Look up MCC MNC Database - Alpha I

Iceland,Síminn,274,01
Iceland,Vodafone,274,02
Iceland,Vodafone,274,03
Iceland,Viking,274,04
Iceland,Núll níu ehf,274,06
Iceland,IceCell,274,07
Iceland,On-waves,274,08
Iceland,Nova,274,11
Iceland,Tal,274,12
India,Vodafone IN,404,01
India,AirTel,404,02
India,AirTel,404,03
India,IDEA,404,04
India,Vodafone IN,404,05
India,IDEA,404,07
India,Reliance,404,09
India,AirTel,404,10
India,Vodafone IN,404,11
India,IDEA,404,12
India,Vodafone IN,404,13
India,IDEA,404,14
India,Vodafone IN,404,15
India,AIRCEL,404,17
India,IDEA,404,19
India,Vodafone IN,404,20
India,Loop Mobile,404,21
India,IDEA,404,22
India,IDEA,404,24
India,Vodafone IN,404,27
India,AIRCEL,404,28
India,AIRCEL,404,29
India,Vodafone IN,404,30
India,AirTel,404,31
India,CellOne,404,34
India,Reliance,404,36
India,Aircel,404,37
India,CellOne,404,38
India,Aircel,404,41
India,Aircel,404,42
India,IDEA,404,44
India,Airtel,404,45
India,Dishnet Wireless,404,48
India,Airtel,404,49
India,CellOne,404,51
India,Reliance,404,52
India,CellOne,404,53
India,CellOne,404,54
India,CellOne,404,55
India,IDEA,404,56
India,CellOne,404,57
India,CellOne,404,58
India,CellOne,404,59
India,Vodafone IN,404,60
India,CellOne,404,62
India,CellOne,404,64
India,CellOne,404,66
India,Reliance GSM,404,67
India,DOLPHIN,404,68
India,DOLPHIN,404,69
India,CellOne,404,72
India,CellOne,404,74
India,CellOne,404,76
India,Idea Cellular Ltd,404,78
India,BSNL MOBILE,404,80
India,CellOne,404,81
India,Idea,404,82
India,Reliance Smart GSM,404,83
India,Vodafone IN,404,84
India,Reliance,404,85
India,Vodafone IN,404,86
India,Idea,404,87
India,Vodafone IN,404,88
India,Idea,404,89
India,AirTel,404,90
India,AIRCEL,404,91
India,AirTel,404,92
India,AirTel,404,93
India,AirTel,404,96
India,Reliance,405,01
India,Reliance,405,03
India,Reliance,405,04
India,Reliance,405,05
India,Reliance,405,10
India,Reliance,405,13
India,TATA DOCOMO,405,025
India,TATA DOCOMO,405,026
India,TATA DOCOMO,405,027
India,TATA DOCOMO,405,029
India,TATA DOCOMO,405,030
India,TATA DOCOMO,405,031
India,TATA DOCOMO,405,032
India,TATA DOCOMO,405,033
India,TATA DOCOMO,405,034
India,TATA DOCOMO,405,035
India,TATA DOCOMO,405,036
India,TATA DOCOMO,405,037
India,TATA DOCOMO,405,038
India,TATA DOCOMO,405,039
India,TATA DOCOMO,405,041
India,TATA DOCOMO,405,042
India,TATA DOCOMO,405,043
India,TATA DOCOMO,405,044
India,TATA DOCOMO,405,045
India,TATA DOCOMO,405,046
India,TATA DOCOMO,405,047
India,AirTel,405,51
India,AirTel,405,52
India,AirTel,405,54
India,AirTel,405,56
India,Vodafone IN,405,66
India,IDEA,405,70
India,Vodafone IN,405,750
India,Vodafone IN,405,751
India,Vodafone IN,405,752
India,Vodafone IN,405,753
India,Vodafone IN,405,754
India,Vodafone IN,405,755
India,Vodafone IN,405,756
India,IDEA,405,799
India,AIRCEL,405,800
India,AIRCEL,405,801
India,AIRCEL,405,802
India,AIRCEL,405,803
India,AIRCEL,405,804
India,AIRCEL,405,805
India,AIRCEL,405,806
India,AIRCEL,405,807
India,AIRCEL,405,808
India,AIRCEL,405,809
India,AIRCEL,405,810
India,AIRCEL,405,811
India,AIRCEL,405,812
India,Uninor,405,819
India,[Uninor],405,818
India,Uninor,405,820
India,Uninor,405,821
India,Uninor,405,822
India,Videocon Datacom,405,824
India,Videocon Datacom,405,827
India,Videocon Datacom,405,834
India,Uninor,405,844
India,IDEA,405,845
India,IDEA,405,848
India,IDEA,405,850
India,Loop Mobile,405,855
India,Loop Mobile,405,864
India,Loop Mobile,405,865
India,Uninor,405,875
India,Uninor,405,880
India,S Tel,405,881
India,Etisalat DB(cheers),405,912
India,Etisalat DB(cheers),405,913
India,Etisalat DB(cheers),405,914
India,Etisalat DB(cheers),405,917
India,Uninor,405,927
India,Uninor,405,929
Indonesia,PSN,510,00
Indonesia,INDOSAT,510,01
Indonesia,StarOne,510,03
Indonesia,TelkomFlexi,510,07
Indonesia,AXIS,510,08
Indonesia,SMART,510,09
Indonesia,Telkomsel,510,10
Indonesia,XL,510,11
Indonesia,TELKOMMobile,510,20
Indonesia,IM3,510,21
Indonesia,Ceria,510,27
Indonesia,Fren/Hepi,510,28
Indonesia,3,510,89
Indonesia,Esia,510,99
Iran,IR-MCI,432,11
Iran,TKC,432,14
Iran,MTCE,432,19
Iran,Taliya,432,32
Iran,Irancell,432,35
Iran,TCI,432,70
Iraq,Asia Cell,418,05
Iraq,SanaTel,418,08
Iraq,Zain,418,20
Iraq,Zain,418,30
Iraq,Korek,418,40
Iraq,IRAQNA,418,?
Ireland,Vodafone,272,01
Ireland,O2,272,02
Ireland,Meteor,272,03
Ireland,Access Telecom,272,04
Ireland,3,272,05
Ireland,Eircom,272,07
Ireland,Clever Communications,272,09
Ireland,Liffey Telecom,272,11
Isle of Man (United Kingdom),Pronto GSM,234,58
Isle of Man (United Kingdom),Sure Mobile,234,09
Israel,Orange,425,01
Israel,Cellcom,425,02
Israel,Pelephone,425,99
Israel,Mirs,425,77
Italy,TIM,222,01
Italy,Elsacom,222,02
Italy,Vodafone,222,10
Italy,RFI,222,30
Italy,IPSE 2000,222,77
Italy,Wind,222,88
Italy,Blu,222,98
Italy,3 Italia,222,99
Ivory Coast,Cora de Comstar,612,01
Ivory Coast,Moov,612,02
Ivory Coast,Orange,612,03
Ivory Coast,KoZ,612,04
Ivory Coast,MTN,612,05
Ivory Coast,ORICEL,612,06

Look up MCC MNC Database - Alpha H

Haiti,Voila,372,01
Haiti,Digicel,372,02
Honduras,Claro,708,01
Honduras,Celtel / Tigo,708,02
Honduras,Hondutel,708,30
Hong Kong (Special Administrative Region of People's Republic of China),1O1O / One2Free,454,00
Hong Kong (Special Administrative Region of People's Republic of China),CITIC Telecom 1616,454,01
Hong Kong (Special Administrative Region of People's Republic of China),CSL Limited,454,02
Hong Kong (Special Administrative Region of People's Republic of China),3 (3G),454,03
Hong Kong (Special Administrative Region of People's Republic of China),3 (2G),454,04
Hong Kong (Special Administrative Region of People's Republic of China),3 (CDMA),454,05
Hong Kong (Special Administrative Region of People's Republic of China),SmarTone-Vodafone,454,06
Hong Kong (Special Administrative Region of People's Republic of China),China Unicom (Hong Kong) Limited,454,07
Hong Kong (Special Administrative Region of People's Republic of China),Trident Telecom,454,08
Hong Kong (Special Administrative Region of People's Republic of China),China Motion Telecom,454,09
Hong Kong (Special Administrative Region of People's Republic of China),New World Mobility,454,10
Hong Kong (Special Administrative Region of People's Republic of China),China-Hong Kong Telecom,454,11
Hong Kong (Special Administrative Region of People's Republic of China),CMCC HK,454,12
Hong Kong (Special Administrative Region of People's Republic of China),Hutchison Telecom,454,14
Hong Kong (Special Administrative Region of People's Republic of China),SmarTone Mobile Communications Limited,454,15
Hong Kong (Special Administrative Region of People's Republic of China),PCCW Mobile (2G),454,16
Hong Kong (Special Administrative Region of People's Republic of China),SmarTone Mobile Communications Limited,454,17
Hong Kong (Special Administrative Region of People's Republic of China),CSL Limited,454,18
Hong Kong (Special Administrative Region of People's Republic of China),PCCW Mobile (3G),454,19
Hong Kong (Special Administrative Region of People's Republic of China),PCCW Mobile (CDMA),454,29
Hungary,Telenor,216,01
Hungary,T-Mobile,216,30
Hungary,Vodafone,216,70

