Forensic tool discovers iCloud backup
ElcomSoft has updated its Phone Password Breaker tool with the ability to retrieve user content from password-protected backups created by Apple iOS devices and BlackBerry smartphones, as well as the ability to retrieve iPhones’ user data from iCloud.
The new version of offers forensic access to online backups produced by Apple iPhone devices and stored in Apple iCloud.
Neither physical device nor access to suspect’s computer is needed in order to access backup information. Instead, investigators gain full unrestricted access to users’ iCloud storage by simply entering their Apple ID and password into Elcomsoft Phone Password Breaker.
“In a sense, Phone Password Breaker becomes an alternative way to get access to iOS devices’ content”, says Vladimir Katalov, ElcomSoft CEO.
“Our Elcomsoft iOS Forensic Toolkit is only available to forensic customers, while other methods require the presence of the actual iPhone device being analysed or at least an access to device backups. This is not the case with iCloud. With valid Apple ID and a password, investigators can not only retrieve backups to seized devices, but access that information in real-time while the phone is still in the hands of a suspect”.
If a user owns more than one device, and those devices are registered with the same Apple ID, their online backups can be recovered from iCloud with no extra effort.