More stories

  • in

    Defense Team for Democratic-Linked Lawyer Won’t Call Ex-Times Reporter to Testify

    Lawyers had argued that the reporter, Eric Lichtblau, should testify about his communications with their client, Michael Sussmann, who is accused of lying to the F.B.I.WASHINGTON — The defense team for Michael Sussmann, a lawyer with ties to Hillary Clinton’s presidential campaign, has dropped its plans to call a former New York Times reporter to testify in a trial that centers on Mr. Sussmann’s motives in meeting with the F.B.I. in 2016.Testimony in the case has underlined the role the news media played during the bare-knuckle fight between Mrs. Clinton and Donald J. Trump in the 2016 presidential election, particularly as suspicions about Mr. Trump’s possible ties to Russia grew.Mr. Sussmann’s lawyers had argued that the former Times reporter, Eric Lichtblau, should testify about his communications with Mr. Sussmann over odd internet data that cybersecurity researchers said could be covert communications between the Trump Organization and Alfa Bank, a Kremlin-affiliated bank.A special counsel, John H. Durham, has accused Mr. Sussmann of lying to the F.B.I. about his reason for meeting with a top bureau official at the time, James Baker, to convey that information, by saying he was not there on behalf of any client. Prosecutors contend he was in fact representing the Clinton campaign and a technology executive who worked with the researchers.Defense lawyers have argued that Mr. Sussmann represented the campaign in efforts to get reporters to write articles about the Alfa Bank suspicions, but not when he approached the F.B.I. about the data and his belief that a news article about it would soon be published.In his testimony last week, Mr. Baker said that the prospect of an imminent article led him to fear that the F.B.I. would not have time to investigate the possibility of a secret channel before the participants read the news and shut it down. But a week later, when he asked Mr. Lichtblau to delay, he said the reporter indicated that an article was not yet ready to publish.The Times published an article that mentioned the Alfa Bank matter about six weeks later, but it said the F.B.I. “ultimately concluded that there could be an innocuous explanation.”Prosecutors have insinuated that Mr. Sussmann sought to prompt an F.B.I. investigation so reporters would write articles about it, while defense lawyers have argued that he went to the bureau only when he believed an article was imminent.“The defense’s theory is that the story was going to come out, or was likely to come out, or was close to coming out; and Mr. Sussmann wanted to give a heads-up,” Sean Berkowitz, Mr. Sussmann’s lawyer, told the court on Monday.Mr. Lichtblau’s testimony could have shed light on what he told Mr. Sussmann regarding how soon an article might be published before he sought the F.B.I. meeting.Mr. Lichtblau apparently consented to testify as a defense witness about the narrow topic of his interactions with Mr. Sussmann. But a dispute arose over whether prosecutors could ask him about other sources during cross-examination.Late Tuesday, Mr. Sussman’s defense team withdrew its subpoena for Mr. Lichtblau’s testimony without stating a reason. A lawyer for Mr. Lichtblau declined to comment.The Sussmann trial, which began on May 16, is the first case to be developed by Mr. Durham, a special counsel appointed during the Trump administration by Attorney General William P. Barr to examine the origins of the F.B.I.’s investigation into ties between Mr. Trump and Russia.But the Alfa Bank matter was tangential to the official investigation. Trial testimony has shown that F.B.I. agents swiftly dismissed the suspicions as implausible.Mr. Durham’s prosecutors have accused Mr. Sussmann of trying to persuade the F.B.I. to investigate Mr. Trump over his ties with Russia, to facilitate negative coverage about Mrs. Clinton’s rival and disseminate unsubstantiated claims before the election.At the trial on Wednesday, prosecutors wrapped up their case by introducing a stack of written documents, including records from Mr. Sussmann’s law firm that showed he billed many hours on the Alfa Bank matter to the Clinton campaign.Defense lawyers sought to raise doubts. They emphasized that Mr. Sussmann’s billing of several hours on apparent Alfa Bank matters the day of the F.B.I. meeting did not mention the F.B.I. or a meeting, as was his habit for other such meetings. They also pointed out that he when he expensed taxis for the meeting, he charged them to the firm, not any client. More

