Elcomsoft System Recovery 6.0 Extracts Hibernation Files and Data to Break Full Disk Encryption Passwords For BitLocker, PGP, TrueCrypt and VeraCrypt

The update makes it easy to process full-disk encryption by simply booting from a flash drive. The tool automatically detects full-disk encryption, extracting and saving information required to brute-force passwords to encrypted volumes. In addition, the tool can save the system’s hibernation file to the flash drive for subsequent extraction of decryption keys for accessing encrypted volumes. More 👉 https://www.elcomsoft.com/news/719.html

#BitLocker #PGP #TrueCrypt #VeraCrypt #passwords #encryption #windows #hiddendisks #crypto #code #encryptionkey

Facebook admits to storing millions of unencrypted Instagram #passwords - https://t.co/Xd0d5QFWcm

You Lost Your Second Authentication Factor. Now What? What if you do know your password and your passcode but lost access to the only physical iOS device using your Apple ID and your SIM card at the same time? This could easily happen if you travel abroad and your phone is stolen together with the SIM card.

👉 https://blog.elcomsoft.com/2019/04/you-lost-your-second-authentication-factor-now-what/

#iphone #2fa #authentication #apple #iforgot #icloud #password #dataaccess #ios #verification

Elcomsoft Phone Viewer 4.50 adds data export support, allows evidence analysis in external tools

Elcomsoft Phone Viewer is updated to enable the exporting of digital evidence collected from iOS device backups, iCloud and file system images to Microsoft Excel. The ability to export data enables experts to continue the investigation in their forensic product of choice.

👉 https://www.elcomsoft.com/news/720.html

#dfir #iphone #ios #security #decryption #2fa #report #evidence #investigation #dataextraction

Meet with us at DMI NATIONAL Spring Conference & Exhibition by The Investigator in Oxford, 21-22 May 2019. Our talk on Day 2, Session 1, 9.50am-10.30am: #Forensic implications of iPhone #jailbreaking, Vladimir Katalov. 👉 the-investigator.co.uk/dmi-spring-2019 #dfir #investigation #cybercrime #jb

Step by Step Guide to iOS Jailbreaking and Physical Acquisition

The procedure of installing a jailbreak for the purpose of physical extraction is vastly different from jailbreaking for research or other purposes. In particular, forensic experts are struggling to keep devices offline in order to prevent data leaks, unwanted synchronization and issues with remote device management.

👉 https://blog.elcomsoft.com/2019/05/step-by-step-guide-to-ios-jailbreaking-and-physical-acquisition/

#jb #jailbreak #ios #mobileforensics #dataextraction #iphone #keychain #forensictoolkit #password #filesystem #elcomsoft #ios12 #grayshift

ElcomSoft Phone Breaker 9.10 fixes iCloud backups downloading for iOS 11.2-12.4

Elcomsoft Phone Breaker 9.10 introduces experimental support for iCloud backups created with iPhone and iPad devices running iOS 11.2 through 12.4 even if two-factor authentication is enabled. In addition, the tool is now able to access the complete set of iCloud synchronized data, including Health and Messages, from Windows computers.

👉 https://www.elcomsoft.com/news/721.html

#icloud #ios12 #iphone #mobileforensics #backup #jb #2FA #telegram #phonebreaker #freedownload #crypto #imessage

Nice article on iPhone hacking tools 🛠 by MobileAppDaily! However, Elcomsoft Phone Breaker description is not very accurate 😏 oh well...

👉 https://www.mobileappdaily.com/2018/05/1/best-iphone-hacking-apps-and-tools-2018/amp


#iphone #hack #ios #hackingapp #epb #phonebreaker #iret #xSellize #cydia #cycript #myriam #ispy #ikeymonitor #iwebpro #wlanaudit #ios12

Forensic Implications of iOS Jailbreaking

Jailbreaking is used by the forensic community to access the file system of iOS devices, perform physical extraction and decrypt device secrets. Jailbreaking the device is one of the most straightforward ways to gain low-level access to many types of evidence not available with any other extraction methods.

In this article we’ll talk about the risks and consequences of using various jailbreak tools and installation methods.

👉 https://blog.elcomsoft.com/2019/06/forensic-implications-of-ios-jailbreaking/

#jb #jailbreaking #cryptography #encryption #dfir #mobileforensics #cloudforensics #dataextraction #iphone #cybersecurity #jailbreak

The Most Unusual Things about iPhone Backups

In this article we tried to gather everything we know about iTunes backup passwords to help you break (or reset) their passwords in the most efficient way.

👉 https://blog.elcomsoft.com/2019/06/unusual-iphone-backups/

#iphone #crypto #mobileforensics #cloudforensics #elcomsoft #mobilesecurity #cloud #icloud #iOS #dataextraction

Apple TV and Apple Watch Forensics 01: Acquisition

While the iPhone is Apple’s bread and butter product, is not the only device produced by the company. We’ve got the Mac (in desktop and laptop variations), the complete range of tablets (the iPad line, which is arguably the best tablet range on the market), the music device (HomePod), the wearable (Apple Watch), and the Apple TV. In today’s article, we are going to cover data extraction from Apple TV and Apple Watch. They do contain tons of valuable data, and are often the only source of evidence.

👉 https://blog.elcomsoft.com/2019/06/apple-tv-and-apple-watch-forensics-01-acquisition/

#iphone #iwatch #appletv #iosforensics #encryption #mobileforensics #evidence #digitalevidence #mobilesecurity

In general, iOS devices are very well protected, while some Android devices provide an even better level of security, Katalov said.

