CybersecurityJune 26, 2026· via The Hacker News

Russian authorities cracked activist’s iPhone months after Cellebrite sales ban

Russian authorities cracked activist’s iPhone months after Cellebrite sales ban

Image : The Hacker News

A detained opposition activist’s iPhone was unlocked months after Cellebrite said it would stop selling forensic tools to Russia, new research shows. Citizen Lab says traces on the device and an official Russian procurement record confirm that the country’s authorities used UFED hardware and software in June 2021 despite the cutoff.

The findings highlight how forensic vendors’ restrictions can be circumvented when government buyers already possess older equipment or find alternative supply routes. Cellebrite announced in March 2021 that it would halt sales to Russia and Belarus, citing concerns over human-rights abuses. Yet the same month, Russian police obtained a UFED Touch device through a reseller in a neighboring country, according to procurement documents examined by Citizen Lab.

A gap in the sanctions wall

The report underscores a recurring challenge in export controls: once tools are in-country, regulators struggle to prevent their continued use. UFED devices are designed to extract data from locked phones, including iPhones, and have been marketed to law-enforcement agencies worldwide. Citizen Lab’s analysis points to remnants of UFED operations on Pivovarov’s phone, alongside an official Russian customs declaration listing the same model number.

What this means for activists and tech firms

For activists and journalists operating in repressive regimes, the discovery is a reminder that forensic hardware can outlast corporate bans. Tech companies that restrict sales must also track downstream transfers and usage, or risk contributing to surveillance ecosystems they aim to disrupt. The case also raises questions about the long-term effectiveness of export controls when resellers and gray markets remain active.


Source: The Hacker News. AI-assisted editorial synthesis — TechnoExpress.

Read the original source on The Hacker News →

← Back to home