  • in

    Trump-Era Prosecutor’s Case Against Democratic-Linked Lawyer Goes to Trial

    The first case developed by the special counsel, John Durham, involves a lawyer who is accused of lying when he shared a tip with the F.B.I. about possible links between Donald J. Trump and Russia.WASHINGTON — When the Trump administration assigned a prosecutor in 2019 to scour the Russia investigation for any wrongdoing, President Donald J. Trump stoked expectations among his supporters that the inquiry would find a “deep state” conspiracy against him.Three years later, the team led by the special counsel, John H. Durham, on Monday will open the first trial in a case their investigation developed, bringing before a jury the claims and counterclaims that surrounded the 2016 presidential campaign. But rather than showing wrongdoing by the F.B.I., it is a case that portrays the bureau as a victim.The trial centers on whether Michael Sussmann, a cybersecurity lawyer with ties to Democrats, lied to the F.B.I. in September 2016, when he relayed suspicions about possible cyberconnections between Mr. Trump and Russia. The F.B.I. looked into the matter, which involved a server for the Kremlin-linked Alfa Bank, and decided it was unsubstantiated.In setting up the meeting, Mr. Sussmann had told an F.B.I. official that he was not acting on behalf of any client. Prosecutors contend he concealed that a technology executive and the Hillary Clinton campaign were his clients to make the allegations seem more credible.The defense argues that Mr. Sussmann was not acting on their behalf at the meeting. The F.B.I. was aware that he had represented Democrats on matters related to Russia’s hacking of their servers, and subsequent communications made clear that he also had a client who had played a role in developing the data analysis concerning Alfa Bank, his lawyers say.While the charge against Mr. Sussmann is narrow, Mr. Durham has used it to release large amounts of information to insinuate that there was a broad conspiracy involving the Clinton campaign to essentially frame Mr. Trump for colluding with Russia.That insinuation also hangs over the other case Mr. Durham has developed, which is set to go to trial later this year. It accuses a researcher for the so-called Steele dossier — a since-discredited compendium of opposition research about purported links between Mr. Trump and Russia — of lying to the F.B.I. about some of his sources.Both cases have connections with the law firm Perkins Coie, where Mr. Sussmann worked then. One of his partners, Marc Elias, was the general counsel of the Clinton campaign and had commissioned opposition research that led to the Steele dossier.The Alfa Bank allegations and the Steele dossier were largely tangential to the official investigation into whether there was collusion between Russia and the Trump campaign. F.B.I. officials had opened that investigation on other grounds, and the special counsel who completed the inquiry, Robert S. Mueller III, did not rely on either in his final report.(His report detailed “numerous links between the Russian government and the Trump campaign,” but he did not charge any Trump associate with a criminal conspiracy with Russia.)But supporters of Mr. Trump have rallied around Mr. Durham’s narrative, which resonates with Mr. Trump’s oft-repeated claim that the entire Russia investigation was a “hoax.”Defense lawyers for Mr. Sussmann have also rejected prosecutors’ broader insinuations about the constellation of events that led to his indictment, accusing the Durham team of fueling politicized conspiracy theories.Against that backdrop, much of the pretrial jostling has centered on how far afield prosecutors may roam from the core accusation. Judge Christopher Cooper of the Federal District Court for the District of Columbia, an Obama appointee, has imposed some limits on what Mr. Durham’s team may present to the jury.Through his court filings, Mr. Durham and his team have signaled that they suspect that the Alfa Bank data or analysis may have been faked, even though they were unable to prove it.But the judge barred Mr. Durham from presenting evidence or arguments along those lines, saying that unless there was proof Mr. Sussmann had reason to doubt the data when it was brought to him, there should not be “a time-consuming and largely unnecessary mini-trial to determine the existence and scope of an uncharged conspiracy.”Still, the judge has given prosecutors broader latitude to call witnesses associated with the Clinton campaign, including Mr. Elias and Robby Mook, the campaign manager.The Alfa Bank issue traces back to the spring of 2016, when it came to light that Russia had hacked Democrats.That summer, as suspicions escalated about Mr. Trump’s relationship with Moscow, a group of data scientists identified odd internet data that appeared to link servers for the Trump Organization to Alfa Bank.Working with Rodney Joffe, a technology executive and cybersecurity expert, they theorized that it might be a covert communications channel. Mr. Joffe, who was already a client of Mr. Sussmann’s, brought the matter to him, and Mr. Sussmann relayed those suspicions to reporters and the F.B.I. He also told Mr. Elias about it, and Clinton campaign officials were apparently aware that he was trying to get reporters to write about it.Seeking a meeting with the F.B.I. to share the material, Mr. Sussmann reached out to James A. Baker, then the agency’s top lawyer. Mr. Sussmann said in a text that he was not bringing it on behalf of any client and was motivated by a desire to help the bureau. Mr. Baker is expected to be a primary prosecution witness.But Mr. Durham’s team obtained law firm billing records showing that Mr. Sussmann had logged time working on the Alfa Bank suspicions to the Clinton campaign. The team argued that he lied because if the F.B.I. knew of the political connection, agents might have treated the matter differently.“The strategy, as the government will argue at trial, was to create news stories about this issue, about the Alfa Bank issue,” Andrew DeFilippis, a prosecutor for Mr. Durham, said at a recent hearing. “And second, it was to get law enforcement to investigate it; and perhaps third, your honor, to get the press to report on the fact that law enforcement was investigating it.”John H. Durham is the special counsel the Trump administration assigned in 2019 to scour the Russia investigation for any wrongdoing.Bob Child/Associated PressAt the same hearing, a defense lawyer, Sean Berkowitz, said that he would not contest that Mr. Sussmann represented the Clinton campaign in telling reporters about those allegations. But he suggested that the defense would contend that Mr. Sussmann did not believe he was taking the matter to the F.B.I. “on behalf” of the campaign or Mr. Joffe.Mr. Berkowitz noted that Mr. Sussmann had told Mr. Baker that he believed The New York Times planned to publish an article on the Alfa Bank suspicions, which was why he was reaching out.“We expect there to be testimony from the campaign that, while they were interested in an article on this coming out, going to the F.B.I. is something that was inconsistent with what they would have wanted before there was any press,” Mr. Berkowitz said. “And in fact, going to the F.B.I. killed the press story, which was inconsistent with what the campaign would have wanted.”Some details of that matter remain murky. Mr. Baker has testified that the F.B.I. tried to ask The Times “to slow down” on publishing. But news reports indicate that editors were not ready to run that article, which was being written by the reporter Eric Lichtblau, although the paper published one mentioning Alfa Bank six weeks later.Defense lawyers have also argued that even if Mr. Sussmann lied, it would have been immaterial because the F.B.I. would have still investigated the allegations. And they have suggested that despite his initial statement, Mr. Sussmann was open about having a client in subsequent communications. Notes of a March 2017 F.B.I. meeting with Mr. Baker show that the bureau understood he had one by then.The defense has also subpoenaed Mr. Lichtblau, who is no longer at The Times, to testify. A lawyer for Mr. Lichtblau has asked the judge to limit questioning to his discussions with Mr. Sussmann, avoiding other confidential sources and journalistic matters. Mr. Durham’s team is expected to object to any such constraint. More

