What's new in Elcomsoft Phone Breaker 10.13 Build 38844
Sep 15, 2023
- Improved logging Bug fixes and performance improvements
New in Elcomsoft Phone Breaker 10.13 Build 38843 (Jul 22, 2023)
- Improved logging
- Bug fixes and performance improvements
New in Elcomsoft Phone Breaker 10.13 Build 38842 (May 12, 2023)
- The latest build fully supports both local and cloud backups created by Apple's latest devices, including the iPhone 14 range and all devices running iOS 16. In addition, Elcomsoft Phone Breaker supports data synchronized to iCloud by iOS 16 devices.
New in Elcomsoft Phone Breaker 10.12 Build 38814 (Dec 20, 2022)
- Fixed backup decryption problem (with known password).
New in Elcomsoft Phone Breaker 10.11 Build 38791 (May 15, 2022)
- ICloud protocol fixes and performance improvements
New in Elcomsoft Phone Breaker 10.1 (Dec 25, 2021)
- Cloud acquisition agent (for trusted device) now does not require permanent Internet connection
- Added support for synced Apple Maps data in iCloud created with iOS 15
- Added support for Cellebrite UFED keychain format
- Improved iCloud authentication process
New in Elcomsoft Phone Breaker 10.0 Build 38653 (Dec 8, 2021)
- fixed the problems downloading keychain data
New in Elcomsoft Phone Breaker 10.0 Build 38650 (Dec 8, 2021)
- Authenticate to iCloud using trusted device
New in Elcomsoft Phone Breaker 9.71 Build 38302 (Aug 13, 2021)
- New features:
- iOS 14 Support:
- iOS 14 brought several changes to the structure and format of iCloud backups. Elcomsoft Phone Breaker introduces support for iCloud backups created by devices running the latest versions of iOS 14. Apple accounts with and without two-factor authentication are supported. Elcomsoft Phone Breaker becomes the first forensic solution on the market allowing to access iCloud backups saved by iPhone and iPad devices running any version of iOS.
- Extract Skype Conversations, Messages, Files and Metadata:
- The latest update enables the downloading of Skype conversation histories, files, contact lists and metadata directly from the user's Microsoft account. Individual and group chats, text messages and attachments are extracted. The downloading of the entire conversation of an average Skype history only takes minutes!
- For deleted chats and messages as well as for files purged from Skype servers after the 30-day retention period, Elcomsoft Phone Breaker can obtain metadata such as the date and time the file was deleted, the file's name and size, sender's Skype ID and the name of the chat.
- OneDrive, Vault and Timeline:
- EPB can now download files from the user’s OneDrive storage. The downloaded files include the content of OneDrive Vault, which is a protected cloud storage for keeping the most sensitive kinds of information. In addition, the tool can obtain metadata for files that have been recently deleted from OneDrive.
- In addition, Elcomsoft Phone Breaker can now download Windows 10 Timeline data synchronized to the user's Microsoft account, enabling experts’ access to timestamped information about the app usage, searches and opened Web pages.
New in Elcomsoft Phone Breaker 9.70 Build 38093 (Jun 15, 2021)
- Improved authentication into Microsoft accounts
- Downloading additional data from Microsoft accounts (Apps & services timeline, recent OneDrive files list)
- Downloading files from OneDrive
New in Elcomsoft Phone Breaker 9.66 Build 38032 (Jun 3, 2021)
- Improved iCloud data acquisition and processing, especially on large backups and extensive synced data.
- Optimized cached data storage, proper cleaning of expired data for better performance.
- More reliable iCloud authentication and additional error handling.
- Other improvements and optimizations.
New in Elcomsoft Phone Breaker 9.64 Build 37795 (Feb 27, 2021)
- improved iCloud authentication (now faster and more reliable)
- improved iCloud download performance
- improved handling of iCloud-related errors
New in Elcomsoft Phone Breaker 9.63 Build 37410 (Jan 5, 2021)
- Fixed "HTTP Request Error" when accessing iCloud data from some accounts
- Fixed some decompression (LZFSE) issues on large iCloud backups
- Fixed legacy authentication problems in Professional version
- Fixed downloading Safari tabs from iCloud
- Fixed incorrect backup date time zone in keychain explorer
- Fixed Account info downloading (ability) with token authentication
- Eliminated extra useless records on decryption in the log file
New in Elcomsoft Phone Breaker 9.62 Build 37231 (Oct 6, 2020)
- iOS 14 Support:
- iOS 14 brought several changes to the structure and format of iCloud backups. Elcomsoft Phone Breaker introduces support for iCloud backups created by devices running the latest versions of iOS 14. Apple accounts with and without two-factor authentication are supported. Elcomsoft Phone Breaker becomes the first forensic solution on the market allowing to access iCloud backups saved by iPhone and iPad devices running any version of iOS.
