Cellebrite

From Wikipedia, the free encyclopedia

Cellebrite DI Ltd.
Company typePublic
Nasdaq: CLBT
Industry
Founded1999; 25 years ago (1999), in Petah Tikva, Israel
Founders
  • Avi Yablonka
  • Yaron Baratz
  • Yuval Aflalo
Headquarters
Petah Tikva
Number of locations
14 (2021)
Area served
Worldwide
Key people
Number of employees
1,000+ (2023)[1]
Divisions
  • Cellebrite (digital intelligence)
    *Mobilogy (commercial & retailers, mobile life cycle)
Websitewww.cellebrite.com

Cellebrite DI Ltd. is an Israeli digital intelligence company that provides tools for federal, state, and local law enforcement as well as enterprise companies and service providers to collect, review, analyze and manage digital data.[2] On April 8, 2021, Cellebrite announced plans to go public via a merger with a blank-check firm, valuing the company at approximately $2.4 billion.[3] Their flagship product series is the Cellebrite UFED.

Overview[edit]

Cellebrite is headquartered in Petah Tikva, Israel. It has fourteen offices around the globe, including business centers in Washington, D.C., US; Munich, Germany; and Singapore.[4] Cellebrite is a fully owned subsidiary of Sun Corporation (JASDAQ: 6736) based in Nagoya, Japan. Cellebrite's products are classified as "dual-use civilian services", and not security-related, a distinction which it is argued allows them to operate without any serious oversight from the Israeli government.[5]

In 2017, Cellebrite's Mobile Lifecycle division was rebranded as Mobilogy.[6]

Mobilogy produces hardware and software for phone-to-phone data transfer, backup, mobile applications electronic software distribution, and data analysis tools. Mobilogy products are used by various mobile operators, and are deployed in wireless retail points of sale. Mobilogy works with handset manufacturers to ensure compatibility[clarification needed] before devices are released to the public.[7]

Cellebrite's mobile forensics division was established in 2007 and produces digital forensics and intelligence tools for use by law enforcement, intelligence agencies, military branches, corporate security and investigations, law firms; and private digital forensic examiners.[7]

History[edit]

Cellebrite was established in Israel in 1999 by Avi Yablonka, Yaron Baratz, and Yuval Aflalo.[8]

Ron Serber joined Cellebrite in 2001 and Yossi Carmil joined in 2004. Since 2005 they both served as Co-CEO's until Ron Serber left the company in 2020. Carmil has since been the sole CEO.

Cellebrite first manufactured hardware and software that offered a compressive phone-to-phone data transfer devices, contact synchronization and content transfer tools for mobile phones, intended for use by wireless carrier sales and support staff in retail stores.

In 2007, Cellebrite established an independent division targeted at the mobile forensics industry.[9] That year, Cellebrite was acquired by FutureDial Incorporated and one of its major shareholders, Sun Corporation in Japan.[10] In 2019 Israeli Growth Partners (IGP) invested $110 million in Cellebrite.[11]

In April 2021, Cellebrite DI Ltd. it has entered into a definitive business combination agreement and plan of merger with TWC Tech Holdings II Corporation. Once completed, Cellebrite would become a publicly listed company on the Nasdaq under the new ticker symbol, "CLBT"; the pro forma implied equity value of Cellebrite post-merger is expected to be approximately $2.4 billion.[12][13] In August that year, Cellebrite DI Ltd. announced the completion of the merger.[14] The Nasdaq ticker symbols were renamed to CLBT and CLBTW on the announcement day.[15]

Subsidiaries[edit]

  • Cellebrite Asia Pacific Pte Ltd: Singapore-based subsidiary
  • Cellebrite UK Limited: UK-based subsidiary
  • Cellebrite Global Training Headquarters: United States-based subsidiary
  • Cellebrite GmbH:[16] Germany-based subsidiary - registered in October 2008[17]
  • BlackBag Technologies, Inc.: In January 2020, Cellebrite announced the acquisition of BlackBag Technologies, Inc., a forensics company with a focus on computer forensics. The acquisition allowed Cellebrite to expand its digital intelligence solution offerings to include data collection tools from computers.[18][19]

