±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 36209
New Yesterday: 7 Visitors: 166

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

WHATSAPP WEB MALWARE

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

nightworker
Senior Member
 

WHATSAPP WEB MALWARE

Post Posted: May 23, 16 16:02

i have a customer says that his wife reading his whats app messenger chats

then we see whats app web connected android phone

on gui we cannot see ip adress or something that could be evidence

is there any file or ip adress location about whatsapp web artifact on android os  
 
  

SamBrown
Senior Member
 

Re: WHATSAPP WEB MALWARE

Post Posted: May 23, 16 18:58

Yes, check the file web_sessions.db in the com.whatsapp/databases folder.  
 
  

RolfGutmann
Senior Member
 

Re: WHATSAPP WEB MALWARE

Post Posted: May 23, 16 19:13

yup, known phenomena  
 
  

nightworker
Senior Member
 

Re: WHATSAPP WEB MALWARE

Post Posted: May 24, 16 17:19

there isnt web session database file what else can be done  
 

Page 1 of 1