ForensicAnalysisofMobileMalware·Chapter9 315 becoming a more common means to gain access to the system and its files. As mobile devices such as the iPhone become more powerful, they are likely to be attacked more frequently. The reasons for attacking an iPhone can include: PII (personally identifiable information) is worth money. The soundtrack from a conversation or phone call can be captured. Video images can be recorded. On top of this, many banks are implementing SMS based authentication. Finally, these devices are becoming a way into the tightly controlled front doors of corporations. By gaining a backdoor through a means such as an iPhone, an attacker can bypass the corporate firewall. SQLite The iPhone stores data including the contact lists, SMS communication, e-mail, and more using a small SQL database. SQLite (running on version 3 in the case of the iPhone) data- bases characteristically use the.sqlitedb file extension. The .db extension is also used with the iPhone. These files can be read on an external PC having been extracted from the iPhone. Some of the ways in which this can be done include: