WebsiteGear Logo Log In
New User? Sign Up
About | Contact | FAQ
  Home News Technology Internet Security Wednesday, May 24, 2017 
Add Press Release News | News Feeds Feeds | Email This News Email

Turkish Journalists Acquitted After Six Years on Trial Based on Arsenal Consulting's Digital Forensics
Friday, April 14, 2017

Journalists Computers Ferociously Attacked Until Successfully Compromised

BOSTON, April 14, 2017 /PRNewswire/ -- An Istanbul court on April 12 ordered the acquittal of the 13 remaining defendants in the Odatv case. A fourteenth defendant, Ka?if Kozino?lu, who had been a senior intelligence officer at M?T, died while in custody. Odatv runs one of the most-popular news websites in Turkey and has a reputation for being critical of both the current government and its former allies associated with the Gülen movement. The Odatv defendants were accused of supporting the Ergenekon terrorist organization, an alleged secularist "deep state" in Turkey with ties to the military, academia, NGOs, and the media. Ergenekon's supporters were charged with plotting to overthrow the Turkish government.

What did Arsenal Consulting's ( digital forensics reveal?

Arsenal's rigorous analysis of electronic evidence in the Odatv case revealed evidence tampering that was missed, ignored, or misunderstood by many other digital forensics experts. Arsenal used a combination of techniques and tools developed in-house to determine how attackers placed crucial documents on Odatv journalists Bari? Pehlivan and Müyesser Yildiz's computers without their knowledge. In addition, Arsenal used the "Anchors in Relative Time" analysis technique to identify the remote access trojan Ahtapot - which had never been seen before or since in the wild. Finally, Arsenal determined that the attackers sent 420 emails in the operation targeting Odatv, but only 24 emails have been recovered from Mr. Pehlivan and Ms. Yildiz - leaving 396 (likely weaponized) emails and an unknown number of additional victims still unaccounted for.

What is Odatv defendant and investigative journalist Bari? Pehlivan saying?

"I am a journalist who spent 19 months in jail due to a conspiracy organized by a gang within the state of the Turkish Republic. Arsenal uncovered the fraudulent activity of this illegal organization, which imprisoned me by planting files on my computer. It assisted in my acquittal thanks to its detailed forensic analyses and extraordinary efforts. I thank Arsenal for once more proving that science will defeat lies."

Are there lessons to be learned from Arsenal's digital forensics?

When the stakes are high enough, digital forensics practitioners ought not be surprised that all the relevant timestamps within evidence have been forged. They should also be aware that merely determining malware was present within evidence is not enough to answer serious questions - to the best extent possible, they need to establish whether the malware was operational and what it actually did.

Did anyone stand up with Arsenal during the Odatv trial?

"I would like to thank a small group of people and companies who helped us, publicly or privately, when many others failed to - even after being made aware of the gravity of the situation," said Arsenal President Mark Spencer. "The people we owe a great deal of thanks include Gabor Szappanos, who helped us rip apart malware, and Joakim Schicht and Olof Lagerkvist, who helped us build and improve digital forensics tools."

How can people learn more about Arsenal's work?

A case study related to Arsenal's work in the Odatv case is in development on the Arsenal website at

About Mark Spencer

Mark Spencer is President of Arsenal Consulting, where he leads engagements involving digital forensics for law firms, corporations, and government agencies. Mark is also President of Arsenal Recon, where he guides development of digital forensics tools. Mark has more than 15 years of law-enforcement and private-sector digital forensics experience. He has led the Arsenal team on many high-profile and high-stakes cases, from allegations of intellectual property theft and evidence spoliation to support of foreign terrorist organizations and military-coup planning. Arsenal is headquartered in the Chelsea Naval Magazine, a historic military structure in which arms for the famous heavy frigate USS Constitution were stored, just outside Boston, Massachusetts.

Mark Spencer


Press release distributed by PRLog

To view the original version on PR Newswire, visit:

SOURCE Arsenal Consulting, Inc.

Email This News Email | Submit To Slashdot Slashdot | Submit To Digg | Submit To | News Feeds Feeds

Nav Frost & Sullivan Commends NFON's Exceptional Growth Strategies for the European Hosted IP Telephony and UCaaS Market | May 24, 2017
Nav At 26+% CAGR, Application Security Market Potentially Worth $9Bn by 2022 Led by North America | May 23, 2017
Nav Global Smart Doorbell Market 2017-2021: Increased Consumer Preference for Smart Locks & Growing Demand for Smart Homes and Development of Smart Cities - Research and Markets | May 19, 2017
Nav UV Disinfection Equipment Market - Global Industry Analysis, Size, Share, Growth, Trends and Forecast 2017 - 2025 | May 18, 2017
Nav Rural Texas Co-Op, BEC, Modernizes Electric Grid With Distribution Automation | May 18, 2017
Nav Spear Phishing Market Worth 1,401.6 Million USD by 2022 | May 17, 2017
Nav Are Smart Speakers the Trojan Horse for Widespread Smart Home Adoption? | May 17, 2017
Nav DocuSign Phishing Email Detected | May 17, 2017
Nav Targeted Victory Announces New Partnership With Global Payment Platform Stripe | May 16, 2017
Nav Retrium Raises $1M in Funding, Introduces Enterprise-Ready Solution for Agile Retrospectives | May 16, 2017

Submit News | View More News View More News