Extract information in real time from Apple iCloud! Elcomsoft Phone Breaker is the only forensic tool to acquire data stored in iCloud and iCloud Drive with or without Apple ID and password. No lengthy attacks and no physical access to an iPhone device are required! The tool supports two-step verification and two-factor authentication (providing that the second authentication factor is accessible at the time of acquisition). In addition, the tool can retrieve pictures that were deleted from iCloud Photo Library more than 30 days ago. iCloud authentication is possible with or without the Apple ID password. Binary authentication tokens obtained from the users computer allow logging into Apple iCloud without a password, downloading iCloud photos, files and backups. GPU-accelerated acquisition extracts information from password-protected backups and recovers the original passwords.
By obtaining FileVault 2 recovery keys from the users Apple account, Elcomsoft Phone Breaker can instantly unlock and mount encrypted FileVault 2 volumes. Elcomsoft Phone Breaker is the first GPU-accelerated tool to recover plain-text iOS backup passwords, and remains the only tool to decrypt the keychain. ElcomSoft's patented GPU acceleration helps unlock password-protected backups 50 to 200 times faster compared to using a CPU alone. The GPU acceleration technology supports unlimited numbers of AMD and NVIDIA boards.
What's new in this version:
Version 6.0 is able to download media files (including deleted) from iCloud Photo Library, decrypt FileVault 2 disks using recovery keys stored in iCloud, adds support for Apple 2FA, and has improved keychain viewer discovering Apple IDs, tokens, CC numbers.