Look up MCC MNC Database - Alpha G

Gabon,Libertis,628,01
Gabon,Moov (Telecel) Gabon S.A.,628,02
Gabon,Zain,628,03
Gabon,Azur,628,04
Gambia,Gamcel,607,01
Gambia,Africel,607,02
Gambia,Comium,607,03
Gambia,QCell,607,04
Georgia,Geocell,282,01
Georgia,MagtiCom,282,02
Georgia,Iberiatel,282,03
Georgia,Beeline,282,04
Georgia,SILKNET,282,05
Germany,T-Mobile,262,01
Germany,Vodafone,262,02
Germany,E-Plus,262,03
Germany,Vodafone,262,04
Germany,E-Plus,262,05
Germany,T-Mobile,262,06
Germany,O2,262,07
Germany,O2,262,08
Germany,Vodafone,262,09
Germany,Arcor AG & Co,262,10
Germany,O2,262,11
Germany,Dolphin Telecom,262,12
Germany,Mobilcom Multimedia,262,13
Germany,Group 3G UMTS,262,14
Germany,Airdata,262,15
Germany,Vistream,262,16
Germany,27C3,262,42
Germany,LYCA,262,43
Germany,DB Telematik,262,60
Germany,Siemens AG,262,76
Germany,E-Plus,262,77
Germany,Nash Technologies,262,92
Germany,Debitel,262,901
Ghana,MTN,620,01
Ghana,Vodafone,620,02
Ghana,tiGO,620,03
Ghana,Kasapa / Hutchison Telecom,620,04
Ghana,Airtel,620,06
Gibraltar (United Kingdom),GibTel,266,01
Gibraltar (United Kingdom),CTS Mobile,266,06
Greece,Cosmote,202,01
Greece,Vodafone,202,05
Greece,Wind,202,09
Greece,Wind,202,10
Greenland (Kingdom of Denmark),TELE Greenland A/S,290,01
Grenada,Digicel,352,030
Grenada,Cable & Wireless,352,110
Guadeloupe (France),Orange,340,01
Guadeloupe (France),Outremer,340,02
Guadeloupe (France),Telcell,340,03
Guadeloupe (France),MIO GSM,340,08
Guadeloupe (France),Digicel,340,20
Guam (United States of America),IT&E Wireless,310,032
Guam (United States of America),Guam Telephone Authority,310,033
Guam (United States of America),mPulse,310,140
Guam (United States of America),Guamcell,310,370
Guam (United States of America),i CAN_GSM,311,250
Guam (United States of America),Guamcell,310,470
Guatemala,Claro,704,01
Guatemala,Comcel / Tigo,704,02
Guatemala,movistar,704,03
Guatemala,digicel,704,?
Guernsey (United Kingdom),Sure Mobile,234,55
Guernsey (United Kingdom),Wave Telecom,234,50
Guernsey (United Kingdom),Airtel Vodafone,234,03
Guinea,Orange S.A.,611,01
Guinea,Sotelgui,611,02
Guinea,Telecel Guinee,611,03
Guinea,MTN,611,04
Guinea,Cellcom,611,05
Guinea-Bissau,Areeba,632,02
Guinea-Bissau,Orange,632,03
Guyana,Digicel,738,01
Guyana,GT&T Cellink Plus,738,02

Look up MCC MNC Database - Alpha F

Faroe Islands (Kingdom of Denmark),Faroese Telecom,288,01
Faroe Islands (Kingdom of Denmark),Vodafone,288,02
Fiji,Vodafone,542,01
Fiji,Digicel,542,02
Finland,DNA,244,03
Finland,Elisa,244,05
Finland,Nokia,244,07
Finland,Unknown,244,08
Finland,TDC Oy,244,10
Finland,VIRVE,244,11
Finland,DNA,244,12
Finland,AMT,244,14
Finland,SAMK,244,15
Finland,Saunalahti,244,21
Finland,Scnl Truphone,244,29
Finland,Sonera,244,91
France,Orange,208,00
France,Orange,208,01
France,Orange,208,02
France,Globalstar Europe,208,05
France,Globalstar Europe,208,06
France,Globalstar Europe,208,07
France,SFR,208,10
France,SFR,208,11
France,SFR,208,13
France,Bouygues,208,20
France,Bouygues,208,21
France,Transatel Mobile,208,22
France,Bouygues,208,88
French Polynesia (France),Vini,547,20

Look up MCC MNC Database - Alpha E

East Timor,Timor Telecom,514,02
Ecuador,Movistar,740,00
Ecuador,Porta,740,01
Ecuador,Alegro,740,02
Egypt,Mobinil,602,01
Egypt,Vodafone,602,02
Egypt,Etisalat,602,03
El Salvador,CTE Telecom Personal,706,01
El Salvador,digicel,706,02
El Salvador,Tigo,706,03
El Salvador,movistar,706,04
El Salvador,Claro,706,11
Equatorial Guinea,Orange GQ,627,01
Equatorial Guinea,Hits GQ,627,03
Eritrea,Eritel,657,01
Estonia,EMT,248,01
Estonia,Elisa,248,02
Estonia,Tele 2,248,03
Estonia,OY Top Connect,248,04
Estonia,AS Bravocom Mobiil,248,05
Estonia,Progroup Holding,248,06
Ethiopia,ETHMTN,636,01

Look up MCC MNC Database - Alpha D

Democratic Republic of the Congo,Vodacom,630,01
Democratic Republic of the Congo,Zain,630,02
Democratic Republic of the Congo,Cellco,630,04
Democratic Republic of the Congo,Supercell,630,05
Democratic Republic of the Congo,CCT,630,86
Democratic Republic of the Congo,SAIT Telecom,630,89
Denmark (Kingdom of Denmark),TDC,238,01
Denmark (Kingdom of Denmark),Telenor,238,02
Denmark (Kingdom of Denmark),MIGway A/S,238,03
Denmark (Kingdom of Denmark),ApS KBUS,238,05
Denmark (Kingdom of Denmark),3,238,06
Denmark (Kingdom of Denmark),Barablu Mobile Ltd.,238,07
Denmark (Kingdom of Denmark),Dansk Beredskabskommunikation A/S,238,09
Denmark (Kingdom of Denmark),TDC,238,10
Denmark (Kingdom of Denmark),Dansk Beredskabskommunikation A/S,238,11
Denmark (Kingdom of Denmark),Lycamobile Denmark Ltd,238,12
Denmark (Kingdom of Denmark),Telia,238,20
Denmark (Kingdom of Denmark),Telia,238,30
Denmark (Kingdom of Denmark),Ericsson Danmark A/S,238,40
Denmark (Kingdom of Denmark),Telenor,238,77
Djibouti,Evatis,638,01
Dominica,Digicel,366,020
Dominica,Cable & Wireless,366,110
Dominican Republic,Orange,370,01
Dominican Republic,Claro,370,02
Dominican Republic,Tricom,370,03
Dominican Republic,Viva,370,04

Look up MCC MNC Database - Alpha C

Cambodia,Mobitel,456,01
Cambodia,hello,456,02
Cambodia,S Telecom,456,03
Cambodia,qb,456,04
Cambodia,Star-Cell,456,05
Cambodia,Smart Mobile,456,06
Cambodia,Mfone,456,18
Cambodia,Excell,456,11
Cambodia,Beeline,456,09
Cambodia,Metfone,456,08
Cameroon,MTN Cameroon,624,01
Cameroon,Orange,624,02
Canada,Telus,302,220
Canada,Telus,302,221
Canada,Airtel Wireless,302,290
Canada,Mobilicity,302,320
Canada,FIRST,302,350
Canada,MiKe,302,360
Canada,Telus,302,361
Canada,Fido,302,370
Canada,DMTS,302,380
Canada,WIND Mobile,302,490
Canada,Videotron,302,500
Canada,Videotron,302,510
Canada,Bell,302,610
Canada,Bell,302,610
Canada,ICE Wireless,302,620
Canada,Bell,302,640
Canada,Bell,302,651
Canada,BC Tel Mobility (Telus),302,652
Canada,Telus,302,653
Canada,MTS,302,655
Canada,TBay,302,656
Canada,Telus,302,657
Canada,MTS,302,660
Canada,SaskTel,302,680
Canada,MB Tel Mobility,302,701
Canada,MT&T Mobility (Aliant),302,702
Canada,New Tel Mobility (Aliant),302,703
Canada,Globalstar,302,710
Canada,Rogers Wireless,302,720
Canada,SaskTel,302,780
Canada,Bell / Telus / SaskTel,302,880
Cape Verde,CVMOVEL,625,01
Cape Verde,T+,625,02
Cayman Islands (United Kingdom),LIME,346,140
Cayman Islands (United Kingdom),Digicel,338,050
Central African Republic,CTP,623,01
Central African Republic,TC,623,02
Central African Republic,Orange,623,03
Central African Republic,Nationlink,623,04
Chad,Airtel,622,01
Chad,Tchad Mobile,622,02
Chad,TIGO - Millicom,622,03
Chad,TAWALI,622,02
Chad,Salam,622,04
Chile,entel,730,01
Chile,movistar,730,02
Chile,Claro,730,03
Chile,Nextel,730,04
Chile,VTR Móvil,730,05
Chile,Nextel,730,09
Chile,entel,730,10
Chile,Will,730,99
China,China Mobile,460,00
China,China Unicom,460,01
China,China Mobile,460,02
China,China Telecom,460,03
China,China Telecom,460,05
China,China Unicom,460,06
China,China Mobile,460,07
China,China Tietong,460,20
Colombia,Colombia Telecomunicaciones S.A.,732,001
Colombia,Edatel,732,002
Colombia,Comcel,732,101
Colombia,movistar,732,102
Colombia,Tigo,732,103
Colombia,Tigo,732,111
Colombia,movistar,732,123
Comoros,HURI - SNPT,654,01
Republic of the Congo,Zain,629,01
Republic of the Congo,Libertis Telecom,629,10
Republic of the Congo,Warid Telecom,629,07
Cook Islands (New Zealand),Telecom Cook,548,01
Costa Rica,ICE,712,01
Costa Rica,ICE,712,02
Costa Rica,ICE,712,03
Croatia,T-Mobile,219,01
Croatia,Tele2,219,02
Croatia,VIPnet,219,10
Cuba,CUBACEL,368,01
Cyprus,Cytamobile-Vodafone,280,01
Cyprus,MTN,280,10
Czech Republic,T-Mobile,230,01
Czech Republic,O2,230,02
Czech Republic,Vodafone,230,03
Czech Republic,U:fon,230,04
Czech Republic,SŽDC s.o.,230,98
Czech Republic,Vodafone,230,99

