Hello All,
I am working a case were the owner of the phone located some text messages relevant to his situation which were on a MacBook Pro laptop. The settings on his laptop were "do not delete messages ever" and his new phone was set to "delete after one year." He changed the setting on his phone and then the laptop and phone synced. The messages in question then popped up on his device.
I conducted an extraction of his device (iPhone 14) and recovered the messages in question. The message thread dated back to 2020. I did not note anything out of the ordinary, and they appear to be legit.
Is anyone aware of an app or method that would facilitate spoofing messages with a date/timestamp going back that far?
I have done some research but haven't been able to come up with anything that would make that possible. Any insight on this topic would be greatly appreciated.
I'm not sure I understand the question.
My first thought would be to ask why do you think it's "spoofing" and not just a sync of old messages from somewhere a copy still exists (computer/iCloud) following the change of setting on the phone?