0

I'm a web developer and generalist programmer with a bit of mobile experience.

A friend of my wife is being stalked by a guy she was dating briefly and dumped over a month ago. He has somehow (not to say this is hard as I'm now learning) managed to compromise her iPhone. He recently let her know he knew who she was talking to over dating sites and other social media she accessed via the phone and claims he has a number of passwords etc...

I think I've got the damage-control side of things covered in terms of getting her to stop using her own personal devices and reset all her accounts on a friends computer and switch to a new email account for resets/verification, as well as redoing any security questions to not be facebook/asking-friends-answerable, etc.

But before I get her files backed up and do the phone factory reset after looking into all the places things might be able hide that resets don't touch (topic of another question), I'm wondering if there's a way to preserve the state of the phone in some sort of tamper-proof encrypted image that would suffice for evidence or at least good solid lead-building for purposes of law enforcement solutions to the problem in case he turns out to be a complete psycho and won't leave her alone once we've established that she has friends that are more technical than he is, one of them is often in the same sector that he's in, and has shared mutual acquaintances on LinkedIn (oopsie).

Is this possible/practical/admissible? If not, is there anything from this phone I should try to preserve before nuking it? Getting her safe in the short term is higher priority than him sorry but I'd hate to blow any opportunities to get his heirlooms in a vice later should that become necessary. I do not yet know how he communicated these things to her. I'm very hopeful it's email but he's probably smarter than that.

2
  • Usually there's a pattern of mobile calls and her operator already has it regardless whether you nuke the phone or not. It is also pretty much a legal question - his attorney may say this evidence is inadmissible. Mar 5, 2016 at 19:15
  • What's the Iphone Model and ios version?
    – Noir
    Mar 5, 2016 at 22:15

1 Answer 1

1

First: This phone hacking sounds like a bluff. It's absolutely not trivial to break into an Iphone. There are some preconditions to accomplish this like a jailbroken phone and a side-loaded app or at least a malicious app which is registered as device administrator. This will require some social engineering. For sure it could be possible that he had physical access to the phone to infect it manually... But if this is the case she got a much bigger problem than a compromised device.

But lets assume that he would have managed to break into her phone. Number one rule in such cases is: Call the forensic guys as soon as possible. Everything you do could destroy evidence or raise the attention of the attacker. After that, you can try to lock him out of the accounts and make things secure.

Anyway. If you are sure enough that an attack on the phone or some accounts happened: get the police involved and make sure nobody else is touching the phone until things are clear.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.