BSides Joburg 2024

BSides Joburg 2024

Doppelgänger Devices: Investigating Fake iPhones & Security Implications
2024-07-20 , Track 1

In this presentation, I delve into the world of counterfeit iPhones, examining their security risks and offering practical methods for distinguishing fake devices. Through thorough forensic analysis and penetration testing, I aim to uncover vulnerabilities and provide strategies to enhance user security. Join me as we explore the implications of doppelgänger devices and how to navigate the counterfeit landscape in today's digital world.


Counterfeit electronic devices, particularly fake iPhones, have become increasingly prevalent in global markets. These devices mimic the appearance and functionality of authentic iPhones but are often of inferior quality and pose significant security risks to users. This proposal seeks to investigate the phenomenon of doppelgänger devices, focusing on counterfeit iPhones, and analyse their security implications.

Furthermore, the proposal aims to investigate the security vulnerabilities inherent in fake iPhones. Counterfeit devices may contain malicious hardware or pre-installed malware, posing threats such as data theft, financial fraud, and surveillance. By conducting penetration testing and forensic analysis, we will identify potential security weaknesses in doppelgänger devices and assess their implications for end-users, enterprises, and cybersecurity professionals.

The findings of this research will contribute to the understanding of counterfeit electronics and their security risks, providing valuable insights for cyber security specialist and end-users. Moreover, the study will propose strategies for mitigating the impact of fake iPhones on consumer safety and cybersecurity, including consumer education initiatives, and technical solutions where applicable.

I have managed to procure a counterfeit device and intend to show off its capabilities. My proposal seeks to delve into the acquired counterfeit iPhone, aiming to address the following inquiries:
How can users swiftly and accurately discern the authenticity of an iPhone, especially when counterfeit versions have circumvented standard online verification checks?
Does the counterfeit device engage in the harvesting of user credentials?
Is there evidence of communication with a remote server?
What operating system and methodologies were employed in its fabrication?
Are there any backdoor access points or hidden functionalities within the counterfeit iPhone that could compromise user privacy or security?
What security vulnerabilities are present in the counterfeit iPhone, and how do they compare to those found in authentic devices?

In summary, this proposal seeks to investigate doppelgänger devices, with a focus on counterfeit iPhones, and analyse their security implications. By uncovering the hidden dangers of fake electronics, this research aims to safeguard users and promote a more secure digital ecosystem.

Ansie Brough is a Senior Cyber Security Consultant and Head of Digital Forensics & Incident Response at Redshift Cyber Security (Pty) Ltd. Joining Redshift in 2020, Ansie quickly rose to become Head of Mobile, where she identified a lack of accessible mobile security training, leading her to release a Mobile Security YouTube series. Passionate about digital forensics, she transitioned to Head of Digital Forensics and Incident Response, boasting multiple certifications in both fields. Ansie aims to integrate her expertise in mobile security and digital forensics to enhance cybersecurity practices in her presentations and initiatives.