1. Ladislav Škufca, Luka Podgoršek, Agáta Dařbujanová
Tools and methods for falsification of SMS messages
27. Maj 2018

2. Introduction and Motivation
SMS - Short Message Service
Usage:
Communication
Marketing (gateways)
Security element
Risks:
Falsification
Anonymous SMS
AGATA

3. Previous research: falsification of SMS
How to modify:
The center service address
A content of the message
Sender’s address
Timestamp
Nokia 6021:
Well structured and PM tables
Two tests:
With expected (valid) values
With unexpected (invalid) values
Detection of changed SMS
AGATA

4. How SMS works
Short Message Service Center (SMSC) – store, forward, convert and deliver – carrier storage
Mobile telephone network, timestamps on cellular network, TMSI (The Temporary Mobile Subscriber Identity) for tracking
Body – 160 characters
Smart phones era - synchronization
Gateways for:
Receiving messages - multiple users, logs
Sending transactional, promotional and business/enterprise types of SMS message: right to know the sender, Slovenia price: 0.03 EUR per message, Android application (smsgateway.me)
TODO ZA V SEMINARSKO – sms se na modernih napravah stora ob prejetju direkt v napravo (da se baje nastaut tut za na sim), učas se je na sim pa pol hkrati na telefon, če si ga zbrisou se je pač uno na simu začelo prepisvat
– SMSC ni vezan na bazno postajo

5. SMS storage location
Modern mobile devices use SQLite databases for storing SMS messages
Android SMS location:
/data/data/com.android.providers.telephony/databases/mmssms.db
macOS SMS location (iOS backup):
~/Library/Application Support/MobileSync/Backup/sms.db
LUKA

6. Editing SMS content on Android
Steps:
Root the device
Use adb to copy mmssms.db to /tmp
Copy msmsms.db file to computer
Edit it (any SQLite application will suffice)
Save changes and copy it to device (/tmp)
Use adb to move edited database back to original location
Restart the device
(optional) Unroot the device
LUKA

7. Editing mmssms.db file
LUKA

8. Edited SMS messages
LUKA

9. SMS as a digital evidence
A connection of a phone number and its owner
What can criminals do:
Falsify an SMS
Send SMS anonymously
Use of a lot of phone numbers for one operation
What investigators can do:
Proof an original information by the provider
Content analysis: text, punctuation, emojis, grammar, favorite words,...
AGATA

10. Conclusion
SMS messages can be used in court as an evidence in Slovenia if they we were collected according to the law
You can not trust to a SMS message just by looking at it on one device!!!
Check with other phones, services or provider
Tried it on Android - “easy job“ if you know what to do
LADO
ALI LAHKO SMS UPORABŠ KOT VERODOJSTOJEN DOKAZ

11. Thank you for your attention
QUESTIONS?