Russian Forensic Software Exploits a Security Breach in Android OS for Physical Acquisition of Data from Smartphones

Share Article

Android Rooting add-on for Oxygen Forensic Suite 2011 from Oxygen Software opens complete access to the file system and user data of smartphones running Android OS ver. 2.0-2.2

News Image
The add-on breaks security system of any smart phone running Android OS 2.0-2.2 which, according to stats, are the most popular among users of Android devices, making up more than 85%. In other words, 4 out of 5 Android smart phones are exposed to hacking

Oxygen Software, the developer of forensic software for police and security services, announces a special module for Oxygen Forensic Suite 2011 – Android Rooting add-on. The add-on takes advantage of a security breach in Android OS for physical acquisition of all data from a smart phone.

Android Rooting add-on exploits a vulnerability discovered by the engineers from Oxygen Software. The method takes advantage of a security breach in Android OS which allows the program to acquire root access for physical extraction of the file system and user data from Android smart phones. The add-on breaks security system of any smart phone running Android OS 2.0-2.2 which, according to statistics, are the most popular among users of Android devices, making up more than 85%. In other words, 4 out of 5 Android smart phones are exposed to hacking.

After installation, the functionality of root-access is integrated into Data Extraction Wizard of Oxygen Forensic Suite 2011. The program automatically acquires root-access, and then performs a physical acquisition of data from the device. File system is not all that can be extracted from the smart phone. The program extracts application data including logins, passwords, history and temporary files; geo-location data of the places visited by the phone user; deleted information and much more. In addition, Oxygen Forensic Suite 2011 v.3.4 adds multi-account support for phonebooks, extraction of MMS and user dictionaries and some other features.

"The smart phone is particularly valuable as a source of forensically important information about the personality of its user and his or her lifestyle. For example, many mobile applications (Twitter, Netflix, LinkedIn) store unencrypted personal data, making it easy for us to acquire passwords, names, messages, history of search queries and even information on places that are regularly visited by the phone user if we are talking about geolocation services like Foursquare. When combined into a coherent whole, this information can tell us who is who: who the phone user communicates with, what that person does at home and in the office and this goes on and on," – commented on the release of the add-on Nickolay Golubev, Public Relations Manager, Oxygen Software.

"Besides, smart phone data can help the forensic expert to investigate crimes. For example, after a recent scandal when Apple and Google were accused of spying on their users, everyone knows that smart phones record GPS data of the locations we visit without our consent and store them in the unencrypted form. Using this data, we can learn about the places visited by the phone user and find out if the person was at the crime scene. All movements of the user are reconstructed as waypoints on Google Maps," – added Mr. Golubev.

An important specialty of root-access is that it is available only for the time of data extraction. After restarting the smart phone, access rights return to the original state, which is an important prerequisite for a forensic investigation.

About Oxygen Forensic Suite 2011:

Oxygen Forensic Suite 2011 is a forensic solution of complete cycle, which automates the entire process of forensic investigation of a mobile phone from automatic access to the device and full extraction of data from the phone to analysis and generation of reports. The forensic expert can analyze a wide range of information, including data entered from the keypad (user names, passwords); photos, videos and MP3 records; history of calls; contacts, calendar events; cache of the browser with addresses of visited websites; email messages, SMS messages (including deleted ones); voice mail records; Lifeblog data (all main events in the phone with geographic coordinates), GPS data that shows the route of the phone user on Google Maps and much more.

The program supports all mobile devices, running Android, Windows Mobile, Apple iOS, including iPhone, iPad, iPod Touch of all generations and versions. Oxygen Forensic Suite 2011 Analyst license costs $1999.

To learn more about Oxygen Forensic Suite 2011, please visit http://www.oxygen-forensic.com . There you can also download the trial version to test the program in full mode for 30 days.

About Oxygen Software:

Oxygen Software was founded in year 2000. Since that time the company develops PC software for mobile devices and offers the most advanced tool for forensic data extraction from cell phones and smartphones, Oxygen Forensic Suite 2011. Committed to the slogan "Oxygen Forensic Suite - Smart Forensics for Smart Phones", Oxygen Software puts all of its efforts into providing the most exhaustive extraction of forensic data from devices running on Symbian OS, Windows Mobile, Blackberry, iPhone OS, Android. As a result, Oxygen Forensic Suite consistently achieves the highest accolades in all types of tests for extracting more data than any competitor. For more information about the company, please visit http://www.oxygen-forensic.com

###

Share article on social media or email:

View article via:

Pdf Print

Contact Author

NICKOLAY GOLUBEV
press@oxygensoftware.com
(877)-969-9436
Email >
Visit website

Media