Look up MCC MNC Database - Alpha B

Bahamas,BaTelCo,364,390
Bahrain,Batelco,426,01
Bahrain,zain BH,426,02
Bahrain,VIVA,426,04
Bangladesh,Grameenphone,470,01
Bangladesh,Robi,470,02
Bangladesh,Banglalink,470,03
Bangladesh,TeleTalk,470,04
Bangladesh,Citycell,470,05
Bangladesh,Airtel,470,06
Bangladesh,Warid Telecom International Ltd,470,07
Barbados,LIME,342,600
Barbados,Digicel,342,750
Barbados,Sunbeach Communications,342,820
Belarus,velcom,257,01
Belarus,MTS,257,02
Belarus,DIALLOG,257,03
Belarus,life:),257,04
Belgium,Proximus,206,01
Belgium,Telenet,206,05
Belgium,Mobistar,206,10
Belgium,BASE,206,20
Belize,DigiCell,702,67
Belize,Smart,702,99
Benin,Libercom,616,01
Benin,Moov,616,02
Benin,MTN,616,03
Benin,BBCOM,616,04
Benin,Glo,616,05
Bermuda,Digicel Bermuda,350,01
Bermuda,Mobility,350,02
Bermuda,Digicel Bermuda,338,050
Bermuda,Cellular One,310,59
Bhutan,B-Mobile,402,11
Bhutan,TashiCell,402,77
Bolivia,Nuevatel,736,01
Bolivia,Entel,736,02
Bolivia,Tigo,736,03
Bosnia and Herzegovina,HT-ERONET,218,03
Bosnia and Herzegovina,m:tel,218,05
Bosnia and Herzegovina,BH Mobile,218,90
Botswana,Mascom,652,01
Botswana,Orange,652,02
Botswana,BTC Mobile,652,04
Brazil,TIM,724,02
Brazil,TIM,724,03
Brazil,TIM,724,04
Brazil,Claro,724,05
Brazil,Vivo,724,06
Brazil,Sercomtel,724,07
Brazil,TIM,724,08
Brazil,Vivo,724,10
Brazil,Vivo,724,11
Brazil,CTBC Celular,724,15
Brazil,Oi / Brasil Telecom,724,16
Brazil,Vivo,724,23
Brazil,Oi / Amazonia Celular,724,24
Brazil,Oi,724,31
Brazil,CTBC Celular,724,32
Brazil,CTBC Celular,724,33
Brazil,CTBC Celular,724,34
Brazil,aeiou,724,37
Brazil,Nextel,724,00
British Virgin Islands (United Kingdom),LIME,348,170
British Virgin Islands (United Kingdom),CCT Boatphone,348,570
British Virgin Islands (United Kingdom),Digicel,348,770
Brunei,Jabatan Telekom Brunei,528,01
Brunei,B-Mobile,528,02
Brunei,DSTCom,528,11
Bulgaria,M-Tel,284,01
Bulgaria,Vivacom,284,03
Bulgaria,Undisclosed,284,04
Bulgaria,GLOBUL,284,05
Burkina Faso,Telmob,613,01
Burkina Faso,Zain,613,02
Burkina Faso,Telecel Faso,613,03
Burundi,Spacetel,642,01
Burundi,Africell,642,02
Burundi,Onatel,642,03
Burundi,Smart Mobile,642,07
Burundi,HiTs Telecom,642,08
Burundi,U-COM Burundi,642,82

Look up MCC MNC Database - Alpha A

Abkhazia,Aquafon,289,67
Abkhazia,A-Mobile,289,88
Afghanistan,AWCC,412,01
Afghanistan,Roshan,412,20
Afghanistan,MTN,412,40
Afghanistan,Etisalat,412,50
Albania,AMC,276,01
Albania,Vodafone,276,02
Albania,Eagle Mobile,276,03
Albania,Plus Communication,276,04
Algeria,Mobilis,603,01
Algeria,Djezzy,603,02
Algeria,Nedjma,603,03
Andorra,Mobiland,213,03
Angola,UNITEL,631,02
Anguilla (United Kingdom),Weblinks Limited,365,010
Anguilla (United Kingdom),Cable & Wireless,365,840
Antigua and Barbuda,APUA,344,030
Antigua and Barbuda,LIME,344,920
Antigua and Barbuda,Digicel,338,050
Argentina,Movistar,722,010
Argentina,Nextel,722,020
Argentina,Movistar,722,070
Argentina,Claro,722,310
Argentina,Claro,722,320
Argentina,Claro,722,330
Argentina,Personal,722,34
Argentina,Personal,722,341
Argentina,Hutchinson (PORT HABLE),722,350
Argentina,Personal,722,36
Armenia,Beeline,283,01
Armenia,Karabakh Telecom,283,04
Armenia,VivaCell-MTS,283,05
Armenia,Orange,283,10
Aruba (Kingdom of the Netherlands),SETAR,363,01
Aruba (Kingdom of the Netherlands),Digicel,363,02
Australia,Telstra,505,01
Australia,Optus,505,02
Australia,Vodafone,505,03
Australia,Department of Defence,505,04
Australia,Ozitel,505,05
Australia,3,505,06
Australia,One.Tel,505,08
Australia,Airnet,505,09
Australia,3,505,12
Australia,Railcorp,505,13
Australia,AAPT,505,14
Australia,3GIS,505,15
Australia,Victorian Rail Track,505,16
Australia,SOUL,505,21
Australia,Advance Communications Technologies Pty. Ltd.,505,24
Australia,Crazy John's,505,38
Australia,Telstra,505,71
Australia,Telstra,505,72
Australia,Localstar Holding Pty. Ltd.,505,88
Australia,Optus,505,90
Australia,One.Tel,505,99
Austria,A1,232,01
Austria,T-Mobile,232,03
Austria,Orange,232,05
Austria,tele.ring,232,07
Austria,A1,232,09
Austria,3,232,10
Austria,bob,232,11
Austria,yesss,232,12
Austria,3,232,14
Austria,Barablu,232,15
Azerbaijan,Azercell,400,01
Azerbaijan,Bakcell,400,02
Azerbaijan,FONEX,400,03
Azerbaijan,Nar Mobile,400,04

(U)SIM Examination (Physical) Pt1

(U)SIM Examination (Physical) Pt1

We begin with GSM as this is the original starting place where examiners first learned about subscriber identity modules (SIM). There are many ways to learn about SIM: using a SIM reader tool is one way, receiving instruction during training that concentrates on the types of user and network data that can be harvested by examiners. An education and training process can equally include a training module or modules on the physical aspects of a card and identify, for the examiner, material parts of the SIM, the known routes to understanding electrical aspects, processing aspects, storage geometry and memory mapping, so on and so forth. The thinking here is analogous to the way in which there is an expectation that a computer examiner would understand HDD disc geometry, clusters and sectors, BIOS etc even before entering into the search and study of the 'content' that may be recorded on the disc. It is or should be the same for (U)SIM.

The SIM Card can be seen as a composition of at least three constituent parts:

- The physical card (the storage carrier).
- An integrated circuit card micro-processing chip (the operating system and content storage device).
- The subscriber identity module; an area of physical memory allocated at manufacturing for pre-market and post-market recording by the mobile network operator and SIM user.
 -  A fourth constituent part could be a Card with an etched antenna for RFID/NFC for use by (US)SIM (but this part is not included or discussed at this stage).
- etc

To enable test and inspection of these constituent parts GSM approved and adopted GSM11.17 to assist manufacturers, operators and service providers help formalise and uniform the test and inspection procedures rather than have a mish-mash of randomly selected tests for SIM cards submitted for use in GSM. The former is highly desirable as the goal of GSM has always be about interconnection-compatiblity and interconnection backward-compatibility. By way of illustration, a GSM SIM Card Phase 1 should still be able to be inserted into a GSM Phase 2+ mobile device and allow communications to take place, unless the operator or device manufacturer has declared and stated otherwise.

