Assesing Digital Evidence Availability in Discord Phishing using ISO/IEC 27037 and Anti-Forensics Analysis

Anton Yudhana; Zulki Yanto Rivai; Imam Riadi

doi:10.59395/ijadis.v7i1.1518

Authors

Anton Yudhana Department of Electrical Engineering, Universitas Ahmad Dahlan, Yogyakarta, Indonesia https://orcid.org/0000-0001-5451-454X
Zulki Yanto Rivai Master Program of Informatics, Universitas Ahmad Dahlan, Yogyakarta, Indonesia
Imam Riadi Department of Information System, Universitas Ahmad Dahlan, Yogyakarta, Indonesia https://orcid.org/0000-0003-4927-6385

DOI:

https://doi.org/10.59395/ijadis.v7i1.1518

Keywords:

Digital Forensics, Phishing Investigation, Discord, ISO/IEC 27037, Digital Evidence Availability

Abstract

Phishing incidents on modern communication platforms pose significant challenges for digital forensics investigations, particularly regarding the availability and preservation of digital evidence. This research aims to evaluate the availability of digital evidence in Discord-based phishing cases by applying the ISO/IEC 27037 framework and interpreting the results from an anti-forensics perspective. This research uses a digital forensics case analysis approach on the victim’s mobile device by following the stages of identification, collection, acquisition, and preservation. The results show that of the five types of digital evidence identified, only 40% can be fully preserved, while 20% are partially preserved, and 40% cannot be preserved. The quantitative evaluation produced an average digital evidence availability score of 0.5, indicating that only half of the expected digital evidence could be retained even though the entire forensics procedure had been systematically applied. These findings confirm that the limitations in the availability of digital evidence are influenced not only by the investigation process but also by the technical characteristics of digital artifacts and the system mechanisms inherent to the Discord platform.

1033 765

Downloads

Download data is not yet available.

References

[1] S. L. Sanna, L. Regano, D. Maiorca, and G. Giacinto, Improving Cybercrime Detection and Digital Forensics Investigations with Artificial Intelligence, 2024, doi: https://doi.org/10.48550/arXiv.2510.14638.

[2] S. Tandel, J. Chordiya, and P. S. H. Patil, Tricked by the Square: Investigating the Rise and Reach of Quishing Attacks, no. April, 2025, doi: https://doi.org/10.22214/ijraset.2025.68660. DOI: https://doi.org/10.22214/ijraset.2025.68660

[3] J. B. Vala and V. M. Vekariya, The Role and Importance of Digital Forensics and Digital Evidence in Cyber Crime Detection, vol. 13, no. 6, pp. 413420, 2024, doi: https://doi.org/10.69605/ijlbpr_13.6.2024.80. DOI: https://doi.org/10.69605/ijlbpr_13.6.2024.80

[4] S. Ali and M. Yahya, Social Engineering as an Intermediate Variable between Methods of Persuasion and Electronic Deception from the Point of View of Victims of Cybercrime, vol. 3576, pp. 10131026, 2025, doi: https://doi.org/10.63332/joph.v5i6.2175. DOI: https://doi.org/10.63332/joph.v5i6.2175

[5] P. C. Dave, Manipulative Communication in Cybercrime: Unraveling the Linguistic, no. 2394, pp. 175182, 2022, doi: https://doi.org/10.69758/gimrj/2503i3iivxiiip0031. DOI: https://doi.org/10.69758/GIMRJ/2503I3IIVXIIIP0031

[6] A. Yudhana, I. Riadi, and S. Suharti, Network Forensics Against Volumetric-Based Distributed Denial of Service Attacks on Cloud and the Edge Computing, vol. 12, no. 5, pp. 577588, 2022, doi: https://doi.org/10.18280/ijsse.120505. DOI: https://doi.org/10.18280/ijsse.120505

[7] K. A. Arifin, Forensic Analysis of Online Fraud on Telegram Web using Digital Forensics Workshop Method, vol. 187, no. 30, pp. 411, 2025, doi: https://doi.org/10.5120/ijca2025925515. DOI: https://doi.org/10.5120/ijca2025925515

[8] Purwadi;, M. Makhfud, and A. Jamaludin, Research Horizon, vol. 0696, 2025, doi: https://doi.org/10.54518/rh.5.3.2025.580. DOI: https://doi.org/10.54518/rh.5.3.2025.580

[9] A. Mathew and R. Federico, International Journal of Innovative Research in Science Engineering and Technology ( IJIRSET ) Phishing 2 . 0: Leveraging Cyber Threat Intelligence to Combat Deepfake - Enhanced Social Engineering, vol. 14, no. 2, 2025, doi: 10.15680/IJIRSET.2025.1402003. DOI: https://doi.org/10.15680/IJIRSET.2025.1402003

[10] S. G. A. Rohini, B. Rajashree, and S. S. Sree, Social Engineering Attacks in Cybersecurity, no. May, 2025, doi: https://doi.org/10.22214/ijraset.2025.72253. DOI: https://doi.org/10.22214/ijraset.2025.72253

[11] R. Kolandaisamy and H. Rajagopal, Emergence of Cybercrimes in Online Social Networks, pp. 556564, 2024, doi: https://doi.org/10.5954/icarob.2024.os18-11. DOI: https://doi.org/10.5954/ICAROB.2024.OS18-11

[12] VELSICURO, Data 70.000 Pengguna Bocor Akibat Peretasan Server Discord, cyberranges.velsicuro.com. [Online]. Available: https://cyberranges.velsicuro.com/artikel/data-70000-pengguna-bocor-akibat-peretasan-server-discord

[13] V. Kozii and H. Vlasova, Peculiarities of recording electronic evidence in criminal proceedings regarding crimes committed in Ukraine using cryptocurrencies, vol. 42, no. 42, 2025, doi: https://doi.org/10.7238/idp.v0i42.429924. DOI: https://doi.org/10.7238/idp.v0i42.429924

[14] M. C. E. Lim et al., Analysis of Forensic Disk Imaging Tools for Data Acquisition and Preservation, Journal of Informatics and Web Engineering, vol. 4, no. 2, 2025, doi: https://doi.org/10.33093/jiwe.2025.4.2.11. DOI: https://doi.org/10.33093/jiwe.2025.4.2.11

[15] I. Hamid and M. M. H. Rahman, A Comprehensive Literature Review on Volatile Memory Forensics, 2024, doi: https://doi.org/10.3390/electronics13153026. DOI: https://doi.org/10.3390/electronics13153026

[16] I. Riadi, A. Yudhana, and G. P. Inngam Fanani, Mobile Forensic Tools for Digital Crime Investigation: Comparison and Evaluation, International Journal of Safety and Security Engineering, vol. 13, no. 1, pp. 1119, 2023, doi: 10.18280/ijsse.130102. DOI: https://doi.org/10.18280/ijsse.130102

[17] M. N. Faiz, Comparative Analysis of Cloning-Hashing Applications for Securing Digital Evidence, vol. 14, no. 02, pp. 214220, 2023, doi: 10.35970/infotekmesin.v14i2.1844. DOI: https://doi.org/10.35970/infotekmesin.v14i2.1844

[18] N. A. Rakha, Cybercrime and the Law: Addressing the Challenges of Digital Forensics in Criminal Investigations, vol. XVI, no. June. 2024. doi: https://doi.org/10.22201/iij.24485306e.2024.2.18892. DOI: https://doi.org/10.22201/iij.24485306e.2024.2.18892

[19] M. Raciti, D. Van Landuyt, and G. Bella, To See or Not to See: A Privacy Threat Model for Digital Forensics in Crime Investigation, 2025 13th International Symposium on Digital Forensics and Security (ISDFS), pp. 16, 2025, doi: 10.1109/ISDFS65363.2025.11011965. DOI: https://doi.org/10.1109/ISDFS65363.2025.11011965

[20] M. Raciti and G. Bella, Behind the ( Digital Crime ) Scenes: An MSC Model, 2024 12th International Symposium on Digital Forensics and Security (ISDFS), pp. 16, doi: 10.1109/ISDFS60797.2024.10527316. DOI: https://doi.org/10.1109/ISDFS60797.2024.10527316

[21] R. N. Bintang, R. Umar, and A. Yudhana, Assess of Forensic Tools on Android Based Facebook Lite with the NIST Method, Sci. J. Informatics, vol. 8, no. 1, pp. 19, 2021. DOI: https://doi.org/10.15294/sji.v8i1.26744

[22] R. S. Santos, Advanced Research on Information Systems Security Digital Forensics on Trending Technologies: A systematic Literature Review, vol. 4, no. 2, pp. 415, doi: https://doi.org/10.56394/aris2.v4i2.40. DOI: https://doi.org/10.56394/aris2.v4i2.40

[23] N. Yaln and T. Yldrm, Logical Image Acquisition and Analysis of Android Smartphones, pp. 139152, 2024, doi: 10.4236/jcc.2024.124011. DOI: https://doi.org/10.4236/jcc.2024.124011

[24] N. Anwar, Comparative Analysis of NIJ and NIST Methods for MicroSD Investigations: A Technopreneur Approach, vol. 6, no. 2, pp. 169181, 2024, doi: https://doi.org/10.34306/att.v6i2.407. DOI: https://doi.org/10.34306/att.v6i2.407

[25] W. A. Baroto, Asia Pacific Fraud Journal, vol. 9, no. 1, pp. 116, 2024, doi: 10.21532/apfjournal.v9i1.346. DOI: https://doi.org/10.21532/apfjournal.v9i1.346

[26] O. S. Igonor and M. B. Amin, The Application of Blockchain Technology in the Field of Digital Forensics: A Literature Review, 2025, doi: https://doi.org/10.3390/blockchains3010005. DOI: https://doi.org/10.3390/blockchains3010005

[27] N. ali Suleiman, Deepfake-as-a-Service: The Next Challenge for Enterprise Cybersecurity Deepfake-as-a-Service: The Next Challenge for Enterprise Cybersecurity, vol. 7, no. 3, pp. 4759, 2025, doi: https://doi.org/10.47941/jts.2752. DOI: https://doi.org/10.47941/jts.2752

[28] M. Ashawa, A. Mansour, J. Riley, J. Osamor, and N. P. Owoh, Digital Forensics Challenges in Cyberspace: Overcoming Legitimacy and Privacy Issues Through Modularisation, pp. 140156, 2023, doi: https://doi.org/10.37256/ccds.5120233845. DOI: https://doi.org/10.37256/ccds.5120233845

[29] A. Yudhana, Live Forensic Environment with Parallel Data Acquisition for Investigating Private Mode Browsing, vol. 13, no. 3, pp. 577585, 2023. DOI: https://doi.org/10.18280/ijsse.130320

[30] A. Faizal and A. Luthfi, Comparison Study of NIST SP 800-86 and ISO/IEC 27037 Standards as A Framework for Digital Forensic Evidence Analysis, Journal of Information Systems and Informatics, vol. 6, no. 2, pp. 701718, 2024, doi: 10.51519/journalisi.v6i2.717. DOI: https://doi.org/10.51519/journalisi.v6i2.717

[31] A. R. Fakhriansyah and A. Luthfi, Development of Xiaomi Product Mobile Forensic Acquisition Framework on Second Space Features Based on SNI / ISO, pp. 255272, 2024, doi: https://doi.org/10.20895/infotel.v16i2.1091. DOI: https://doi.org/10.20895/infotel.v16i2.1091

[32] E. Hafidy, P. Siber, P. Siber, H. Kabetta, P. Siber, and P. Siber, Digital Artifact Analysis on Windows Subsystem for Android ( WSA ) based on ISO / IEC 27037: 2012 and ISO / IEC 27042: 2015, 2024 IEEE 2nd International Conference on Electrical Engineering, Computer and Information Technology (ICEECIT), pp. 4146, 2024, doi: 10.1109/ICEECIT63698.2024.10859797. DOI: https://doi.org/10.1109/ICEECIT63698.2024.10859797

[33] R. A. Ramadhan, P. R. Setiawan, and D. Hariyadi, Digital Forensic Investigation for Non-Volatile Memory Architecture by Hybrid Evaluation Based on ISO / IEC 27037: 2012 and NIST SP800-86 Framework, vol. 6, no. 2, pp. 162168, 2022, doi: https://doi.org/10.25299/itjrd.2022.8968. DOI: https://doi.org/10.25299/itjrd.2022.8968

[34] H. Yang, I.-L. Hung, and Y. Chao, Enhancing Traditional Reactive Digital Forensics to a Proactive Digital Forensics Standard Operating Procedure ( P-DEFSOP ): A Case Study of DEFSOP and ISO 27035, pp. 118, 2025, doi: https://doi.org/10.3390/app15189922. DOI: https://doi.org/10.3390/app15189922

[35] A. O. Felix, Enhancing Digital Forensics Investigations Using AI Driven Anomaly Detection and Log Correlation: A Mixed Methods Approach Article Info Issue: 04 July August 2025 Received: 23-05-2025 Accepted: 24-06-2025 Page No: 71-84, pp. 7184, 2025, doi: https://doi.org/10.54660/ijfei.2025.2.4.71-84. DOI: https://doi.org/10.54660/IJFEI.2025.2.4.71-84

[36] S. Rudrakar, P. Rughani, and L. Sadineni, Digital forensics and incident response management model for IoT based agriculture, no. 2025, pp. 123, 2027, doi: https://doi.org/10.1038/s41598-025-02635-2. DOI: https://doi.org/10.1038/s41598-025-02635-2

[37] M. S. Zareen, B. Aslam, S. Tahir, and I. Rasheed, Unveiling the Dynamic Landscape of Digital Forensics: The Endless Pursuit, pp. 134, 2024, doi: https://doi.org/10.3390/computers13120333. DOI: https://doi.org/10.3390/computers13120333

[38] S. Surakanti, S. Goundar, and J. Dwight, Countering anti-forensic tactics in cybercrime investigations a systematic literature review, 2025, doi: https://doi.org/10.1007/s10207-025-01131-y. DOI: https://doi.org/10.1007/s10207-025-01131-y

[39] P. Narasimhan and N. Kala, From Evidence to Insight: AI in Digital Forensics, pp. 21982203, 2024, doi: https://doi.org/10.32628/cseit2410612419. DOI: https://doi.org/10.32628/CSEIT2410612419

[40] . . , Problematic Issues of Definition of Digital Forensics, pp. 135160, 2023, doi: 10.21564/2225-6555.2023.23.281734. DOI: https://doi.org/10.21564/2225-6555.2023.23.281734

[41] N. A. Almubairik, Systematic Literature Review on Wearable Digital Forensics: Acquisition Methods , Analysis Techniques , Tools , and Future Directions, IEEE Internet Things J., vol. 12, no. 2, pp. 13201342, 2025, doi: 10.1109/JIOT.2024.3485027. DOI: https://doi.org/10.1109/JIOT.2024.3485027

[42] I. S. Said, G. G. Ocen, M. Ali, and A. A. Egwar, Digital Evidence Lifecycle Management Framework in Courts of Law ( DELM-C ): A Case of Zanzibar High Courts, 2025, doi: 10.32604/jcs.2025.066979. DOI: https://doi.org/10.32604/jcs.2025.066979

[43] F. Caldeira and T. Cruz, A Survey on Forensics and Compliance Auditing for Critical Infrastructure Protection, no. November 2023, pp. 24092444, 2024, doi: https://doi.org/10.1109/access.2023.3348552. DOI: https://doi.org/10.1109/ACCESS.2023.3348552

[44] S. A. Hanna, R. Imam, and Sunardi;, Improving Credibility of Digital Evidence Investigation in E- Commerce Fraud Cases using ISO / IEC 27037, International Journal of Advances in Data and Information Systems, vol. 6, no. 2, pp. 479495, 2025, doi: 10.59395/ijadis.v6i2.1408. DOI: https://doi.org/10.59395/ijadis.v6i2.1408

[45] A. K. Verma and K. Ramanathan, Data privacy preservation in digital forensics investigation, in AIP Conference Proceedings, 2022, p. 030051. doi: 10.1063/5.0109813. DOI: https://doi.org/10.1063/5.0109813

[46] S. Abrams, Tacit attitudinal principles for evaluating digital preservation success, Archival Science, vol. 21, no. 3, pp. 295315, Sep. 2021, doi: 10.1007/s10502-021-09360-5. DOI: https://doi.org/10.1007/s10502-021-09360-5

[47] R. Stoykova and K. Franke, Reliability validation enabling framework (RVEF) for digital forensics in criminal investigations, Forensic Science International: Digital Investigation, vol. 45, p. 301554, Jun. 2023, doi: 10.1016/j.fsidi.2023.301554. DOI: https://doi.org/10.1016/j.fsidi.2023.301554