She left everything behind except her white puffer jacket and her phone, still missing to this day.
It has been almost two months since Delphine Jubillar, 33, vanished from her house in Cagnac-les-Mines, near Albi (Tarn).
The morning of his disappearance, his cell phone transmits one last time within 2 km of the marital home, then turns off… Until last Tuesday.
That evening, the device connected from 9 p.m. and most of the night, as Actu Toulouse revealed.
It was relatives of the nurse who spotted this connection on Facebook and reported it.
In short: the green light of Messenger, the messaging system of the social network, has come on.
The Toulouse prosecutor's office (Haute-Garonne) confirms: “There was a reactivation of the victim's mobile phone, in particular his Facebook and Messenger accounts.
"
READ ALSO>
Disappearance of Delphine Jubillar: a discreet life at the rate of children and work
But the connection to Facebook is only "the tip of the iceberg", explains Daniel Mouly, specialist in digital security.
When a phone is switched off or discharged, it is not possible to switch it back on remotely, nor to locate it.
When you turn it on again, the device triggers a whole chain of signals.
"The SIM card would activate, find an antenna, seek authorization to connect to it, connect to it ... Multiple traceable exchanges that investigators have seen", estimates this forensic expert in computer science and forensics with the Bordeaux Court of Appeal (Gironde).
In summary, if Delphine Jubillar's phone is well under the surveillance of investigators, and it really turned on as indicated by the prosecution, the gendarmes should be able to locate it.
But to date, there is no indication that this is the case.
The hacker's hypothesis swept away
Regarding the Facebook application installed on this mobile phone, it is only at the very end of the reactivation that the phone, if it had been switched on again, would have connected to the social network, drawing the attention of the "monitoring committee" which daily scans the page of the young missing nurse.
The last phase of ignition in a way.
The thesis of a possible "hacker" or curious a little gifted in computer science who would have taken control of Delphine Jubillar's Facebook account, Daniel Mouly sweeps it away: "Nowadays, it is very complicated to connect to a Facebook account if you are not on the machine which has already been used to access the account.
Facebook detects if a new environment wants to connect: they have seriously secured in recent years.
Even for us experts, it is not that simple ”.
Unless the gendarmes, while investigating, trigger these connections.
Because for a month, Delphine's Facebook account has been the subject of various connections, causing false hopes for the family and relatives of the young woman.
Some of these accesses are thus attributed to investigators who search their entire digital life in search of the slightest clue.
But that's not surprising, and these investigator-provoked connections even occur often.
“Digital forensic software often does these things.
It can be a false maneuver, or an automatic maneuver because the gendarmes have launched a process during which the software has tried to access all the accounts ”, trivializes Daniel Mouly.
A connection produced by forensic software?
"It can happen to me," further illustrates the legal expert.
When I use software to assess all the content of a device, I can, for example, put the system online.
For example to suck the information of a WhatsApp account, and all the messages exchanged.
This will cause a connection to the account but it is not for all that the person who connects ... "
Morning essentials newsletter
A tour of the news to start the day
Subscribe to the newsletterAll newsletters
Accidental or not, if the investigators are not at the origin of this connection, a judicial requisition can be sent to Facebook which can transmit the IP address, that is to say the identification number of the device. used to make this connection.
“That's what they do most of the time, if they see activity on an account they are monitoring,” describes Daniel Mouly.
They ask Facebook to provide the IP address with which the account was activated.
From there, we can tell if the connection is from a phone or a PC.
And therefore to go back to the person at the origin of the mysterious connection.
