Join Us!

Encrypted Samsung G...
 
Notifications
Clear all

Encrypted Samsung Galaxy S9  

  RSS
north
(@north)
Junior Member

Is it possible to get an image from the encrypted Samsung Galaxy S9-SM-G965F mobile phone? The password is unknown. Thanks.

Quote
Posted : 14/01/2019 12:34 pm
lmo1331
(@lmo1331)
New Member

I have been working on the same thing on a Galaxy S9+. Mine does not have a password, but I have only been able to get texts, call logs, pics and SD card data. I am having a lot of trouble getting any app data off (even though I can see there are Facebook messages). I did a manual ADB backup without any luck. Will be interested to hear if there are any other solutions!

ReplyQuote
Posted : 14/01/2019 3:20 pm
Hunter
(@hunter)
Junior Member

Factory reset the phone. Gain root access(very few roots currently available for S9 currently) run credible recovery software. ie magnet aquire, paraben android recovery stick. Or shell out 4000$ and get MSAB or cellbrite

ReplyQuote
Posted : 16/01/2019 10:01 pm
arcaine2
(@arcaine2)
Active Member

Factory reset the phone.

Good luck recovering data after factory reset on encrypted phone…

ReplyQuote
Posted : 18/01/2019 7:29 pm
TinyBrain
(@tinybrain)
Active Member

You should get in touch with passcodeunlock - a FF member - specialized in your issue.

See here

https://www.forensicfocus.com/Your_Account/profile=passcodeunlock/

ReplyQuote
Posted : 19/01/2019 3:37 am
TinyBrain
(@tinybrain)
Active Member

Any further help required?

ReplyQuote
Posted : 19/01/2019 4:55 pm
passcodeunlock
(@passcodeunlock)
Senior Member

If help is needed, please not that I'm on vacation until the end of the month, with limited internet and phone access.

@TinyBrain nobody contacted me regarding the S9 devices, so probably those aren't important cases.

ReplyQuote
Posted : 19/01/2019 7:04 pm
TinyBrain
(@tinybrain)
Active Member

Happy holiday -))

ReplyQuote
Posted : 19/01/2019 9:52 pm
Bolo
 Bolo
(@bolo)
Member

Hello,

Data after factory reset can be recovered using NAND protocol - we performed many of such task which fully positive results and recovered many data even when reading over ISP, SD protocol (ChipOff) brings no results at all but we tried this right now on NOT encrypted phones. Yours phones are encrypted out of box……

P.S
Performing factory reset on phone which is encrypted complicate a lot this but it's NOT impossible as @Passcode writes. While normal approach of encrypted device will be decrypting those similar need to be done after recovery over NAND but……. there is one trick . This can be done ONLY if we will get full logicial structure so perfectly reconstructed NAND image recovery which is not always possible - in case we will get partial RAW it will be very hard or almost impossible to apply decryption key on fragmented data to decrypt those correctly.

ReplyQuote
Posted : 20/01/2019 9:14 pm
north
(@north)
Junior Member

I would like to thank the members who helped me with this. The information you provide is very important to me. This information contributed a lot to our work.

ReplyQuote
Posted : 21/01/2019 9:01 am
arcaine2
(@arcaine2)
Active Member

@Bolo, of course, but recovering from NAND is lower level and destructive. Still, even after reviving the phone by using a different UFS memory chip and rooting there's no guarantee that you'll be able to recover encryption key that was used before. Or there some new discoveries on that field as well?

ReplyQuote
Posted : 21/01/2019 8:26 pm
Bolo
 Bolo
(@bolo)
Member

Yes - recovery over NAND is low level memory access which is destructive where you access directlly cells without using controller as a bridge…. there are no guarantee what we will get after this since nobody knows how GB mechanism works/when system send clear command , how often etc.. If Trim CMD was send then there can be no Garbage blocks at all so there are nothing to read or decrypt…. many factors but…. if someone tell me data is important no metter at what cost then its worth a try 😉 As Alexander Great says "There are no impossible things, they are only difficult to do"

ReplyQuote
Posted : 22/01/2019 12:17 pm
Share: