Elcomsoft Phone Breaker 8.30 gains the ability to remotely extract iMessage conversations synced to iCloud by iPhone devices running iOS 11.4 and newer. EPB 8.30 becomes the first forensic tool to extract encrypted iMessage conversation histories from the cloud.

Elcomsoft Phone Breaker 8.30 is updated to support the extraction of iMessages that are synced to iCloud by iPhone devices running iOS 11.4 and newer. Elcomsoft Phone Breaker is the first forensic tool on the market to access and decrypt iMessage conversation histories from the cloud. The user’s iCloud/Apple ID authentication credentials are required to access iCloud data, as well as the secondary authentication factor for passing the Two-Factor Authentication prompt. In addition, one must provide a passcode (iPhone/iPad) or system password (Mac) from one of the enrolled devices.

The iCloud synchronization mechanism is separate from and works in addition to iCloud system backups. Unlike iCloud backups that occur on daily basis, iMessage synchronization is near instant. If the device has an Internet connection, conversations are updated in the cloud with little or no delay. This enables Elcomsoft Phone Breaker users to access to iMessages sent and received by the user in near real-time manner.

In addition to iMessages, Elcomsoft Phone Breaker can extract iCloud Keychain as well as many types of synchronized data including call logs, Safari data (browsing history, open tabs and bookmarks), calendars, notes and contacts, Apple Maps, Wallet and iBooks data.

The update is free of charge to all customers who purchased or renewed their Elcomsoft Phone Breaker or Elcomsoft Mobile Forensic Bundle license within one year. Discounted renewal is available to customers whose maintenance plan has already expired.