Rui Pinto’s lawyers filed a request in court this Wednesday asking for clarification with “formal and legal evidence” of the constitution and relations between the different companies linked to the Doyen investment fund.
At the end of the 36th session of the trial of the ‘Football Leaks’ case, at the Central Court of Criminal Instruction, in Lisbon, lawyer Francisco Teixeira da Mota stressed the need to “unequivocally clarify” this situation, given the reference to several entities within the Doyen universe, such as Doyen Capital, and the assistant in the process is Doyen Sports Investment, which asked for five days to comment on this application.
The hearing was filled exclusively with the hearing by videoconference of Jake Hockley, a cybersecurity consultant for the company Marclay Associates, hired by the investment fund to investigate the intrusion in the computer system in September 2015. Throughout the testimony, the English expert said that sent to the Judiciary Police all the information on which the report was based.
The court then understood that additional information to that in the case was at stake and asked Jake Hockley to bring to the file a CD with all the data mentioned during the hearing, including the records of attempts to access the TeamViewer computer program in a Doyen computers, where an IP from Hungary was detected.
During the inquiry conducted by representatives of the creator of Football Leaks, the cybersecurity consultant said that the investigation into the intrusion into Doyen’s IT structure was focused only on the offices in London and that no inquiry was conducted at the investment fund’s delegation in Malta .
Asked whether the attack was carried out over the London offices’ own Wi-Fi network, Jake Hockley dismissed this scenario: “Forensic evidence shows that access was done remotely and that the Wi-Fi network was not compromised” .
In the first part of the hearing, Jake Hockley assumed that there was no definitive forensic evidence about the author of the intrusion, but he reiterated that all evidence and description of the cyber attack point to the authorship of a single person and that the origin of an attempt was detected. attacks with IP in Hungary.
“There is no evidence in this process that says it was just one person, but it was a sequence of events and not separate events, which were linear, started at a Hungarian IP and ended up in full access to the server,” said the expert, adding: “Never I saw an event like this that had been done by different people. Considering the probabilities and coincidences, it doesn’t seem to me that there are several separate attacks, it seems to me to be a single attack. If it was done by one or more people, there is no technical evidence. it’s just an attack.”
According to the witness, the attack started on September 20, 2015 and was based on a first attempt to enter by an IP from Hungary through the TeamViewer software, which was not successful. Later, the person responsible for the attack will have been able to access access credentials, which allowed him to discover a document with all Doyen’s passwords and usernames, achieving administrator privileges.
“If this document were found, I would have access to practically everything. We don’t know if there was a download, but there was an access”, he observed, underlining: “It seems to me that Adam Gomes [anterior técnico informático da Doyen até ao início de 2015] I had made a kind of continuation protocol so that the person who came next would have easy access to the company’s systems. For a hacker, this is a dream come true,” he explained.
Jake Hockley then revealed that automatic forwarding procedures for emails from servers associated with Doyen have been changed and that a Russian-dominated email account has been created. [[email protected]] to receive the forwarding. At the same time, an email was also created for Doyen’s printer service in London, which provided access to all scanned documents.
The trial continues this Thursday, from 9:30 am, with the hearing of the first witnesses listed by the defense of Rui Pinto, namely António Varela, Nuno Ferreira, Edwy Plenel, Francisco Louçã and Álvaro Bernardino.
Rui Pinto, 32, is responsible for a total of 90 crimes: 68 of improper access, 14 of violation of correspondence, six of illegitimate access, targeting entities such as Sporting, Doyen, the law firm PLMJ, the Portuguese Federation of Football (FPF) and the Attorney General’s Office (PGR), and also for computer sabotage to Sporting’s SAD and extortion, as attempted. This last crime concerns Doyen and it was also what led to the prosecution of lawyer Aníbal Pinto.
The creator of Football Leaks has been at large since August 7, “due to his collaboration” with the Judiciary Police (PJ) and his “critical sense”, but he is, for security reasons, included in the protection program for witnesses in an undisclosed location and under police protection.
.