- Extract Skype Conversations, Messages, Files and Metadata:
- The latest update enables the downloading of Skype conversation histories, files, contact lists and metadata directly from the user's Microsoft account. Individual and group chats, text messages and attachments are extracted. The downloading of the entire conversation of an average Skype history only takes minutes!
- For deleted chats and messages as well as for files purged from Skype servers after the 30-day retention period, Elcomsoft Phone Breaker can obtain metadata such as the date and time the file was deleted, the file's name and size, sender's Skype ID and the name of the chat.
- New iCloud Engine, Low-Level Access to iCloud Drive:
- The new and improved iCloud download engine is faster and significantly more robust than ever. Thanks to the new iCloud engine, Elcomsoft Phone Breaker becomes the first and only tool on the market that can download iCloud backups produced by Apple devices running all versions of iOS up to the latest versions.
- Advanced iCloud Drive structure analysis is an optional feature allowing users to enable deep, low-level analysis of iCloud Drive secure containers. While high-level file and folder access is all you need in most circumstances, the more comprehensive low-level extraction will return the missing bits and pieces scattered around in legacy containers.
New in Elcomsoft Phone Breaker 9.61 Build 37005 (Aug 28, 2020)
- Fixed the problem downloading icloud backups (incl. The latest ios 13.6).
- Added preliminary support for ios 14 (beta) icloud backups downloading.
- Added support for macos catalina 10.15.6.
- Bug fixes and performance improvements.
New in Elcomsoft Phone Breaker 9.60 Build 36843 (Jun 16, 2020)
- all synced iCloud data is now groups together and can be dowbloaded at once, including iCloud Photos & keychain
- fixed Safari history downloading (now end-to-end encrypted)
- fixed problems with decryption of some files in iCloud backups
- fixed Wi-Fi information downloading from some iCloud accounts
- fixed authentication by sms (note: available in Forensic edition only)
- detecting iCloud for Windows installed from Microsoft Store
- minor fixes and improvements in UI
- internal improvements in iCloud data downloading and processing
New in Elcomsoft Phone Breaker 9.50 Build 36662 (May 14, 2020)
- Home edition: all users with non-expured license get access to Professional edition Professional edition: only legacy authentication is possible now
- An ability to browse inside keychain obtained with Cellebrite UFED 4PC
- A warning about a risk of account blocking for non-2FA accounts And more!
New in Elcomsoft Phone Breaker 9.40 Build 35777 (Feb 14, 2020)
- Added the ability to extract Skype conversation histories including chats, text messages, pictures and metadata
- Added support for metadata for deleted Skype chats and purged files
New in Elcomsoft Phone Breaker 9.15 Build 33504 (Jul 25, 2019)
- Added support for iCloud backups for iOS 11.2-12.4 (Forensic edition only) Synced iCloud data is now fully supported in Windows version Fixed the problem with EPB initialization on machines with CUDA (NVIDiA) cards iTunes backup decryption and iCloud backup downloading have been improved
New in Elcomsoft Phone Breaker 9.10 Build 32610 (Jun 4, 2019)
- Forensic edition: experimental support for downloading iCloud backups produced with iOS 11.2 through 12.4 (including 2FA accounts)
- Enables full access to iCloud synchronized data in the Windows version of the tool
- Significantly improves the speed of downloading iCloud backups
- Significantly improves startup time on computers equipped with CUDA (NVIDIA) boards
- Significantly improves iTunes backup decryption speed, utilizes all available CPU and GPU resources
New in Elcomsoft Phone Breaker 9.05 Build 31064 (Feb 13, 2019)
- Added support for Health data in the iCloud bug fixes and performance improvements
New in Elcomsoft Phone Breaker 9.05 Build 30503 (Jan 24, 2019)
- Significantly improved the speed of downloading synchronized data (e.g. large numbers of Health or Message records).
