Encrochat Encrypted Telephones Hacked June 2020 – Drugs, Telephones, NCA Police & Searches
Encrypted telephones have recently hit the June 2020 headlines due to a series of text messages allegedly sent to users of Encrochat. The company had marketed themselves as an international company who sold secure communications network and encrypted handsets, claiming that law enforcement agencies have taken over some of the company’s infrastructure.
“Today we had our domain seized illegally by government entities(s) [sic]”.
It is understood that users of Encrochat telephones received an urgent message saying security across Europe had been compromised for around 30 minutes;
“Due to the level of sophistication of the attack and the malware code, we can no longer guarantee the security of your device. We took immediate action on our network by disabling connectivity to combat the attack. You are advised to power off and physically dispose of your device immediately”.
Independent verification of any hack or whether the message actually came from Encrochat is still not publicly confirmed.
This catalogue of events resulted in the UK National Crime Agency and international police forces undertaking rapid searches and arrests in their respective areas. Many individuals arrested may not have had any encrypted handsets in their possession.
Encro Talk has been described as a “encrypting all Voice over IP (VoIP) conversations using the ZRTP protocol and transmits them over a closed loop network. Industry Leading Hardware- Specially tailored to harden security. Removal of camera, microphone, GPS, and USB data port access”.
In summary, Encrochat handsets cannot be used to make voice calls. It uses a wifi signal rather than mobile networks and users are limited to text or picture messages. When the handset power is turned on, the device begins to encrypt. Resulting in the EncroChat phone wiping everything unless a 15-character password is entered correctly.
Encrypted digital data platforms are legal. They were developed over privacy and human rights concerns. Therefore, there are legitimate reasons people use encryption to protect their electronic messages. It therefore, follows that it is not necessarily illegal to be in possession of a handset installed with encryption technology.
Encrypted telephones however, have caused significant and growing concern for the police, government agencies and authorities, due to the fact that those involved in serious organised crime deploying the handsets as tools to further their illegal trade.
The generic history of mobile telephone usage by serious organised crime groups is that initially they used cheap, pre-paid cell phones (burner phones) of SIM cards to limit the authorities ability to track their communications.
In more recent years, many turned to iphones in the belief that encryption was a standard feature. Previously, without the passkey the police and authorities could not gain unauthorized access to the data on iphones. Developments and investment in technology have now resulted in law enforcement agencies being able to gain access in certain circumstances. This means that digital experts can now recover deleted pictures, texts, and files from a mobile phone which has not been overwritten.
Hence, the appeal of Encrochat who had marketed themselves as the “electronic equivalent of a conversation between two people in an empty room”
However, the Court of Appeal [R v Nelson & Markham  have recently found that the confirmed that the use of encrypted mobile telephones and a sophisticated magnetised void space added sophistication to the drugs enterprise and therefore, was an aggravating factor for the purpose of any sentencing exercise.
This finding was reiterated by the Court of Appeal [R v English & Read  EWCA Crim 100, 2020 WL 00592496] where the use of encrypted devices to communicate between participants allowed the court to describe this operation as “sophisticated”.
It is therefore imperative, if you do find yourself arrested for offending involving encrypted digital devices that you seek experienced and specialist legal advice at the first available opportunity.
The initial questions for anyone arrested for offences based upon evidence emanating from encrypted devices should be;
1) How many users have had their communications intercepted?
2) Did my communications on these devices concern the preparation, instigation. or commission of crime?
3) Did the police or prosecuting agency use a lawful basis to seize this information?
4) If so, can the digital devices be attributed to me?
5) Are there any legal arguments or submissions which are applicable to the facts of my case?
The answers to these questions will be fact specific to your case. Seek the advice of a specialist to assist you to successfully navigate the outcome of your case.
Narita Bahra QC