To protect your smart phone, Katalov recommends the following:

- Use at least a 6-digit passcode
- Make the passcode complex
- Enable USB restricted mode
- Know how to activate it (S.O.S.)
- Best of all, use an iPhone Xr or Xs model or newer

"For normal users, I think there is no risk at all," Katalov said. "Though, of course, I am looking for better iOS security in the future

👉 https://www.computerworld.com/article/3403385/what-the-latest-ios-passcode-hack-means-for-you.html

#apple #ios #ios12 #unlock #passcode #security #iOS12.3

Apple Watch Forensics 02: Analysis

During the years, starting from 2015, Apple manufactured five different models with WatchOS, a wearable OS based on iOS and specifically developed for the Apple Watch.

Since then, not a lot of research was done on how to extract data from this kind of devices. I have been working on this topic over the last months, by researching methods on how to extract and analyze data stored on the internal memory of the Apple Watch.

by Mattia Epifani
👉https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/

#iphone #iwatch #appletv #iosforensics #encryption #mobileforensics #evidence #digitalevidence #mobilesecurity #dataanalysis

Digital Forensics: Training Required

If you are working in the area of digital forensics, you might have wondered about one particular thing in the marketing of many forensic solutions. While most manufacturers are claiming that their tools are easy to use and to learn, those very same manufacturers offer training courses with prices often exceeding the cost of the actual tools. Are these trainings necessary at all if the tools are as easy to use as the marketing claims?

We believe so. A “digital” investigation is not something you can “fire and forget” by connecting a phone to a PC, running your favorite tool and pushing the button. Dealing with encrypted media, the most straightforward approach of brute-forcing your way is not always the best.

by Oleg Afonin
👉 https://blog.elcomsoft.com/2019/06/digital-forensics-training-required/

#police #cyber #cybersecurity #digitalforensics #cloudforensics #decryption #mobileforensics #training #elcomsoft

The Art of iPhone Acquisition

We all know how much important data is stored in modern smartphones, making them an excellent source of evidence. However, data preservation and acquisition are not as easy as they sound. There is no silver bullet or “fire and forget” solutions to solve cases or extract evidence on your behalf. In this article, which is loosely based on our three-day training program, we will describe the proper steps in the proper order to retain and extract as much data from the iPhone as theoretically possible.

The first steps: data preservation...

👉 https://blog.elcomsoft.com/2019/07/the-art-of-iphone-acquisition/

by Vladimir Katalov

#dfir #iphone #iOSforensics #mobile #cloud #dataextraction #digitalforensics #cybersecurity #elcomsoft #faradaybag

ElcomSoft Phone Breaker 9.15 supports iOS 13 and iPadOS beta, extracts iCloud tokens from macOS

Elcomsoft Phone Breaker 9.15 adds the ability to download iCloud backups created with iPhone and iPad devices running iOS 13 and iPadOS beta. In addition, the tool is now able to extract fully-featured iCloud authentication tokens from macOS computers and use that token on any other computer. The token can be used to authenticate into iCloud without using the login, password and two-factor authentication process.

👉 https://www.elcomsoft.com/news/722.html

#iOS13 #iPhone #Apple #iCloud #iPadOS #masOS #password #keychain #encryption #decryption #protection #authentication #token #dataaccess #extract #software

iOS 13 (Beta) Forensics


iOS 13 is on the way. While the new mobile OS is still in beta, so far we have not discovered many revolutionary changes in the security department. At the same time, there are quite a few things forensic specialists will need to know about the new iteration of Apple’s mobile operating system. In this article, we’ll be discussing the changes and their meaning for the mobile forensics.

by Vladimir Katalov

👉 https://blog.elcomsoft.com/2019/07/ios-13-beta-forensics/

#iOS13 #iPhone #smartphone #forensics #backups #decryption #dfir #software #encryption

Accessing iCloud With and Without a Password in 2019

In iOS forensics, cloud extraction is a viable alternative when physical acquisition is not possible. The upcoming release of iOS 13 brings additional security measures that will undoubtedly make physical access even more difficult. While the ability to download iCloud backups has been around for years, the need to supply the user’s login and password followed by two-factor authentication was always a roadblock.

It took us more than a year to figure out a workaround allowing experts to transfer authentication tokens from the user’s computer...

👉 https://blog.elcomsoft.com/2019/07/accessing-icloud-with-and-without-a-password-in-2019/

#software #forensics #dfir #encryption #iOS13 #icloud #password #2FA #backup #decryption #messages #token #keychain

Breaking and Securing Apple iCloud Accounts

The cloud becomes an ever more important (sometimes exclusive) source of the evidence whether you perform desktop or cloud forensics. Even if you are not in forensics, cloud access may help you access deleted or otherwise inaccessible data.

Let’s review all the possibilities of accessing Apple iCloud data with or without a password.

👉 https://blog.elcomsoft.com/2019/07/breaking-and-securing-apple-icloud-accounts/

#iCloud #iOS #forensocs #dfir #forensicsoftware #smartphone #encryption #2FA #toolkit #jailbreak #token #security #cloudsecurity #mobileforensics

Extended Mobile Forensics: Analyzing Desktop Computers

When it comes to mobile forensics, experts are analyzing the smartphone itself with possible access to cloud data. However, extending the search to the user’s desktop and laptop computers may (and possibly will) help accessing information stored both in the physical smartphone and in the cloud. In this article we’ll list all relevant artefacts that can shed light to smartphone data.

👉 https://blog.elcomsoft.com/2019/07/extended-mobile-forensics-analyzing-desktop-computers/

#iphone #ios #mobileforensics #cloud #dfir #cloudexplorer #phone #smartphone #phonebreaker #icloud #password