BlackBerryForums.com : Your Number One BlackBerry Community
     

»Sponsored Links


BlackBerryApps.com Best Sellers



Reply
 
LinkBack Thread Tools
  (#1 (permalink)) Old
CellForTom Offline
New Member
 
Posts: 4
Join Date: Dec 2008
Location: SC
Model: 8310
PIN: N/A
Carrier: TMobile
Default Spy-Ware on a BB! - 12-29-2008, 04:38 PM

I am trying to help a victim of a stalker who somehow is copying all her SMS messages and then sending them to her friends (in a 'show-off' way). It has the police baffled and I've been asked to help (I'm a P.I.). I do cellular forensics but spyware is new to me. The suspect has not been arrested because they cannot find anything to connect to him. Client is a wreck to say the least.

Does anyone know of any spyware that works with a BB other than FlexiSpy? How about 'Forwarding' type apps that reroute the calls and SMS's to a website?

Any help would be greatly appreciated. I am trying to get a handle on this!

Tom Slovenski, new member
Cellular Forensics, LLC
   
Reply With Quote
Sponsored Links
Please Login or Register to Remove these Advertisements!

  (#2 (permalink)) Old
JSanders Offline
BBF Moderator
 
JSanders's Avatar
 
Posts: 37,865
Join Date: Oct 2004
Location: North of the moss line
Model: 9xx0
OS: 4.7sumtin
PIN: t low
Carrier: Cingular/AT&T
Default 12-29-2008, 04:46 PM

Welcome to the BBForums... I think you have already gotten some small direction from me on this. Good luck.
   
Reply With Quote
  (#3 (permalink)) Old
CellForTom Offline
New Member
 
Posts: 4
Join Date: Dec 2008
Location: SC
Model: 8310
PIN: N/A
Carrier: TMobile
Default 12-29-2008, 04:50 PM

Wirelessly posted

Yes I did, thank you. I've been researching this thing for the past few days and am about crosseyed. LOL Trying to get as many leads as I can!
   
Reply With Quote
  (#4 (permalink)) Old
JSanders Offline
BBF Moderator
 
JSanders's Avatar
 
Posts: 37,865
Join Date: Oct 2004
Location: North of the moss line
Model: 9xx0
OS: 4.7sumtin
PIN: t low
Carrier: Cingular/AT&T
Default 12-29-2008, 04:52 PM

Read this and referring article as well. You might learn something--especially from the comments AFTER the article.

Five—no, four good security tips… from CSOonline.com | BlackBerryNews.com
   
Reply With Quote
  (#5 (permalink)) Old
BBF Moderator
 
Thatzmister2u's Avatar
 
Posts: 5,847
Join Date: Feb 2007
Location: Nor Cal
Model: 9000
PIN: ups! ;)
Carrier: AT&T
Default 12-29-2008, 04:56 PM

Did they ever use

https://www.dexrex.com/

E-


Unlocked | AT&T BES
*gasp* Un-protected...


www.horizonwirelessonline.com - Unlocks and Repairs
   
Reply With Quote
  (#6 (permalink)) Old
CellForTom Offline
New Member
 
Posts: 4
Join Date: Dec 2008
Location: SC
Model: 8310
PIN: N/A
Carrier: TMobile
Default 12-29-2008, 05:01 PM

Oh snap! There's another one I'm gonna have to test!
Thatzmister2u, do you know how this bugger works?
   
Reply With Quote
  (#7 (permalink)) Old
BBF Moderator
 
Thatzmister2u's Avatar
 
Posts: 5,847
Join Date: Feb 2007
Location: Nor Cal
Model: 9000
PIN: ups! ;)
Carrier: AT&T
Default 12-29-2008, 05:05 PM

Quote:
Originally Posted by CellForTom View Post
Oh snap! There's another one I'm gonna have to test!
Thatzmister2u, do you know how this bugger works?
From what I know about it (which is very little) it is just an SMS archiving service but if running it would mean that the SMS are stored elsewhere for someone to get into.

E-


Unlocked | AT&T BES
*gasp* Un-protected...


www.horizonwirelessonline.com - Unlocks and Repairs
   
Reply With Quote
  (#8 (permalink)) Old
BBF Moderator
 
Thatzmister2u's Avatar
 
Posts: 5,847
Join Date: Feb 2007
Location: Nor Cal
Model: 9000
PIN: ups! ;)
Carrier: AT&T
Default 12-29-2008, 05:08 PM

Also, does this person backup the device using a PC? If so, are you certain that someone has not gained access to that? If they did get access they could use ABC Amber to convert the backup files.


