Fwd: Grayehift Apple unleeks

email: Timothy March [:11 21113 at 11:49:12 AM Eastern Standard Time
Te: email: "deningreeley?ipdhestemgnu" . email: email: "?ercuseddingsc?apdhestengmr',
email: erneil: 

Sergeant Detecljve Time-my Leham
Bestnn Felice Department

USES Eleclmnic n'n'ee TF
hene:
Fen:

 
 
 

Begin remarried nessege:

Frurn: MITCHELL 1305:!" W991i}
Date: March Er. EDIE at 11:40:20 AM EST

Te: "Iimethylahe?pdbestengg" 
Subject: Fwd: Grayehifl Apple unleeke

Sent??em nyiF'hene

Begin femarded n'ieseege:

From: '1 AMES DARNELL den'ieedemell?mssedhseewu
Date: Menzh E, 21118 at 11:33:51 AM EST

To: ACDB (SIN-CD ?laceb.cincet?luese?haqeua ectfsups
ecsapective 

Subject: RE: Grayshift Apple unleeks

Arid ta the USES currently has a prepesal to fund six of these
units in USES ?eld af?ces.

Frem:] ACDB EINCD 
Sent: Tuesday. March DE. 2013 10:3? AM

Ta: ectfsups ecsapec?ye


Subject: Grayshift Apple unlecics

Any ECTFs haye their Iecal parlriers inquiring about a company called Grayshift
lse?ware is Graykeyi offering Apple deyice unlocks similar 11} Cellebn'le's CAIS
pmgram but at a much cheaper cest

Here is a direct quote fnam meirwebsitey rayKey is a small deyice that can be
plugged intp any lucked i135 device, WhE?'lEl' it is an iP hdne. iPad. er iPdd. Uppn
cannectien. it automatically begins the precess ef the deyice by
systema?cally defeaijng eyery layer at protectien empleyed ta preveat such

access. It is designed te be central ed by a single web UI and r'ecrurr'es ne spec al
train rig te as rt is sintely elag are  

'here a-'e i2] enijens available. I ne ?r is ?ne enline delta-"r which cestsla?titi
acd dives we LJEI tci extractidns. This ciptidn requires an internet cennectidn
in erdertci pretect license enfercewent [this rnalses sure mataeele 

Pet danlicate this exeleiti. The secdnd eptidn is and allews anlirnted
lirr-r'rs. This rrc?t 'ar'rr drill,r retqairt?ts a based [see [at ten
'"dr Tl?eseprirt?tsart?t ayearly 

Eileen searce indicates the is at Ian rad nt.

accrh Cince

United States Secret Sew ce

Las siredas Fie Di?ice

{rna nj:

{tie-sit}

{t ell}

 

All mail bor?em this account is subjectto of?cial reyiew and is for of?cial use only. Action
may be taken in response to any inappropriate use of the Secret Seryice's mail system
This mail may contain information that is pityileged. law enforcement sensitive. or subject to
other disclosure limitations. Such information is loaned to you and should not be further
disseminated without the pennission of the Secret Senrice. If you have receiyed this mail in
error. do not keep. use. discloser or copy it: notify the sender immediately and delete it

email: Gregory Long" TuesdayI March E, 2013 at PM Eastern Standard Time
To: errail: Tirnod'iy 

Cc: email: "dam Damn Greeley" email: Marcus Eddings" email:
Francis Miller? . email: "thonesdowdtgipdbostamgoy Thomas Bound"

?I'il't'ir

You are in the best position in tents of choosing whether Cellebrite or this technology is the wayto
go.  tI'tthat are your thoughts? I noticed in the email that this seruice is unproyen at this time. If you think
that this technology is the wayto go. we will need in let Supt Daley know because we are in the process
of purchasing that package from Cellebn'te. Thank you.



0n Tue. Mar 6. 2013 at 11:49 AM. Timothy Laharn 

Sergeant Detetctiye "l?Irrtothy Laham
Boston Police Department
Electronic Crimes TF

Fart:
Begin lionyarded nessage:

From: MITCHELL iEtDSji" 
Date: March 6. at 11:40:31! AM EST

To: mothy.lahan1@ pd.boston.g?" stimothy. laharr?pd. b-ostongg}
Subject: Fwd: Grayshift Apple unlocks

Sent frem my iP hone

Begin fnrwarded me553ge:

From: AMES DARNELL den?ee?amelli?luess?he?ev}

 

Date: March E. 2013 at 11:38:51 AM EST

Ta: '1 ACDE CINCD dacnbxince?l u555.dh5.eewv, ec?5up5
dach?sups?wusesdhaqewn ecsapectiue 

 

 

Subject: RE: Grayshift Apple unlocks

And tn the USES currently hae a prepoeal int? TEDAF t0 fund 0f
units in USES ?eld of?ces.

From: JACDB CINCD 

Sent: Tuesday, March DE. 2013 AM

To: ectfsuas mommy; ecsapac?ye
.600:-

Subject: Grayshilt Apple unlocks

Any ECTFs have their local partners inquiring about a company called Grayshift
{software is Graylceyl offering Apple deyice unlocks similar to Cellehn'te?s CAIS
program but at a much cheaper cost

Here is a direct quote from their website. ?Grayl-(ey is a small device that can
be plugged into any loclced device; whether it is an iF' hone. iF'adr or iP rod.
Upon connection. it automatically begins the process of unlocking the deyice lay
systematically defeating eyery layer of protection errployecl to prertrentsuch
access. It is designed to be controlled by a simple web UI and requires no
special training to operate. as it is sin'ply plug and play.?