- Implemented a workaround for downloading iCloud backups produced with iOS 11.2 and all newer versions (including 2FA accounts) up to and including iOS 12.1.1.
New in Elcomsoft Phone Breaker 9.00 Build 29640 (Nov 29, 2018)
- Elcomsoft Phone Breaker 9.0 is a major update, adding the ability to extract Apple Health data synced by iOS devices in the user’s iCloud account.
- Health data can serve as essential evidence during investigations. At very least, the data includes step count, running and walking distances with exact timestamps the user was walking or running. Significantly more evidence is available if the user wears a HealthKit compliant device such as the Apple Watch or a third-party fitness tracker. A multitude of third-party apps may contribute to Health data significantly. Finally, any Health Records including information received in the form of CDA documents are extracted.
- Elcomsoft Phone Breaker is the first forensic tool on the market to access and decrypt Health data from the cloud. The user’s iCloud/Apple ID authentication credentials are required to access iCloud data, as well as the secondary authentication factor for passing the Two-Factor Authentication prompt. More data is extracted if the user’s lock screen passcode is known.
- While Apple Health information is not available in iCloud backups, the extraction mechanism used by Elcomsoft Phone Breaker does not rely on cloud backups. Health information is frequently synced with iCloud with little or no delay. This synchronization mechanism is separate from and works in addition to iCloud system backups. If the device has an Internet connection, including mobile Internet, synchronized data are updated in the cloud with little delay. This enables Elcomsoft Phone Breaker users to access Health data in near real-time manner.
- Elcomsoft Phone Viewer is also updated with the ability to parse and analyze Health data extracted by Elcomsoft Phone Breaker.
New in Elcomsoft Phone Breaker 8.30 Build 27043 (Aug 20, 2018)
- Elcomsoft Phone Breaker 8.30 is updated to support the extraction of iMessages that are synced to iCloud by iPhone devices running iOS 11.4 and newer. Elcomsoft Phone Breaker is the first forensic tool on the market to access and decrypt iMessage conversation histories from the cloud. The user’s iCloud/Apple ID authentication credentials are required to access iCloud data, as well as the secondary authentication factor for passing the Two-Factor Authentication prompt. In addition, one must provide a passcode (iPhone/iPad) or system password (Mac) from one of the enrolled devices.
- The iCloud synchronization mechanism is separate from and works in addition to iCloud system backups. Unlike iCloud backups that occur on daily basis, iMessage synchronization is near instant. If the device has an Internet connection, conversations are updated in the cloud with little or no delay. This enables Elcomsoft Phone Breaker users to access to iMessages sent and received by the user in near real-time manner.
- In addition to iMessages, Elcomsoft Phone Breaker can extract iCloud Keychain as well as many types of synchronized data including call logs, Safari data (browsing history, open tabs and bookmarks), calendars, notes and contacts, Apple Maps, Wallet and iBooks data.
New in Elcomsoft Phone Breaker 8.10 Build 22432 (Nov 28, 2017)
- Adds 2FA Detection
- Supports SMS Authentication
New in Elcomsoft Phone Breaker 8.0 Build 21328 (Sep 14, 2017)
New in Elcomsoft Phone Breaker 7.0 Build 21069 (Aug 22, 2017)
- Elcomsoft Phone Breaker 7.0 is a major release adding the ability to extracts saved passwords, payment data and other sensitive information from Apple’s secure online storage, the iCloud Keychain. The new release can extract and decrypt iCloud Keychain records; Apple ID authentication credentials and access to a trusted device are required.
New in Elcomsoft Phone Breaker 6.61 Build 20389 (Jul 11, 2017)
- Fixes iCloud Authentication Issue
New in Elcomsoft Phone Breaker 6.60 Build 20067 (Jun 22, 2017)
- Elcomsoft Phone Breaker 6.60 targets Microsoft Windows 10 in its desktop and Mobile editions. The new build can extract Web browsing history, call logs, location history as well as all previously available data such as text messages (SMS) directly from the user’s Microsoft Account. Elcomsoft Phone Viewer is also updated to display the new types of data.
