Sudhir Dhawale, Rona Wilson, Surendra Gadling, Shoma Sen, Mahesh Raut, Arun Fereira, Vernon Gonsalves, Hany Babu, Stan Swamy, Anand Teltumbde, Gautam Navlakha.

Get the latest reports & analysis with people's perspective on Protests, movements & deep analytical videos, discussions of the current affairs in your Telegram app. Subscribe to NewsClick's Telegram channel & get Real-Time updates on stories, as they get published on our website.
Bhima Koregaon Case
Elgar Parishad
Pune Police
US Forensic Report
Rona Wilson
Malware
Planted Evidence
Arsenal Consuting
NIA
Related Stories
Akhil Gogoi Alleges Torture in Custody, Claims NIA Offered Bail if he Joins RSS, BJP

Akhil Gogoi Alleges Torture in Custody, Claims NIA Offered Bail if he Joins RSS, BJP

Former civil servants urge Govt to bring legislative changes to prevent “planting” of incriminating material

Former Civil Servants Urge Govt to Bring Legislative Changes to Prevent “Planting” of Incriminating Material

varavar rao released on medical bail

Free at Last on Medical Bail; Telugu Poet Varavara Rao is Released from Judicial Custody

Gautam Navlakha

SC Agrees to Hear Gautam Navlakha’s Plea, Sends Notice to NIA

Daily Round Up Feb 22

Varavara Rao gets Bail, Farmers' Protest Strengthened and more

conpiracy

Have We Seen the Last of Conspiracies?

Rona Wilson

Bhima Koregaon: Activists and Politicians Demands Special Probe after Revelation

Rights Activist Gautam Navlakha Sent in Judicial Custody

Bhima Koregaon: Bombay HC Rejects Navlakha’s Default Bail Plea

NIA Farmers

NIA Using ‘Khalistani’ Theory to Derail Protests, Not Sparing Journos, Say Farmers

COVID-19 Dampens Jan 1 Celebration at Bhima Koregaon, Few Hundreds Attend with Limited Passes

COVID-19 Dampens Jan 1 Celebration at Bhima Koregaon, Few Hundreds Attend with Limited Passes

Share on FacebookShare on TwitterShare on WhatsAppShare via EmailShare on RedditShare on KindlePrint
Share
Share on FacebookShare on TwitterShare on WhatsAppShare via EmailShare on RedditShare on KindlePrint
Share

Related Stories

Prudhviraj Rupavath

Civil Society Condemns NIA Raids on Activists in Andhra Pradesh, Telangana

02 April 2021
Hyderabad: On March 31, National Investigation Agency (NIA) officials conducted raids at 31 residents of human rights activists, l
PTI

Bhima Koregaon Case: SC Reserves Verdict on Bail Plea of Activist Gautam Navlakha

26 March 2021
New Delhi:
Anees Zargar

‘Nothing to Hide,’ Says Former CM Mehbooba Mufti after ED Questioning

25 March 2021
Srinagar: Former Jammu and Kashmir chief minister and Peoples Democrati

Pagination

  • Next page ››

More

  • 4 Muslim Men Arrested in Bhopal for Protest Against Yati Narsinghanand

    MP: 4 Muslim Men Arrested in Balaghat for Protest Against Yati Narsinghanand’s Remarks

  • Bengal Elections: 4 Killed in Firing by Central Forces in Cooch Behar, EC Stops Polling at Sitalkuchi

    Bengal Elections: 4 Killed in Firing by Central Forces in Cooch Behar, EC Stops Polling at Sitalkuchi

  • Stalled at First Jab? 60 Countries Hit by Vaccine Shortages, Some of Them Poorest Ones

    Stalled at First Jab? 60 Countries Hit by Vaccine Shortages, Some of Them Poorest Ones

  • Supreme Court of India.

    SC Rules Payment of Extortion Money Does Not Amount to Terror Funding

  • Load More
Subscribe
connect with
about