Unlocked | AT&T BES
*gasp* Un-protected...


www.horizonwirelessonline.com - Unlocks and Repairs
   
Reply With Quote
  (#9 (permalink)) Old
christopher Offline
Knows Where the Search Button Is
 
Posts: 29
Join Date: Nov 2005
Model: 8800
Carrier: Cingular
Default 01-02-2009, 02:48 AM

Wirelessly posted

I viewed txtforward from pocket electric do the job! Forward all sms to an email address!
   
Reply With Quote
  (#10 (permalink)) Old
SpectreBlofeld Offline
Talking BlackBerry Encyclopedia
 
SpectreBlofeld's Avatar
 
Posts: 206
Join Date: Jun 2007
Model: 9630
OS: 4.5.x.x
PIN: N/A
Carrier: Verizon
Default 01-02-2009, 12:24 PM

If you find out the answer, please come back and let us know!
   
Reply With Quote
  (#11 (permalink)) Old
zenartbb Offline
Thumbs Must Hurt
 
zenartbb's Avatar
 
Posts: 107
Join Date: May 2008
Location: Northern VA
Model: 8350i
Carrier: Nextel
Default 01-03-2009, 12:05 AM

Wirelessly posted (Curve 8350i)

If you have the ability to obtain a subpoena, the wireless carrier can trace the messages and might be able to provide additional insight.
   
Reply With Quote
  (#12 (permalink)) Old
CellForTom Offline
New Member
 
Posts: 4
Join Date: Dec 2008
Location: SC
Model: 8310
PIN: N/A
Carrier: TMobile
Default 01-03-2009, 01:52 PM

Yes Zen, that is true. We have had problems in this arena from time to time due to lack of funding on the client's part and/or lack of cooperation from those who are able to get the subpoenas. It's frustrating for me to see what CAN be done and then have to deal with those with no concern or who wish to drag their heels.
   
Reply With Quote
  (#13 (permalink)) Old
Knows Where the Search Button Is
 
MetalMariachi777's Avatar
 
Posts: 21
Join Date: Apr 2008
Location: Chelsea, MA
Model: 9000
OS: 4.6.0.167
PIN: 24A7179C
Carrier: AT&T
Default 01-12-2009, 12:33 AM

Do you want spyware for the Blackberry? Or and Anti-Spyware app? They're two different things. And the only way I see this happening, is if the owner of the phone is using a program that gives an open door to the hacker to get into it, or the hacker them self has had time to work on the device. If you want someone to check her phone, get the IT guy at your job to check the blackberry. It's programmed in Java. If he knows programming, he can find an error, or a back door in the actual code.
   
Reply With Quote
  (#14 (permalink)) Old
daphne Offline
BBF Spam Killer Moderator
 
daphne's Avatar
 
Posts: 6,410
Join Date: May 2007
Location: on a sunny beach
Model: 9630
OS: 4.7.1.40
PIN: 11001100
Carrier: Verizon - It's the Network
Default 01-12-2009, 01:21 AM

The OP is trying to help someone who may have a spy app on their BlackBerry. There are only 2 or 3 such applications that work on BlackBerrys. There are no backdoors on the BlackBerry -- it is a very secure device. The only way a spyware program can get on a BlackBerry is if someone has physical access to the device.
   
Reply With Quote
  (#15 (permalink)) Old
big mama Offline
New Member
 
Posts: 3
Join Date: Apr 2009
Model: 8330
PIN: N/A
Carrier: verizon
Default 04-30-2009, 01:15 PM

I am also a PI and dealing with the same type of issue. Have any of you found a way to effectively detect the spyware if it is there or do I just need to tell her to wipe her device and start over with a secure password.
   
Reply With Quote
  (#16 (permalink)) Old
NJBlackBerry Offline
Retired BlackBerryForums.com Moderator
 
NJBlackBerry's Avatar
 
Posts: 20,743
Join Date: Aug 2004
Model: 9700
Carrier: T-Mobile
Default 04-30-2009, 01:25 PM

Wipe it out and use a VERY secure password that someone close to them would not guess.
   
Reply With Quote
  (#17 (permalink)) Old
JSanders Offline
BBF Moderator
 
JSanders's Avatar
 
Posts: 37,865
Join Date: Oct 2004
Location: North of the moss line
Model: 9xx0
OS: 4.7sumtin
PIN: t low
Carrier: Cingular/AT&T
Default 04-30-2009, 01:44 PM

NJ's the is best advice.

Wipe the device:
How do I wipe the BlackBerry using Jl Cmder? - BlackBerryFAQ

Then set a password as advised.

Do a complete backup of the device first using Desktop Manager, and then after the OS is restored to the device, use DM to Restore/Advanced only the address book, calendar, etc., as none of that is going to have any spyware in it.

If you want to do a first look at Options > Advanced > Applications, if there is any spyware loaded on the device you might noticed some odd application there. Ask here if you do, stating the name of the app in question.

Finally, the ex-husb may just know here email account password. Tell her to change that pw as well.
   
Reply With Quote
  (#18 (permalink)) Old
CO_BBTechie Offline
BlackBerry Extraordinaire
 
CO_BBTechie's Avatar
 
Posts: 2,045
Join Date: Jul 2007
Location: Denver
Model: 8310
Carrier: AT&T
Default 04-30-2009, 01:46 PM

Quote:
Originally Posted by JSanders View Post
Finally, the ex-husb may just know here email account password. Tell her to change that pw as well.
Additionally, you should check the email account for any forwarding rules that may have been setup. If the email account password is changed, yet a forwarding rule exists, the 3rd party will continue to receive messages without knowing the new password. They just won't be able to affect any changes to the forwarding once the password is changed.


Treat your password like your toothbrush. Don't let anybody else use it, and get a new one every six months.
Clifford Stoll
   
Reply With Quote
  (#19 (permalink)) Old
JSanders Offline
BBF Moderator
 
JSanders's Avatar
 
Posts: 37,865
Join Date: Oct 2004
Location: North of the moss line
Model: 9xx0
OS: 4.7sumtin
PIN: t low
Carrier: Cingular/AT&T
Default 04-30-2009, 01:48 PM

True, CO_BBTechie, thanks.

There are so many places to look first, before the BlackBerry, for spyware or NON-syware that will simply do what one needs to have knowledge of another personal electronic communications.

Last edited by JSanders : 04-30-2009 at 02:05 PM.
   
Reply With Quote
  (#20 (permalink)) Old
big mama Offline
New Member
 
Posts: 3
Join Date: Apr 2009
Model: 8330
PIN: N/A
Carrier: verizon
Default 04-30-2009, 02:04 PM

thanks for the help guys. this is all new to me.
   
Reply With Quote
  (#21 (permalink)) Old
kgn1224 Offline
Thumbs Must Hurt
 
Posts: 88
Join Date: Jun 2007
Location: Louisville, Kentucky
Model: 9000
OS: 4.6v228
PIN: N/A
Carrier: AT&T
Default Spyware & Bluetooth - 05-01-2009, 10:33 PM

There are several apps available that load on the Offenders device. If the Target device has bluetooth on, discoverable or not, the offenders device can tap in and read all contents. No pass key required and no record of violation left. This is a low tech tool used by LE to tap into data on PayGo type phones.


AT&T Blackberry Bold 9000 4.6.228 BES

Personal: http://twitter.com/RhinoForce
   
Reply With Quote
  (#22 (permalink)) Old
hrbuckley Offline
CrackBerry Addict
 
Posts: 826
Join Date: Jan 2006
Model: 9000
OS: 4.6.0.303
Carrier: Rogers CA
Default 05-02-2009, 02:34 PM

I would like to see some evidence that this would work on a Blackberry.


BPS/Zarafa
   
Reply With Quote
  (#23 (permalink)) Old
kgn1224 Offline
Thumbs Must Hurt
 
Posts: 88
Join Date: Jun 2007
Location: Louisville, Kentucky
Model: 9000
OS: 4.6v228
PIN: N/A
Carrier: AT&T
Default 05-02-2009, 02:49 PM

I personally have no experience with this. I am told by two close friends who are active fed LE that it works. I have no vested interest in the thread either way, just providing information. I am a long time BB user but am not naďve enough to believe that the security barriers on the BB or any other other mobile PDA/cell are capable of fending off this type of threat. Does anyone truely believe that we are immune from unwanted threats of this type?


AT&T Blackberry Bold 9000 4.6.228 BES

Personal: http://twitter.com/RhinoForce
   
Reply With Quote
  (#24 (permalink)) Old
troykent Offline
Knows Where the Search Button Is
 
Posts: 49
Join Date: May 2006
Location: Knoxville, TN
Model: 9530
Carrier: Verizon
Default 08-27-2009, 08:23 AM

DexRex doesn't work at all. It keeps saying that it can't connect (yes i double checked permissions) Then when it says connected i log in to my account and it says I don't have anything archived. I've given up on it, we're looking for a solution to archive our communications and flexispy is looking like the best option. I've not read anywhere that it doesn't work.
   
Reply With Quote
  (#25 (permalink)) Old
daphne Offline
BBF Spam Killer Moderator
 
daphne's Avatar
 
Posts: 6,410
Join Date: May 2007
Location: on a sunny beach
Model: 9630
OS: 4.7.1.40
PIN: 11001100
Carrier: Verizon - It's the Network
Default 08-27-2009, 11:05 PM

Flexi-Spy won't work on CDMA devices. Your profile shows you have Verizon, so you have a CDMA phone and there is no spyware that works on CDMA phones.
   
Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright © 2004-2009 BlackBerryFAQ.com, BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of Research In Motion Limited.