Elcomsoft Phone Password Breaker becomes the first commercially available forensic tool to decrypt the keychain data saved by Apple iOS 7. Keychain items can be recovered from password-protected iTunes backups.
"Adoption of the newest and latest has always been strong with Apple users", says Vladimir Katalov, ElcomSoft CEO. "The new iOS is a major upgrade offering a lot of controversial bells and whistles, but also implementing stronger security and improved usability. The more powerful smartphones become, the more information the users will store in them, and the more information we can extract out of their devices with our software."
About iOS Forensics
Information stored in Apple devices can be invaluable for forensic investigations. Call logs, Web browsing history, emails, historic geolocation information, pictures and videos taken with the built-in camera, communications in social networks and other application data can become essential court evidence.
By the end of August, 2013, some 13% of all mobile devices (smartphones and tablets) sold worldwide were running Apple iOS. These devices contain tremendous amounts of highly sensitive information about their users.
Adoption of the newest versions of iOS among Apple has been traditionally strong. According to Apple, the previous version of iOS (iOS 6) was adopted by 93% of all customers. Similar numbers are expected for iOS 7. Early adoption rate of the newly released iOS 7 is extremely high. More than 35% of all Apple users have already updated their devices to iOS 7 by the end of the first day since the new system was publicly released.
By adding support for the latest version of Apple iOS, ElcomSoft delivers a tool enabling investigators to capture, decrypt and analyze information stored in all current and legacy Apple devices.
Full iOS 7 Support: Complete with Keychain Data
The updated Elcomsoft Phone Password Breaker comes with full support for the latest release of Apple's mobile operating system, iOS 7. Phone Password Breaker can recover passwords protecting offline iTunes backups, decrypt the contents of these backups and unpack the content of the backup into files complete with their original folder structure.
An important addition in this latest release of Phone Password Breaker is the ability to decrypt the content of Apple's protected storage, the keychain. With every new iOS release, Apple moves more items into the keychain. Highly sensitive information stored in the keychain includes passwords to email accounts, account credential, filled forms and passwords to Web sites, stored credit card data and many bits of other information that may be critical for an investigation.
In iOS 7, Apple implemented certain changes to encryption and storage format of keychain items. Elcomsoft Phone Password Breaker is the first commercially available tool to recover encrypted keychain items from iTunes backups.
Note: keychain data can only be recovered from iTunes backups that are password-protected. The keychain in iTunes backups with no password is protected with a hardware-specific key, and cannot be decrypted.
iCloud Recovery Made More Efficient with Enhanced Selective Download
The last release of Elcomsoft Phone Password Breaker implemented the ability to speed up the downloading of user data from iCloud accounts by enabling investigators to select what types of data should be downloaded. This new release further enhances this ability, adding multiple new types of data to the list of selectable categories. In addition to previously available items such as general device information, phone settings, messages, call logs and camera roll, investigators can now opt to download data on communications over social networks (Facebook, Twitter, LinkedIn, Foursquare, WhatsApp, Instagram, Skype), data from Google apps, emails and addresses, user dictionaries, Passbook, voice mail and data from Apple maps and planned routes.
The ability to selectively download and regularly update certain types of information from online backups allows investigators get significantly faster initial access to highly sensitive information . More information on iCloud selective downloading is available at http://blog.crackpassword.com/...
About Elcomsoft Phone Password Breaker
Elcomsoft Phone Password Breaker provides forensic access to encrypted information stored in popular Apple and BlackBerry devices. By recovering the original password protecting offline backups produced with compatible devices, the tool offers forensic specialists access to SMS and email messages, call history, contacts and organizer data, Web browsing history, voicemail and email accounts and settings stored in those backup files. The new iteration of the product can also retrieve information from online backups stored in Apple iCloud providing that the original Apple ID and password are known.
Pricing and Availability
Elcomsoft Phone Password Breaker is available immediately. Home and Professional editions are available; iCloud recovery is only available in the Professional edition. Elcomsoft Phone Password Breaker Pro is available to North American customers for $199. The Home edition is available for $79. Local pricing may vary.
Elcomsoft Phone Password Breaker supports Windows XP, Vista, Windows 7 and 8, as well as Windows 2003, 2008 and 2012 Server. Elcomsoft Phone Password Breaker operates without Apple iTunes or BlackBerry Desktop Software being installed.