The FBI revealed on Monday that they have achieved access to the phone of the alleged shooter, Thomas Matthew Crooks, marking a notable breakthrough in the probe of the recent assassination attempt on former President Donald Trump.
The 20-year-old suspect, who was shot dead by Secret Service agents during the incident, had opened fire at a Trump rally in Butler, Pennsylvania, resulting in one death and two injuries, including a minor injury to Trump himself.
The FBI’s technical specialists managed to unlock Crooks’ phone, which had been sent to a specialized facility in Quantico, Virginia, for analysis. This breakthrough is expected to provide critical insights into the suspect’s actions and potential motives, although no clear ideology or motive has been identified.
“The search of the subject’s residence and vehicle is complete,” the FBI stated, adding that they have conducted nearly 100 interviews with law enforcement personnel, event attendees, and other witnesses. The bureau is also reviewing hundreds of digital media tips, including photos and videos taken at the scene.
Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files
Details of the Incident
The shooting occurred on Saturday, July 13, during a campaign rally at the Butler Farm Show in Pennsylvania. Crooks, armed with an AR-style semiautomatic rifle, opened fire from the rooftop of a nearby building, approximately 200 meters from where Trump was speaking. The attack resulted in the death of one rally attendee and injuries to two others, with Trump himself sustaining a minor injury to his ear.
Witnesses had alerted police officers about the suspicious activity on the rooftop just minutes before the gunfire erupted. Despite the warnings, the rally continued, and the tragic events unfolded swiftly. Secret Service agents responded promptly, shooting and killing Crooks on the spot.
The FBI’s investigation is still in its early stages, and authorities are working tirelessly to uncover any potential connections or motives behind the attack.
In general, law enforcement agencies, including the FBI, have access to advanced phone-hacking tools such as Cellebrite, which are capable of extracting data from locked devices. These tools have become more common and effective, especially after incidents like the 2015 San Bernardino shooting, where Apple refused to assist in unlocking the shooter’s phone.
Law enforcement agencies commonly use a variety of advanced tools for mobile forensics, similar to Cellebrite. These tools are designed to extract, analyze, and manage data from mobile devices, and they include:
- Oxygen Forensic Detective: Known for its comprehensive data analysis capabilities, it allows for the extraction and examination of data from a wide range of mobile devices.
- XRY by MSAB: This tool provides robust data extraction and analysis capabilities, supporting a wide range of mobile devices.
- Magnet AXIOM: A powerful tool for digital forensics, it helps investigators recover and analyze digital evidence from various sources, including mobile devices.
- SPF Pro by SalvationDATA: This tool offers advanced data extraction and analysis features for mobile devices, supporting various forensic needs.
- MOBILedit Forensic Express: A comprehensive forensic tool that extracts and analyzes data from mobile devices, offering a user-friendly interface.
- EnCase Forensic: Widely used in digital forensics, it provides extensive capabilities for data collection, preservation, and analysis.
- GrayKey: Specifically designed for unlocking and extracting data from iOS devices, GrayKey is highly effective in accessing encrypted iPhones and iPads.
The incident has sparked a wave of reactions across the nation. President Joe Biden condemned the violence and called for national unity, emphasizing the importance of peacefully resolving political differences. Trump, who narrowly escaped a more severe injury, took to his social media platform, Truth Social, to express his gratitude for the swift actions of law enforcement and his faith in divine intervention.
As the FBI continues its thorough investigation, the nation remains on edge, grappling with the implications of this shocking event. The successful unlocking of Crooks’ phone marks a pivotal step in the ongoing efforts to understand and prevent such acts of violence in the future.
“Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!”- Free Demo