Technology[edit]

In 2019, Cellebrite announced a new version of the UFED, called the UFED Premium. The company claimed that it can unlock iOS devices including those running iOS 12.3 and Android phones such as the Galaxy S9.[20]

In 2021, Moxie Marlinspike, creator of the encrypted messaging app Signal, pointed to a number of vulnerabilities in Cellebrite's UFED and Physical Analyzer software that allowed for arbitrary code execution on Windows computers running the software. One exploit he detailed involved the UFED scanning a specially formatted file which could then be used to execute arbitrary code on the computer running the UFED. Marlinspike wrote that the code could then "[modify] not just the Cellebrite report being created in that scan, but also "all previous and future generated Cellebrite reports" from all previously scanned devices and all future scanned devices in any arbitrary way".[21] Marlinspike also found that Cellebrite software was bundled with out-of-date FFmpeg DLL files from 2012, which lacked over 100 subsequent security updates. Windows Installer packages, extracted from the Windows installer for iTunes and signed by Apple, were also found, which he said raised legal concerns.[22] Cellebrite responded that the company "is committed to protecting the integrity of our customers' data, and we continually audit and update our software in order to equip our customers with the best digital intelligence solutions available."[23] The report by Signal followed an announcement by Cellebrite in 2020 that it had developed technology to crack encrypted messages in the Signal app, a claim the company later retracted and downplayed.[24][25]

The announcement by Marlinspike raised questions about the integrity of data extracted by the software,[26][27] and prompted Cellebrite to patch some of the vulnerabilities found by Signal and to remove full support for analyzing iPhones.[28][29]

Law enforcement and government assistance[edit]

In April 2011, the Michigan chapter of the American Civil Liberties Union questioned whether Michigan State Police (MSP) troopers were using Cellebrite UFEDs to conduct unlawful searches of citizens' cell phones.[30] Following its refusal to grant the ACLU of Michigan's 2008 Freedom of Information Act request unless the organization paid $544,000 to retrieve the reports, MSP issued a statement claiming that it honored the Fourth Amendment in searching mobile devices.[31]

In March 2016, it was reported that Cellebrite offered to unlock an iPhone involved in the FBI–Apple encryption dispute.[32] Later, after the FBI announced it had successfully accessed the iPhone thanks to a third party. A press report claimed Cellebrite had assisted with unlocking the device,[33] which an FBI source denied.[34]

A 2017 data dump first suggested Cellebrite sold its data extraction products to Turkey, the United Arab Emirates and Russia.[35]

On 16 September 2020, Haaretz reported how Cellebrite had provided Saudi Arabia with mobile phone hacking services. The staff at Cellebrite demanded the Saudis to send a government representative to meet one of their employees at the King Khalid International Airport in Riyadh. Following the demand, a representative of Cellebrite traveled to Riyadh in November 2019 for a hacking attempt on a phone in the possession of a Saudi Justice Ministry employee. The Cellebrite representative called for the authorities to let him pass through passport control without getting his passport stamped or his electronic equipment being checked, while remaining only under his possession. The hacker was supposed to head to an isolated hotel room from the airport, where the process was planned to be executed without any electronic surveillance. The Cellebrite representative then returned to the Riyadh airport to fly back to London.[36]

In 2017, Cellebrite entered into a contract with U.S. Immigration and Customs Enforcement (ICE) for $2.2 million.[37] On June 24, 2019, another contract was signed with ICE for between $30 and $35 million. The 2019 contract was for "universal forensic extraction devices (UFED), accessories licenses, training and support services" for one year, with an option to extend for up to five years.[38][39]

In 2019, Cellebrite advertised their products as an effective way to combat refugees in the European Union, stating that 77% of refugees arrived in Europe without documentation, though 43% had a smartphone.[40]

Hong Kong[edit]

