Interesting piece. I’m left more interested in this:
> breaking into the encrypted chat platform SkyECC
Psychical access to a device or something more technical…
> breaking into the encrypted chat platform SkyECC
Psychical access to a device or something more technical…
"About a billion messages were intercepted, about half of which had been decrypted by April 2021—further avenues of inquiry were expected to open as decryption progressed"
They also suddenly claim all the users that got intercepted were using "elaborate fake" SkyECC apps and services, yet oddly those same "fake" apps could talk with actual SkyECC users, so, y'know. Grains of salt.
It is unclear how the decryption was made, but it talks about how the servers were tapped into including RAM access!
Teasing! I wonder how.
Thanks for sharing.
On Linux, there’s for example Lime if you have root.
On windows there’s various other tools, some commercial, some open source. All require admin privs.
If you have access to the hypervisor it’s even easier - just direct the hypervisor to dump the VM’s RAM to a file. Most hypervisor tools have a utility for this.
If you have only physical access it’s a bit trickier, but if there’s an available PCIe slot and you are very careful it’s possible to dump RAM that way on a live system :)