theres a case where a person holding an iphone 4 with iOS 6. something and that was jailbroken , he was told my a third party (one of his contacts) that he has been recieving messages from him from (facebook, whatsapp and viber) with profanity and porn pics.
However when he went back to his phone, he did not find any of those messages sent, however his friend (contact) showed him from his phone those messages.
So maybe an explainiation?
Most of the messages occurred at late night while he was sleeping, he quarantines that no one had physical access at those time.
Hmm…??
Jailbroken phone, customized whatsapp viber and facebook? remote access? fake numbers?
Note he then factory restored the phone and bought the new iphone 5s and never had the same problem.
The most obvious explanation He lied and did send the messages
Was only one person reporting this issue? It may be that the recipient was the one whose phone had a virus/malware and that it was simply spoofing communications from his contact list.
Perhaps someone had access to his phone and/or figured out his FB password?
You can login with a username and password and send messages from any device using FB.
Whatsapp has a phone number verification. When you install the app, it tells you to input your phone number and it sends you a text message to that number with a PIN, which you have to input that PIN into the Whatsapp to complete verification. Perhaps someone close to him had access to his phone to get the PIN verification?
Ofcourse, this does not explain why the messages stopped once the subject purchased a new phone.
Hmmmm, thanks everyone.
Yeah facebook password makes sense, but what about whatsapp and viber?
Is he a liar? could also be an option.. but why would he send those messages? and why would he complain..
hm… ideas?
Does the contact/3rd party who received the messages have an iPhone as well??
If yes & if he received the messages via the persons Facebook, there is a way of identifying whether the mobile phone was used to send the Facebook messages, or whether it was done via a web browser. This might help show whether he lied (mobile phone was used) or whether he was hacked online (web browser was used).
If you are interested, here's the simplified version of the steps to take.
(Assuming you have taken a data extraction of the receiving handset)
1. Navigate to the following location
mobile/Applications/com.facebook.Facebook/Library/cache/4110.0/Three20
2. Within the 'Three20' folder you'll find many XML files containing loads of strings of Facebook data including artefacts like fb ID, to chat ID and so on… Locate & open the relevant XML file with the notable messaging data.
3. Locate <tags>source</tags> XML entry. (Records how message was sent). This will either be
<tags>sourcemobile</tags> - Mobile app
<tags>sourcechat</tags> - Web browser - Live Chat window
<tags>sourceweb</tags> - Web browser - Messages View
…if he does not have an iPhone, then you did not need to read the above! wink
DCS1094 This is a vey interseting approach, i Like it. I will have to check whether the recieving party has iphone. Lets assume he has android, is there a smiliar way to do that, this is really interesting.
Many thanks.
I am not as familiar with fb artifacts on Android OS, however I would assume similar fb data does exist within the file system. You should at least find friends.db file and others. This is a starting place… com.facebook.Facebook.PList file can also contain last login details etc which might help?
With chat applications such as Viber/WhatsApp it's all done over 3G/Wi-Fi; one thing you could look at is Wi-Fi data and how the apps interact with Wi-Fi. But you'll probably be limited.
Really, the answer could be as simple a kbertens stated, that he for whatever reason did send the messages and then deleted them… you could do a physical, but oh wait… the iPhone has since been reset and he now has a new iPhone. wink