Lawyer Investigated for Helping Criminal Group Surveil Individual
Marjorie Moscoso Tracked Man and Shared Registries in Edwin Vargas Case
Defense attorney Marjorie Moscoso participated in the location and surveillance of a third party in coordination with a criminal organization while representing suspected drug trafficker Edwin Vargas, known as “Sobrino,” according to an investigation.
The Tech TL;DR:
- Investigators recovered photographs, physical descriptions, and vehicle registration lookups directly from the cellular device of sub-leader William Salmerón following a data extraction.
- Surveillance logs and communication records establish that Moscoso allegedly acted as a communications bridge between Vargas while imprisoned and active operations.
- La Fiscalía decomisó el teléfono de Moscoso durante la audiencia de medidas cautelares del caso Éxodo para profundizar en la investigación sobre su posible vinculación con el grupo.
Surveillance at Heredia Courts and Digital Evidence Extraction
In September 2024, investigators documented Moscoso inside the Tribunales de Justicia de Heredia maintaining continuous digital contact with criminal sub-leader William Salmerón. Transmitted records show the attorney forwarded photographs, physical characteristics, and clothing details of an individual of interest. OIJ logs indicate Moscoso approached the target, attempted to deduce transportation habits, and informed Salmerón that she would conduct a fixed observation post, locally termed a “fijo.” Subsequent registry lookups verified the identity of the vehicle owner’s husband, matching the descriptions sent through the messaging channels. In subsequent conversations, Moscoso sent the sub-leader photographs related to the “Caso Granero” investigation, in which Salmerón and other alleged accomplices of “Sobrino” appear as suspects.
Investigators concluded that Moscoso’s involvement exceeded standard legal representation. Case files state the attorney used internal organizational networks to resolve personal matters, transitioning from judicial advocacy into active surveillance.
Intercepted Financial Communications and Prison-to-Exterior Relays
Beyond physical surveillance, digital forensic extractions revealed message threads concerning financial disputes and asset management. On December 6, 2025, Moscoso forwarded audio files regarding a monetary disagreement with a contractor who refused outside collection demands. The contractor stated that the business had been conducted with Adrián and not with her, and questioned why Moscoso was the one contacting him to make demands. The contractor added that if the attorney represented the individuals involved, she should appear in person at the location to resolve the issue with witnesses. The contractor also stated that he would not comply with what was requested and that, if necessary, he would await a potential lawsuit for ₡125.000. Additional Snapchat captures retrieved from screenshots taken from a monitor showed messages detailing ₡7.500.000 in loans, apartment units, and administrative matters.
The investigation notes that Salmerón compiled administrative reports and transmitted them, while Moscoso served as a channel between them during prison visits to reach Vargas, sustaining criminal enterprise operations behind bars. A series of messages exchanged via Snapchat also allowed authorities to identify communications between Vargas and Salmerón during the period when the former was deprived of liberty.

Disclaimer: The technical analyses and security protocols detailed in this article are for informational purposes only. Always consult with certified IT and cybersecurity professionals before altering enterprise networks or handling sensitive data.