Elcomsoft Phone Breaker 6.0 adds support for iCloud Photo Library, enabling access to existing files as well as photos deleted from iCloud Photo Library. While iCloud Photo Library keeps deleted images for 30 days just in case the user changes their mind, Apple is supposed to erase those photos after the 30-day period. We discovered that this is not the case, and were able to access images deleted more than 30 days ago. The unique feature of Elcomsoft Phone Breaker 6.0 is the ability to access photos that were deleted from iCloud Photo Library more than 30 days ago. The oldest image we were able to recover was deleted more than 6 months ago.

The new build can extract escrow keys for FileVault 2 containers from iCloud, and use those keys to decrypt FileVault 2 volumes. DMG, DD and EnCase images are supported.

The updated Keychain Explorer will automatically discover Apple ID password or authentication token in the keychain, and displays a wide range of passwords extracted from iOS backups. In addition, we’ve streamlined cloud extraction by storing authentication credentials between sessions.

Finally, Elcomsoft Phone Breaker 6.0 adds support for Apple’s two-factor authentication, a new security mechanism that superseded the previously used (and supported) two-step verification.

Get more information on Elcomsoft Phone Breaker and download free trial version:
https://www.elcomsoft.com/eppb.html

Get more information on Elcomsoft Phone Viewer and download free trial version:
https://www.elcomsoft.com/epv.html

Read a press release:
https://www.elcomsoft.com/PR/epb_160825_en.pdf

Read an article “iCloud Photo Library: All Your Photos Are Belong to Us” in our blog:
http://blog.elcomsoft.com/2016/08/icloud-photo-library-all-your-photos-are-belong-to-us/