Forensic case studies - extraction of deleted data from smashed/damaged android mobile phone through replacement of PCB (Printed Circuit Board) in other mobile of same model.

  • Unique Paper ID: 171082
  • Volume: 11
  • Issue: 7
  • PageNo: 2090-2094
  • Abstract:
  • With the evolution of technology, the method of committing crimes is also evolving, it has shifted from physical to digital space. Forensic investigators have considerable obstacles when recovering data from broken cell phones. The recovery procedure is more difficult due to different kinds of damage, such as physical shock, water exposure, and encryption. Since broken mobile devices require functional components to unlock or access data, existing forensic technologies may not work with them. Therefore, advanced knowledge, skills and tools are necessary to overcome this limitation. The fact that cell phones are password-locked is one of the biggest problems for the investigating agencies. Therefore, new methods are required to solve this issue. Removal of PCB (Printed Circuit Board) from a damaged device and transferring it to a new body of the same model is one such approach. In the present study, two damaged mobile phones: Redmi 9 (whole body broken with a hammer) and Vivo Y91i (broken into multiple parts) were studied. Initially, the PCB of both mobile phones were removed and transferred to corresponding working mobile phones of the same models. The support for the chipsets to unlock both devices was present in the Passware Kit Mobile 2024 software. The mobile phones were put in boot ROM mode and a physical dump was created. Further, the dump was decrypted and analysed using the Magnet Axiom 7.8 version.

Related Articles