Martin R. Albrecht @malb.bsky.social · 17/08/2026- How did they get the malware on the devices? Presumably by having APK signing keys? How did they get them? - If they had signing keys, why did they need a privilege escalation? Did they only have signing keys for unprivileged apps? 130 3
Martin R. Albrecht @malb.bsky.social · 17/08/2026It would be easy to make progress on these questions given even an uninfected Encrochat device or just an image of the OS: by asking what verification keys are associated with what application. 120 2
Martin R. Albrecht @malb.bsky.social · 17/08/2026Also, the article makes it sound as if our work is mostly concerned with the legal side of the Encrochat cases, but we gave a comprehensive technical account: eprint.iacr.org/2026/1319 We also discuss those open questions. We didn't have access to a device/image, limiting what we could establish.eprint.iacr.orgA Real-World Law-Enforcement Hack: The Case of EncrochatIn 2020, a coordinated law-enforcement effort infiltrated Encrochat, an end-to-end encrypted service provider, exfiltrating historical and real-time data and metadata over months. Encrochat was used e... 161 6