- Elcomsoft Phone Breaker 6.60 enables over-the-air extraction of many types of data produced by Windows 10, Windows 10 Mobile and Windows Phone 8.1 devices. Extracted information includes call logs, location history, Bing search and Edge browsing history along with any previously extractable artefacts such as the text messages (SMS). In addition, Elcomsoft Phone Breaker 6.60 gains support for Microsoft Accounts protected with two-factor authentication.
- The data is collected and stored by Microsoft on their servers, and can be extracted with Elcomsoft Phone Breaker 6.60 directly from the user’s Microsoft Account. The login and password (as well as access to the secondary authentication factor if 2FA is enabled) are required.
- Elcomsoft Phone Viewer also receives an update to allow for displaying the newly acquired types of data. What exactly can or cannot be extracted depends on conditions outlined below.
- Windows Browsing and Search History:
- Elcomsoft Phone Breaker 6.60 extracts Edge browsing history from both desktop and Mobile versions of Windows 10. Edge adoption is growing steadily. It is important to note that ElcomSoft offers tools to extract browsing history from other popular Web browsers such as Chrome and Safari using their respective cloud services.
- Search history comes from the Bing engine, and can be extracted from any Web browser if the user has been signed in to their Microsoft Account.
- Call Logs:
- Elcomsoft Phone Breaker 6.60 can extract call logs from a wide range of cellular-enabled mobile devices running Windows Phone 8 and 8.1 as well as Windows 10 Mobile. The call logs are extracted from device cloud backups created in the user’s Microsoft Account.
- Location History:
- Microsoft collects location history from all stationary and mobile Windows devices starting with Windows 8.1. In Windows 10, location history is collected by Cortana and Edge browser. Elcomsoft Phone Breaker 6.60 extracts all available location points reported by all Windows 8.1, Windows 10, Windows Phone 8.1 and Windows 10 Mobile devices, resulting in a significantly more detailed report compared to Microsoft’s own offering.
- Text Messages (SMS) and Other Previously Extractable Data:
- Previous versions of Elcomsoft Phone Breaker were already able to extract certain types of data from the users’ Microsoft Accounts. This included text messages (SMS only), notes, calendar events, contacts and some other information. This functionality is now significantly extended by the addition of new types of data.
New in Elcomsoft Phone Breaker 6.46 Build 19137 (May 5, 2017)
- ElcomSoft makes available a hotfix release of Elcomsoft Phone Breaker. The update fixes the iCloud authentication issue and resolves the Invalid Credentials error, enabling customers to download iCloud backups and have continued access to files stored in iCloud Drive, synced data, and iCloud Photo Library.
- Elcomsoft Phone Breaker 6.46 resolves iCloud authentication issues and fixes the Invalid Credentials error that appeared when users attempted to access information stored in Cloud Drive, read synced data, and access media files fromiCloud Photo Library. The error was the result of the changes Apple made to the authentication mechanism. The new authentication scheme implemented additional security checks that effectively prevented access to iCloud by third-party tools. The fix re-enables access to iCloud backups and synced data via Elcomsoft Phone Breaker.
New in Elcomsoft Phone Breaker 4.0 Build 1838 (Mar 17, 2015)
- Elcomsoft Phone Breaker is updated to support over-the-air acquisition of Apple accounts migrated to iCloud Drive, and enables the decryption of iCloud backup keychains.
- The new release gains the ability to retrieve device backups, application data and user files from iCloud accounts upgraded to iCloud Drive, and allows decrypting keychains extracted from iCloud backups if the correct ‘securityd’ key is supplied (extracted from the device via physical acquisition). With over 72% of iOS users already running iOS 8, the ability to access data stored in iCloud Drive accounts becomes essential for digital investigations.
New in Elcomsoft Phone Breaker 3.0 Build 0 Rev 47 Beta (Jun 3, 2014)
- Version 3.0 (beta) introduces an all-new user interface based on a multi-platform solution, greatly enhancing user experience.
- In addition, Phone Password Breaker 3.0 adds support for local backups produced by BlackBerry 10, and enables data acquisition from Windows Live, a cloud service storing information from Windows Phone 8 mobile devices.