  • in

    More Evidence Bolsters Durham’s Case Against Michael Sussman

    Separately, defense lawyers asked a judge to block the Trump-era special counsel from making the Steele dossier a focus of next month’s trial.WASHINGTON — The Trump-era special counsel scrutinizing the Russia investigation has acquired additional evidence that may bolster his case against a Democratic-linked lawyer accused of lying to the F.B.I. at a September 2016 meeting about Donald J. Trump’s possible ties to Russia, a new court filing revealed.In the politically high-profile case, the lawyer, Michael Sussmann, is facing trial next month on a charge that he falsely told an F.B.I. official that he was not at the meeting on behalf of any client. There he relayed suspicions data scientists had about odd internet data they thought might indicate hidden Trump-Russia links.The new filing by the special counsel, John H. Durham, says that the night before Mr. Sussmann’s meeting, he had texted the F.B.I. official stating that “I’m coming on my own — not on behalf of a client or company — want to help the bureau.”The charge against Mr. Sussmann, which he denies, is narrow. But the case has attracted significant attention because Mr. Durham has used filings to put forward large amounts of information, insinuating there was a conspiracy involving the Hillary Clinton campaign to amplify suspicions of Trump-Russia collusion. Mr. Durham has not charged any such conspiracy, however.The disclosure of the text to the F.B.I. official in question, James A. Baker, then the bureau’s general counsel, was part of a flurry of late-night filings on Monday by prosecutors and the defense centering on what evidence and arguments the judge should permit in the trial.At the same time, the filings suggest that the special counsel may use the trial to continue to examine larger efforts linked to the Clinton campaign that raised suspicions about potential collusion between the Trump campaign and Russia — including the so-called Steele dossier.The dossier is a notorious compendium of opposition research about purported Trump-Russia ties, since revealed to be thinly sourced and dubious. It was written by Christopher Steele, a subcontractor for Fusion GPS, a research firm that Mr. Sussmann’s former law firm, Perkins Coie, had hired to scrutinize such matters.Mr. Sussmann, a cybersecurity specialist, had worked for the Democratic Party on issues related to Russia’s hacking of its servers. One of his partners at Perkins Coie, Marc Elias, a campaign law specialist, was representing the Clinton campaign and hired Fusion GPS.Mr. Durham’s new filing refers to the dossier and Mr. Steele — including a meeting with Mr. Sussmann that Mr. Steele has said involved the suspicions about the odd internet data — and Mr. Sussmann’s legal team said that Mr. Durham appears to be planning to bring up the dossier at the trial even though the indictment does not mention it.Mr. Sussmann’s defense lawyers accused Mr. Durham of promoting a “baseless narrative that the Clinton campaign conspired with others to trick the federal government into investigating ties between President Trump and Russia,” asking the judge to block prosecutors from making arguments and introducing evidence related to the Steele dossier.“But there was no such conspiracy; the special counsel hasn’t charged such a crime; and the special counsel should not be permitted to turn Mr. Sussmann’s trial on a narrow false statement charge into a circus full of sideshows that will only fuel partisan fervor,” they wrote.The Durham team’s filing also asked the judge to bar the defense from making arguments and presenting evidence “that depict the special counsel as politically motived or biased based on his appointment” by the Trump administration.“The only purpose in advancing these arguments would be to stir the pot of political polarization, garner public attention and, most inappropriately, confuse jurors or encourage jury nullification,” it said. “Put bluntly, the defense wishes to make the special counsel out to be a political actor when, in fact, nothing could be further from the truth.”In the spring of 2019, the special counsel investigating the Trump campaign and Russia, Robert S. Mueller III, detailed “numerous links between the Russian government and the Trump campaign” but did not charge any Trump associate with conspiring with Russia. As Mr. Trump continued to claim that he was the victim of a “deep state” conspiracy, the attorney general at the time, William P. Barr, assigned Mr. Durham to scour the Russia investigation for any wrongdoing.But Mr. Durham has not developed any cases against high-level officials. Instead, he has brought false-statements charges involving two efforts by outsiders to hunt for signs of Trump-Russia links, both of which were thin and involved Perkins Coie in some way. He has used the indictments to insinuate that the Clinton campaign may have orchestrated the concoction of false smears against Mr. Trump, but without charging such a conspiracy.One such effort was the Steele dossier, and the other was the suspicions that Mr. Sussmann relayed to Mr. Baker. The latter suspicions had been developed by a group of data scientists who analyzed odd internet data they thought might suggest clandestine communications between a server for the Trump Organization and a server for Alfa Bank, a Kremlin-linked Russian financial institution.The F.B.I. — which had already opened the investigation that would evolve into the Mueller inquiry — looked into the Alfa Bank matter but decided the suspicions were unfounded.After Mr. Sussmann’s indictment, several criminal law specialists said the charge was an unusually thin basis for a federal case because it boiled down to a dispute over what was said at a one-on-one meeting at which there were no other witnesses and there was no recording. But the newly disclosed text message from Mr. Sussmann could bolster prosecutors’ case.In accusing Mr. Sussmann of falsely saying he was not conveying the suspicions on behalf of any client, the indictment also contended that he was concealing that he was actually representing two clients at that meeting — the Clinton campaign and a technology executive, Rodney Joffe, who worked with the cyberspecialists who analyzed the Alfa Bank data. Law firm billing records show that Mr. Sussmann listed the campaign for time working on Alfa Bank issues.Mr. Sussmann’s legal team has denied that he told Mr. Baker he was not conveying the information on behalf of any client. They also insisted to the Justice Department before the indictment that Mr. Sussmann was not there at the direction or on behalf of the campaign. In court filings, they have acknowledged that Mr. Sussmann “arranged for this meeting on behalf of his client,” referring to Mr. Joffe.The defense for Mr. Sussmann therefore may turn in part on what it means to be somewhere on behalf of a client. In a separate filing on Monday night, the defense asked the judge, Christopher Cooper of the Federal District Court for the District of Columbia, to dismiss the case if Mr. Durham does not grant immunity to Mr. Joffe, so that the technology executive can testify about his interactions with Mr. Sussmann regarding the meeting.In that filing, they said Mr. Joffe would offer “critical exculpatory testimony on behalf of Mr. Sussmann,” including that the two agreed that he should take the information to the F.B.I. “to help the government, not to benefit Mr. Joffe.” They also said that “contrary to the special counsel’s entire theory,” Mr. Joffe’s work with the data scientists was not connected to the campaign.A spokeswoman for Mr. Joffe did not provide a comment. But a letter from Mr. Joffe’s lawyer included in the filings said that while Mr. Joffe “can provide exculpatory information concerning the allegations against” Mr. Sussmann, Mr. Joffe still faced the possible risk of indictment and would invoke his Fifth Amendment rights not to testify. More

  • in

    Court Filing Started a Furor in Right-Wing Outlets, but Their Narrative Is Off Track