In August 2020, MIT Technology Review reported that Cellebrite sold its services to the Hong Kong Police Force for use in unlocking phones of detained demonstrators during the 2019–20 Hong Kong protests.[41] As of October 7, 2020, the company announced that it would stop selling its solutions and services to customers in Hong Kong and China as a result of a change in U.S. regulations.[42] However, in 2021 The Intercept reported the software was still being sold to China.[43]

Bangladesh[edit]

The software has been sold to the Rapid Action Battalion (RAB) in Bangladesh. After a connection between Cellebrite and the extrajudicial killings of the RAB was reported in 2021, Cellebrite announced they would cease selling products to the organization. It is likely the RAB can continue to use the existing Cellebrite products they had already purchased.[5]

Philippines[edit]

The Philippines government under president Rodrigo Duterte was a purchaser of Cellebrite, and the company trained many of the country's government bodies, including some involved in the thousands of extrajudicial killings of the Philippine drug war. According to journalist Antony Loewenstein, Cellebrite cannot claim ignorance of its involvement in the killings.[44]

Belarus and Russia[edit]

Cellebrite's UFED program was used to persecute the democratic opposition in Belarus and Russia; Vladimir Putin used the technology against his political opponents for many years.[45] In March 2021, after finding out that technology was used in the Lyubov Sobol affair, a Jerusalem activist filed a lawsuit against the company in the Israeli Supreme Court. The company announced the termination of cooperation with Russia and Belarus shortly afterwards.[46]

Henry Borel Case[edit]

In March 2021, the Civil Police of Rio de Janeiro State opened an investigation into the mysterious death of 4-year old Henry Borel.[47] The boy's stepfather Jairinho and his mother Monique Medeiros were arrested for obstructing the investigation into the boy's death and were being investigated for homicide. Rio de Janeiro police used Cellebrite devices to extract deleted WhatsApp messages between Jairinho, Medeiros, and Henry's nanny, which the department described as "essential technical evidence" for the case.[47][48]

Freeland and wildlife trafficking[edit]

In October 2018, Freeland, a global, non-profit organization that fights wildlife and human trafficking, was called in to assist a Thai Police investigation into two Vietnamese males suspected of wildlife trafficking. Freeland's forensics experts were dispatched to the scene to provide on-the-job training. Using Cellebrite devices, police discovered evidence the poaching coordinators had arrived in Thailand to sponsor targeted hunting in Thailand, Malaysia and possibly Myanmar.[49]

Leicestershire Police[edit]

In November 2015, 15-year old Kayleigh Haywood from Measham, Leicestershire, was found dead. Leicestershire Police used a Cellebrite device to unlock Kayleigh's badly damaged smartphone, which led them to whom she had been talking and their whereabouts. This evidence uncovered Kayleigh's murderer Stephen Beardman and her groomer, Luke Harlow, and cleared a suspect who was nowhere near the scene of the crime at the time of her murder.[50]

Security breaches[edit]

See also: Cellebrite UFED § Security

On 12 January 2017, it was reported that an unknown hacker had acquired 900 GB worth of confidential data from Cellebrite's external servers. The data dump includes alleged usernames and passwords for logging into Cellebrite databases connected to the company's my.cellebrite domain, and also contains what appear to be evidence files from seized mobile phones, and logs from Cellebrite devices.[51] The dumped data suggested Cellebrite sold its data extraction products to countries such as Turkey, the United Arab Emirates and Russia.[35]

References[edit]

