WebsiteGear Logo Log In
New User? Sign Up
About | Contact | FAQ
  Home News Technology Internet Security Saturday, June 24, 2017 
Add Press Release News | News Feeds Feeds | Email This News Email

Turkish Journalists Acquitted After Six Years on Trial Based on Arsenal Consulting's Digital Forensics
Friday, April 14, 2017

Journalists Computers Ferociously Attacked Until Successfully Compromised

BOSTON, April 14, 2017 /PRNewswire/ -- An Istanbul court on April 12 ordered the acquittal of the 13 remaining defendants in the Odatv case. A fourteenth defendant, Ka?if Kozino?lu, who had been a senior intelligence officer at M?T, died while in custody. Odatv runs one of the most-popular news websites in Turkey and has a reputation for being critical of both the current government and its former allies associated with the Gülen movement. The Odatv defendants were accused of supporting the Ergenekon terrorist organization, an alleged secularist "deep state" in Turkey with ties to the military, academia, NGOs, and the media. Ergenekon's supporters were charged with plotting to overthrow the Turkish government.

What did Arsenal Consulting's ( digital forensics reveal?

Arsenal's rigorous analysis of electronic evidence in the Odatv case revealed evidence tampering that was missed, ignored, or misunderstood by many other digital forensics experts. Arsenal used a combination of techniques and tools developed in-house to determine how attackers placed crucial documents on Odatv journalists Bari? Pehlivan and Müyesser Yildiz's computers without their knowledge. In addition, Arsenal used the "Anchors in Relative Time" analysis technique to identify the remote access trojan Ahtapot - which had never been seen before or since in the wild. Finally, Arsenal determined that the attackers sent 420 emails in the operation targeting Odatv, but only 24 emails have been recovered from Mr. Pehlivan and Ms. Yildiz - leaving 396 (likely weaponized) emails and an unknown number of additional victims still unaccounted for.

What is Odatv defendant and investigative journalist Bari? Pehlivan saying?

"I am a journalist who spent 19 months in jail due to a conspiracy organized by a gang within the state of the Turkish Republic. Arsenal uncovered the fraudulent activity of this illegal organization, which imprisoned me by planting files on my computer. It assisted in my acquittal thanks to its detailed forensic analyses and extraordinary efforts. I thank Arsenal for once more proving that science will defeat lies."

Are there lessons to be learned from Arsenal's digital forensics?

When the stakes are high enough, digital forensics practitioners ought not be surprised that all the relevant timestamps within evidence have been forged. They should also be aware that merely determining malware was present within evidence is not enough to answer serious questions - to the best extent possible, they need to establish whether the malware was operational and what it actually did.

Did anyone stand up with Arsenal during the Odatv trial?

"I would like to thank a small group of people and companies who helped us, publicly or privately, when many others failed to - even after being made aware of the gravity of the situation," said Arsenal President Mark Spencer. "The people we owe a great deal of thanks include Gabor Szappanos, who helped us rip apart malware, and Joakim Schicht and Olof Lagerkvist, who helped us build and improve digital forensics tools."

How can people learn more about Arsenal's work?

A case study related to Arsenal's work in the Odatv case is in development on the Arsenal website at

About Mark Spencer

Mark Spencer is President of Arsenal Consulting, where he leads engagements involving digital forensics for law firms, corporations, and government agencies. Mark is also President of Arsenal Recon, where he guides development of digital forensics tools. Mark has more than 15 years of law-enforcement and private-sector digital forensics experience. He has led the Arsenal team on many high-profile and high-stakes cases, from allegations of intellectual property theft and evidence spoliation to support of foreign terrorist organizations and military-coup planning. Arsenal is headquartered in the Chelsea Naval Magazine, a historic military structure in which arms for the famous heavy frigate USS Constitution were stored, just outside Boston, Massachusetts.

Mark Spencer


Press release distributed by PRLog

To view the original version on PR Newswire, visit:

SOURCE Arsenal Consulting, Inc.

Email This News Email | Submit To Slashdot Slashdot | Submit To Digg | Submit To | News Feeds Feeds

Nav Essential Auto Insurance Policies to Consider for Extra Financial Security | Jun 23, 2017
Nav Foscam Releases Firmware Update And Offers Top 5 Security Tips For Consumers Using IP Cameras | Jun 22, 2017
Nav Declared Best Wine Website Worldwide | Jun 22, 2017
Nav ESG's Anti-Malware Product, SpyHunter®, Receives Favorable Review from AV-Comparatives | Jun 22, 2017
Nav Auto Insurance Offers Essential Financial Protection for Car Accidents | Jun 22, 2017
Nav Intelius® Ranked in Top 50 Overall for Excellence in Website Security and Privacy Among OTA Members | Jun 21, 2017
Nav ZingBox Addresses Cyber Threat from 'Hidden Cobra' | Jun 21, 2017
Nav Comodo Announces Former White House CIO Carlos Solari as New VP of Cyber Security Services | Jun 21, 2017
Nav Business Alert: Show them who's the boss - shut down the fake CEO scam | Jun 21, 2017
Nav Manned Security Services Market in the Middle East to Grow at a CAGR of 7.6% by 2021 - Increasing Focus on Developing Infrastructure - Research and Markets | Jun 21, 2017

Submit News | View More News View More News