    The latest alarmist claims about spying on Trump appeared to be flawed, but the explanation is byzantine — underlining the challenge for journalists in deciding what merits coverage.WASHINGTON — When John H. Durham, the Trump-era special counsel investigating the inquiry into Russia’s 2016 election interference, filed a pretrial motion on Friday night, he slipped in a few extra sentences that set off a furor among right-wing outlets about purported spying on former President Donald J. Trump.But the entire narrative appeared to be mostly wrong or old news — the latest example of the challenge created by a barrage of similar conspiracy theories from Mr. Trump and his allies.Upon close inspection, these narratives are often based on a misleading presentation of the facts or outright misinformation. They also tend to involve dense and obscure issues, so dissecting them requires asking readers to expend significant mental energy and time — raising the question of whether news outlets should even cover such claims. Yet Trump allies portray the news media as engaged in a cover-up if they don’t.The latest example began with the motion Mr. Durham filed in a case he has brought against Michael A. Sussmann, a cybersecurity lawyer with links to the Democratic Party. The prosecutor has accused Mr. Sussmann of lying during a September 2016 meeting with an F.B.I. official about Mr. Trump’s possible links to Russia.The filing was ostensibly about potential conflicts of interest. But it also recounted a meeting at which Mr. Sussmann had presented other suspicions to the government. In February 2017, Mr. Sussmann told the C.I.A. about odd internet data suggesting that someone using a Russian-made smartphone may have been connecting to networks at Trump Tower and the White House, among other places.Mr. Sussmann had obtained that information from a client, a technology executive named Rodney Joffe. Another paragraph in the court filing said that Mr. Joffe’s company, Neustar, had helped maintain internet-related servers for the White House, and that he and his associates “exploited this arrangement” by mining certain records to gather derogatory information about Mr. Trump.Citing this filing, Fox News inaccurately declared that Mr. Durham had said he had evidence that Hillary Clinton’s campaign had paid a technology company to “infiltrate” a White House server. The Washington Examiner claimed that this all meant there had been spying on Mr. Trump’s White House office. And when mainstream publications held back, Mr. Trump and his allies began shaming the news media.“The press refuses to even mention the major crime that took place,” Mr. Trump said in a statement on Monday. “This in itself is a scandal, the fact that a story so big, so powerful and so important for the future of our nation is getting zero coverage from LameStream, is being talked about all over the world.”There were many problems with all this. For one, much of this was not new: The New York Times had reported in October what Mr. Sussmann had told the C.I.A. about data suggesting that Russian-made smartphones, called YotaPhones, had been connecting to networks at Trump Tower and the White House, among other places.The conservative media also skewed what the filing said. For example, Mr. Durham’s filing never used the word “infiltrate.” And it never claimed that Mr. Joffe’s company was being paid by the Clinton campaign.Most important, contrary to the reporting, the filing never said the White House data that came under scrutiny was from the Trump era. According to lawyers for David Dagon, a Georgia Institute of Technology data scientist who helped develop the Yota analysis, the data — so-called DNS logs, which are records of when computers or smartphones have prepared to communicate with servers over the internet — came from Barack Obama’s presidency.“What Trump and some news outlets are saying is wrong,” said Jody Westby and Mark Rasch, both lawyers for Mr. Dagon. “The cybersecurity researchers were investigating malware in the White House, not spying on the Trump campaign, and to our knowledge all of the data they used was nonprivate DNS data from before Trump took office.”In a statement, a spokesperson for Mr. Joffe said that “contrary to the allegations in this recent filing,” he was apolitical, did not work for any political party, and had lawful access under a contract to work with others to analyze DNS data — including from the White House — for the purpose of hunting for security breaches or threats.After Russians hacked networks for the White House and Democrats in 2015 and 2016, it went on, the cybersecurity researchers were “deeply concerned” to find data suggesting Russian-made YotaPhones were in proximity to the Trump campaign and the White House, so “prepared a report of their findings, which was subsequently shared with the C.I.A.”A spokesman for Mr. Durham declined to comment.Mr. Durham was assigned by the attorney general at the time, William P. Barr, to scour the Russia investigation for wrongdoing in May 2019 as Mr. Trump escalated his claims that he was the victim of a “deep state” conspiracy. But after nearly three years, he has not developed any cases against high-level government officials.Instead, Mr. Durham has developed two cases against people associated with outside efforts to understand Russia’s election interference that put forward unproven, and sometimes thin or subsequently disproved, suspicions about purported links to Mr. Trump or his campaign.Both cases are narrow — accusations of making false statements. One of those cases is against Mr. Sussmann, whom Mr. Durham has accused of lying during a September 2016 meeting with an F.B.I. official about Mr. Trump’s possible links to Russia.(Mr. Durham says Mr. Sussmann falsely said he had no clients, but was there on behalf of both the Clinton campaign and Mr. Joffe. Mr. Sussman denies ever saying that, while maintaining he was only there on behalf of Mr. Joffe — not the campaign.)Both Mr. Sussmann’s September 2016 meeting with the F.B.I. and the February 2017 meeting with the C.I.A. centered upon suspicions developed by cybersecurity researchers who specialize in sifting DNS data in search of hacking, botnets and other threats.A military research organization had asked Georgia Tech researchers to help scrutinize a 2015 Russian malware attack on the White House’s network. After it emerged that Russia had hacked Democrats, they began hunting for signs of other Russian activity targeting people or organizations related to the election, using data provided by Neustar.Mr. Sussmann’s meeting with the F.B.I. involved odd data the researchers said might indicate communications between the Trump Organization and Alfa Bank, a Kremlin-linked institution. The F.B.I. dismissed suspicions of a secret communications channel as unfounded. In the indictment of Mr. Sussmann, Mr. Durham insinuated that the researchers did not believe what they were saying. But lawyers for the researchers said that was false and that their clients believed their analysis.The meeting with the C.I.A. involved odd data the researchers said indicated there had been communications with Yota servers in Russia coming from networks serving the White House; Trump Tower; Mr. Trump’s Central Park West apartment building; and Spectrum Health, a Michigan hospital company that also played a role in the Alfa Bank matter. The researchers also collaborated on that issue, according to Ms. Westby and Mr. Rasch, and Mr. Dagon had prepared a “white paper” explaining the analysis, which Mr. Sussmann later took to the C.I.A.Mr. Durham’s filing also cast doubt on the researchers’ suggestion that interactions between devices in the United States and Yota servers were inherently suspicious, saying that there were more than three million such DNS logs from 2014 to 2017 — and that such logs from the White House dated back at least that long.But Ms. Westby and Mr. Rasch reiterated that YotaPhones are extremely rare in the United States and portrayed three million DNS logs over three years as “paltry and small relative to the billions and billions” of logs associated with common devices like iPhones.“Yota lookups are extremely concerning if they emanate from sensitive networks that require protection, such as government networks or people running for federal office,” they said. More

  • in

    Trump Server's Connections to Alfa Bank Produces Fresh Conflict

    A recent indictment suggested that researchers who found strange internet links between a Russian bank and the Trump Organization did not really believe their own work. They are pushing back.WASHINGTON — The charge was narrow: John H. Durham, the special counsel appointed by the Trump administration to scour the Russia investigation, indicted a cybersecurity lawyer this month on a single count of lying to the F.B.I.But Mr. Durham used a 27-page indictment to lay out a far more expansive tale, one in which four computer scientists who were not charged in the case “exploited” their access to internet data to develop an explosive theory about cyberconnections in 2016 between Donald J. Trump’s company and a Kremlin-linked bank — a theory, he insinuated, they did not really believe.Mr. Durham’s version of events set off reverberations beyond the courtroom. Trump supporters seized on the indictment, saying it shows that suspicions about possible covert communications between Russia’s Alfa Bank and Mr. Trump’s company were a deliberate hoax by supporters of Hillary Clinton and portraying it as evidence that the entire Russia investigation was unwarranted.Emails obtained by The New York Times and interviews with people familiar with the matter, who spoke on the condition of anonymity to discuss issues being investigated by federal authorities, provide a fuller and more complex account of how a group of cyberexperts discovered the odd internet data and developed their hypothesis about what could explain it.At the same time, defense lawyers for the scientists say it is Mr. Durham’s indictment that is misleading. Their clients, they say, believed their hypothesis was a plausible explanation for the odd data they had uncovered — and still do.The Alfa Bank results “have been validated and are reproducible. The findings of the researchers were true then and remain true today; reports that these findings were innocuous or a hoax are simply wrong,” said Jody Westby and Mark Rasch, lawyers for David Dagon, a Georgia Institute of Technology data scientist and one of the researchers whom the indictment discussed but did not name.Steven A. Tyrrell, a lawyer for Rodney Joffe, an internet entrepreneur and another of the four data experts, said his client had a duty to share the information with the F.B.I. and that the indictment “gratuitously presents an incomplete and misleading picture” of his role.Mr. Durham’s indictment provided evidence that two participants in the matter — Mr. Joffe and Michael Sussmann, the cybersecurity lawyer accused of falsely saying he had no client when he brought the findings of the researchers to the F.B.I. — interacted with the Clinton campaign as they worked to bring their suspicions to journalists and federal agents.A spokesman for Mr. Durham declined to comment. The special counsel’s office issued a fresh grand jury subpoena to Mr. Sussmann’s former law firm, Perkins Coie, sometime after Mr. Sussmann was indicted on Sept. 16, in a development first reported on Thursday by CNN and confirmed by a person familiar with the matter. It is unclear whether the subpoena pertained to Alfa Bank or whether Mr. Durham has finished his investigation into that case.Mr. Durham uncovered law firm billing records showing that Mr. Sussmann, who represented the Democratic National Committee on issues related to Russia’s hacking of its servers, had logged his time on the Alfa Bank matter as work for the Clinton campaign. Mr. Sussmann has denied lying to the F.B.I. about who he was representing in coming forward with the Alfa Bank data, while saying he was representing only Mr. Joffe and not the campaign.Mr. Durham also found that Mr. Joffe had met with one of Mr. Sussmann’s law firm partners, Marc Elias, who was then the Clinton campaign’s general counsel, and researchers from Fusion GPS, an investigative firm Mr. Elias had commissioned to scrutinize Mr. Trump’s purported ties to Russia. Fusion GPS drafted a paper on Alfa Bank’s ties to the Kremlin that Mr. Sussmann also provided to the F.B.I.Mr. Durham was appointed in 2019 to scour the Russia investigation for any wrongdoing.Justice Department, via Associated PressIn the heat of the presidential race, Democrats quickly sought to capitalize on the research. On Sept. 15, four days before Mr. Sussmann met with the F.B.I. about the findings, Mr. Elias sent an email to the Clinton campaign manager, Robbie Mook, its communications director, Jennifer Palmieri, and its national security adviser, Jake Sullivan, whose subject line referred to an Alfa Bank article, the indictment said.Six weeks later, after Slate ran a lengthy article about the Alfa Bank suspicions, the Clinton campaign pounced. Mrs. Clinton’s Twitter feed linked to the article and ran an image stating the suspicions as fact, declaring, “It’s time for Trump to answer serious questions about his ties to Russia.”The F.B.I., which had already started its Trump-Russia investigation before it heard about the possible Trump-Alfa connections, quickly dismissed the suspicions, apparently concluding the interactions were probably caused by marketing emails sent by an outside firm using a domain registered to the Trump Organization. The report by the Russia special counsel, Robert S. Mueller III, ignored the issue.The data remains a mystery. A 2018 analysis commissioned by the Senate, made public this month, detailed technical reasons to doubt that marketing emails were the cause. A Senate report last year accepted the F.B.I.’s assessment that it was unlikely to have been a covert communications channel, but also said it had no good explanation for “the unusual activity.”Whatever caused the odd data, at issue in the wake of the indictment is whether Mr. Joffe and the other three computer scientists considered their own theory dubious and yet cynically went forward anyway, as Mr. Durham suggests, or whether they truly believed the data was alarming and put forward their hypothesis in good faith.Earlier articles on Alfa Bank, including in Slate and The New Yorker, did not name the researchers, and used pseudonyms like “Max” and “Tea Leaves” for two of them. Mr. Durham’s indictment did not name them, either.But three of their names have appeared among a list of data experts in a lawsuit brought by Alfa Bank, and Trump supporters have speculated online about their identities. The Times has confirmed them, and their lawyers provided statements defending their actions.The indictment’s “Originator-1” is April Lorenzen, chief data scientist at the information services firm Zetalytics. Her lawyer, Michael J. Connolly, said she has “dedicated her life to the critical work of thwarting dangerous cyberattacks on our country,” adding: “Any suggestion that she engaged in wrongdoing is unequivocally false.”The indictment’s “Researcher-1” is another computer scientist at Georgia Tech, Manos Antonakakis. “Researcher-2” is Mr. Dagon. And “Tech Executive-1” is Mr. Joffe, who in 2013 received the F.B.I. Director’s Award for helping crack a cybercrime case, and retired this month from Neustar, another information services company.In addition, the Alfa Bank suspicions were only half of what the researchers sought to bring to the government’s attention, according to several people familiar with the matter.Their other set of concerns centered on data suggesting that a YotaPhone — a Russian-made smartphone rarely seen in the United States — had been used from networks serving the White House, Trump Tower and Spectrum Health, a Michigan hospital company whose server had also interacted with the Trump server.Mr. Sussmann relayed their YotaPhone findings to counterintelligence officials at the C.I.A. in February 2017, the people said. It is not clear whether the government ever investigated them.The involvement of the researchers traces back to the spring of 2016. DARPA, the Pentagon’s research funding agency, wanted to commission data scientists to develop the use of so-called DNS logs, records of when servers have prepared to communicate with other servers over the internet, as a tool for hacking investigations.DARPA identified Georgia Tech as a potential recipient of funding and encouraged researchers there to develop examples. Mr. Antonakakis and Mr. Dagon reached out to Mr. Joffe to gain access to Neustar’s repository of DNS logs, people familiar with the matter said, and began sifting them.Separately, when the news broke in June 2016 that Russia had hacked the Democratic National Committee’s servers, Mr. Dagon and Ms. Lorenzen began talking at a conference about whether such data might uncover other election-related hacking.Ms. Lorenzen eventually noticed an odd pattern: a server called mail1.trump-email.com appeared to be communicating almost exclusively with servers at Alfa Bank and Spectrum Health. She shared her findings with Mr. Dagon, the people said, and they both discussed it with Mr. Joffe.As a candidate in 2016, President Trump publicly called for Russia to hack Hillary Clinton.Todd Heisler/The New York Times“Half the time I stop myself and wonder: am I really seeing evidence of espionage on behalf of a presidential candidate?” Mr. Dagon wrote in an email to Mr. Joffe on July 29, after WikiLeaks made public stolen Democratic emails timed to disrupt the party’s convention and Mr. Trump urged Russia to hack Mrs. Clinton. By early August, the researchers had combined forces and were increasingly focusing on the Alfa Bank data, the people said. Mr. Joffe reached out to his lawyer, Mr. Sussmann, who would take the researchers’ data and hypothesis to the F.B.I. on Sept. 19, 2016.Defense lawyers contend the indictment presented a skewed portrait of their clients’ thinking by selectively quoting from their emails.The indictment quotes August emails from Ms. Lorenzen and Mr. Antonakakis worrying that they might not know if someone had faked the DNS data. But people familiar with the matter said the indictment omitted later discussion of reasons to doubt any attempt to spoof the overall pattern could go undetected.The indictment says Mr. Joffe sent an email on Aug. 21 urging more research about Mr. Trump, which he stated could “give the base of a very useful narrative,” while also expressing a belief that the Trump server at issue was “a red herring” and they should ignore it because it had been used by the mass-marketing company.The full email provides context: Mr. Trump had claimed he had no dealings in Russia and yet many links appeared to exist, Mr. Joffe noted, citing an article that discussed aspirations to build a Trump Tower in Moscow. Despite the “red herring” line, the same email also showed that Mr. Joffe nevertheless remained suspicious about Alfa Bank, proposing a deeper hunt in the data “for the anomalies that we believe exist.”He wrote: “If we can show possible email communication between” any Trump server and an Alfa Bank server “that has occurred in the last few weeks, we have the beginning of a narrative,” adding that such communications with any “Russian or Ukrainian financial institutions would give the base of a very useful narrative.”Mr. Tyrrell, his lawyer, said that research in the weeks that followed, omitted by the indictment, had yielded evidence that the specific subsidiary server in apparent contact with Alfa Bank had not been used to send bulk marketing emails. That further discussion, he said, changed his client’s mind about whether it was a red herring.“The quotation of the ‘red herring’ email is deeply misleading,” he said, adding: “The research process is iterative and this is exactly how it should work. Their efforts culminated in the well-supported conclusions that were ultimately delivered to the F.B.I.”Michael E. Sussmann during a cybersecurity conference in 2016. He was charged by Mr. Durham with lying to the F.B.I.via C-SPANThe indictment also quoted from emails in mid-September, when the researchers were discussing a paper on their suspicions that Mr. Sussmann would soon take to the F.B.I. It says Mr. Joffe asked if the paper’s hypothesis would strike security experts as a “plausible explanation.”The paper’s conclusion was somewhat qualified, an email shows, saying “there were other possible explanations,” but the only “plausible” one was that Alfa Bank and the Trump Organization had taken steps “to obfuscate their communications.”The indictment suggested Ms. Lorenzen’s reaction to the paper was guarded, describing an email from her as “stating, in part, that it was ‘plausible’ in the ‘narrow scope’ defined by” Mr. Joffe. But the text of her email displays enthusiasm.“In the narrow scope of what you have defined above, I agree wholeheartedly that it is plausible,” she wrote, adding: “If the white paper intends to say that there are communications between at least Alfa and Trump, which are being intentionally hidden by Alfa and Trump I absolutely believe that is the case,” her email said.The indictment cited emails by Mr. Antonakakis in August in which he flagged holes and noted they disliked Mr. Trump, and in September in which he approvingly noted that the paper did not get into a technical issue that specialists would raise.Mr. Antonakakis’ lawyer, Mark E. Schamel, said his client had provided “feedback on an early draft of data that was cause for additional investigation.” And, he said, their hypothesis “to this day, remains a plausible working theory.”The indictment also suggests Mr. Dagon’s support for the paper’s hypothesis was qualified, describing his email response as “acknowledging that questions remained, but stating, in substance and in part, that the paper should be shared with government officials.”The text of that email shows Mr. Dagon was forcefully supportive. He proposed editing the paper to declare as “fact” that it was clear “that there are hidden communications between Trump and Alfa Bank,” and said he believed the findings met the probable cause standard to open a criminal investigation.“Hopefully the intended audience are officials with subpoena powers, who can investigate the purpose” of the apparent Alfa Bank connection, Mr. Dagon wrote.In the end, Mr. Durham came to investigate them. More

