Cellebrite Purchases Corellium, an iPhone Virtualization Company, for $200 Million

Cellebrite, a prominent Israeli cybersecurity company that aids law enforcement in unlocking iPhones, has acquired the virtualization startup Corellium for $200 million. This collaboration is expected to enhance the development of a new digital forensics product aimed at streamlining data extraction from iPhones. Both Cellebrite and Corellium are well-established in the field of iOS forensics and analysis.

Their merger could facilitate easier access to iPhone data for law enforcement agencies. Historically, Cellebrite has worked extensively with law enforcement using specialized hardware, but the acquisition of Corellium is anticipated to bring about a software-based tool leveraging virtualization technology. Reports suggest the new product, named “Mirror,” will allow law enforcement to create a virtual replica of a confiscated iPhone.

This virtual environment will enable the extraction of relevant data in a more efficient manner compared to existing Cellebrite solutions, which struggle to retrieve data from certain applications. Corellium’s founder, Chris Wade, envisions that “Mirror” will present jurors with an accurate depiction of a defendant’s phone, moving beyond basic technical screenshots. Moreover, Cellebrite and Corellium are considering the integration of artificial intelligence to detect unauthorized code executions on iPhones.

This capability would assist in identifying state-sponsored spyware and may interest various law enforcement agencies, including U.S. Immigration and Customs Enforcement, which recently signed a substantial contract with Cellebrite. Corellium has primarily focused on virtualization for security research, although it faced legal challenges from Apple in the past. These disputes concerning copyright and software emulation have since been resolved.

Chris Wade, currently the Chief Technology Officer of Corellium, was previously pardoned for unrelated cybercrime offenses, following his cooperation with the U.S. government. While the acquisition’s outcomes remain to be seen, it may lessen the necessity for physical device interactions during data retrieval processes. The systemic evolution of Apple’s security measures, particularly with its upcoming operating system update, will continue to pose challenges for digital forensics in the future.