Freezing a Smartphone for Hour to Circumvent the Encryption System?

By

Its sounds like a scene out of James Bond movie, but someone can actually circumvent a smartphones’ complex encryption system and retrieve its confidential information by putting it in a freezer.

The discovery was recently released by German researchers at Erlangen's Friedrich-Alexander University (FAU). They froze a smartphone for an hour. The researchers – Tilo Muller, Michael Spreitzenbarth and Felix Freiling – were able to get the device’s temperature down to -10C. Data was later analyzed on a separate computer.

They were able to see contact lists, websites visited and photos, the BBC reported. These could all reveal important details on suspected criminals or terrorists.

“We show that cold boot attacks are more generic and allow to retrieve sensitive information, such as contact lists, visited web sites, and photos, directly from RAM, even though the bootloader is locked,” the researchers said in the study.

It was also found that the quick “connecting and disconnecting” of the battery “of a frozen phone forced the handset into a vulnerable mode,” the BBC said. “This loophole let them start it up with some custom-built software rather than its onboard Android operating system. The researchers dubbed their custom code Frost - Forensic Recovery of Scrambled Telephones.” The researchers used a Samsung Galaxy Nexus smartphone in their study, according to a news report.

Data scrambling was introduced by Google with the Android version commonly known as the “Ice Cream Sandwich.” But the scrambling system was a "nightmare" for police as they investigated crimes, the researchers said in a blog post. So the discovery could be a welcome find for law enforcement officials.

It was also found that data “fades from memory much more slowly when chips are cold which allowed them to grab the encryption keys and speed up unscrambling the contents of a phone,” the BBC adds.




Edited by Brooke Neuman
Get stories like this delivered straight to your inbox. [Free eNews Subscription]

TechZone360 Contributor

SHARE THIS ARTICLE
Related Articles

How Is AI Bringing Intelligence to Traditionally Manual Inspection Workflows?

By: Contributing Writer    10/16/2026

For insurers, rental companies, fleet operators, and remarketing businesses, vehicle inspections are a part of everyday operations. Much of that proce…

Read More

3 Factors That Can Dramatically Impact Your Microsoft Intune Spend

By: Contributing Writer    10/13/2026

With remote and dispersed work here to stay for the long term, secure endpoint management has become a big headache for IT and cybersecurity teams. Th…

Read More

Why Threat Modeling Fails Without an Attacker's Perspective

By: Contributing Writer    10/13/2026

A security team might spend weeks mapping attack paths and planning defenses, only to be breached through a web application nobody remembered was stil…

Read More

From AI Experiment to Enterprise Strategy: Making Claude Work at Scale

By: Contributing Writer    10/12/2026

Artificial intelligence often enters an organization through experimentation. One employee discovers a useful prompt, another tests document analysis,…

Read More

SIEM needs exposure context to keep pace with AI-era threats

By: Contributing Writer    10/6/2026

Security information and event management (SIEM) platforms give security operations center (SOC) teams a central place to collect and analyze security…

Read More