  1. ^ "2023Q4 Earnings presentation".
  2. ^ "Cellebrite DI Ltd". Archived from the original on September 1, 2021.
  3. ^ "Cellebrite to go public via $2.4 billion SPAC deal". Reuters. April 8, 2021.
  4. ^ "About - Cellebrite".
  5. ^ a b Lowenstein, Antony (2023). The Palestine Laboratory: How Israel Exports the Technology of Occupation Around the World. Verso Books. p. 212. ISBN 978-1922310408.
  6. ^ "Mobilogy Rebrand Press Release" (PDF). Archived from the original (PDF) on July 3, 2018. Retrieved July 3, 2018.
  7. ^ a b "Cellebrite Customers". Retrieved April 9, 2017.
  8. ^ Annasha (May 5, 2022). "Cellebrite - Global Leader In The Digital Intelligence Sector". Your Tech Story. Retrieved October 5, 2023.
  9. ^ "Press Kit (2021)" (PDF). Archived from the original (PDF) on August 3, 2022.
  10. ^ "FutureDial and Sun Corporation Acquire Cellebrite". ThomasNet. Retrieved July 19, 2012.
  11. ^ Rabinovitch, Ari (June 17, 2019). "Israeli digital forensics firm Cellebrite gets $110 mln IGP investment". Reuters. Thomson Reuters. Retrieved July 8, 2020.
  12. ^ "Cellebrite to list on Nasdaq at $2.4b valuation through SPAC". Globes. August 4, 2021. Retrieved April 22, 2021.
  13. ^ "Cellebrite, The Leading Digital Intelligence Solutions Provider, to List on Nasdaq Through Merger with TWC Tech Holdings II Corp". Archived from the original on April 29, 2021.
  14. ^ "Cellebrite Announces Effectiveness Of Registration Statement in Connection with its Proposed Business Combination with TWC Tech Holdings II Corp". Archived from the original on August 10, 2021.
  15. ^ "Cellebrite Completes Business Combination with TWC Tech Holdings II Corp., Company Will Begin Trading on Nasdaq Under Symbol "CLBT"". Archived from the original on September 9, 2021.
  16. ^ "Cellebrite GmbH, Munich, Germany". www.northdata.com.
  17. ^ "Cellebrite GmbH - Registration · Managing Director: Yossi Carmil · Capital: €25,000 · Shareholder agreement · Proxy · Corporate Purpose". www.northdata.com.
  18. ^ Miller, Chance (January 14, 2020). "Cellebrite expands to computers with $33M acquisition of BlackBag Technologies forensics firm". 9to5 Mac. Retrieved July 8, 2020.
  19. ^ "Cellebrite Acquires BlackBag Technologies". Archived from the original on December 26, 2022.
  20. ^ "Cellebrite Now Says It Can Unlock Any iPhone for Cops". Wired. ISSN 1059-1028. Retrieved September 7, 2021.
  21. ^ Marlinspike, Moxie (April 21, 2021). "Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective". Signal Blog. Archived from the original on April 21, 2021. Retrieved April 22, 2021.
  22. ^ Goodin, Dan (April 21, 2021). "In epic hack, Signal developer turns the tables on forensics firm Cellebrite". Ars Technica. Archived from the original on April 21, 2021. Retrieved April 22, 2021.
  23. ^ Kan, Michael (April 21, 2021). "iPhone Hacking Device From Cellebrite Is Rife With Exploitable Flaws, Says Signal". PCMag. Archived from the original on April 21, 2021. Retrieved April 22, 2021.
  24. ^ "Encrypted chat app Signal alleges flaws in Cellebrite equipment". Reuters. April 21, 2021. Retrieved April 22, 2021.
  25. ^ "Signal slams Cellebrite security company over alleged security holes". BBC News. April 22, 2021. Retrieved April 23, 2021.
  26. ^ Ropek, Lucas (April 27, 2021). "Signal's Cellebrite Hack Is Already Causing Grief for the Law". Gizmodo. Archived from the original on April 28, 2021. Retrieved April 28, 2021.
  27. ^ Yaron, Oded; Benjakob, Omer (April 25, 2021). "'Stop Using Cellebrite': Israeli, U.K. Police Urged to Stop Using Phone-hacking Tech". Haaretz. Archived from the original on April 28, 2021. Retrieved April 28, 2021.
