Monday, November 4, 2024
HomeMobile AttacksThis is the Israeli company that can hack any iPhone and Android...

This is the Israeli company that can hack any iPhone and Android smartphone

Published on

Malware protection

If Cellebrite sounds familiar, that’s because the name of this Israeli company came up during Apple’s standoff with the FBI over breaking iPhone encryption. The agency managed to crack the San Bernardino iPhone with the help of an undisclosed company.

Many people believe it was Cellebrite that came to the rescue. Meanwhile, the company revealed that it could hack just about any modern smartphone, but refused to say whether its expertise is used by the police forces of repressive regimes.

Cellebrite talked to the BBC about its technology, including equipment and software.

- Advertisement - SIEM as a Service

“I was given a demo using a Samsung phone supplied by the company,” BBC’s Rory Cellan-Jones said. “It was running quite an old version of Android – 4.2 – but I was allowed to take it away for half an hour, put a password on it, and use it to take photos and send a text message.”

Upon his return, Yuval Ben-Moshe from Cellebrite took the phone, plugged it into a “chunky tablet computer, and disabled the lock code.

“We can pretty much pull up any of the data that resides on the phone,” he said and downloaded all the photos taken with the device.

When asked whether this kind of hack applies to other devices, Ben-Moshe said that his company could access data on “the largest number of devices that are out there in the industry.” Even the iPhone 7.

“We can definitely extract data from an iPhone 7 as well – the question is what data.”

The security expert said that even data from encrypted services such as WhatsApp can be accessed hinting that not all communication is totally secure.

The iPhone may be hackable to some extent, but that doesn’t mean that Cellebrite cracked the iPhone 5c that belonged to one of the San Bernardino shooters. Or at least, the company would not comment on any of its customers.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a...

Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

Researchers warn of ongoing spear-phishing attacks by Russian threat actor Midnight Blizzard targeting individuals...

Sophisticated Phishing Attack Targeting Ukraine Military Sectors

The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215...

Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks

Researchers have identified a network of compromised devices, CovertNetwork-1658, used by Chinese threat actors...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Hardcoded Creds in Popular Apps Put Millions of Android and iOS Users at Risk

Recent analysis has revealed a concerning trend in mobile app security: Many popular apps...

Research Unveils Eight Android And iOS That Leaks Users Sensitive Data

The eight Android and iOS apps fail to adequately protect user data, which transmits...

Beware Of Dating Apps Exposing Your Personal And Location Details To Cyber Criminals

Threat actors often attack dating apps to steal personal data, including sensitive data and...