How to extract Telegram correspondence from a phone in airplane mode?


Colleagues here had an interesting question about how to upload correspondence in a private Telegram chat from a smartphone seized by the police…

I answer with pleasure. Since the smartphone is almost certainly unlocked and in airplane mode, there are only two ways to safely retrieve correspondence from it.

1️⃣ Use of forensic software (UFED, MK, Avilla, etc.). Various files (documents, audio, video, photos) that were sent via Telegram can also be found manually on the device itself. They are located at storage/emulated/0/Android/data/org.telegram.messenger/files/Telegram

2️⃣ Alternative extraction. Smartphones running the Android and iOS operating systems do not allow you to backup correspondence. Finding the device offline allows us to retrieve the correspondence in the form of only:

🅰️ Screenshots. You can then recognize text in screenshots using:

https://image-to-text-ocr.netlify.app/
https://yandex.by/images/search
https://lens.google.com/search

🅱️ A text document created on a smartphone and containing copied texts.

In both cases, you can copy data to a PC via a data cable or AirDrop.

Igor S. Bederov

Comments

Popular posts from this blog

OSINT by nickname…

Top of my free OSINT tools in 2023

Military intelligence using OSINT methods