From an examiner's viewpoint we would desire to know how those three constituent parts translate to the work we do? Some examples are set out below

Physical Card
Due to the form factors used in GSM we can make assessment to determine the supply chain and manufacturer of the card itself. We look at the card to see if has been cut down for use and any attempts of anonymity by removal of the SIM Serial Number (SSN) compared to manufacture polarisation techniques. Later 3G/LTE USIM Cards have undergone some changes since GSM's inception; the latter will be dealt at a later date.


 Image courtesy of wikipedia - http://en.wikipedia.org/wiki/Subscriber_Identity_Module

ICC Chip
Manufacturer and technical specification are important to determine a range of potential evidence, including release into the marketplace and technological and electronic capability. Clearly the geometry and memory mapping are important. There are various techniques to deal with a card with a damaged chip. One example is called 'acid-etching' used to gain access to the physical chip itself by removal of the outer protective coverings used in the manufacturing process. 

 
  Image courtesy of wikipedia - http://en.wikipedia.org/wiki/Subscriber_Identity_Module

Physical Memory
Determining geometry and memory mapping forms part of the testing and inspection process set out in GSM1117. We can use these procedures to formulate a forensic analysis programme, similar to the way in which computer forensic examiners seek to determine specifically data discovered and recovered from a particular memory location on the HDD and define the data from its binary and encoded states and any formatting that may be applicable to the data. That being so, would it be out of the question in SIM examination terms for the EFBCCH file to be formatted as .bmp?  Below are a set of powerpoint slides I have prepared so that examiners can comprehend procedures approved and adopted for test and inspection for GSM SIM Cards. Later on when we 3G/LTE (U)SIM this GSM starting point assists formulate how to identify differences between the various (U)SIM/LTE cards but equally identify expansion of technology services and content so the examination limit or avoid omissions during the investigative/evidential process.      

GPS Improved Accuracy

GPS Improved Accuracy

Research conducted by Universidad Carlos III de Madrid (also known as UC3M) have found they can boost conventional standard GPS devices by a magnitude of 90% and significantly decrease the margin of error to improve positioning and location. UC3M see an objective to integrate their system into smartphones. This could assist the emergency services to improve pinpointing in emergency cases, in addition to added capability where handsets have modules included using existing conventional GPS capability.

A system that improves the precision of GPS in cities by 90 percent - http://www.uc3m.es/ 

Smart Device Usage

The latest report from Flurry reported through Venturebeat, a website that reports China technology usage, confirms China has out smart device usage that of the US. Moreover because the US only has 310-million population and China has 1.3-bilion population it is unlikely, Flurry believes, the US will ever rise to the top usage spot again because of population sizes. Well maybe so, but population size isn't all it is about, but requires regulation, liberalisation, free markets and economic indicators etc, too. What is interesting is that Flurry also envisage the only possible competitor to matching China's growth in smart device usage could probably come from India, which the report states has a 1.2-billion population.

A short note in the report identified other countries having growth in smart device usage. "Countries that grew faster than China in the past year were Columbia, Vietnam, Turkey, Ukraine and Egypt."

See report here: China becomes the world’s largest smartphone market - http://venturebeat.com/2013/02/18/china-becomes-the-worlds-largest-smartphone-market/

Further reading on possible outcomes for Chinese OSs - Originals and Copies. Britain and Smartphone Manufacturing http://trewmte.blogspot.co.uk/2012/10/originals-and-copies-britain-and.html

Cyber Wrapping

Susan Brenner has had published her article 'Cyber-threats and the Limits of Bureaucratic Control' published in MINN. J. L. SCI. & TECH. [Vol. 14:1] and downloadable from the link below. Susan's brief synopsis is available here: http://cyb3rcrim3.blogspot.co.uk/2013/02/fyi-maybe-new-article-on-cyberthreats.html. A further link to material for review is here: University of Minnesota http://conservancy.umn.edu/handle/144222.

This is a very useful and informative article from Susan and sets out challenges about understanding the impact of 'cyber-' and how a "State" copes with control of such threats.

The marketplace is burgeoning with 'cyber courses' e.g. with content such as: "cyber attack and defense, digital analysis, computer forensics, security policies and strategies, risk analysis, ethical and legal issues, operational processes, cyber crime, and more" (http://www.excelsior.edu/web/news/college-news/-/blogs/five-cybersecurity-programs-certified-to-meet-the-nsa%E2%80%99s-committee-on-national-security-systems-cnss-training-standards) which appears to suggest cyber people have been unable to distinguish cyber as a platform of its own without subsuming e.g. computer forensics and therefore dismantling this job title and work in an attempt to top it.

My original thinking when getting to grips to understand what the cyber-people wanted to show when the approach started back in 2000 was that, irrespective of the technology, it is the fundamental messages/signals, instructions or information included and transmitted through electrical impulses, analogue/digital signalling and so on would complement existing investigatory, examination and forensics programmes and employment and tools. Instead, cyber appears to want to cast a veil over all of these mature approaches to make everything science/technology neutral and claim they are subsets of cyber.

Fundamentally, cyber is a subset to all forms of communication mediums, transmitters and receivers and the technology that interprets communications and signalling. Moreoever cyber-attack/crime/etc is a 50/50 proposition and a subset of "intention" (pragmatically and legally) and must be judged in that context when compared to a "mistake" where the person had no intention to generate an attack but an unwanted outcome occurs anyway.

Download: http://conservancy.umn.edu/bitstream/144222/1/Cyber-Threats-by-Susan-Brenner-MN-Journal-Law-Science-Tech-Issue-14-1.pdf

One hit, hits all

As you know setting a 'percentage expectation' for disruptive events is common in any operating plan, QoS plan, security plan etc. Contingency (forward planning) of something that might/may happen as a percentage factored in advance in order to ensure support being available is standard practice.

The author Henry Basset's 'Red Sky Alliance' records in his blog (http://henrybasset.blogspot.co.uk/2013/02/attackers-collaborate-defenders-are.html):

"20-50 compromised computers per day (7 days/week) could (should) be expected."

The article does not state that 20-50 will happen daily. Moreover, it is very difficult to reconcile how events happening on weekdays will equally occur in the same percentage on weekends due to staff not working at that time, thus terminals not being used in the workplace, which is another factor suggesting the statement is geared towards forecast or contigency rather than actual fact.  

It is not entirely clear either that the 'inventory computers' could corroborate a computer identified in that inventory being the disruptive source, as opposed to merely being a compromised device, thus repetition of events could continue to be propagated against that same device. A reason for that is that an inventory of computers may not take account for 'BYOD devices' (http://www.trewmte.blogspot.co.uk/2013/01/smartphone-byod.html), which, quite horrifically, are being proposed for business. Laundering such ideas as relevant, cost-effective (sorry, a cheap way for a company to provide IT/comms without cost to the company) and a must-have, apparently, on employee-centric wish-lists crudely ignores common-sense security policies, practices and procedures. Moreover, BYOD is more likely to increase the chances of ICT (information communications technology) disruption/compromise, which is crudely labelled 'cyber attack/crime'. Cyber attack/crime is itself is being used in an attempt to downgrade the important differences and characteristics between science technologies by applying to them a technology-neutral title, 'cyber' (c.f. Andrea C Simmons comments about cyber wrapping http://www.bcs.org/content/conBlogPost/1861 )

Promulgating the noun/adjective/verb 'cyber-', lauded as the title of the next big threat to the World will in itself generate changes down the line eventually forcing Governments to create localised technology standards to deliberately undermine and reduce the chances of global cyber attacks/crimes occuring based upon common code used by many countries. This perhaps can be illustrated in terms of  the enormous economic and fiscal effort that has gone into maintaining the 'Euro' contrasted with the 'British Pound'. Were it the case the Euro actually went down the localised British Pound would still be there. Local individual currency proving a far sounder bet than global common currency. Or looked at from a different angle, if a local individual currency did go down it wouldn't drag down other currencies partners. This tends to reinforce the positive that 'local standards' offer far better security and protection but minimises disruption, whereas global standards create the greater threat of 'one hit, hits all'.

EMV and ePayments

ParseIT
As some of you may know I have over the last several years been extending the range of my skillsets, beyond previous skills of mobile devices/PCs/laptop/MACs, to include EMV and the known CVV (Card Verification Value) code that is stored in the card’s magnetic stripe and iCVV (Integrated Chip Card Card Verification Value) code that is stored in the card’s chip. This work into includes the range of payments systems that are already or will be introduced to smart phone payment systems.

The transactional data contained in the 'exchange messages' are of paramount importance to post-fraud investigations; in the absence of an actual physical instrument involved in the originating activity associated with a transaction. Having the ability to examine copies of the original transactional data contained in electronic files requires a tool designed to output the field data into the known field structures/parameters as set out by iso8583. ParseIT is one of those free tools that provides a useful starting point to output the data to assist an investigation.

