Anchored Narratives / by RJM

How proper file, malware, and memory forensics techniques were able to catch the ModifiedElephant threat actor planting incriminating evidence on defendants’ computers in India.
I agreed in late 2022 to independently review a new digital forensics report from Arsenal Consulting (hereafter: Arsenal), which was still under embargo. Niha Masih, an award-winning reporter with The Washington Post, reached out to me in early December and explained that she had written a series of articles (based on Arsenal reports) about Indian activists in the “Bhima Koregaon” case who were hacked and had evidence planted on their devices before their arrests. Niha asked if I would be able to validate Arsenal’s work.
Read more

---

Also read:
● Hackers Planted Files to Frame an Indian Priest Who Died in Custody (Wired / Dec 13, 2022)
● Police Linked to Hacking Campaign to Frame Indian Activists (Wired.com / June 2022)
● They were Accused of plotting to overthrow the Modi government – The evidence was planted, a new report says (Washington Post / Feb 2021)