Crooks' Mistaken Bet on Encrypted Phones

encryptionorganized-crimelaw-enforcementcybersecuritysurveillance

Abstraction: How law enforcement cracked EncroChat and Sky ECC encrypted criminal phone networks

Key points:

EncroChat (~10,000 UK users) and Sky E.C.C. (~70,000 users worldwide) were hardened devices with single encrypted messaging apps; both had servers physically located in Roubaix, France
French Gendarmerie pushed malware disguised as a software update to all EncroChat phones (2020), reading messages live for ~2 months; 2,800+ UK arrests followed
Sky E.C.C. was cracked via a "protocol attack" deceiving handsets into revealing private keys; Europol harvested ~1 billion Sky messages
FBI and Australian Federal Police created their own fake network, an0m, as a sting — every message was silently BCC'd to law enforcement
Decrypted messages exposed a multinational "Super Cartel" responsible for an estimated 30% of Europe's cocaine supply
Core structural weakness: criminal networks cannot publicly audit their encryption, producing secretly flawed security ("you end up with a really bad product because there's no transparency" — Dutch investigator)

Connections: Europol · Fbi · Encrochat · Encryption · Cybersecurity · Surveillance