- ParseIT is a parser tool to analyze transactional messages from raw data and logs.
- ParseIT provides a simple and effective way to fast detect, parse and compare messages.
- The intuitive interface provides quick access to the fields of the message, their value, their description and their validation.

Because its free and doesn't require a commercial, then it is worth including in the investigators' soft toolkit.

http://www.kasys.ca/parseit.php

Download - http://www.kasys.ca/parseit/update/setup.exe

Judge for yourself

I noted the reference made by Talwant Singh, Member (Judicial), E-Committee of Supreme Court of India, to a quote made by Hunter S Thompson ( http://en.wikipedia.org/wiki/Hunter_S._Thompson ) recently:  “We cannot expect people to have respect for law and order until we teach respect to those we have entrusted to enforce those laws.” Quite refreshing to see a senior public figure conversing in a language and using references understood by ordinary man and woman in the street. A few members of the British Judiciary I can recall in my life time over the last 50 years who were spoken about that endeavoured to keep that common touch: Lord Denning, Lord Wilberforce, Lord Woolf, Lord Bingham. I did hear from a few barristers, they thought, that Lord Justice Judge had endeavoured to make a good fist of it in keeping the lines of communication open. There are no doubt many others that are not on my radar but might be on yours. Have a look at wikipedia and see if there are any there that you know?

http://en.wikipedia.org/wiki/Master_of_the_Rolls
http://en.wikipedia.org/wiki/Category:British_judges

A barrister with a common touch whose work I learned about at school and on television (when I was growing up) was Edward Marshall Hall ( http://en.wikipedia.org/wiki/Edward_Marshall_Hall ).  So worth having a read about his work, too.

I have digressed slighly, sorry, from what I originally set out to say. So turning back to that intended topic, but non-judicial thought this time, that is this is not the first time a man from India has endeavoured to communicate with people from all walks of life. You may think I would reference Mahatma Gandi ( http://en.wikipedia.org/wiki/Mahatma_Ghandi ) at this stage, and that would be an excellent reference choice to make, but, no, I have someone else in mind: Joseph Rudyard Kipling (  http://en.wikipedia.org/wiki/Rudyard_Kipling ). Kipling wrote that great and wonderful poem 'IF'. A poem that might rightly take its place in learning materials for school children. This poem teaches a wide range of communications skills (used in the english language) and social skills and at the same time seeks to empower each person to be an individual, keep inner strength, and at the same time not lose personal identity and values. Importantly, it defines that anyone should be able to talk with anyone no matter who they are.

If

If you can keep your head when all about you
Are losing theirs and blaming it on you;
If you can trust yourself when all men doubt you,
But make allowance for their doubting too;
If you can wait and not be tired by waiting,
Or, being lied about, don't deal in lies,
Or, being hated, don't give way to hating,
And yet don't look too good, nor talk too wise;

If you can dream - and not make dreams your master;
If you can think - and not make thoughts your aim;
If you can meet with triumph and disaster
And treat those two imposters just the same;
If you can bear to hear the truth you've spoken
Twisted by knaves to make a trap for fools,
Or watch the things you gave your life to broken,
And stoop and build 'em up with wornout tools;

If you can make one heap of all your winnings
And risk it on one turn of pitch-and-toss,
And lose, and start again at your beginnings
And never breath a word about your loss;
If you can force your heart and nerve and sinew
To serve your turn long after they are gone,
And so hold on when there is nothing in you
Except the Will which says to them: "Hold on";

If you can talk with crowds and keep your virtue,
Or walk with kings - nor lose the common touch;
If neither foes nor loving friends can hurt you;
If all men count with you, but none too much;
If you can fill the unforgiving minute
With sixty seconds' worth of distance run -
Yours is the Earth and everything that's in it,
And - which is more - you'll be a Man my son!

Lastly, because maintaining a common touch is an important life skill, there is something else about the poem 'If' which has an interesting reference. According to the Kipling Society, Rudyard Kipling knew Cecil Rhodes, Lord Milner and Dr Jameson ( http://www.kipling.org.uk/kip_fra.htm ) and it is the qualities of these men that inspired the peom 'IF'. Why might this be of interest? Messrs Milner and co were sent on an errand to South Africa as the British Government had received word that some British land and mine owners had allowed their avarice and greedy to get so out of control they had decended into total loss of control of their positions, property and money. When Lord Milner and entourage arrived at site the owners were living in the servants' sheds in drunkenness, filth and depravity, whilst the servants were living in the owners' mansions, wearing the owners clothes and spending their money. Milner looked to immediately establish a refreshment on education for these land and mine owners and took skills taught at Toynbee Hall in the EastEnd of London. Toynbee Hall it is known is renowned for it educational principles and later adopted by Hull House in Chicago. Hull House, as you may know, formed the first edcuational programme that later became the foundation for the Open University. Milner's work resulted in the education programme in South Africa being called the 'Kindergarten', which taught that even rulers need humility if they are to communicate with people they expect will serve them. It does make me wonder whether Milner, Rhodes and Jameson had sought observations from Kipling learned from his life skills and whether the poem 'IF' contains elements from conversations which Rudyard Kipling had with these men due to their friendship?

Kindness Cures Recession

Kindness Cures Recession

Such a simple act, yet its remedies are far reaching.

Kindness is an act of generosity without expecting or demanding
anything in return.

Kindness Cures Recession.

S**T Talker

No doubt most of us, one time or another, have experienced a deja vu moment. A feeling of fleetingly living the same life-experience again. I think moments like this are summed up brilliantly by Pink Floyd in the words of the song Comfortably Numb:

"When I was a child
I caught a fleeting glimpse
Out of the corner of my eye

I turned to look but it was gone
I cannot put my finger on it now
The child is grown
The dream is gone
I... Have become comfortably numb"

Anyway, I digress slightly, but hope it conveys what I was thinking, feeling when I was listening to a Music Radio Station, I believe it was Magic 105.4, and the people in the studio were having a laugh and messing around with an american female 1970s style electronically synthesized voice. You may recall the sort of thing if you had seen repeats of early versions of Department S, Mission Impossible, Ironside and so on and those voice distortion devices that were placed against the phone mic to disguide the voice of the caller.  It was at this moment, when I heard it on the radio that my mind was racing, where had I heard something similar in electronic voice alteration/manipulation? Having racked my my mind for a few days I realised that it reminded me of a computer program called Shit Talker.  I unreservedly apologies to readers of this blog, I am not being offensive, it is the name of the program.

Although we had some laughs in the office; believe it or not, it is relevant to investigations when checking out hoax and other types of calls. Of course, today, with voice detection and recognition techniques these type of programs do not present a problem. But if, sometime, you want to have a laugh in the company of friends then the program is still available http://unaesthetic.net/st/dl.shtml . I wouldn't use it on the phone though, it isn't a good idea.

Smartphone BYOD

Smartphone BYOD

The article about Application Performance Management highlights five factors to influence APM in 2013. Approaching APM not from the service angle (end-to-end interoperability) but what the user gains from it is an uncertainty with BYOD (e.g. mobile tablet etc), as stated by the article. BYOD is not simply about browsing habit to prove an issue or trend but whether such devices are used (a) as company property? (b) what work material is available? (c) is that on-site access or off-site access? (d) are external private access points accessible? (e) are there, regarding (d), obligations to reveal? .....and so on

During the heady parts of the recession, and even now, many companies operational costs and write down (depreciation) on operational assets (phones, computers etc) have been slimlined and moved some obligations on to staff to use their own smartphones and tablets, thus the company also realises reductions in capital expenditure by avoiding mobile services contracts, too.


Strange that so much effort and money has been spent and is being spent on cybercrime detection and prevention and yet the more likely statistic as to where an ICT attack would occur seems not to be determined from yet another market survey but plain, good old-fashioned common sense. If employees bring their own devices to work employers cannot legislate as to what happens whilst at work. If employers don't pay for communications devices/services because they want to turn an operating profit or 'twinkle' before their shareholders then it is not difficult to comprehend, from a security point of view, that smartphones are potential carries of 'digital infection' that are deliberately being allowed to propagate with BYOD. National societies have watched over the last two decades at the decay in common-sense and seen the removal of barriers that locked pandora's box shut. Why have the barriers been taken away? For the sake of emotional gratification of earning a short-term profit, globalisation and commercialisation that required reduction and removal of local barriers originally put in place by mandatory regulation.  

The task for digital investigators is to now re-engage with digital access policies in companies and discover the implemented and evolving communications route plan.

http://www.apmdigest.com/compuwares-top-5-apm-predictions-for-2013

Additional research

zdnet - http://www.zdnet.com/byod-mobile-workers-thumbing-nose-at-it-security-7000003519/

Forbes - http://www.forbes.com/sites/markfidelman/2012/05/02/the-latest-infographics-mobile-business-statistics-for-2012/
 
 Network World - http://www.networkworld.com/news/2012/061912-byod-20somethings-260305.html

Programming Mobile Parameters - the new area of mobile forensics

Programming Mobile Parameters - the new area of mobile forensics

Shortly I shall be running a course at the LinkedIn MTEB Subgroup 'ForensicMobex' identifying parameters programming for mobile phones. The purpose of the course is in support of the discussion at http://trewmte.blogspot.co.uk/2012/10/mobile-examination-hw-sw-considerations_29.html that access to evidential data goes beyond the common selection and choice of data extracted and harvested by mobile phone forensic tools.