  28. ^ Lovejoy, Ben (April 27, 2021). "Cellebrite Physical Analyzer no longer fully available for iPhones following Signal blog post". 9to5mac. Archived from the original on April 28, 2021. Retrieved April 28, 2021.
  29. ^ Franceschi-Bicchierai, Lorenzo; Cox, Joseph (April 27, 2021). "Cellebrite Pushes Update After Signal Owner Hacks Device". Motherboard. Archived from the original on April 28, 2021. Retrieved April 28, 2021.
  30. ^ Sullivan, Bob. "Gadget gives cops quick access to cell phone data". MSNBC. Archived from the original on April 23, 2011. Retrieved April 21, 2011.
  31. ^ Heussner, Ki Mae. "Michigan Police Use Device to Download Cellphone Data; ACLU Objects". ABC News. Retrieved June 8, 2012.
  32. ^ "San Bernardino shooting:Israeli company is helping the FBI, reports say". The Press-Enterprise. March 23, 2016. Retrieved March 23, 2016.
  33. ^ Benmeleh, Yaacov (March 30, 2016). "FBI Worked With Israel's Cellebrite to Crack iPhone". Bloomberg.com. Retrieved April 1, 2016.
  34. ^ "FBI's Comey, officials discount two iPhone hack theories". USA Today. Retrieved April 1, 2016.
  35. ^ a b Cox, Joseph (January 12, 2017). "Cellebrite Sold Phone Hacking Tech to Repressive Regimes, Data Suggests". Motherboard. Retrieved July 3, 2017.
  36. ^ "Revealed: Israeli Firm Provided Phone-hacking Services to Saudi Arabia". Haaretz. Retrieved September 16, 2020.
  37. ^ Fox-Brewster, Thomas. "US Immigration Splurged $2.2 Million On Phone Hacking Tech Just After Trump's Travel Ban". Forbes. Retrieved September 13, 2019.
  38. ^ Montgomery, Blake (September 11, 2019). "ICE Has a New $30M Contract With Israeli Phone Cracking Company Cellebrite". Retrieved September 13, 2019.
  39. ^ Pelt, Mason (September 13, 2019). "ICE Will Pay Up To 35M To Cellebrite For Phone Hacking Tech". Internet News Flash. Retrieved September 13, 2019.
  40. ^ Lowenstein, Antony (2023). The Palestine Laboratory: How Israel Exports the Technology of Occupation Around the World. Verso Books. p. 137. ISBN 978-1922310408.
  41. ^ O'Neill, Patrick Howell (August 25, 2020). "Israeli phone hacking company faces court fight over sales to Hong Kong". MIT Technology Review. Retrieved August 30, 2020.
  42. ^ Shmuklyer, Olga (October 7, 2020). "Cellebrite to Stop Selling Its Digital Intelligence Offerings In Hong Kong & China". Cision PR Newswire. Retrieved October 9, 2020.
  43. ^ Mara Hvistendahl, "Chinese police kept buying Cellebrite phone hackers after the company said it ended sales," The Intercept, August 17, 2021
  44. ^ Lowenstein, Antony (2023). The Palestine Laboratory: How Israel Exports the Technology of Occupation Around the World. Verso Books. p. 210. ISBN 978-1922310408.
  45. ^ Lowenstein, Antony (2023). The Palestine Laboratory: How Israel Exports the Technology of Occupation Around the World. Verso Books. p. 22. ISBN 978-1922310408.
  46. ^ ""Через 6 часов они ушли из России". Юрист вынудил израильских взломщиков смартфонов разорвать отношения с российскими силовиками". Медиазона.
  47. ^ a b Digital, Olhar (April 9, 2021). "Israeli software was decisive in the police decision on the Henry case". Olhar Digital (in Brazilian Portuguese). Archived from the original on April 17, 2021. Retrieved June 14, 2021.
  48. ^ "Henry Borel: Como polícia teve acesso a mensagens de WhatsApp apagadas por casal". BBC News Brasil (in Brazilian Portuguese). Retrieved June 14, 2021.
  49. ^ "Investigation Reveals Cross Border Tiger Syndicate". www.freeland.org. Archived from the original on January 22, 2021.
  50. ^ Murphy, Margi (May 23, 2021). "Meet the man behind controversial iPhone-cracking company Cellebrite". The Telegraph.
  51. ^ "Hacker Steals 900 GB of Cellebrite Data". Motherboard.
Retrieved from "https://en.wikipedia.org/w/index.php?title=Cellebrite&oldid=1212749500"