Apple and the FBI went to war last year over an iPhone owned by San Bernardino, California, shooter Syed Farook, and whether or not the FBI should be granted access to that phone. Apple argued that doing so set a dangerous precedent for data privacy in general, while the FBI insisted it was a matter of national security. In the end, the battle abruptly ended when the FBI reportedly decided to work with Israeli firm Cellebrite, which said it would be able to hack the phone with or without Apple’s help.
Now, however, it seems as though Cellebrite has been hacked — and that hacker has publicly released some of that data to try and send a warning to the FBI. The data includes some code that is reportedly related to the Universal Forensic Extraction Device that can crack iPhones like the iPhone 5c, as well as some Android phones.
In a Motherboard report, the hacker said the creation of such tools makes their public release inevitable, and that they can subsequently be used by anyone with a bit of technical knowledge — including those who might not have such good intentions.
Cellebrite itself refutes the claim that it was hacked, suggesting instead that the dumped code is not source code, and is instead code that can be obtained by customers of the Cellebrite app. A separate Motherboard report says Cellebrite was indeed hacked just a few weeks ago, and Cellebrite claimed at the time that only some customer contact information was stolen. Reports indicated, however, that the company could be lying.
Whether Cellebrite did help the FBI or not, and whether this hacker does have real Cellebrite code or not, the message from the hacker is clear: “@FBI Be careful in what you wish for.”