Avast didn’t have to resort to much digital jiu-jitsu to recover the data from the phones it acquired, McColgan said. His team used “fairly generic, publicly available,” off-the-shelf digital forensics software such as FTK Imager, a drive-imaging program.
“Although at first glance the phones appeared thoroughly erased, we quickly retrieved a lot of private data. In most cases, we got to the low-level analysis, which helped us recover SMS and chat messages,” Avast researchers Jaromir Horejsi and David Fiser wrote in the report.
Yikes. Makes me wonder how well iOS fairs.