Cellebrite can't crack iPhones running iOS 17.4 or later

AppleInsiderAppleInsider
Posted:
in iPhone edited July 18

Leaked documents claim that Cellebrite software used by law enforcement agencies cannot unlock any more recent models than 2018's iPhone XR if they've been updated to iOS 17.4.

iPhone 15 Pro Max on a table lying face down
iPhone 15 Pro Max



Cellebrite has always gone to great lengths to keep secret how it can unlock iPhones, and specifically asks its law enforcement customers not to divulge the information. However, while its methods and tools have not been disclosed, an April 2024 document listing which iPhones it can unlock has been leaked.

According to 404 Media, two documents were obtained from a Cellebrite customer and sent anonymously to the publication, with one covering iPhones, one for Android. The documents include a matrix listing all phone types, ranges of iOS updates, and how they can be unlocked.

Significant sections of the model/iOS matrix are listed as either "Coming Soon," or "in Research." Specifically, the iPhone 12, iPhone 13, and iPhone 14 ranges are listed as "Coming soon" from iOS 17.1 to iOS 17.3.1.

All of them are currently listed as being able to be unlocked up to iOS 17.0.3.

Table showing iPhone model support matrix for various software versions from 7.69.1 to 17.4 and newer.
Section of a leaked document showing Cellebrite's capabilities (Source: 404 Media)



As of the document's April 2024 date, these model iPhones cannot yet be unlocked if they are running iOS 17.4 or later:



Each of these is listed as being "in research." While that may change -- and may already have changed -- it means that at that point, none of these iPhones could be unlocked by Cellebrite.

A clear omission in the list is the iPhone 15 Plus, but this data comes from a segment of the document so that that model could be listed separately. It's unlikely that the model is vulnerable when the rest of the iPhone 15 range is not.

So, at present, it appears that Cellebrite can only unlock iPhones that are older than five years -- if users have not updated to iOS 17.4 or later. In February 2024, it was reported that 76% of active iPhones were on the initial iOS 17 release, while 20% were on iOS 16, and 4% on older versions.

Apple released iOS 17.4 in March 2024. It was followed in May 2024 by iOS 17.5.



Read on AppleInsider

Comments

  • Reply 1 of 7
    dk49dk49 Posts: 273member
    Just a matter of time..
  • Reply 2 of 7
    kiltedgreenkiltedgreen Posts: 617member
    Why is iPhone 12 missing from the 2nd list?
    mike1corradokidwatto_cobra
  • Reply 3 of 7
    randomPerson123randomPerson123 Posts: 1member
    What about Graykey? AFAIK it can unlock all iPhones. Last thing you'd want is to give people a false sense of security.
    watto_cobra
  • Reply 4 of 7
    termsofusetermsofuse Posts: 26member
    Unfair. The EU will address this injustice shortly. :)
    watto_cobra
  • Reply 5 of 7
    appleinsideruserappleinsideruser Posts: 588member
    I read this as Apple gradually plugging more and more exploits. 
    watto_cobra
  • Reply 6 of 7
    mark fearingmark fearing Posts: 432member
    How likely is it they would tell everyone if they could? I'd guess we will find out in a few months that they can.
    watto_cobra
  • Reply 7 of 7
    eriamjheriamjh Posts: 1,707member
    Everything I have read about this tool is that it was cracking unencrypted apps without logging in looking for clues and hints and saved passwords to attempt.    This included apps like Notes.   

    Tip:  Don’t save your password in a notes file.  

    If you use a pin, make it complicated.  They literally look at your fingerprint pattern smudges on the screen.  That reduces the possibilities.  
    watto_cobra
Sign In or Register to comment.