Has anyone had any luck using a Cellebrite to clone a sim card to get around the user password? If it does work, do you get the same information you'd get if the password was known and the phone was unlocked? Also after cloning the sim card, once the case is finished is there any way to wipe the sim card for re-use in other cases?
Thank you in advance,
rayp,
My experience in cellular forensics is limited, but I thought I’d take a stab at your question. I didn’t know that a Cellebrite could clone a SIM card? I am assuming you don’t have Device Seizure or XRY? I recall from my forensics class Device Seizure was able to acquire the pin code allowing us to get right in. I would think a cloned card could be reused, but with that being said, If I were cloning cards frequently I’d get a bunch of evidence grade blanks. Depending on the severity of the case, appeal process and such, ou may want to keep those cloned cards around for a while.
As far as whether or not the information would be the same if you had the pass code I don’t know. I would assume it would not change the data? I’m sure there are highly qualified people in the forum that will give you the correct answer, but I would caution you against relying only on what you are told here. Run an experiment with phones that you have the codes for and see for yourself. That way when the defense attorney asks,you can give an educated response. Just an idea wink
Now maybe one of the experts will chime in?
If I were cloning cards frequently I’d get a bunch of evidence grade blanks.
I think I understand what ED is saying here that maybe use a previously unused but read/writeable ICC/UICC and you may wish to consider (research) the difference in ICC/UICC specifications, and whether Gold or Silver wafer might suit your purposes.
You may also want to understand access and how the module (SIM) provides the structure for read/write and of course what content should be included for your clone.
As an observation in relation to manufacturing using evidence/forensic procedures in the making process, there is at the moment no manufacturing standard for "evidence grade" dealing with ICC/UICC cards. If you are offered such a product seek direct 'proof' as to which Standard defines an approved manufacturing specification determining the requirement for "evidence grade", and identify the authority that has independently verified/approved that the ICC/UICC you are being offered is of "evidence grade" standard.
If you haven't read this piece, it may offer some addtional observations for you
http//