±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 34611
New Yesterday: 1 Visitors: 184

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

BQ AQUARIS X - Fake user accounts?

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

BQ AQUARIS X - Fake user accounts?

Post Posted: Thu Mar 22, 2018 4:40 am

Hi

I am currently looking at my 3rd BQ AQUARIS X handset, and I find that all three have exactly the same features ... e.g. All look completely fresh, all do not allow access to enable developer mode, all have limited number of settings menu items. SOMETHING STINKS!

I have heard of (but not yet experienced) a fake partition which exists when an android device is either incorrectly started or an incorrect PIN/passcode is used (or there is a 2nd PIN in existence which triggers the fake account).

Is there anyone who can shed some light on this for me please? I need to be sure I am not looking at a fake user account on the devices.

If my analysis of the situation is correct ... how do I get the device back to the original PIN entry screen, as right now it starts to an unprotected swipe unlock.

Regards....  

dybmowst
Newbie
 
 
  

Re: BQ AQUARIS X - Fake user accounts?

Post Posted: Thu Mar 22, 2018 5:05 am

I have actually been looking into this device over the last couple of weeks and it seems the device is running some sort of dual-boot system, starting the device normally takes you into a partition that does not allow USB debugging or anything really do be done on the device. You can't see the IMEI, you can't turn on WiFi or Bluetooth, nothing!

However, booting the device while holding volume down seems to take you to a password screen which I am guessing will take you into the "real" operating system after entering the correct password, unfortunately the password is unknown for the device that I have. I've investigated a few other bq Aquaris devices but none of the others seem to have had this dual-boot system.  

Last edited by TobiasJ on Tue Apr 03, 2018 7:47 am; edited 1 time in total

TobiasJ
Newbie
 
 
  

Re: BQ AQUARIS X - Fake user accounts?

Post Posted: Thu Mar 22, 2018 5:16 am

Thanks, I will have a look into that. Though I think you're right about the dual boot thing ... trouble is that a forensic environment doesn't really allow much room for experimentation on live exhibits, so if there any more experiences out there, then I would love to hear them.

Regards .....  

dybmowst
Newbie
 
 
  

Re: BQ AQUARIS X - Fake user accounts?

Post Posted: Thu Mar 22, 2018 9:19 am

These are running the encrochat OS in the secure partition. If you speak to NTAC they might have some capabilities.  

agolding
Member
 
 
  

Re: BQ AQUARIS X - Fake user accounts?

Post Posted: Thu Mar 22, 2018 9:30 am

Ah, that makes some sense too ... thanks for that good info.

Regards .....  

dybmowst
Newbie
 
 
  

Re: BQ AQUARIS X - Fake user accounts?

Post Posted: Fri Apr 13, 2018 11:01 am

I also now have an Aquaris X with EncroChat related to a pretty serious offence.

I'm still researching and trying to get my agency to buy me a test device but has anyone had any success with this device? I see that the X5 could be compromised but I haven't found anything on the X yet?

Thanks
Ian  

iwhiffin
Newbie
 
 
  

Re: BQ AQUARIS X - Fake user accounts?

Post Posted: Thu Jul 19, 2018 1:21 pm

i've got some Aquaris X with encrochat OS. Now ufed can do physical via bootloader but these phone have locked EDL mode, i'm looking for a testpoint on the pcb. Any hint?  

Bypx
Newbie
 
 

Page 1 of 2
Go to page 1, 2  Next