Inside a Syrian Interrogation Room: The Detainee Files an Infostealer Stole From a Military Police Unit
Brief
A single malware infection on one senior officer’s computer exposed the active caseload of a Syrian National Army military police unit – seven interrogation records, complete with detainee photographs, family maps, and fingerprinted confessions. Among them: an alleged espionage network , a smuggling ring run by serving soldiers, and one statement that exists in two different versions.
Figure 1: One of the recovered files, taken from Hudson Rock’s Cavalier platform. The red-bordered form is headed ضبط تحقيق أولي (“Preliminary Interrogation Record”) and carries the Military Police crest, the unit’s letterhead, and the detainee’s own ID photograph. This document runs to six pages. The detainee’s name and face have been redacted by Hudson Rock; they are not redacted in the original file.