  • in

    Michael Sussmann, Lawyer Accused of Lying in F.B.I. Meeting, Pleads Not Guilty

    A prominent cybersecurity lawyer pleaded not guilty on Friday to a charge of lying to the F.B.I. during a meeting five years ago about possible links between Donald J. Trump and Russia.The lawyer, Michael A. Sussmann, appeared before a magistrate judge in Washington, where he was indicted a day earlier. After a brief hearing, he was released on certain conditions, including travel restrictions.The indictment centers on whether Mr. Sussmann lied about who he was representing at a September 2016 meeting with a top F.B.I. lawyer. At that meeting, Mr. Sussmann provided analysis by cybersecurity researchers who said that unusual internet data might indicate a covert communications channel between computer servers associated with the Trump Organization and with Alfa Bank, a Kremlin-linked financial institution.The indictment says Mr. Sussmann falsely told the F.B.I. lawyer that he had no clients, but he was really representing both a technology executive and the Hillary Clinton campaign. Mr. Sussmann’s lawyers deny that he ever said he had no clients, and contend that he was there on behalf of only the executive and not Mrs. Clinton’s campaign.The F.B.I. looked into the concerns about Alfa Bank but found insufficient evidence to support them, and the special counsel who later took over the Russia investigation, Robert S. Mueller III, ignored the matter in his final report.Mr. Sussmann is a former computer crimes prosecutor who worked for the Justice Department for 12 years. In 2016, he represented the Democratic National Committee on issues related to Russia’s hacking of its servers.Mr. Sussmann’s lawyers have accused the special counsel, John H. Durham, of seeking an indictment of their client for political reasons. Mr. Durham was tapped in 2019 by Trump administration officials to review the F.B.I.’s investigation after the president and his allies cast doubt on its legitimacy and the Justice Department’s inspector general found major problems with one aspect of the inquiry — wiretapping surveillance applications — and in one related instance, criminal conduct.In the weeks before the presidential election, then-Attorney General William P. Barr appointed Mr. Durham as special counsel, ensuring the inquiry would continue no matter who won the White House. In a news release announcing the indictment on Thursday, the Justice Department said Mr. Durham’s investigation was continuing. More

  • in

    Trump-Era Special Counsel Secures Indictment of Lawyer for Firm With Democratic Ties

