Some Excerpts. Original article here.
NEW DELHI — Key evidence against a group of Indian activists accused of plotting to overthrow the government was planted on a laptop seized by police, a new forensics report concludes, deepening doubts about a case viewed as a test of the rule of law under Prime Minister Narendra Modi.
An attacker used malware to infiltrate a laptop belonging to one of the activists, Rona Wilson, before his arrest and deposited at least 10 incriminating letters on the computer, according to a report from Arsenal Consulting, a Massachusetts-based digital forensics firm that examined an electronic copy of the laptop at the request of Wilson’s lawyers.
Many of the activists have been jailed for more than two years without trial under a stringent anti-terrorism law. Human rights groups and legal experts consider the case an attempt to suppress dissent in India, where government critics have faced intimidation, harassment and arrest during Modi’s tenure.
Arsenal’s report on the Indian case does not identify the perpetrator of the cyberattack. The analysis, which has not been previously reported, was reviewed by The Washington Post. Three outside experts who reviewed the document at The Post’s request said the report’s conclusions were valid.
Sudeep Pasbola, a lawyer representing Wilson, said the Arsenal report proved his client’s innocence and “destabilizes” the prosecution case against the activists. On Wednesday, Wilson’s lawyers included the report in a petition filed in the High Court of Bombay urging judges to dismiss the case against their client.
“This is one of the most serious cases involving evidence tampering that Arsenal has ever encountered,” the report said, citing the “vast timespan” — nearly two years — between the time the laptop was first compromised and the moment the attacker delivered the last incriminating document.
Arsenal has so far conducted its work on the report on a pro bono basis, said Mark Spencer, the firm’s president. The company was founded in 2009 and has performed digital forensic analysis in other high-profile cases, including the Boston Marathon bombing.
The case against the Indian activists has drawn criticism from rights groups and experts. A spokeswoman for the U.N. high commissioner for human rights recently urged the Indian authorities to release the detained activists. Earlier U.N. experts called the accusations a “pretext” aimed at silencing defenders of marginalized groups. The American Bar Association has also expressed concern about the case, and its human rights initiative helped Wilson’s lawyers facilitate the review of the digital evidence.
Arsenal’s report gives a detailed account of the cyberattack. One afternoon in June 2016, it said, Wilson received several emails that appeared to be from a fellow activist he knew well. The friend urged him to click on a link to download an innocuous statement from a civil liberties group. Instead, the report says, the link deployed NetWire, a commercially available form of malicious software that allowed a hacker to access Wilson’s device.
Arsenal discovered records of the malware logging Wilson’s keystrokes, passwords and browsing activity. It also recovered file system information showing the attacker creating the hidden folder to which at least 10 incriminating letters were delivered — and then attempting to conceal those steps. The letters were created using a newer version of Microsoft Word that did not exist on Wilson’s computer, the report said. Arsenal found no evidence that the documents or the hidden folder were ever opened.
Spencer, Arsenal’s president, called the attack “very organized” and “extremely dark” in intent. Arsenal has spent more than 300 hours analyzing the laptop’s contents, he said.
The case against the activists has its origins in events that unfolded on Jan. 1, 2018, in a village known as Bhima Koregaon in western India. That day marked the 200th anniversary of a colonial-era battle that many Dalits view as a victory over their oppressors in India’s caste system. The annual commemoration turned hostile as Hindu nationalist groups and Dalits clashed. One person was killed.
After three years of investigation, the charging documents in the case now run to more than 17,000 pages. They cite both digital evidence and accounts by witnesses, who allege that some of the activists were members of the banned Communist Party of India (Maoist), a group that has fought an armed insurgency against the government for decades. Most of the accounts are not sworn testimony and none have been tested in court, defense lawyers have pointed out.
Meanwhile, judges have rejected bail applications for the activists. Nearly all of the 16 accused have remained imprisoned throughout the pandemic, even as India temporarily released thousands of other prisoners because of worries about rising infections. Several of the activists are senior citizens with serious health ailments, their friends and family say; one, a Jesuit priest named Stan Swamy, 83, suffers from Parkinson’s disease.
Poet Varavara Rao, 80, is another of the imprisoned activists. His health has deteriorated in jail and he became incoherent last summer, his family said. He also contracted the coronavirus and repeatedly had to be transferred to the hospital because of other health complications. Rao remains hospitalized, and his family says his life will be in danger if he returns to prison.
Sudha Bharadwaj, a labor lawyer and activist who gave up her American citizenship after returning to India to work for the rights of tribal communities, has spent more than two years behind bars.
Family members of the defendants want their relatives to be released on bail while they fight what they say are false charges against them. Bharadwaj’s daughter Maaysha Nehra, 23, said she fears for her mother’s physical and mental health. Bharadwaj suffers from diabetes, high blood pressure and arthritis.
On a recent call, Bharadwaj sounded despondent for the first time since her arrest, her daughter said. Bharadwaj tries “to understand everybody and cope with things, but sometimes it is very, very difficult for her,” Nehra said. “How can you just keep a person like that when you don’t have proof?”