Editing iPhone SMS ...
 
Notifications
Clear all

Editing iPhone SMS messages

15 Posts
7 Users
0 Likes
2,493 Views
sward6
(@sward6)
Posts: 23
Eminent Member
Topic starter
 

I'm reviewing a case where Subject A (supervisor) sent Subject B (employee) threatening job-related text messages. Subject A admits to sending Subject B text messages, but states the text messages were edited, and were not her exact words. Subject A was not willing to consent to a search of her text messages. All we have is Subject B's iPhone 3.

I have researched this matter and have located ways to access sms.db and edit/delete messages, but only when the phone has been jailbroken. Is it possible to edit messages w/o the phone be jailbroken?

 
Posted : 12/02/2013 3:55 am
(@randomaccess)
Posts: 385
Reputable Member
 

I can think of two things to test.

1. Backup phone, unpack backup and edit sms.db, restore phone.
2. iphone explorer may provide you access to write to the file system but im not sure

other than that, unless its jailbroken id imagine its harder to edit the texts. can you get the other phone used in the conversation?

 
Posted : 12/02/2013 7:56 am
(@coligulus)
Posts: 165
Estimable Member
 

2. iphone explorer may provide you access to write to the file system but im not sure

I'm pretty sure that unless the device has been jailbroken there is no way to mount the device and access this location using a file explorer.

 
Posted : 12/02/2013 3:40 pm
sward6
(@sward6)
Posts: 23
Eminent Member
Topic starter
 

I can think of two things to test.

1. Backup phone, unpack backup and edit sms.db, restore phone.
2. iphone explorer may provide you access to write to the file system but im not sure

other than that, unless its jailbroken id imagine its harder to edit the texts. can you get the other phone used in the conversation?

No - the other half is not willing to give up their cellular telephone (I wonder why??).

I guess my follow-up question would be, if extracted via Cellebrite, and the software version is iBoot-931.71.16, that would indicate it has not been jailbroken, correct? I've never come across a jailbroken file extraction.

 
Posted : 12/02/2013 10:16 pm
(@randomaccess)
Posts: 385
Reputable Member
 

quickest way to tell is look for cydia on the phone.
other than that i havent had much to do with jailbreaking

 
Posted : 13/02/2013 1:44 am
TomP
 TomP
(@tomp)
Posts: 36
Eminent Member
 

Don't rule out the simple option that the recipient of the threatening messages may have saved their own number under the senders name. They could then have written the messages to them self. The handset would present them in both an incoming and outgoing format. The person could then delete the duplications and it would look like a conversation with that named person.

Obviously I haven't seen the device so can't comment on what is there. Just thinking of ways someone might make it appear that they had received texts that they may have not. Given the attitude of the person who supposedly did the sending, it sounds fairly suspicious.

 
Posted : 13/02/2013 2:48 pm
sward6
(@sward6)
Posts: 23
Eminent Member
Topic starter
 

Don't rule out the simple option that the recipient of the threatening messages may have saved their own number under the senders name. They could then have written the messages to them self. The handset would present them in both an incoming and outgoing format. The person could then delete the duplications and it would look like a conversation with that named person.

Obviously I haven't seen the device so can't comment on what is there. Just thinking of ways someone might make it appear that they had received texts that they may have not. Given the attitude of the person who supposedly did the sending, it sounds fairly suspicious.

I've already confirmed the messages were sent from the suspect. The sent/received messages matched the times that AT&T had listed on their text log for the victim's phone number. Plus the suspect admitted to sending the messages, they are just stating that the messages had been edited after the message was received.

 
Posted : 13/02/2013 9:31 pm
PaulSanderson
(@paulsanderson)
Posts: 651
Honorable Member
 

Do AT&T have the size of the messages logged?

 
Posted : 13/02/2013 9:42 pm
sward6
(@sward6)
Posts: 23
Eminent Member
Topic starter
 

Do AT&T have the size of the messages logged?

Unfortunetly, no. That would have been awesome, though. It just listed time/date and to/from and type of message (MMS/SMS).

 
Posted : 13/02/2013 9:45 pm
(@randomaccess)
Posts: 385
Reputable Member
 

Don't rule out the simple option that the recipient of the threatening messages may have saved their own number under the senders name. They could then have written the messages to them self. The handset would present them in both an incoming and outgoing format. The person could then delete the duplications and it would look like a conversation with that named person.

If you did that it should show up on the extraction.
Ie cellebrite will show you the phone number used and then match it with the name in your address book. If you changed the address book to reflect a different name and then sent the messages from your own number, your own number would be reflected in the text message.

 
Posted : 14/02/2013 1:10 am
Page 1 / 2
Share: