Elcomsoft Phone Breaker is one of the most advanced mobile forensic tools on the market. Supporting smartphones and tablets running Apple iOS, Windows 10 Mobile and BlackBerry 10, Elcomsoft Phone Breaker can perform logical and over-the-air extraction and brute-force passwords to encrypted iOS backups using built-in GPU acceleration and smart dictionary attacks. The tool can download device backups from Apple iCloud and Microsoft OneDrive, and retrieve decryption keys to BlackBerry 10 backups directly from BlackBerry servers. GPU-accelerated recovery helps break into encrypted backups faster. Elcomsoft Phone Breaker can access evidence stored in iCloud and iCloud Drive with or without Apple ID and password.
Binary authentication tokens obtained from the users computer allow logging into Apple iCloud without a password, downloading iCloud photos, files and backups. No lengthy attacks and no physical access to an iPhone device are required. The tool supports accounts with and without two-factor authentication. iOS 13 and older are supported. In addition to iCloud backups, Apple synchronizes certain types of information across iOS devices via iCloud. Health and activity information, passwords, text messages and iMessages are securely synchronized. Call logs, Safari browsing history and open tabs, notes, calendars and contacts are also synchronized in nearly real time with little or no delay.
The data, including deleted items, is synced just minutes after the activity as opposed to iCloud backups being daily at best. Elcomsoft Phone Breaker extracts and decrypts synchronized information from Apple iCloud. Elcomsoft Phone Breaker is the first GPU-accelerated tool to recover plain-text iOS backup passwords, and remains the only tool to decrypt the keychain. ElcomSoft's patented GPU acceleration helps unlock password-protected backups 50 to 200 times faster compared to using a CPU alone. The GPU acceleration technology supports a mix of AMD and NVIDIA boards.
Perform logical and over-the-air acquisition of iOS devices, break into encrypted backups, obtain and analyze backups, synchronized data and passwords from Apple iCloud.
Break passwords and decrypt iOS backups with GPU acceleration
Decrypt iCloud Keychain and Messages with media files and documents from iCloud
Obtain synchronized data from Apple and Microsoft accounts
Download iCloud backups and synced data with or without Apple ID password
Supports: local iOS backups (iTunes); iCloud and iCloud Drive backups; iCloud synced data (call logs, photos, browsing history etc.) Microsoft Account (with valid authentication credentials); iCloud authentication tokens.