Stan Swamy's laptop was hacked and evidence planted: US lab report

Over a year after tribal rights activist and Jesuit priest Fr Stan Swamy died in detention, a US-based digital forensics firm has claimed that an examination of an electronic copy of his computer revealed that a hacker infiltrated the device and planted evidence.

According to the report by Arsenal Consulting based in  Massachusetts, this analysis is a proof that Swamy and his co-defendants were framed in a case.

The findings will counter the National Investigation Agency (NIA)'s charges against Stan Swamy that he made electronic correspondence with Maoist leaders. Swamy was arrested on October 8, 2020, for his alleged involvement in the Elgar Parishad case and charged with several sections of the Indian Penal Code and Unlawful Activities Prevention Act in the Bhima Koregaon caste violence case.

Arsenal investigated Swamy's laptop at the request of his lawyers. The report added that Swamy was the target of an extensive malware campaign for nearly five years, the longest known for any defendant. It continued until his device was seized by police in June 2019. 

"During that period, the hacker gained full access and had complete control over his computer, dropping dozens of files into a hidden folder without his knowledge," said the report, according to The Washington Post.

The unknown cyber attacker planted 44 documents in Swamy's laptop. The media firm also reviewed the report with the aid of two digital forensic experts, who said its conclusions were sound. 

The Arsenal report added that Swamy’s laptop was infected beginning in October 2014 with NetWire, a malware that can upload and download files from a target’s computer, log keystrokes and access emails and passwords.

The documents were planted first in July 2017, and it went on for two years. Swamy, unaware of the documents, never opened them. One such document, which has been listed by the NIA in the chargesheet against Swamy, was an alleged letter sent by one "SS"  to a "Vijayan Dada." In the letter "SS" is asks "Vijayan" to take action "to capture senior leaders of ruling BJP in the state and demand that the oppressive laws be done with."

There is also another document that talks about the manpower and weaponry of a Maoist outfit called the People's Liberation Guerilla Army.

Interestingly, hours before Swamy's computer was seized by the police, on the night of June 11, 2019, the hacker performed a "cleanup" of their activities, hinting that they were aware of the possible police action.

The digital forensic firm has also published screenshots of the raw data recovered from Swamy’s computer which throws light on the hacker's activities, including the command used to delete the folder.

The same hacker had targeted Swamy’s co-defendants, activist Rona Wilson and lawyer Surendra Gadling too. While 30 documents were planted on the computer belonging to Wilson, at least 14 incriminating letters were on Gadling's computer.

Swamy, one of the oldest prisoners in the jail, had approached court seeking bail but NIA opposed his application.