    The defendant, Michael Sussmann, is accused of lying to the F.B.I. in a meeting about Trump and Russia. He denies wrongdoing.WASHINGTON — The special counsel appointed by the Trump administration to scrutinize the Russia investigation obtained a grand jury indictment on Thursday of a prominent cybersecurity lawyer, accusing him of lying to the F.B.I. five years ago during a meeting about Donald J. Trump and Russia.The indictment secured by the special counsel, John H. Durham, also made public his findings about an episode in which cybersecurity researchers identified unusual internet data in 2016 that they said suggested the possibility of a covert communications channel between the Trump Organization and Alfa Bank, a Kremlin-linked financial institution.He concluded that the Clinton campaign covertly helped push those suspicions to the F.B.I. and reporters, the indictment shows. The F.B.I. looked into the questions about Alfa Bank but dismissed them as unfounded, and the special counsel who later took over the Russia investigation, Robert S. Mueller III, ignored the matter in his final report.The charging of the lawyer, Michael A. Sussmann, had been expected. He is accused of falsely telling a top F.B.I. lawyer that he was not representing any client at the meeting about those suspicions. Prosecutors contend that he was instead representing both a technology executive and the Hillary Clinton campaign.“Sussmann’s false statement misled the F.B.I. general counsel and other F.B.I. personnel concerning the political nature of his work and deprived the F.B.I. of information that might have permitted it more fully to assess and uncover the origins of the relevant data and technical analysis, including the identities and motivations of Sussmann’s clients,” the indictment said.Mr. Sussmann’s defense lawyers, Sean Berkowitz and Michael Bosworth, have denied the accusation, insisting that he did not say he had no client and maintaining that the evidence against him is weak. They also denied that the question of who Mr. Sussmann was working for was material, saying the FB.I. would have investigated the matter regardless.“Michael Sussmann was indicted today because of politics, not facts,” they said on Thursday. “The special counsel appears to be using this indictment to advance a conspiracy theory he has chosen not to actually charge. This case represents the opposite of everything the Department of Justice is supposed to stand for. Mr. Sussmann will fight this baseless and politically inspired prosecution.”A former computer crimes prosecutor who worked for the Justice Department for 12 years, Mr. Sussmann in 2016 represented the Democratic National Committee on issues related to Russia’s hacking of its servers.He has been a cybersecurity lawyer for 16 years at the law firm Perkins Coie, which has deep ties to the Democratic Party. A colleague of Mr. Sussmann’s, Marc Elias, was the general counsel to the Clinton campaign. He left the law firm last month.The firm said in a statement on Thursday that Mr. Sussmann had also departed: “In light of the special counsel’s action today, Michael Sussmann, who has been on leave from the firm, offered his resignation from the firm in order to focus on his legal defense, and the firm accepted it.”The charge against him centers on a Sept. 19, 2016, meeting with the F.B.I. lawyer, James A. Baker, in which Mr. Sussmann relayed concerns about the odd internet data. Cybersecurity researchers had said it might be evidence of clandestine communications channel between computer servers associated with the Trump Organization and with Russia’s Alfa Bank.The case against Mr. Sussmann turns on Mr. Baker’s recollection that Mr. Sussmann told him he was not at the meeting on behalf of any client — which Mr. Sussmann denies saying. There were no witnesses to their conversation.The indictment says Mr. Baker later briefed another F.B.I. official — apparently Bill Priestap, the bureau’s top counterintelligence official — about the meeting, and that Mr. Priestap’s notes say Mr. Baker recounted that Mr. Sussmann said he was “not doing this for any client.” (It is not clear whether such notes would be admissible at a trial.)In 2017, Mr. Sussmann testified under oath to Congress that he was representing the unnamed technology executive, and his legal team agrees that executive was his client at the meeting — but the only one.Internal law firm billing records, however, show that Mr. Sussmann had been logging his time on Alfa Bank matters to the Clinton campaign, the indictment says, contending that the campaign was his client, too. Those records are said to also show that Mr. Sussmann met or spoke with Mr. Elias about Alfa Bank repeatedly.Seeking to head off any indictment, Mr. Sussmann’s defense lawyers had argued to the Justice Department that the billing records were misleading and that he was not at the meeting at the direction or on behalf of the Clinton campaign, according to people familiar with the case. They also denied that the records could be fairly interpreted as showing that he billed the meeting with Mr. Baker to the campaign, as the indictment accuses him.Mr. Durham is known to have been closely scrutinizing the Alfa Bank episode since last fall, including using a grand jury to subpoena documents and question witnesses in ways that suggested he was pursuing a theory that the data had been manipulated or the analysis of it knowingly torqued.The 27-page indictment disclosed much of what he found, including quoting extensively from internal communications of unnamed researchers.The unidentified technology executive whom Mr. Sussmann represented was not the first researcher to scrutinize the data. But his company had access to large amounts of internet data, and he came to play an important role in driving the research and analysis, which he told Mr. Sussmann about around July 2016, the indictment said.In August of that year, the technology executive outlined to other researchers the goal of the effort, saying that unspecified “VIPs” wanted to find “true” information that would merit closer scrutiny. Noting that Mr. Trump had claimed he had no interactions with Russian financial institutions, the executive wrote that data suggesting that was false “would be jackpot” and would “give the base of a very useful narrative.”The executive also wrote: “Being able to provide evidence of *anything* that shows an attempt to behave badly in relation to this, the VIPs would be happy. They’re looking for a true story that could be used as the basis for closer examination.”But one of the researchers working on the project worried that their analysis had weaknesses and that suggested they all shared anti-Trump sentiment.“The only thing that drive[s] us at this point is that we just do not like” Trump, the indictment quoted one unnamed researcher as writing. “This will not fly in eyes of public scrutiny. Folks, I am afraid we have tunnel vision. Time to regroup?”In early September, the indictment said, Mr. Sussmann met with a New York Times reporter who would later draft a story about Alfa Bank, and also began work on a so-called white paper that would summarize and explain the researchers’ data and analysis, billing the time to the Clinton campaign.On Sept. 12, the indictment said, Mr. Sussmann called Mr. Elias, the Clinton campaign lawyer, and spoke about his “efforts to communicate” with the Times reporter about the Alfa Bank allegations. Both billed the call to the campaign. And three days later, Mr. Elias exchanged emails with top campaign officials about the matter.In the meantime, on Sept. 14, five days before Mr. Sussmann met with the F.B.I., the technology executive emailed three researchers helping him with data. The executive sought to ensure the analysis they were assembling would strike security experts as simply “plausible,” even if it fell short of demonstrably true, prosecutors said.Mr. Sussmann also continued to push the Alfa Bank story to reporters. A month before the election, as Times editors were weighing whether to publish an article the reporter had drafted, Mr. Sussmann told him he should show the editors an opinion essay saying the paper’s investigative reporters had not published as many stories regarding Mr. Trump as other media outlets, the indictment said.Michael E. Sussmann, a lawyer from the firm Perkins Coie, during a cybersecurity conference in 2016.via C-SPANAttorney General William P. Barr appointed Mr. Durham in May 2019 to scour the Russia investigation for any wrongdoing. Both Mr. Trump and Mr. Barr stoked expectations among Mr. Trump’s supporters that the prosecutors would uncover grave offenses by high-level government officials and support claims that the Russia investigation was a plot concocted by the so-called deep state to sabotage Mr. Trump.To date, Mr. Durham’s investigation has fallen short of those expectations. Out of office, Mr. Trump has repeatedly issued statements fuming, “Where’s Durham?”The current attorney general, Merrick B. Garland, said at his confirmation hearing in February that he would let Mr. Durham continue to work and told Congress in July that he agreed with Mr. Barr’s earlier direction that Mr. Durham should eventually submit a report in a form that could be made public.Funding for most Justice Department operations, like much of the federal government, is controlled by an annual budget that covers a fiscal year that ends on Sept. 30. Spokesmen for Mr. Garland and Mr. Durham have declined to answer questions about whether Mr. Durham’s office has funding approval to continue operating beyond this month.But in announcing the indictment of Mr. Sussmann, the Justice Department said, “The special counsel’s investigation is ongoing.” More

