Elcomsoft Phone Breaker 9.50 fixes access to iCloud accounts protected with two-factor authentication, supports keychain data extracted with Cellebrite software, and enables the extraction of Apple Map data protected with end-to-end encryption. In addition, we deprecated the Home edition; existing non-expired licenses automatically upgraded to the Professional edition.

Elcomsoft Phone Breaker 9.50 is a maintenance update adding support for the latest changes in iCloud authentication and access protocols. In this release, we fixed access to iCloud accounts protected with two-factor authentication and added support for Apple Map data protected with end-to-end encryption (iOS 13). In addition, users can now open and view keychain data obtained with Cellebrite UFED 4PC.

We have also deprecated the Home edition, automatically upgrading all existing Home licenses to the Professional level.

Every now and then, Apple makes changes to proprietary authentication and communication protocols employed by the company’s cloud service, Apple iCloud. Any changes to the corresponding protocols restrict or block cloud forensic tools such as Elcomsoft Phone Breaker. In this release, we’ve made the tool compatible with the latest changes to iCloud communication and authentication methods.

iOS 13 moves Apple Maps data into an end-to-end encrypted container, making Maps data one of the best protected categories along with iCloud Keychain, iCloud Messages, Health and Screen Time data. Accessing Apple Maps data now requires full authentication credentials including the second authentication factor and screen lock passcode or system password to one of the user’s devices. Elcomsoft Phone Breaker 9.50 adds support for Apple Maps data stored in end-to-end encrypted containers.

The update is free of charge to all customers who purchased or renewed their Elcomsoft Phone Breaker or Elcomsoft Mobile Forensic Bundle license within one year. Discounted renewal is available to customers whose maintenance plan has already expired.

Elcomsoft Phone Breaker release notes:

• Home edition deprecated; existing Home licenses migrated to Professional edition
• Professional edition for Windows: only legacy authentication (code pushed via notification) is supported for the time being
• Added the ability to browse keychain (plist) obtained with Cellebrite UFED 4PC
• Added a warning for non-2FA accounts about the risk of account lock
• Fixed downloading of synced contacts for some iCloud accounts
• Fixed processing keychain files obtained with iOS Forensic Toolkit
• Improved Apple Maps support for iOS 13 (collections, Home and Work labels)