There are options available. The ?rst is the online option which cost $15,000
and gives you up to {300} extractions. This option requires an internet
connection in orderto protect license enforcement [this makes sure that Apple
does

not duplicate this exploit}. The second option is $30,000 and allows unlimited
extraclions. This method is and only requires a token based taro lacbor
autnemication for liceree aulhenlication. These prices are fora yearly plan.

Open source reporting indicates lhe seryice is unproyen at this point

Fwd: Grayehift Apple unleeks

email: Timothy March [:11 21113 at 11:49:12 AM Eastern Standard Time
Te: email: "deningreeley?ipdhestemgnu" . email: email: "?ercuseddingsc?apdhestengmr',
email: erneil: 

Sergeant Detecljve Time-my Leham
Bestnn Felice Department

USES Eleclmnic n'n'ee TF
hene:
Fen:

 
 
 

Begin remarried nessege:

Frurn: MITCHELL 1305:!" W991i}
Date: March Er. EDIE at 11:40:20 AM EST

Te: "Iimethylahe?pdbestengg" 
Subject: Fwd: Grayehifl Apple unleeke

Sent??em nyiF'hene

Begin femarded n'ieseege:

From: '1 AMES DARNELL den'ieedemell?mssedhseewu
Date: Menzh E, 21118 at 11:33:51 AM EST

To: ACDB (SIN-CD ?laceb.cincet?luese?haqeua ectfsups
ecsapective 

Subject: RE: Grayshift Apple unleeks

Sir,

We are seeing a lot of feedback that is positive. I was just told today by Fred Mitchell {Boston lab
superyisor}. The USES might be purchasing a nun?ber of licenses and he was hoping Boston was one of
the of?ces that gets it. I am going to look more into this and see what our best options. I will do it
sooner rather than later.

Thank you,
Tim

Tuer Mar E, 2013 at 1:33 M, Gregory Long 
Tim.

 

You are in Ihe best posilion in tears of choosing whether Cellehn?te or lhis technology is Ihe way
to go. 1What are your I noticed in Ihe email that this service is unproyen at lhis lime. If you
lhink lhat this lechnology is lhe way 11} go. we will need to let Supt Daley know because we are in the
process of purchasing that package from Celleorite. Thank you.

?res

On Tue, Mar E. 3313 at 11:49 AM, Timoo'iy Laham WWgs-ya wrote:

Sergeant Detective Timolhy Laham
Boston Police Deparlment

U555 EleclIonic Crimes TF

hone:
Fax.

  

Begin forwarded message:

From: MITCHELL 
Date: March El. 2018 at 11:40:31 AM EST

To: 'n?pmylaharr?pdoestong?? stinm?iyJahan?pdbosoong?o-
Subject: Fwd: Greyshift Apple unlocks

Sent?ommy iF'hone

Begin forwarded message:

Frum: AMES DARNELL 
Date: March 5, EMS at 11:33:51 AM EST

Te: ACDB CINCD ectfsups
ecsapeetive {ecsaeec?ver?USS-SDHSEDV}

 

Subject: RE: Greyshift Apple unlocks

And to the USES ?currer'lth.r has a pmpusal inte TEDAF te ?Jnd six elf
these unils in ?eld of?ces.

Frnm:J ACDB CINCD 

Sent: Tuesday. March DE, 2013 10:3? AM

To: ectfsups mews: ecsapec?ue


Suhieet: Grayshift Apple unlaclrs

Any ECTFs have their local partners inquiring about a companv called
Gravshift [software is Grain-(evil offering Apple device unlocks similar to
Cellebn'te's C?tlS program but at a much cheaper cost

Here is a direct quote from dieir website. ?Gravlsev is a small device that can
be plugged into any locked device, whether it is an iPhone, iPad. or iPod.
Upon connection, it automatically begins the process or unlocking the device
bit

systematically defeating every layer of protection employed to prevent such
access. It is designed to be controlled bv a simple web LII and requires no
special oaining to operate. as it is simva plug and play."

There are options available. The ?rst is the online option which cost
5515.000 and gives you up to {300] exoactions. This option requires an
intemet connection in order to protect license enforcement [this makes sure
that apple does

not duplicate this exploit]- The second option is $30,000 and allows unlimited
extractions. This neotod is of?ine and onlv requires a token based two factor
aulhenljcaljon for license aulhenljcation. These prices are for a veariyr plan.

Dpen source reporting indicates the service is unproven at this point

acob ISince

United States Secret Service

 Lee Vegas; Field 

W3 in 

{meek}



 


II

mail tui?meiz-iis aceem: is Seibiectte ef?cieil ill-WE and is far 31TH: al Lee enly.
Elie-Tier". may be Taker" i"l reepenee in my USE e? we Seere?r Sewiee'e we 
mai may; Lent-am inferwafien l?hi?f is: privileged. law gene Hue.
:w'ubieet re ether {JiEifleEiLJl'E' Iimfefie?e. Sueh nfermeh'em is Te "gem and 
Hi We Fae-Kiel Semi: e. If have

res: eiL-ei-d li?ia e. il" errur, dc: keep}, Ufa-H. -: up}; it; rimii'i; tri-e. aer?der
iriir'eediately arm delete it.

'har?k yep,

im?ey Lahare
Sei'qeart Detective. Beaten Felice Deper?rmenf. l'eii'enzqit; Greet:

LLE.
Pl'ie
Fin-i1

Secret Sei?u'iee. New Enqle'id Ieeb?mie Crimea Task: l'ei'ee