Encrypted Samsung G...
 
Notifications
Clear all

Encrypted Samsung Galaxy S9

12 Posts
7 Users
0 Likes
2,372 Views
Northwind
(@northwind)
Posts: 33
Eminent Member
Topic starter
 

Is it possible to get an image from the encrypted Samsung Galaxy S9-SM-G965F mobile phone? The password is unknown. Thanks.

 
Posted : 14/01/2019 12:34 pm
owl1331
(@owl1331)
Posts: 18
Eminent Member
 

I have been working on the same thing on a Galaxy S9+. Mine does not have a password, but I have only been able to get texts, call logs, pics and SD card data. I am having a lot of trouble getting any app data off (even though I can see there are Facebook messages). I did a manual ADB backup without any luck. Will be interested to hear if there are any other solutions!

 
Posted : 14/01/2019 3:20 pm
(@hunter)
Posts: 32
Eminent Member
 

Factory reset the phone. Gain root access(very few roots currently available for S9 currently) run credible recovery software. ie magnet aquire, paraben android recovery stick. Or shell out 4000$ and get MSAB or cellbrite

 
Posted : 16/01/2019 10:01 pm
(@arcaine2)
Posts: 235
Estimable Member
 

Factory reset the phone.

Good luck recovering data after factory reset on encrypted phone…

 
Posted : 18/01/2019 7:29 pm
(@tinybrain)
Posts: 354
Reputable Member
 

You should get in touch with passcodeunlock - a FF member - specialized in your issue.

See here

https://www.forensicfocus.com/Your_Account/profile=passcodeunlock/

 
Posted : 19/01/2019 3:37 am
(@tinybrain)
Posts: 354
Reputable Member
 

Any further help required?

 
Posted : 19/01/2019 4:55 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

If help is needed, please not that I'm on vacation until the end of the month, with limited internet and phone access.

@TinyBrain nobody contacted me regarding the S9 devices, so probably those aren't important cases.

 
Posted : 19/01/2019 7:04 pm
(@tinybrain)
Posts: 354
Reputable Member
 

Happy holiday -))

 
Posted : 19/01/2019 9:52 pm
Bolo
 Bolo
(@bolo)
Posts: 97
Trusted Member
 

Hello,

Data after factory reset can be recovered using NAND protocol - we performed many of such task which fully positive results and recovered many data even when reading over ISP, SD protocol (ChipOff) brings no results at all but we tried this right now on NOT encrypted phones. Yours phones are encrypted out of box……

P.S
Performing factory reset on phone which is encrypted complicate a lot this but it's NOT impossible as @Passcode writes. While normal approach of encrypted device will be decrypting those similar need to be done after recovery over NAND but……. there is one trick . This can be done ONLY if we will get full logicial structure so perfectly reconstructed NAND image recovery which is not always possible - in case we will get partial RAW it will be very hard or almost impossible to apply decryption key on fragmented data to decrypt those correctly.

 
Posted : 20/01/2019 9:14 pm
Northwind
(@northwind)
Posts: 33
Eminent Member
Topic starter
 

I would like to thank the members who helped me with this. The information you provide is very important to me. This information contributed a lot to our work.

 
Posted : 21/01/2019 9:01 am
Page 1 / 2
Share: