The FBI has enlisted the help of Israeli tech firm Cellebrite to assist in the investigation of Thomas Matthew Crooks, a 20-year-old Pennsylvania man who attempted to assassinate former President Trump at a rally, but ultimately killed a bystander. Cellebrite is known for its ability to break into smartphones from various Big Tech companies and operating systems. While the company was able to provide a software patch that allowed investigators access to Crooks’ phone, they are not involved in the actual investigation or privy to its findings. The FBI has not confirmed Cellebrite’s involvement in the probe and typically does not comment on the tools or techniques it uses.
The investigation into Crooks involves more than just accessing data from his phone. Encrypted messaging services have been served legal process, and the FBI is awaiting responses from them. Despite obtaining significant evidence from Crooks’ phone, including a disturbing search history, investigators have run into issues with encrypted apps. FBI Deputy Director Paul Abbate stated that some of the applications used by Crooks were encrypted, making it difficult to access certain information. The FBI still does not have complete access to the shooter’s online activity and is awaiting responses to legal requests from the companies behind the encrypted apps.
Cellebrite provides tools to help law enforcement access encrypted apps and hidden data on suspects’ smartphones after obtaining legal authorization. Most current smartphone apps utilize encryption to protect data transfers and storage. Reports that Crooks used encrypted apps and stored data overseas have raised concerns about his communications and contacts. Federal authorities were aware of an Iranian threat against Trump before the assassination attempt, further complicating the investigation. While there is no evidence of co-conspirators at this time, encrypted information remains a challenge for investigators, and they are awaiting the results of legal requests to access additional data.
Investigators are examining information received from Crooks’ social media accounts, which expressed various viewpoints. Federal authorities are keeping an open mind until all results are obtained. Former President Trump plans to return to Butler for another rally to honor the bystander killed by Crooks, Corey Comperatore, as well as the two individuals critically wounded in the shooting. While investigators have accessed some of Crooks’ emails, his encrypted communications remain inaccessible. The FBI is continuing to pursue legal requests to access additional data from the companies behind the encrypted apps used by Crooks. The investigation remains ongoing as authorities work to uncover all relevant information surrounding the assassination attempt.