  • in

    Durham Is Said to Seek Indictment of Lawyer at Firm With Democratic Ties

    The lawyer, Michael Sussmann, is accused of lying to the F.B.I. in a 2016 meeting about Trump and Russia. He denies wrongdoing.WASHINGTON — John H. Durham, the special counsel appointed by the Trump administration to scrutinize the Russia investigation, has told the Justice Department that he will ask a grand jury to indict a prominent cybersecurity lawyer on a charge of making a false statement to the F.B.I., people familiar with the matter said.Any indictment of the lawyer — Michael Sussmann, a former federal prosecutor and now a partner at the Perkins Coie law firm, and who represented the Democratic National Committee on issues related to Russia’s 2016 hacking of its servers — is likely to attract significant political attention.Donald J. Trump and his supporters have long accused Democrats and Perkins Coie — whose political law group, a division separate from Mr. Sussmann’s, represented the party and the Hillary Clinton campaign — of seeking to stoke unfair suspicions about Mr. Trump’s purported ties to Russia.The case against Mr. Sussmann centers on the question of who his client was when he conveyed certain suspicions about Mr. Trump and Russia to the F.B.I. in September 2016. Among other things, investigators have examined whether Mr. Sussmann was secretly working for the Clinton campaign — which he denies.An indictment is not a certainty: On rare occasions, grand juries decline prosecutors’ requests. But Mr. Sussmann’s lawyers, Sean M. Berkowitz and Michael S. Bosworth of Latham & Watkins, acknowledged on Wednesday that they expected him to be indicted, while denying he made any false statement.“Mr. Sussmann has committed no crime,” they said. “Any prosecution here would be baseless, unprecedented and an unwarranted deviation from the apolitical and principled way in which the Department of Justice is supposed to do its work. We are confident that if Mr. Sussmann is charged, he will prevail at trial and vindicate his good name.”A spokesman for Attorney General Merrick B. Garland, who has the authority to overrule Mr. Durham but is said to have declined to, did not comment. Nor did a spokesman for Mr. Durham.The accusation against Mr. Sussmann focuses on a meeting he had on Sept. 19, 2016, with James A. Baker, who was the F.B.I.’s top lawyer at the time, according to the people familiar with the matter. They spoke on condition of anonymity.Because of a five-year statute of limitations for such cases, Mr. Durham has a deadline of this weekend to bring a charge over activity from that date.At the meeting, Mr. Sussmann relayed data and analysis from cybersecurity researchers who thought that odd internet data might be evidence of a covert communications channel between computer servers associated with the Trump Organization and with Alfa Bank, a Kremlin-linked Russian financial institution.The F.B.I. eventually decided those concerns had no merit. The special counsel who later took over the Russia investigation, Robert S. Mueller III, ignored the matter in his final report.Mr. Sussmann’s lawyers have told the Justice Department that he sought the meeting because he and the cybersecurity researchers believed that The New York Times was on the verge of publishing an article about the Alfa Bank data and he wanted to give the F.B.I. a heads-up. (In fact, The Times was not ready to run that article, but published one mentioning Alfa Bank six weeks later.)Mr. Durham has been using a grand jury to examine the Alfa Bank episode and appeared to be hunting for any evidence that the data had been cherry-picked or the analysis of it knowingly skewed, The New Yorker and other outlets have reported. To date, there has been no public sign that he has found any such evidence.But Mr. Durham did apparently find an inconsistency: Mr. Baker, the former F.B.I. lawyer, is said to have told investigators that he recalled Mr. Sussmann saying that he was not meeting him on behalf of any client. But in a deposition before Congress in 2017, Mr. Sussmann testified that he sought the meeting on behalf of an unnamed client who was a cybersecurity expert and had helped analyze the data.Moreover, internal billing records Mr. Durham is said to have obtained from Perkins Coie are said to show that when Mr. Sussmann logged certain hours as working on the Alfa Bank matter — though not the meeting with Mr. Baker — he billed the time to Mrs. Clinton’s 2016 campaign.Another partner at Perkins Coie, Marc Elias, was then serving as the general counsel for the Clinton campaign. Mr. Elias, who did not respond to inquiries, left Perkins Coie last month.In their attempt to head off any indictment, Mr. Sussmann’s lawyers are said to have insisted that their client was representing the cybersecurity expert he mentioned to Congress and was not there on behalf of or at the direction of the Clinton campaign.They are also said to have argued that the billing records are misleading because Mr. Sussmann was not charging his client for work on the Alfa Bank matter, but needed to show internally that he was working on something. He was discussing the matter with Mr. Elias and the campaign paid a flat monthly retainer to the firm, so Mr. Sussmann’s hours did not result in any additional charges, they said.Last October, as Mr. Durham zeroed in the Alfa Bank matter, the researcher who brought those concerns to Mr. Sussmann hired a new lawyer, Steven A. Tyrrell.Speaking on the condition that The New York Times not name his client in this article, citing a fear of harassment, Mr. Tyrrell said his client thought Mr. Sussmann was representing him at the meeting with Mr. Baker.“My client is an apolitical cybersecurity expert with a history of public service who felt duty bound to share with law enforcement sensitive information provided to him by D.N.S. experts,” Mr. Tyrrell said, referring to “Domain Name System,” a part of how the internet works and which generated the data that was the basis of the Alfa Bank concerns.Mr. Tyrrell added: “He sought legal advice from Michael Sussmann who had advised him on unrelated matters in the past and Mr. Sussmann shared that information with the F.B.I. on his behalf. He did not know Mr. Sussmann’s law firm had a relationship with the Clinton campaign and was simply doing the right thing.”Supporters of Mr. Trump have long been suspicious of Perkins Coie. On behalf of Democrats, Mr. Elias commissioned a research firm, Fusion GPS, to look into Mr. Trump’s ties to Russia. That resulted in the so-called Steele dossier, a notorious compendium of rumors about Trump-Russia ties. The F.B.I. cited some information from the dossier in botched wiretap applications.Some of the questions that Mr. Durham’s team has been asking in recent months — including of witnesses it subpoenaed before a grand jury, according to people familiar with some of the sessions — suggest he has been pursuing a theory that the Clinton campaign used Perkins Coie to submit dubious information to the F.B.I. about Russia and Mr. Trump in an effort to gin up investigative activity to hurt his 2016 campaign.Mr. Durham has also apparently weighed bringing some sort of action against Perkins Coie as an organization. Outside lawyers for the firm recently met with the special counsel’s team and went over the evidence, according to other people familiar with their discussions, arguing that it was insufficient for any legal sanction.The lawyers for Perkins Coie and the firm’s managing partner did not respond to phone calls and emails seeking comment.Mr. Sussmann, 57, grew up in New Jersey, attending Rutgers University and then Brooklyn Law School. He spent 12 years as a prosecutor at the Justice Department, where he came to specialize in computer crimes. He has since worked for Perkins Coie for about 16 years and is a partner in its privacy and cybersecurity practice. Mr. Sussmann and his firm have been particular targets for Mr. Trump and his supporters.In October 2018, a Wall Street Journal columnist attacked Mr. Sussmann, calling him the “point man for the firm’s D.N.C. and Clinton campaign accounts,” apparently conflating him with Mr. Elias. Perkins Coie responded with a letter to the editor saying that was not Mr. Sussmann’s role and that the unnamed client on whose behalf he spoke to the F.B.I. had “no connections to either the Clinton campaign, the D.N.C. or any other political law group client.”Four months later, Mr. Trump attacked Mr. Sussmann by name in a slightly garbled pair of Twitter posts, trying to tie him to the Clinton campaign and to the Steele dossier.Raising the specter of politicization in the Durham inquiry, lawyers for Mr. Sussmann are said to have argued to the Justice Department that Mr. Baker’s recollection was wrong, immaterial and too weak a basis for a false-statements charge. There were no other witnesses to the conversation, the people familiar with the matter said.In a deposition to Congress in 2018, Mr. Baker said he did not remember Mr. Sussmann “specifically saying that he was acting on behalf of a particular client,” but also said Mr. Sussmann had told him “he had cyberexperts that had obtained some information that they thought should get into the hands of the F.B.I.”However, Mr. Durham’s team is said to have found handwritten notes made by another senior F.B.I. official at the time, whom Mr. Baker briefed about the conversation with Mr. Sussmann, that support the notion that Mr. Sussmann said he was not there on behalf of a client. It is not clear whether such notes would be admissible at trial under the so-called hearsay rule.A lawyer for Mr. Baker declined to comment.Mr. Durham has been under pressure to deliver some results from his long-running investigation, which began when then-Attorney General William P. Barr assigned him in 2019 to investigate the Russia inquiry. Out of office and exiled from Twitter, Mr. Trump has issued statements fuming, “Where’s Durham?” More