Belgian cops crack down on encrypted phone network Sky ECC in 200 overnight raids as firm denies criminal ties
- Reference: 1615387684
- News link: https://www.theregister.co.uk/2021/03/10/sky_ecc_encrypted_phones_belgium_police_raids/
- Source link:
The Brussels Times [1]reported that 1,500 police workers were sent on 200 overnight raids, mostly in the Antwerp area.
[2]
"Information gained from those conversations is what led to Tuesday's historic operation, two years in the making," it stated.
Police and prosecutors boasted of seizing [3]17 tonnes of cocaine and €1.2m during a post-raid press conference.
[4]
As the second major encrypted phone network to be shut down by police in Europe, Sky ECC's seeming downfall has parallels with the [5]Encrochat story, where French and Dutch police man-in-the-middle'd the encrypted phone network on suspicion it was being used mainly by organised criminals.
Sympathetic British judges later ruled that [6]data in transit was legally the same as data in rest , as a way of evading defendants' legal arguments that British police had outsourced illegal evidence-gathering methods to their continental counterparts, something existing laws were supposed to prohibit.
"Sky ECC became popular with drug criminals after its successor Encrochat was cracked in 2020 by French and Dutch investigators, who were able to intercept over 100 million messages sent via the app," [7]reported the Brussels Times . De Standaard [8]added that the Sky ECC network was allegedly penetrated by law enforcement last year, in the wake of the Encrochat shutdown and arrests.
Firm fingers 'fake phishing application'
Sky ECC itself was insistent that the police raids had nothing to do with it, however. In a [9]press release distributed through a global newswire, the organisation claimed "a fake phishing application falsely branded as Sky ECC was illegally created, modified and side-loaded onto unsecure devices, and security features of authorized Sky ECC phones were eliminated in these bogus devices which were then sold through unauthorized channels."
Jean-François Eap, the firm's chief exec, went on to say that his platform "exists for the prevention of identity theft and hacking, the protection of personal privacy rights, and the secure operation of legitimate personal and business affairs."
De Standaard reported that "at least one Antwerp criminal lawyer and a trainee lawyer have already been arrested who use Sky ECC" while also alleging it was the "favourite means of communication used by the big drug criminals in our country".
[10]
Given its interest in cracking encryption, and the Encrochat criminal cases now working their way through the courts, we have asked Britain's National Crime Agency whether it was involved. We will update this article if the agency responds. ®
Get our [11]Tech Resources
[1] https://www.brusselstimes.com/news/belgium-all-news/159039/cracking-of-encrypted-text-messaging-service-sky-ecc-app-dealt-major-blow-to-organised-crime/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YEj7LKJfvcCmQxZVQCP8xwAAAFc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.brusselstimes.com/news/belgium-all-news/159092/17-tonnes-of-cocaine-and-e1-2-million-seized-in-major-drug-bust-in-belgium-sky-ecc-encrypted-software-organised-crime-the-netherlands/
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YEj7LKJfvcCmQxZVQCP8xwAAAFc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/2020/07/02/encrochat_op_venetic_encrypted_phone_arrests/
[6] https://www.theregister.com/2021/02/08/encrochat_court_appeal_ruling/
[7] https://www.brusselstimes.com/news/belgium-all-news/159039/cracking-of-encrypted-text-messaging-service-sky-ecc-app-dealt-major-blow-to-organised-crime/
[8] https://www.standaard.be/cnt/dmf20210309_93750346
[9] https://www.globenewswire.com/news-release/2021/03/10/2190026/0/en/SKY-ECC-platform-remains-secure-and-no-authorized-Sky-ECC-device-has-been-hacked.html
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YEj7LKJfvcCmQxZVQCP8xwAAAFc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://whitepapers.theregister.com/
Re: When will these people ever learn?
It has been suggested on these forums to build a device with a screen and camera and that is capable of encryption and decrypting short messages after preloading it with the required keys. Once a message is encrypted and generated into a QR code (potentially holding 4296 alphanumeric characters) on this device the message can be photographed and send via Signal using a bog standard phone. On the other end the same QR code is photographed, transformed back into a character set and decrypted.
Et voila, the message can only be read on an air gapped device. Secure, until the guys in Cheltenham get their hands on one with the keys still on there and there is no way of revoking them.
When will these people ever learn?
Simply use the same e-2-e encrypted services everyone else uses! If I were up to no good, I'd be burying my dodgy communications in something fairly standard like Signal or Telegram – or even WhatsApp, FFS. Why do they insist on being all gangsta with their pseudo-Bond-style gadgets? Fools.