The material for this course originates from of the MTEB mobile phone programming course.

The image (see weblink below) shows many parameters involved in programming a mobile phone and the image represents just one of the many pages, each of which shall be explored and discussed:

http://tinyurl.com/bjd4az8

The second image (see weblink below) in the top left hand corner identifies the radio transmissions technologies that can be discussed dependent on the interest of the group:

http://tinyurl.com/byvgl9q

To join the course requires participation from each stakeholder joining and those who have already joined this group.

Mobile Phone Examiner Exam Guides

Discussion held at ForensicMobex (MTEB subgroup) on LinkedIn.

Mobile Phone Examiner Exam Guides

It has been noticed that a number of the mobile phone examiner exam guides set out to suggest the questions in the guide will help the person sitting the exam to pass the exam. However, some of the questions can be confusing in the way they have been stated.

In running this series of responses, the responses are not intended or desired to be critical of anyone or examining body. The following series of responses are merely produced to offer helpful observations to answering those exam questions.

Just follow the discussions marked as Mobile Phone Examiner Exam Guides 2,3,4, etc

Cellphone Surveillance

Cellphone Surveillance

Have you ever tried traversing the ground (metaphorically speaking) between two opposite and opposing opinions? It is never easy. Here is an informative and interesting short article (weblinks below) on how far cellphone surveillance generates contentions. The Courts faced between balancing the needs of law and governance, (unelected) government - that of public servants using technology as a tool in the need for surveillance and detection of crime - and those of the citizen living in a democracy.

The reference materials used in the article are most important as they underpin the author's opinion to establishing the believed causal link to effect and affect (I guess) - that of surveillance gluttony at a cost to deminishing democracy and freedoms. The other side of that coin, which in fairness is not extrapolated at all to the same degree in this article, that of what has surveillance and detection achieved? I am mindful that the Judges founded their Court rulings on the evidence before them and the article illuminates the fulcrum for this is that 'things' get pushed too far for comfort when it comes to infringing law and governance and citizen's freedoms. The article appears to suggest (but I accept I could have misunderstood the message) that totalitarism is the occupational desire of (unelected) government in order for it to perform and to provide treatment to a problem or issue.


http://reason.com/archives/2012/12/17/your-cellphone-is-spying-on-you?goback=.gde_128064_member_199071347

http://reason.com/archives/2012/12/17/your-cellphone-is-spying-on-you/1

Directory of Data Recovery Soft Tools

Directory of Data Recovery Soft Tools

Practitioners of eDiscovery or data recovery approach the matter from many angles. Primarily, any ESI (electronically stored information) data requires understanding and analysis of devices and systems which may contain/store the ESI. Take the eDiscovery issue. There are the argumentative issues of what is viewable and what is not:
  
"If there is a large volume of ESI, you should discuss the best method for it to be searched, collected, filtered and reviewed with your lawyer."
www.out-law.com/en/top...privilege/

However, there is a myraid of issues involved prior to even enabling ESI to become visible and legible. Indeed, tools that can be used for common and standard office based systems can have limited or absolutely no effect for industrial based devices and systems. Today's savvy investigator is not only expected to technology aware but also technology astute where ESI is concerned:

"A typical smart phone contains a 2 GB removable memory card, which can contain the equivalent of 40 banker’s boxes of paper, or 100,000 pages."
A Litigation Neccesity: Electronically Stored Information (ESI) Review Tools 

This is not an exhaustive directory listing below and even then I shall need to add another 400 entries or more as there are so many varieties out there. If your product is not listed here send an email to me (trewmte@gmail.com) with details and I shall include it in the directory list.

Updated List 22/01/2013
Elcomsoft EPRB, Elcom Soft Co. Ltd - Password, Recovery (http://www.elcomsoft.com/)
Unstoppable Copier, Roadkil - Damage recovery (http://www.roadkil.net/)
DataGrab, Foolish IT - Desktop, Recovery (http://www.foolishit.com)
TCHunt, 16 Systems - Recovery, Forensic (http://16s.us/TCHunt/index.php)

