Encrypted Samsung Galaxy S9
Is it possible to get an image from the encrypted Samsung Galaxy S9-SM-G965F mobile phone? The password is unknown. Thanks.
I have been working on the same thing on a Galaxy S9+. Mine does not have a password, but I have only been able to get texts, call logs, pics and SD card data. I am having a lot of trouble getting any app data off (even though I can see there are Facebook messages). I did a manual ADB backup without any luck. Will be interested to hear if there are any other solutions!
Factory reset the phone. Gain root access(very few roots currently available for S9 currently) run credible recovery software. ie magnet aquire, paraben android recovery stick. Or shell out 4000$ and get MSAB or cellbrite
Factory reset the phone.
Good luck recovering data after factory reset on encrypted phone…
Any further help required?
If help is needed, please not that I'm on vacation until the end of the month, with limited internet and phone access.
@TinyBrain nobody contacted me regarding the S9 devices, so probably those aren't important cases.
Happy holiday -))
Data after factory reset can be recovered using NAND protocol - we performed many of such task which fully positive results and recovered many data even when reading over ISP, SD protocol (ChipOff) brings no results at all but we tried this right now on NOT encrypted phones. Yours phones are encrypted out of box……
Performing factory reset on phone which is encrypted complicate a lot this but it's NOT impossible as @Passcode writes. While normal approach of encrypted device will be decrypting those similar need to be done after recovery over NAND but……. there is one trick . This can be done ONLY if we will get full logicial structure so perfectly reconstructed NAND image recovery which is not always possible - in case we will get partial RAW it will be very hard or almost impossible to apply decryption key on fragmented data to decrypt those correctly.
I would like to thank the members who helped me with this. The information you provide is very important to me. This information contributed a lot to our work.
@Bolo, of course, but recovering from NAND is lower level and destructive. Still, even after reviving the phone by using a different UFS memory chip and rooting there's no guarantee that you'll be able to recover encryption key that was used before. Or there some new discoveries on that field as well?
Yes - recovery over NAND is low level memory access which is destructive where you access directlly cells without using controller as a bridge…. there are no guarantee what we will get after this since nobody knows how GB mechanism works/when system send clear command , how often etc.. If Trim CMD was send then there can be no Garbage blocks at all so there are nothing to read or decrypt…. many factors but…. if someone tell me data is important no metter at what cost then its worth a try 😉 As Alexander Great says "There are no impossible things, they are only difficult to do"