Aug 142019
 

Although the Alameda County Sheriff already had a Cellebrite cell phone extraction device it purchased in 2018 for more than $200,000, the Sheriff was recently awarded $30,000 to acquire GrayKey, which has similar functionality.

GrayKey box, from MalwareBytes

The Paul Coverdell Forensic Science Improvement Program grant is funded by the National Institute of Justice, the research, development and evaluation agency of the U.S. Department of Justice. The grant requires that the money be spent by December 31, 2019.

Acceptance of the grant was approved by the Alameda County Board of Supervisors on July 9, 2019.

The grant lists $30,000 for the “GrayKey Forensic Encryption Bypass Tool.” GrayKey is a tool for obtaining access to iPhones that are locked with a passcode or password. GrayKey is a product of GrayShift, a company cofounded by a former Apple engineer.

A May 14, 2019, quote from GrayShift lists the price of the Gray Key device as $500 plus $36,000 for an annual offline license for unlocking an unlimited number of phones. A first-year discount of $500 and a $75 domestic shipping and handling charge brought the total to $36,075.

Since the Cellebrite Universal Forensic Extraction Device (UFED) can access locked iPhones running up to iOS 12.3, it’s not clear why the Alameda County Sheriff felt the need to buy an additional tool to access locked phones. One advantage of the GrayKey is that it’s substantially cheaper than the Cellebrite device.

According to logs provided by the Alameda County Sheriff, its Cellebrite UFED has been used 30 times to attempt to gain access to locked cell phones. Information about whether the attempts were successful was redacted from the logs. The logs also show that Alameda County used its Cellebrite to attempt to unlock phones for the Piedmont Police Department, the Albany Policy Department, the Pleasanton Police Department and the UC Berkeley Police Department.

The Alameda County Sheriff received a grant in 2016 for $219,000 under the California State Homeland Security Grant Program to update its existing Cellebrite device. In its sole source documentation, the Sheriff stated, ” The upgrade is essential to allow the Crime Lab to unlock cell phones for investigative and evidentiary purposes and to extract information used in planning and/or execution of criminal and/or terrorist activities.” The sole source request was approved by the California Office of Emergency Services in a letter dated August 24, 2018.

Cellebrite devices are commonly used by law enforcement agencies to extract data from cell phones and are known to be used by the Alameda County District Attorney, California Department of Justice, Oakland Police Department, and San Leandro Police Department.

Jul 092018
 

The Alameda County District Attorney has had a tool for unlocking cell phones since at least 2016. The tool is made by Cellebrite, an Israeli company, that markets tools for extracting data from cell phones to governments, intelligence agencies, and law enforcement agencies.

Cellebrite UFED 4PC

According to a February 2018 Forbes article, Cellebrite can reportedly unlock iPhones up to and including the iPhone X running iOS 11.2.6. However, Apple introduced USB restricted mode in iOS 11.4.1 on July 9, 2018, which may impact Cellebrite’s ability to break into locked iPhones.

The difficulty of law enforcement in obtaining access to locked iPhones has been a regular complaint by the FBI for years. In 2016, Apple refused to create software to defeat the iPhone’s security in order to help the FBI obtain access to San Bernardino shooter Syed Rizwan Farook’s iPhone. The FBI reportedly paid an unknown company to obtain access to the iPhone’s content.

In April 2018, the Washington Post reported that the FBI’s claims that it could not gain access to 7,800 encrypted cell phones was wrong and that the number was likely between 1,000 and 2,000.

Two employees of the Alameda County District Attorney’s Office attended Cellebrite training courses in 2016 and 2017.

Cellebrite billed the Alameda County DA for $1,950 for “CBFL Single Unlock UFED [Universal Forensic Extraction Device]” in June 2017.

In October 2017, the Alameda County DA was billed $10,122.50 to upgrade its UFED Touch 1 to UFED 4PC.