Directory List Started 01/01/2013
Avanquest, Stellar Phoenix - Rescue, Recovery (http://www.avanquest.com/)
GetData, RecoverMyFiles - Recovery (http://www.recovermyfiles.com/) 
CnW Recovery - Forensic, Recovery (www.cnwrecovery.com)
PureDarwin - Rescue
Live Android - Rescue
Blackberry - Recovery, Rescue
AccessData FTK - Forensic
EnCase - Forensic
DidJiX - Media Production
Slax - Desktop, OS Installation
Puppy Linux - Desktop
Passmark, OSforensics - Rescue, Password
Securemac - Resecue, Password
John the Ripper, Resecue, Password
Arch Linux - OS Installation, Rescue
Linux Mint - Desktop, OS Installation
Tails - Secure Desktop
Tiny Core Linux - Desktop
Passware Inc, Rescue Password
OSXDaily, Rescue, Password
Oxid.it, Rescue, Password
AVG Rescue CD - Windows Antivirus
Redo Backup and Recovery - System Administration
Finnix     - System Administration
BackBox - Security
Ubuntu Mini Remix - Desktop
Edubuntu - Education, OS Installation
Kubuntu - Desktop, OS Installation
Lubuntu - Desktop, OS Installation
Ubuntu     - Desktop, OS Installation
Ubuntu Studio - Media Production
Xubuntu - Desktop, OS Installation
GParted LiveCD     - System Administration
Parted Magic - System Administration
CAINE     - Forensics
ArtistX - Desktop
Slackware (Disc 1) - Rescue
GeeXboX - Home Entertainment
Bodhi Linux - Desktop
Sabayon  - Desktop, Gaming, OS Installation
SystemRescueCD - Rescue
Scientific Linux - Desktop, OS Installation, Rescue
PCLinuxOS - Desktop, OS Installation
Knoppix  - Desktop, OS Installation
AV Linux - Media Production, OS Installation
BackTrack - Security
Synergy Linux - Desktop, OS Installation
antiX     - Desktop, OS Installation
Bridge Linux - Desktop
Damn Small Linux  - Desktop, OS Installation
Zeroshell - Firewall
Kororaa  - Desktop, OS Installation
CentOS     - Desktop, Rescue
BitDefender Rescue CD - Windows Antivirus
Porteus  - Desktop
Clonezilla - System Administration
F-Secure Rescue CD - Windows Antivirus
VectorLinux - Desktop, OS Installation
Fedora Design Suite - Media Production
Fedora Desktop Edition - Desktop, OS Installation
Fedora Electronic Laboratory - Science
Fedora Games Spin - Gaming
Fedora KDE Plasma Desktop Spin - Desktop, OS Installation
Fedora LXDE Desktop - Desktop, OS Installation
Fedora Robotics Suite - Robotics
Fedora Scientific - Science
Fedora Security Lab - Security
Fedora Xfce Spin - Desktop, OS Installation
Grml - Rescue, System Administration
Sugar on a Stick - Education
Kanotix - Desktop, OS Installation
Ophcrack LiveCD - Security
Chakra     - Desktop
Lightweight Portable Security - Secure Desktop
ArchBang - Desktop
Mythbuntu - Home Entertainment, OS Installation
Ubuntu Cloud Live - System Administration
Ubuntu Rescue Remix - Forensics, Rescue
Swift Linux - Desktop
Snowlinux - Desktop, OS Installation
SliTaz     - Desktop
Gentoo     - OS Installation, Rescue
GNOME Live Media - Desktop
XBMCbuntu - Home Entertainment
Càtix     - Desktop
DragonFly BSD - Desktop, OS Installation
Parsix     - Desktop
paldo     - Desktop
ReactOS - Desktop
KahelOS - Desktop
DEFT Linux - Security
GhostBSD - Desktop
PC-BSD     - Desktop, OS Installation
Webconverger - Kiosk
Dreamlinux - Desktop
aptosid - Desktop, OS Installation
austrumi - Desktop
pfSense - Firewall
REMnux     - Security
TurnKey Linux Development - Server, System Administration
Ubuntu Privacy Remix - Secure Desktop
Ultimate Edition - Desktop
CrunchBang Linux - Desktop, OS Installation
openSUSE - Desktop, OS Installation
CDlinux - Desktop, Rescue
jggimi     - Desktop
Berry Linux - Desktop
Hiren's BootCD     - Diagnostics, Rescue, System Administration, Windows Antivirus
Knoppix Japanese Edition - Desktop
Debian     - Desktop, OS Installation, Rescue
BSDRP     - Firewall
Avira AntiVir Rescue System - Windows Antivirus
Baltix     - Desktop
OpenIndiana - Desktop, OS Installation, Server
PelicanHPC - Clustering
dyne:bolic- Desktop, Media Production
Mandriva - Desktop
Plop Linux - Rescue
Toorox     - Desktop
Network Security Toolkit - Security
Ultimate Boot CD - Diagnostics, Rescue, System Administration
stresslinux - Diagnostics
Symphony OS - Desktop, OS Installation
Forensic Hard Copy - Forensics
RIPLinuX - Rescue
OpenDiagnostics Live CD - Diagnostics, Windows Antivirus
MeeGo - Desktop
Thinstation - Thin Client
linuX-gamers.net live - Gaming
Zenwalk Live - Desktop
FuguIta - Desktop
MEPIS - Desktop, OS Installation
Trinity Rescue Kit - Rescue
Bootable Cluster CD - Clustering
Kaspersky Rescue Disk - Windows Antivirus
m0n0wall - Firewall
SuperGamer - Gaming
Devil-Linux - Firewall
Knoppel - Desktop
Windows PE - OS Installation, Rescue, System Administration
PLD RescueCD - Rescue
TiNA Knoppix - Science
Doscore - Desktop
redWall Firewall - Firewall
4MLinux - Server
Pardus Live CD - Desktop
LinuxConsole  - Gaming
Openwall GNU/*/Linux - Server
PC Tools Alternate Operating System Scanner - Windows Antivirus
Puppy Arcade - Gaming
SchilliX - OS Installation
Vyatta Core - Firewall
ULTILEX - Desktop, Rescue, System Administration
Frenzy     - Rescue, Security
T2 @Live - Desktop
Guadalinex - Desktop
Panda SafeCD - Windows Antivirus
Bio-Linux - Science
Darik's Boot And Nuke (DBAN) - System Administration
LiveCD-OpenBSD     - System Administration
LiveUSB-OpenBSD - System Administration
MarBSD     - Desktop
BOSS Live CD - Security
Musix GNU+Linux - Media Production
floppyfw - Firewall
puredyne - Media Production
Elive     - Desktop
PTS Desktop Live - Diagnostics
Kleo - System Administration
PaiPix - Science
Skolelinux - Desktop, Education
xPUD - Desktop
Helix  - Forensics
GNUstep live CD - Desktop
Pentoo     - Security
BSDanywhere - Desktop
SLAMPP - Server
Crash Recovery Kit for Linux - Rescue
Jibbed     - Desktop
Linux-EduCD - Education
JUX - Education
ROCK Linux - Desktop
avast! BART CD     - Windows Antivirus
STUX - Desktop
NimbleX - Desktop
BeleniX - Desktop
LUC3M - Desktop
KnoppMyth  - Home Entertainment
g:Mini     - Desktop
GoboLinux - Desktop
MirOS BSD - Server
Adios - Education
LFS LiveCD - OS Installation, Rescue
MitraX     - Desktop
AliXe     - Desktop
Kate OS LIVE - Desktop
cdlinux.pl - Desktop
Kaella     - Education
Mutagenix - Desktop, Diagnostics, OS Installation, Rescue
Pyro Live CD - Robotics
Danix     - Desktop
Freeduc - Desktop, Education, GIS
X-Evian - Media Production
eduKnoppix - Education
Trinux     - Security
KCPenTrix - Security
Stanix Professional - Desktop
INSERT     - Rescue, Security
FreeSBIE - Desktop
LG3D LiveCD - Desktop
Kazit - Desktop
Xfld - Desktop
BDI-Live - CNC Metalworking
Formilux - Desktop
Dappix     - Desktop
aquamorph - Desktop
Legnoppix - Robotics
GIS-Knoppix - GIS
Quantian - GIS, Science
Kaboot     - Desktop, Rescue, Science
KnoSciences - Education
FCCU GNU/Linux Forensic Boot CD - Forensics
Anonym.OS - Secure Desktop
Operator - Security
ABC Linux - Desktop
Ging - Desktop
ffsearch-LiveCD - Server
AmaroK Live - Home Entertainment
loonix-live - Desktop
ATMission - Desktop, Server
PXES - Thin Client
VigyaanCD - Bioinformatics, Education
KANOTIX CPX-MINI - Desktop, OS Installation
Hikarunix - Gaming
CDMEDICPACSWEB     - Medical
Klax - Desktop
Feather Linux - Desktop
eMoviX     - Home Entertainment
SNAPPIX - Development
Xebian     - Desktop
Snøfrix - Education
SLYNUX     - Desktop, OS Installation
Benix Kanotix - Desktop
Julex - Desktop
PHLAK - Security
Freepia - Home Entertainment
AdvanceCD - Gaming
KNOPPIX-BV1AL - Desktop
Archie     - Desktop
CHAOS - Clustering
ELE - Secure Desktop
WOMP! - Home Entertainment
Flash Linux - Desktop
Shabdix - Education
Blin Linux - Desktop
LLGP - Gaming
Sentry Firewall CD - Firewall
Timo's Rescue CD - Rescue
Lisp Resource Kit - Development, Education
Sulix - Desktop
MiniKnoppix - Rescue
Toothpix - Medical
PLD Live CD - Desktop
Salvare - Rescue
NIOde - Development
ClusterKnoppix - Clustering
LAMPPIX - Server
bioknoppix - Bioinformatics, Education
MoviX2     - Home Entertainment
GNU/Linux Kinneret - Education
Luit Linux - Desktop
MiniKazit - Desktop, OS Installation
jollix     - Gaming, Home Entertainment
Arabbix - Desktop
muLinux - Desktop
eLearnix - Education
KnoppiXMAME - Gaming
FlashMob ISO - Clustering
StreamBOX-LiveCD - Media Production
ByzantineOS - Home Entertainment
MoviX - Home Entertainment
LiveOIO - Medical
PlumpOS - Clustering
Local Area Security Linux - Desktop, Security
Pollix   - Development
TPM Security Server - Forensics, Security
Phrealon - System Administration
Knoppix STD - Security
tlf-morphix - Hobby
KnoppixQuake - Server
Ankur - Desktop
Morphix-NLP - Science
FreeBSD LiveCD  - Desktop, OS Installation, Rescue
Emergency CD - Rescue
KibZiLLa - Desktop
Lin4Astro - Astronomy
Gentoox - Desktop
OpenGroupware Knoppix CD - Server
Cool Linux CD - Desktop
3Anoppix - Desktop
FIRE - Forensics
LNX-BBC - Desktop, Rescue
BerliOS MiniCD - Desktop
MIOLUX     - Desktop, Rescue
SuperRescue - Rescue
Lonix - Rescue     2002.10
PCG-C1VN Live CD - Desktop
WarLinux - Security
DemoLinux - Desktop
tomsrtbt - Rescue
Virtual Linux - Desktop
PLAC - Forensics, Rescue
Repairlix - Rescue

Quarter of a Million

Quarter of a Million








































Given the vast numbers using the internet finding trewmte.blogspot must seem like trying to find a grain of sand on a beach or winning the national lottery, yet I am very pleased to see the content at my blog has now been read by over a quarter of million viewers in just over six years.

It really is gratifying to see from the early days in later 1980s when it was possible to count on two hands the number of examiners involved the profession up to today where there are thousands of people involved in this branch of forensic science and mobile phone examination, generally, that the viewers of this blog are a testament to the growth in our profession.

Thanks to everyone who has taken time to drop in and see my observations and reporting on mobile phone forensics, evidence, data discovery and commentary about the technological changes that have and are taking place.
  

ForensicMobex

ForensicMobex has moved to MTEB LinkedIn Group as a subgroup:

Stakeholder Information
-----------------------
Mission Statement: Expert discussion group relating to the examination of and/or evidence from mobile/smart phones, PDAs/IPODs/IPADs/USB, SIM/USIM and other storage devices. The use of logical or physical procedures; the relevation of harvested data; use programs and other tools; interpretation of data.

Mission Aims & Objectives of this group: to improve communications between experts, assist diagnostic approach and build issues of professional interest, as well as improving knowledge skills and awareness.

This group is at all times company, make/model, OS, tool, platform and app neutral. You, the Stakeholder, warrants to MTEB, MTEB ForensicMobex SIG and the owner of the group that you undertake to indemnify MTEB, MTEB ForensicMobex SIG and the owner of the group regarding the distribution and use of material where it holds copyright invested in it.

By joining this group each member becomes a stakeholder in the group and agrees to regular active participation, which is monitored regularly. A stakeholder who fails to contribute meaningful content such as knowledge and/or experiences, identify research papers (with links) and/or materials/tools identification etc then membership will be suspended. This policy has been agreed to ensure fairness to all contributor members.

*We do NOT accept impersonal anonymous IDs, recruiters and HR people
*We do NOT accept students unless they demonstrate prior skills and experience
*We do NOT accept those with less than 5 connections to other LinkedIn members.

If your Profile doesn't immediately convince us that you have the skills and experience outlined we will NOT admit you.

Listing a job title or role, owning or managing a business or one of its departments in your Profile is not enough to join. We want to know that you have the skills and experience to fit in with one of the best expert groups on LinkedIn.

Please make sure your profile is up to date before applying for membership.

A European Focused Mobile Consumer Survey

A European Focused Mobile Consumer Survey

Informa Telecom and Media have published the results of their Smartphone Usage and Behaviour Survey 2012 conducting the survey in four european countries UK, Spain, Germany and the Netherlands http://www.informatandm.com/mobile-consumer-survey/ .

