Thursday, May 8, 2025
HomeMobile AttacksThis is the Israeli company that can hack any iPhone and Android...

This is the Israeli company that can hack any iPhone and Android smartphone

Published on

SIEM as a Service

Follow Us on Google News

If Cellebrite sounds familiar, that’s because the name of this Israeli company came up during Apple’s standoff with the FBI over breaking iPhone encryption. The agency managed to crack the San Bernardino iPhone with the help of an undisclosed company.

Many people believe it was Cellebrite that came to the rescue. Meanwhile, the company revealed that it could hack just about any modern smartphone, but refused to say whether its expertise is used by the police forces of repressive regimes.

Cellebrite talked to the BBC about its technology, including equipment and software.

- Advertisement - Google News

“I was given a demo using a Samsung phone supplied by the company,” BBC’s Rory Cellan-Jones said. “It was running quite an old version of Android – 4.2 – but I was allowed to take it away for half an hour, put a password on it, and use it to take photos and send a text message.”

Upon his return, Yuval Ben-Moshe from Cellebrite took the phone, plugged it into a “chunky tablet computer, and disabled the lock code.

“We can pretty much pull up any of the data that resides on the phone,” he said and downloaded all the photos taken with the device.

When asked whether this kind of hack applies to other devices, Ben-Moshe said that his company could access data on “the largest number of devices that are out there in the industry.” Even the iPhone 7.

“We can definitely extract data from an iPhone 7 as well – the question is what data.”

The security expert said that even data from encrypted services such as WhatsApp can be accessed hinting that not all communication is totally secure.

The iPhone may be hackable to some extent, but that doesn’t mean that Cellebrite cracked the iPhone 5c that belonged to one of the San Bernardino shooters. Or at least, the company would not comment on any of its customers.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Critical Vulnerability in Ubiquiti UniFi Protect Camera Allows Remote Code Execution by Attackers

Critical security vulnerabilities in Ubiquiti’s UniFi Protect surveillance ecosystem-one rated the maximum severity score...

IXON VPN Client Vulnerability Allows Privilege Escalation for Attackers

A critical security vulnerability in IXON’s widely used VPN client has exposed Windows, Linux,...

Cisco IOS Software SISF Vulnerability Could Enable Attackers to Launch DoS Attacks

Cisco has released security updates addressing a critical vulnerability in the Switch Integrated Security...

Seamless AI Communication: Microsoft Azure Adopts Google’s A2A Protocol

Microsoft has announced its support for the Agent2Agent (A2A) protocol, an open standard developed...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

MediaTek Releases Security Patch to Fix Vulnerabilities in Mobile and IoT Devices

MediaTek, a prominent semiconductor company specializing in mobile, IoT, and multimedia chipsets, has announced...

CISA Released Secure Mobile Communication Best Practices – 2025

The Cybersecurity and Infrastructure Security Agency (CISA) has released new best practice guidance to...

Ghost Tap Attack, Hackers Stolen Credit Card Linked To Google Pay Or Apple Pay

Threat actors are exploiting a new cash-out tactic called "Ghost Tap" to siphon funds...