This mobile forensic tool enables logical and cloud extraction of Apple iOS devices, including remote retrieval of iCloud information, decryption of iOS backups, and FileVault 2 volume access. It's among the best tools in the market for performing these actions.
The tool is equipped with GPU acceleration and smart dictionary attacks, allowing it to brute-force passwords to encrypted iOS backups. It can also download device backups from Apple iCloud and Microsoft OneDrive. Furthermore, GPU-accelerated recovery helps break into encrypted backups faster.
Elcomsoft Phone Breaker has the ability to access evidence that is stored in iCloud and iCloud Drive, with or without Apple ID and password. Through binary authentication tokens captured from the user's computer, the tool can log into Apple iCloud without a password, offering access to iCloud photos, files, and backups. No lengthy attacks or physical access to an iPhone device are required, and the tool supports accounts with and without two-factor authentication. This tool supports all current and legacy versions of iOS.
Apart from iCloud backups, Apple syncs certain types of information across iOS devices through iCloud. Synchronized items include health and activity information, passwords, text messages, photos, and Safari history. There is little or no delay in synchronizing call logs, Safari open tabs, notes, calendars, and contacts in almost real time. The data, including deleted items, is synced promptly after the activity, which is quite different from iCloud backups that occur at best, once a day. The tool extracts and decrypts synchronized information from Apple iCloud, including end-to-end encrypted items such as iCloud Keychain, Health, Messages, Screen Time, and other data.
Version 10.12.38835: Minor bug fixes and improvements