The results for the UK identified the brand of mobile phone owned in particular age groups.













The responses to the survey confirm that the smartphone market in the UK is segmented and therefore mobile operators attempting to forecast device usage and data/services activity may require enabling customers the selection and choice of a range of platforms to sink their teeth into optimising any consumer initiative to enable the growth of smartphones to continue.

For examiners the survey illustrates that predominantly the smartphones to be examined fall into a fairly small category, which could be quite useful for forecasting future examinations and, in particular, the expenditure on tools etc.

Blackberry Enterprise Solutions

BB Manuals and Guides

For me, at any rate, using this link probably leads to the best way to get instant access (that is at a glance, click the link) to manuals and guides specific to versions of Blackberry Enterprise Solutions - http://docs.blackberry.com/en/admin/?userType=2

There is also further BB support links to various manuals and help here: http://docs.blackberry.com/en/ and for the Blackberry knowledge base here: http://btsc.webapps.blackberry.com/btsc/microsites/searchEntry.do

US Handset Serial Number Databases

US Handset Serial Number Databases

US operators maintain their own stolen and blacklisted cellphone databases. As of the 31st October 2012 the GSM operators AT&T and T-Mobile began sharing their databases. CDMA operators Verizon and Sprint have taken the decision to merge their databases but that will not be complete until November 2013, so we are told.

The said objective of these initiatives are to improve track and trace. As an example, GSM uses a 56-bit decimal digit s/n, whereas CDMA uses a 56-bit hexadecimal digitals s/n. However, in the US there are variations of s/ns to consider.

The engine for these changes is driven by the FCC initiative - http://www.fcc.gov/document/announcement-new-initiatives-combat-smartphone-and-data-theft

To accommodate this and other cellphone/cellular changes I have altered my CDMA training material and GSM training material. As consequence these changes will also have an impact on WCDMA and LTE, either on a national level or international level. These training materials have also changed, too.

_________________
Institute for Digital Forensics (IDF) - LinkedIn
Mobile Telephone Examination Board (MTEB) - LinkedIn

EU Cybercrime (aka real name ICT ecrime)

EU Cybercrime (aka real name ICT ecrime)

Setting up the the criminal legal framework:

Judicial cooperation in criminal matters: combating attacks against information systems

Subject
3.30.06 Information and communication technologies
3.30.25 International information networks and society, internet
7.40.04 Judicial cooperation in criminal matters

http://www.europarl.europa.eu/oeil/popups/ficheprocedure.do?id=587653

Having a common European ICT eCrime Judicial protocol must equally rely on a common European Prosecution able to deal with ICT eCrime to assets:

https://www.era.int/cgi-bin/cms?_SID=47326840bea04c616952d8eb19eaceb72b2cb9a400217108097437&_sprache=en&_persistant_variant=/Our%20programme/Browse%20all%20events&_bereich=artikel&_aktion=detail&idartikel=123340

The establishment of the European Public Prosecutor's Office (EPPO) is envisaged in Article 86 TFEU. The EPPO would be responsible for investigating, prosecuting and bringing to justice those who damage assets managed by or on behalf of the EU.  The European Council may adopt a decision extending the powers of the EPPO to include serious crime having a cross-border dimension.

Mobile Flash Data Erasure

Mobile Flash Data Erasure

                                                  Photo courtesy of Blancco

The growth in smart phones naturally means consumers will see even more utilities and tools similiar to those found on PCs, laptops and notebooks etc. A trend that is growing in relation to cleansing of personal details and company information stored logically and physically is called mobile flash data erasure (MFDE).

Service erasure
A group called www.tabernus.com/ promote "Tabernus also provides erasure solutions for Mobile Phones, USB, SSD (solid state devices) & other types of Flash removable memory and may other data holding devices too!"

Software erasure
Of course, there is a comparison for mobile phone flash erasure available from  http://www.blancco.com/us/erase-smartphones/

The above examples are in addition to hardware encryption:

Device specific denied data access
Hardware Encryption: The iPhone 3GS and later, and all iPads, support built-in hardware encryption. All user data can be automatically encrypted in hardware at all times. This is used primarily for wiping the device rather than to stop attacks. Erasing the entire flash storage would be slow, so instead wiping works by destroying the encryption key, which instantly makes all user data inaccessible (Securosis).

And flash memory management:

Flash Memory Management Systems
Wear leveling ( http://en.wikipedia.org/wiki/Wear_leveling ) as well routines used in garbage collection solutions ( http://en.wikipedia.org/wiki/Garbage_collection_%28SSD%29#Garbage_collection and http://en.wikipedia.org/wiki/Garbage_collection_%28computer_science%29 ) can lead to potential loss due to overwriting existing deleted data.

From an examiner's point of view, MFDE is most likely to have a huge impact on deleted data recovery (DDR) from flash chips. The methodology and science behind Chip Off and JTAG is currently used for recovery of deleted data from a  range of mobile devices. Overwriting 0101010101 (zeros and ones) or null values over particular areas or the entire area of the flash memory may make Chip Off and JTAG redundant in certain types of investigations and cases in the future.

iPhone Secret Folder

iPhone Secret Folder

Opening the taps on this one could prove useful:

 

https://itunes.apple.com/us/app/secrets-folder-pro-lock-your/id566516598?mt=8

Mobile Weapons and Seizure Procedure

Mobile Weapons and Seizure Procedure

The MTEB (Mobile Telephone Examination Board) is preparing the Eighth Edition of Section 4 Mobile Telephone Seizure Procedure (Mobile Weapons) and will update on new items and handling procedures for them.  



There has been a slow but persistent level in mobile/smart phones being adapted for use as some form of weapon.

Back in 2008 trewmte.blogspot reported about the mobile phone that fires bullets. The story of this wasn't new, by any means, but was highlighted to illustrate the variety and exposure of devcies that those involved in seizure procedure and mobile phone examiners can come into contact. 



Report: http://trewmte.blogspot.co.uk/2008/11/mobile-phone-that-fires-bullets.html

Over time the trewmte.blogspot has highlighted other weapons, such as Stun Guns:



 http://trewmte.blogspot.co.uk/2007/07/stun-gun-cellphone.html



http://trewmte.blogspot.co.uk/2007/10/another-mobile-telephone-stun-gun.html

But mobile/smart phones that propel objects or inflict severe shock are not the only adaptations out there. Take for instance the age old weapon of a knife adapted for use with a mobile phone ( seized 2005):

And now in 2012 we now have another weapon that uses an adapted iPhone case which the manufacturers purport can be used for personal protection to spray pepper in the eyes:

The above are by no means the end of mobile/smart phones adapted for some form of weapons. We only know too well how mobile phones have been rigged to set off incendiary devices etc, which the MTEB labels IMD (improvised mobile devices):  

 


Yes the photos above all present disburbing images, but not for sensational purposes. Thankfully, it is not common for those involved with seizing items and examiners to come into contact with adapted and improvised devices like these on a regular basis. We still need to be aware and have a proposed handling procedure in place to deal with them though. That is on the basis that mobile/smart phone seizure and examination happens globally. The trewmte.blogspot is not simply local to the UK but deals with international matters and therefore articles like this are not only for UK consumption but for other countries that are involved in and employ seizure and examination procedures.

Lastly, and of specific relavance to seizure and examination procedure, it is priority to deal with mobile/smart phone weapon/s as opposed to figuring out what a person may have intended to do with it/them; figuring out is a thought process that can come later on. Why? One very good reason, the person who is seizing an adapted device (e.g. iPhone case above) and accidently sprays pepper into his/her face because s/he had no prior knowledge about the adapted device is clearly a priority. It is immaterial that the owner of such a device may have had genuine reasons (attacker pepper spray) for having such a device. Apart from mal-intention and recklessness of IMDs etc, for the majority of persons seizing or examining the device they wouldn't be the intended target and are nothing more than innocent bystanders.

Age UK introduces mobile for elderly

Age UK introduces mobile for elderly

Evidential examiners may not expect to find our elderly senior citizens getting into bother and doing things they really ought not. If one or two do decide to go off the rails and grow old disgracefully they might decide they want to use simplified smartphone technology to contact their posse.  Age UK and CyCell have got together to produce Age UK My Phone. Reviewed by phonesreview.co.uk the website says it is "a very easy to use mobile phone that is lightweight and credit-card sized weighing only 40 grams, and sports only 8 buttons that can be customised to contact the users loved ones with one press, whilst answering the handset is as simple as pressing a single answer button."

So if you want to see one of these new mobiles then get along to one of the 200 Age UK shops located throughout England. Apparently, the smartphone cost £55, has a range of flexible 30-day rolling price plans, and comes in eleven colours. No need to hunt for the phonebook as all the contact names can be found on the main screen. I could see other uses for this new smartphone, too. Perhaps parents may get one for their child, giving the child limited mobile access to contact home or friends and raise money for Age UK at the same time. A bonus could also be for the younger generation to be introduced to the excellent work of charities for the elderly, such as Age UK, by visiting their shops.

Update:
The Age UK My phone appears to be part of a growing market manufacturing trend internationally creating smartphone user-friendly interfaces for senior citizens, which is highlihted in this later CNET article Design of the times the secret to creating cell phones for seniors