App Spotlight: MEGA

MEGA (MEGA Encrypted Global Access) is a file hosting service offered by MEGA CLOUD SERVICES LIMITED, a company based in Auckland, New Zealand. The service is offered through web-based apps. MEGA mobile apps are also available for Android and iOS.
Apr 9

Platform Overview

Some of the key features of Mega.nz
Empty space, drag to resize

Background

The Web site and service was launched on 19 January 2013, by Kim Dotcom, together with chief technical officer, director, and co-founder Mathias Ortmann, chief marketing officer Finn Batato and Bram van der Kolk as a successor to Megaupload, which was then seized by the United States Department of Justice a year prior.

Encryption

Data on MEGA services are end-to-end encrypted client-side using the AES algorithm. Since MEGA does not know the encryption keys to uploaded files, they cannot decrypt and view the content. Therefore, they cannot be responsible for the contents of uploaded files. By encrypting files MEGA can work with a larger number of data hosting companies around the world, decreasing the likelihood of a Megaupload-style seizure of servers by one government. MEGA also uses CloudRAID technology, which means files are split into roughly equal-sized parts and stored in different countries. They also store another part in yet another country recording whether the number of "1" bits at a certain position within all parts is even or odd. This means that users can reconstruct data even when one of the parts is unavailable.

Features

Mega offers cloud based storage that allows individuals to backup, save and store files, photos, and videos and access them from a variety of platforms via mobile apps and web browsers. Additionally, Mega also supports secure messaging and sharing of files within the application. 

Important Investigative Points

Search Warrants

In considering any legal request for information, MEGA starts from the position that user data and account information is private, so disclosure is only warranted in cases of clearly illegal activity. Even in such cases, as all files and chats stored by MEGA are user-encrypted, MEGA is still limited in what information it is able to provide.

Evidence Preservation

MEGA stores the majority of the account data online on their servers. However, there is the ability to save files for off-line viewing. If this has happened you should be able to preserve the evidence with a typical forensic extraction. If the evidence is still in the cloud you may be able to preserve it with a tool such as "Linked Screen Capture" From Datapilot. You can get a free 60 day trial with our free course.

Locating Contraband

One of the key features of Mega is the ability to share your files with a download link. Because of this, these links can be saved to word documents, powerpoints and more. Specifically we have seen individuals save these links to their "Notes" applications on their mobile devices.