Elcomsoft Phone Breaker 6.0 Decrypts FileVault 2, Downloads iCloud Photos, Retrieves Apple ID Password

MOSCOW, August 25, 2016 /PRNewswire/ --

ElcomSoft Co. Ltd. releases a major update to Elcomsoft Phone Breaker, adding support for decrypting FileVault 2 volumes by downloading the Recovery Key from iCloud. The new release adds the ability to download existing and recently deleted photos from iCloud Photos, introduces the updated Keychain Explorer and the ability to cache online authentication credentials for streamlined subsequent logins into iCloud, Windows Phone and BlackBerry 10.

Read a press release:  

https://www.elcomsoft.com/PR/epb_160825_en.pdf

Read an article "iCloud Photo Library: All Your Photos Are Belong to Us" in our blog: 

http://blog.elcomsoft.com/2016/08/icloud-photo-library-all-your-photos-are-belong-to-us/

Decrypting FileVault 2 Volumes 

Elcomsoft Phone Breaker gains the ability to extract FileVault 2 recovery keys from the user's iCloud account, and use these keys to decrypt encrypted disk images. Valid authentication credentials (Apple ID/password or iCloud authentication token) as well as volume identification information extracted from the FileVault-encrypted disk image are required in order to extract the key. Once the recovery key is successfully obtained, the user can perform full decryption for offline analysis.

Extracting iCloud Photo Library 

Elcomsoft Phone Breaker downloads photos and videos stored in iCloud Photo Library. The tool can extract media files that have been deleted more than 30 days ago, which can result in significantly more evidence compared to simply pulling the "Recently Deleted" album.

New Keychain Viewer 

The updated Keychain Explorer displays browser passwords, authentication tokens (including those to access iCloud backups and files), saved credit card data and Wi-Fi passwords synced from the iCloud keychain. The viewer can automatically discover the user's Apple ID password and/or authentication token by analyzing browser passwords, iTunes and App Store settings.

About Elcomsoft Phone Breaker 

Elcomsoft Phone Breaker extracts information from offline and cloud backups created by Apple, BlackBerry and Windows mobile devices. The tool can extract cached passwords and synced authentication credentials to a wide range of resources from local backups. Cloud extraction with or without a password makes it possible to decrypt FileVault 2 containers without lengthy attacks, pull communication histories and retrieve photos deleted by the user a long time ago.

ElcomSoft Co. Ltd. 

Founded in 1990, ElcomSoft Co.Ltd. develops computer forensics tools, provides computer forensics training and computer evidence consulting services to businesses, law enforcement, military, and intelligence agencies. ElcomSoft tools are used by the Fortune 500 corporations, multiple branches of the military all over the world, foreign governments and all major accounting firms.

SOURCE ELCOMSOFT Co. Ltd.