Elcomsoft Phone Breaker is one of the most advanced mobile forensic tools on the market. Supporting smartphones and tablets running Apple iOS, Windows 10 Mobile and BlackBerry 10, Elcomsoft Phone Breaker can perform logical and over-the-air extraction and brute-force passwords to encrypted iOS backups using built-in GPU acceleration and smart dictionary attacks. The tool can download device backups from Apple iCloud and Microsoft OneDrive, and retrieve decryption keys to BlackBerry 10 backups directly from BlackBerry servers. GPU-accelerated recovery helps break into encrypted backups faster.
Elcomsoft Phone Breaker can access evidence stored in iCloud and iCloud Drive with or without Apple ID and password. Binary authentication tokens obtained from the users computer allow logging into Apple iCloud without a password, downloading iCloud photos, files and backups. No lengthy attacks and no physical access to an iPhone device are required. The tool supports accounts with and without two-factor authentication. iOS 13 and older are supported.
In addition to iCloud backups, Apple synchronizes certain types of information across iOS devices via iCloud. Health and activity information, passwords, text messages and iMessages are securely synchronized. Call logs, Safari browsing history and open tabs, notes, calendars and contacts are also synchronized in nearly real time with little or no delay. The data, including deleted items, is synced just minutes after the activity as opposed to iCloud backups being daily at best. Elcomsoft Phone Breaker extracts and decrypts synchronized information from Apple iCloud.
Elcomsoft Phone Breaker is the first GPU-accelerated tool to recover plain-text iOS backup passwords, and remains the only tool to decrypt the keychain. ElcomSoft's patented GPU acceleration helps unlock password-protected backups 50 to 200 times faster compared to using a CPU alone. The GPU acceleration technology supports a mix of AMD and NVIDIA boards.
Changelog for this release:
Home edition: all users with non-expured license get access to Professional edition
Professional edition: only legacy authentication is possible now
An ability to browse inside keychain obtained with Cellebrite UFED 4PC
A warning about a risk of account blocking for non-2FA accounts
About 70 MB of free space on hard disk
Only 2 characters of found password are shown, some features are disabled.