±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35997
New Yesterday: 1 Visitors: 162

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Where is the clone one and how to extract it?

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

gorvq7222
Senior Member
 

Where is the clone one and how to extract it?

Post Posted: Apr 16, 19 15:26

One cannot be in two places at once. Do you know what's "Dual Apps"? Manufactures like Xiaomi,Oppo,Huawei offer "Dual Apps" feature which allows users to run two different accounts of the same app on his/her phone. Let's take "Facebook" for example. The scenario is that a suspect's phone running Android 7 and we have to extract his/her "Facebook", including the original one and the clone one.

You guys could take a look at my blog and see what's going on.
www.cnblogs.com/pieces...20901.html  
 
  

passcodeunlock
Senior Member
 

Re: Where is the clone one and how to extract it?

Post Posted: Apr 16, 19 20:22

Nice article, still, I don't understand why people usually try gaining data the hard way.

As for LE, FB is responding to legal queries. Why bother with some or partial data from a device, if you can get the full content of both accounts directly from FB ?!
_________________
Apple passcode unlock + decrypted filesystem dump, Android user locks unlock + physical dump with decrypted userdata partition. We provide our services world-wide, but we reserve the right for choosing which tasks we take and which we deny! 
 
  

UnallocatedClusters
Senior Member
 

Re: Where is the clone one and how to extract it?

Post Posted: Apr 16, 19 23:04

Thank you - I had never heard of "clone" applications.

This could be important for requesting information from Facebook given the fact that there might be two unique Facebook accounts' data to collect rather than one.  
 
  

gorvq7222
Senior Member
 

Re: Where is the clone one and how to extract it?

Post Posted: Apr 17, 19 13:05

Thank you guys. Actually "Dual Apps" feature supports not only Facebook, but also supports apps like WeChat, WhatsApp, LINE,QQ etc. I don't think those company will spare no effort in cooperating with LE.  
 
  

passcodeunlock
Senior Member
 

Re: Where is the clone one and how to extract it?

Post Posted: Apr 17, 19 14:47

- gorvq7222
Let's take "Facebook" for example. The scenario is that a suspect's phone running Android 7 and we have to extract his/her "Facebook", including the original one and the clone one.


@gorvq7222: I posted my reply based on your example, which was Facebook in this specific case. Generally speaking and considering other apps, when the manufacturer isn't cooperative with the law enforcement organizations, your post has way more sense Smile
_________________
Apple passcode unlock + decrypted filesystem dump, Android user locks unlock + physical dump with decrypted userdata partition. We provide our services world-wide, but we reserve the right for choosing which tasks we take and which we deny! 
 

Page 1 of 1