ElcomSoft blog
«...Everything you wanted to know about password recovery, data decryption, mobile & cloud forensics...»
- Posts
- 805 from 19 Mar 2009 to 9 Oct 2026
- Posting
- weekly (69 in the last year)
- Kind
- company blog
- Feed
- https://blog.elcomsoft.com/feed/atom/
2026 61
- Low-Level Extraction of the HomePod mini
- Low-Level Extraction the Apple TV 4K 2nd Generation
- Low-Level Extraction of the Apple Watch S4/S5
- IoT Forensics on the Rise: Extracting More Apple Watch, Apple TV 4K Devices
- Elcomsoft Quick Triage 2.2: Timeline, file system snapshot, and a plugin engine
- The True Meaning of Consent in ‘Consent Extractions’
- Write Blockers in Forensics: What Controls How You Use Them?
- The iOS 27 Recovery Menu: What It Means for Forensics
- Special macOS Firewall: Safe Sideloading of the EIFT Extraction Agent
- When the iCloud Backup Is the Only Copy Left
- Locked In or Locked Out? Unlocking ZIP, RAR, PDF, and Microsoft Office Passwords
- How to recover deleted data from your iPhone
- Microsoft Office Passwords: What Comes Off in Seconds, What Takes Longer, and Why
- Why Digital Forensic Reports Don’t Survive Cross-Examination
- The RAR Mystery: Breaking RAR4 and RAR5 Encryption
- An AI agent broke into Hugging Face. Five days later, OpenAI said it was theirs
- Digital Triage and the Rules of Evidence: What Holds Up, and Where
- Cracking Legacy ZIP Encryption: The Known-Plaintext Attack and Why It Still Sometimes Works
- The Long, Strange History of PDF (In)Security – And the Arrest That Made It Personal
- Two-Factor Authentication and iCloud: A Short History, and What We Fixed in Phone Breaker 11.03
- A12 usbliter8 BootROM sigpatches
- Four Tools, One Workflow: Using Elcomsoft Desktop Forensic Tools on the Same Case
- How to Buy a Reliable SSD, Continued
- Bypassing Stolen Device Protection: Alternative Ways of Installing the Extraction Agent
- Sideloading the extraction agent: a Stolen Device Protection workaround
- “Get Verification Code” Is Missing in iOS 18 and iOS 26; Here’s Where It Went
- Downloading iOS 26 iCloud Backups
- Forensic Implications of Apple Stolen Device Protection
- Downloading iPhone and iPad backups from Apple iCloud
- A Decade of BitLocker Vulnerabilities: What’s Patched, What’s Not, and What Still Works
- YellowKey: An Unexpected Backdoor into BitLocker, and Why You Should Be Paying Attention
- Using the Extraction Agent in 2026: Compatibility, Signing, Firewall, and Extraction Tips
- Elcomsoft Phone Breaker 11 Restores iCloud Access
- New Security Features and Low-Level Extraction of iOS 26
- Digital Triage Masterclass
- Recovering Windows Credentials with Elcomsoft System Recovery
- Low-Level Extraction for M-Series iPads
- Low-Level Extraction for iOS 17 and 18
- Compelled Decryption: The East Asian Region
- Digital Rights vs. State Power – The Protectors
- The Geography of Coercion: a Study of Compelled Decryption Laws
- Arrested by AI
- Distributed Password Recovery Goes 64-bit: Ready for RTX 5090
- Looks Can Lie: Is That Really an NVMe Drive?
- Android Pre-Installed Apps: What Could Possibly Go Wrong?
- The C:\User Data in Windows Forensics
- AI Agents and Deep Research: A Friday Primer
- Windows File System Artefacts Under C:\ProgramData
- Investigating Windows File System Artifacts Under C:\Windows
- USB Device Forensics on Windows 10 and 11
- Forensic Analysis of Windows 10 and 11 Event Logs
- Perfect Acquisition: The True Physical Acquisition
- Investigating Windows Registry
- Perfect Acquisition With Passcode Unlock for A8/A8X Devices
- Choosing the Right Strategy: Cold Boot Forensics vs Live System Analysis
- Live System Analysis: Mitigating Interference from Antivirus Tools
- The History and Evolution of USB Charging Standards
- Web Browser Forensics in Digital Triage
- Browser Forensics in 2026: App-Bound Encryption and Live Triage
- The Cloud Gap: Forensic Triage vs. Disk Imaging in the Age of On-Demand Sync
- The Shift from Disk Imaging to Digital Triage
2025 42
- Introducing Elcomsoft Quick Triage
- Eighteen Years of GPU Acceleration
- Leveraging User Profiles for Smarter Password Attacks
- Password Managers: Security, Risks, and Forensic Implications
- Breaking Barriers: First Full File System Extraction from Apple TV 4K Running tvOS 26
- Which Versions of iOS Are Supported, and Why “It Depends” Is The Best Answer
- Don’t Be a Louvre: How Weak Passwords and Unpatched Software Encourage Breaches
- Exploring iPadOS, tvOS and audioOS 17 and 18 Devices: File System and Keychain Extraction
- All USB Cables Are Equal, But Some Are More Equal Than Others
- Effective Disk Imaging: Ports, Hubs, and Power
- Extracting Apple Unified Logs
- Cheat Sheet: Perfect Acquisition (32-bit)
- Evidence Preservation: Why iPhone Data Can Expire
- AI in Digital Forensics: a Tool, not an Oracle
- Breaking into Password Managers: from Bitwarden to Zoho Vault
- iPhone 17: the End of PWM Flickering?
- Apple Face ID: Security Implications and Potential Vulnerabilities
- Analyzing the Windows SRUM Database
- Perfect Acquisition Part 5: Perfect APFS Acquisition
- Issues Affecting Forensic Disk Imaging
- AI-Driven Password Recovery: Myth or Reality?
- Installing and Troubleshooting the Extraction Agent (2025)
- Extracting and Analyzing Apple sysdiagnose Logs
- The 16 Billion Passwords Panic: What Really Happened and Why It Matters (Or Doesn’t)
- Apple Ecosystem: Overlooked Devices
- What TRIM, DRAT, and DZAT Really Mean for SSD Forensics
- iOS Extraction Tip: Why Start with Recovery Mode?
- Why Every Digital Forensics Lab Needs a Good USB Hub
- Installing iOS Forensic Toolkit on Linux
- The Linux Edition Goes Live
- Breaking into the Ecosystem: How One Weak Link Can Unlock a Secure Device
- iOS Forensic Toolkit Now Supports All Models of Apple Watch
- Extraction Agent: Offline Extraction with All Developer Accounts
- Microsoft Goes Passwordless: Forensic Implications of Passwordless Microsoft Accounts
- Forensic Implications of BitLocker-by-Default in Windows 11 24H2
- What’s New in Elcomsoft System Recovery 8.34: More Data, Faster Imaging, BitLocker Key Extraction
- Forensic Implications of Apple’s “Stolen Device Protection”
- NVIDIA GeForce RTX 5090 Power Connectors Melting Again
- NVIDIA Blackwell is Out: Should You Upgrade?
- Apple Disables Advanced Data Protection for iCloud in UK
- The Evolution of iOS Passcode Security
- iPhone and iPad Acquisition Methods: Yet Another Comparison
2024 25
- Extraction Agent and Firewall: Software vs. Hardware
- Intelligent Load Balancing: Optimizing Password Recovery Across Heterogeneous Units
- When Speed Matters: Imaging Fast NVMe Drives
- Outlook Forensic Toolbox Helps Access Deleted Messages
- When Speed Matters: Optimizing Disk Imaging
- Instant Password Removal for Quicken 2024
- Maximizing Disk Imaging Speeds
- Password Breaking A to Z
- Sideloading Low-Level Extraction Agent with Regular Apple IDs from Windows and Linux
- More on Apple Developer Accounts
- iOS Forensic Toolkit: macOS, Windows, and Linux Editions Explained
- iCloud Extraction Turns Twelve
- Elcomsoft Forensic Acquisition System (EFAS)
- The Implications of Resetting the Screen Lock Passcode in iOS Forensics
- All You Wanted To Know About iOS Backups
- checkm8: Advancements in iOS 16 Forensic Extraction
- Resource Management in Distributed Password Attacks
- Bootloader-Level Extraction for Apple Hardware
- EU: Apple to Allow Alternative App Marketplaces
- Navigating NVIDIA’s Super 40-Series GPU Update: A Guide for IT Professionals
- iOS Forensic Toolkit: Mounting HFS Images in Windows
- Changes to U.S. iOS App Store Policies Allow External Purchase Links
- When Extraction Meets Analysis: Cellebrite Physical Analyzer
- Forensically Sound Cold System Analysis
- A Comprehensive Guide to Essential Tools for Elcomsoft iOS Forensic Toolkit
2023 50
- A Comprehensive Instruction Manual on Installing the Extraction Agent
- iOS 17.3 Developer Preview: Stolen Device Protection
- iOS Forensic Toolkit: Exploring the Linux Edition
- Forensic Insights into Apple Watch Data Extraction
- Using and Troubleshooting the checkm8 Exploit
- iOS Forensic Toolkit 8 Lands on Windows
- iOS Forensic Toolkit: Troubleshooting Low-Level Extraction Agent
- What to Do When Password Recovery Attacks Stall
- Open-Sourcing Orange Pi R1 Plus LTS Software for Firewall Functionality: Secure Sideloading of Extraction Agent
- Breaking into iOS 16.5: Extracting the File System and Keychain
- Best Practices in Mobile Forensics: Separating Extraction and Analysis
- Apple iCloud Acquisition: A Lifeline for Forensic Experts
- iOS Device Acquisition: Installing the Extraction Agent
- iOS Forensic Toolkit Tips & Tricks
- Accelerating Computer Forensics: Elcomsoft System Recovery and the Low-Hanging Fruit Strategy
- Pushing the Boundaries: Low-Level Extraction of iOS 16.4 with Keychain Decryption
- Low-level Extraction for iOS 16 with iPhone 14/14 Pro Support
- Open-Sourcing Raspberry Pi Software for Firewall Functionality: Secure Sideloading of Extraction Agent
- Safeguarding Digital Evidence: Don’t Shut It Down!
- What Forensic Vendors Don’t Like To Tell Their Customers. Part 2
- What Forensic Vendors Don’t Like To Tell Their Customers. Part 1
- Elcomsoft Lab: Benchmarking Password Recovery Speeds
- Volume Encryption in Synology DSM 7.2: LUKS with Questionable Key Management
- Breaking Wi-Fi Passwords with Intel Arc Graphics Cards
- NVIDIA RTX 40 Series Graphics Cards: The Faster and More Efficient Password Recovery Accelerators
- iOS Forensic Toolkit and Open Source
- Low-level Extraction for iOS 15
- Analyzing iPhone PINs
- Automating Scrolling Screenshots with Raspberry Pi Pico
- Automating DFU Mode with Raspberry Pi Pico
- Perfect Acquisition Part 4: The Practical Part
- Perfect Acquisition Part 3: Perfect HFS Acquisition
- HomePod Forensics III: Analyzing the Keychain and File System
- Obtaining Serial Number, MAC, MEID and IMEI of a locked iPhone
- Understanding Partial File System Extraction: What Data Can and Cannot be Accessed on iOS 15.6-16.1.2 Devices
- Perfect Acquisition Part 2: iOS Background
- Perfect Acquisition Part 1: Introduction
- HomePod Forensics II: checkm8 and Data Extraction
- Sideloading the Extraction Agent using a Firewall
- HomePod Forensics I: Pwning the HomePod
- A Word About Dictionaries
- Building a Password Recovery Queue
- Right Method, Wrong Order
- Password Recovery and Data Decryption: Getting Around and About
- Behind the Scenes of iOS Data Extraction: Exploring the Extraction Agent
- iOS Forensic Toolkit Maintenance: Following Apple iOS Updates
- Forensically Sound checkm8 Extraction: Repeatable, Verifiable and Safe
- Apple Releases iOS 12.5.7, iOS 15.7.3. What About Low-Level Extraction?
- iOS 15.5 Low-Level Keychain Extraction
- Use The Brute Force, Luke
2022 52
- checkm8 for iOS 16.2 and Windows-based iOS Low-Level Extraction
- Season’s Greetings and 2022 in Review
- Windows Account Passwords: Why and How to Break NTLM Credentials
- iOS Forensic Toolkit 8: Apple TV 3, 4, and 4K checkm8 Extraction Cheat Sheet
- iOS Forensic Toolkit 8 Apple Watch S3 checkm8 Extraction Cheat Sheet
- Approaching iOS Extractions: Choosing the Right Acquisition Method
- iOS Forensic Toolkit 8 Extraction Agent Cheat Sheet
- Cloud Forensics: Obtaining iCloud Backups, Media Files and Synchronized Data
- Advanced Logical Extraction with iOS Forensic Toolkit 8: Cheat Sheet
- iOS Backups: Leftover Passwords
- checkm8 Extraction Cheat Sheet: iPhone and iPad Devices
- How to Put Apple TV 3 (2012-2013), Apple TV 4/HD (2015) and Apple TV 4K (2017) into DFU
- iOS 16: SEP Hardening, New Security Measures and Their Forensic Implications
- iOS Forensic Toolkit 8.0 Now Official: Bootloader-Level Extraction for 76 Devices
- iOS 16: Extracting the File System and Keychain from A11 Devices
- Entering DFU: iPhone 8, 8 Plus, and iPhone X
- Low-Level Extraction of iOS 15.2-15.3.1
- Probing Linux Disk Encryption: LUKS2, Argon 2 and GPU Acceleration
- Breaking Windows Passwords: LM, NTLM, DCC and Windows Hello PIN Compared
- Windows Hello: No TPM No Security
- New in Elcomsoft System Recovery: Microsoft Azure Accounts, LUKS2 and Forensic Tool Filters
- checkm8 Extraction: iPhone 7
- Apple TV 4K Keychain and Full File System Acquisition
- Building an Efficient Password Recovery Workstation: Power Savings and Waste Heat Management
- Building an Efficient Password Recovery Workstation: NVIDIA RTX Passwords-per-Watt Benchmarks
- Keychain: the Gold Mine of Apple Mobile Devices
- iCloud backups: the Dark Territory
- Full File System and Keychain Acquisition: What, When, and How
- GPU Acceleration: Attacking Passwords with NVIDIA RTX Series Boards
- Logical Acquisition: Not as Simple as It Sounds
- checkm8 Extraction: the iPads, iPods, and TVs
- Filling the Gaps: iOS 14 Full File System Extracted
- Live System Analysis: Extracting BitLocker Keys
- Breaking Passwords on Alder Lake CPUs
- checkm8: Unlocking and Imaging the iPhone 4s
- Identifying the iPhone Model
- Agent-Based Low-Level iOS File System Extraction
- iOS Low-Level Acquisition: How to Sideload the Extraction Agent
- Preventing BitLocker Lockout and Recovering Access to Encrypted System Drive
- Decrypting Password-Protected DOC and XLS Files in Minutes
- Unlock WordPerfect and Lotus Documents with Advanced Office Password Recovery
- Windows 11 TPM Protection, Passwordless Sign-In and What You Can Do About Them
- Simplifying Digital Triage with Bootable Forensic Tools
- GPU Acceleration On The Cheap: Using Affordable Video Cards to Break Passwords Faster
- Dude, Where Are My Messages?
- Apple Mobile Devices and iOS Acquisition Methods
- IoT Forensics: Analyzing Apple Watch 3 File System
- checkm8 Extraction of Apple Watch Series 3
- checkm8 Extraction of iPhone 8, 8 Plus and iPhone X
- iPhone X, DFU mode and checkm8
- Agent-based full file system and keychain extraction: now up to iOS 14.8 (incl.)
- Targeting Backup Encryption: Acronis, Macrium, and Veeam
2021 55
- Season’s Greetings and 2021 in Review
- Breaking BestCrypt Volume Encryption 5
- Digital Evidence in Encrypted Backups
- Checkm8 Based Extraction of iPhone 7 and iPhone 7 Plus
- Microsoft Office 40-bit Encryption and Thunder Tables in Advanced Office Password Recovery
- WhatsApp Explorer: End-to-End Encrypted Backups and Compatibility Improvements
- More on checkm8 and USB Hubs, Upcoming iPhone 7 Support
- Worthless Security Practices
- Real-Time Surveillance via Apple iCloud
- Forensically Sound Extraction for iPhone 5s, 6, 6s and SE
- How to Use iOS Forensic Toolkit 8.0 b2 to Perform Forensically Sound Extraction of iPhone 5s, 6, 6s and SE
- checkm8, checkra1n and USB hubs
- iPhone Acquisition Methods Compared
- Apple Watch Forensics: More on Adapters
- The Five Ways to Recover iPhone Deleted Data
- Digital Triage Forensics: Write-Blocking, Verifiable Disk Imaging
- Protecting Linux and NAS Devices: LUKS, eCryptFS and Native ZFS Encryption Compared
- Using a Trusted Device for iCloud Authentication
- iCloud Extractions Without Passwords and Tokens: When a Trusted Device is Enough
- Cloud Forensics: the New Reality
- How to Put an iOS Device with Broken Buttons in DFU Mode
- Forensic Implications of Sleep, Hybrid Sleep, Hibernation, and Fast Startup in Windows 10
- The iPhone Upgrade: How to Back Up and Restore iOS Devices Without Losing Data
- Instant Messengers: Authentication Methods and Instant Password Extraction
- iOS 15 Forensic Implications: Temporary iCloud Backups
- NAS Forensics: TrueNAS Encryption Overview
- Apple Watch Forensics: The Adapters
- iOS Privacy Protection Tools: Encrypted DNS, iOS 15 Private Relay, Proxy, VPN and TOR
- Updated Elcomsoft iOS Forensic Toolkit Simplifies macOS Installs, Fixes Corrupted File System Extraction
- How to Remove Restrictions from Adobe PDF Files
- Elcomsoft System Recovery Simplifies Digital Field Triage and In-Field Investigations
- Analyzing Microsoft Timeline, OneDrive and Personal Vault Files
- Breaking VeraCrypt: Obtaining and Extracting On-The-Fly Encryption Keys
- Password Crackers’ Gold Mine: Browser Passwords
- Hey Dude, Where Is My iCloud Data?
- The Inception of Elcomsoft Phone Breaker
- Forensically Sound checkm8 Based Extraction of iPhone 5s, 6, 6s and SE
- Guide: Forensically Sound Extraction of iPhone 5s, 6, 6s and SE with checkm8 Exploit
- The File System Dirty Bit
- A Tale of One iPhone Backup Password
- Our Guidelines For The World Password Day
- Breaking Wi-Fi Passwords with NVIDIA Ampere
- Breaking RAR5 and 7Zip Passwords
- Breaking the iPhone 12: Forensic Extraction of iOS 14 Devices
- iOS Recovery Mode Analysis: Reading iOS Version from Locked and Disabled iPhones
- Breaking Jetico BestCrypt
- Passcode Unlock and Physical Acquisition of iPhone 4, 5 and 5c
- iPhone 4, iPhone 5 and iPhone 5c Physical Acquisition Walkthrough
- NAS Forensics: Synology, ASUSTOR, QNAP, TerraMaster and Thecus Encryption Compared
- End-to-End Encryption in Apple iCloud, Google and Microsoft Accounts
- Secure Instant Messengers
- DFU Mode Cheat Sheet
- Apple, FBI and iPhone Backup Encryption: Everything You Wanted to Know
- Apple Scraps End-to-End Encryption of iCloud Backups
- Understanding BitLocker TPM Protection
2020 108
- 2020 in Review: What Was New in Desktop and Mobile Forensics
- NAS Forensics: QNAP Encryption Analysis
- iPhone Backups: Top 5 Default Passwords
- New Privacy Features: iOS 14.0 through 14.3
- Breaking Passwords with NVIDIA RTX 3080 and 3090
- Recovering Screen Time Passwords
- Elcomsoft vs. Hashcat Part 4: Case Studies
- How to Remove The iPhone Passcode You Cannot Remove
- The Evolution of iOS Acquisition: Jailbreaks, Exploits and Extraction Agent
- iOS Extraction Without a Jailbreak: iOS 9 through iOS 13.7 on All Devices
- Elcomsoft vs. Hashcat Part 3: Attacks, Costs, Performance and Extra Features
- The ABC’s of Password Cracking: The True Meaning of Speed
- Elcomsoft System Recovery: a Swiss Army Knife of Desktop Forensics
- Elcomsoft vs. Hashcat Part 2: Workflow, Distributed and Cloud Attacks
- Elcomsoft vs. Hashcat: Addressing Feedback
- Extracting Evidence from iPhone Devices: Do I (Still) Need a Jailbreak?
- Elcomsoft vs. Hashcat Part 1: Hardware Acceleration, Supported Formats and Initial Configuration
- Mobile Forensics – Advanced Investigative Strategies
- Apple Watch Forensics Reloaded
- Elcomsoft and The Case of the Apple iPad
- iOS 14.2, iOS 12.4.9, the Updated checkra1n 0.12 Jailbreak and File System Extraction
- Protecting iMessage Communications
- Breaking Intuit Quicken and QuickBooks Passwords in 2021
- Five Hundred Posts
- The Forensic View of iMessage Security
- May the [Brute] Force Be with You!
- Extracting the iPhone: (No) Tools Required?
- 13 Years of GPU Acceleration
- iOS Extraction Without a Jailbreak: Finally, Zero-Gap Coverage for iOS 9 through iOS 13.5 on All Devices
- The Rise of the Virtual Machines
- Ruling Out the Encryption
- Breaking Encrypted Virtual Machines: Recovering VMWare, Parallels, and VirtualBox Passwords
- Everything You Wanted to Ask About Cracking Passwords
- Stick It To The Man
- Apple Mobile Devices Cheat Sheet
- Mobile Forensics: Are You Ready for iOS 14?
- Playing devil’s advocate: iPhone anti-forensics
- The Issue of Trust: Untrusting Connected Devices from Your iPhone
- Using Screen Time Password to Protect iPhone Local Backups
- iOS 14 Forensics: What Has Changed Since iOS 13.7?
- It’s Hashed, Not Encrypted
- Extracting iPhone File System and Keychain Without an Apple Developer Account
- Setting Up Restricted Internet Connection for iPhone Extraction
- Behind the iPhone 5 and 5c Passcode Cracking
- iPhone 5 and 5c Passcode Unlock with iOS Forensic Toolkit
- Breaking LUKS Encryption
- Extracting Passwords from Qihoo 360 Safe Browser and Tor Browser
- iOS Extraction Without a Jailbreak: Full iOS 9 Support, Simplified File System Extraction
- Extracting and Decrypting iOS Keychain: Physical, Logical and Cloud Options Explored
- The Four Ways to Deal with iPhone Backup Passwords
- Live System Analysis: Discovering Encrypted Disk Volumes
- Downloading iOS 13 and iOS 14 iCloud Backups
- checkra1n, USB Restrictions and Breaking Into Locked iPhones
- Defending Americans’ Right to Decrypt
- checkra1n Installation Tips & Tricks
- The iPhone Data Recovery Myth: What You Can and Cannot Recover
- Significant Locations, iOS 14 and iCloud
- Extracting and Using Stored Passwords from Web Browsers
- Extracting Passwords from Tencent QQ Browser
- Unlocking BitLocker Volumes by Booting from a USB Drive
- iOS, watchOS and tvOS Acquisition Methods Compared: Compatibility Notes
- iOS Extraction Without a Jailbreak: Full iOS 10 Support
- Jailbreaking Apple TV 4K
- iCloud Extraction Streamlined
- iCloud Backups, Synced Data and End-to-End Encryption
- Apple Two-Factor Authentication: SMS vs. Trusted Devices
- Researching Confide Messenger Encryption
- checkra1n & unc0ver: How Would You Like to Jailbreak Today?
- Full File System and Keychain Acquisition with unc0ver jailbreak: iOS 13.3.1 to 13.5
- Clearing Confusion About our Password Recovery Tools
- Full File System Extraction for iOS 13.3.1, 13.4 and 13.4.1
- iOS Jailbreaks, SSH, and root Password
- Unlocking BitLocker: Can You Break That Password?
- Tighter Control over Personal Information with Attacks on Encryption Metadata
- Apple vs. Law Enforcement: poker face?
- Apple vs. Law Enforcement – iOS 4 through 13.5
- Working Around the iPhone USB Restricted Mode
- iOS Acquisition Reloaded
- Google Account Access Without a Password
- Extracting Google Dashboard Data
- How to Unlock Windows Systems with a Bootable Flash Drive
- How To Extract Telegram Secret Chats from the iPhone
- Forensic guide to iMessage, WhatsApp, Telegram, Signal and Skype data acquisition
- iOS acquisition methods compared: logical, full file system and iCloud
- Cloudy Times: Extracting and Analyzing Location Evidence from Cloud Services
- Extracting Passwords from Microsoft Edge Chromium
- Breaking LastPass: Instant Unlock of the Password Vault
- Accelerating Password Recovery: GPU Acceleration, Distributed and Cloud Attacks
- Password Reuse vs. Master Password: Two Sides of Password Managers
- Using Microsoft Azure to Break Passwords
- Tally ERP 9 Vault: How to Not Implement Password Protection
- macOS, iOS and iCloud updates: forensic consequences
- Breaking VeraCrypt containers
- Attached Storage Forensics: Security Analysis of ASUSTOR NAS
- Full file system and keychain extraction: now with iOS 13 and iPhone 11 support
- Breaking Wi-Fi Passwords
- Why Mobile Forensic Specialists Need a Developer Account with Apple
- iPhone Acquisition Without a Jailbreak (iOS 11 and 12)
- Full File System Acquisition of iPhone 11 and Xr/Xs with iOS 13
- Google Fit Extraction: Location, Health and Fitness Data
- Apple vs Law Enforcement: Cloudy Times
- The Worst Mistakes in iOS Forensics
- A Comprehensive Guide on Securing Your System, Archives and Documents
- Introduction to BitLocker: Protecting Your System Disk
- Apple vs. Law Enforcement: Cloud Forensics
- The True Meaning of iOS Recovery, DFU and SOS Modes for Mobile Forensics
- Attached Storage Forensics: Security Analysis of TerraMaster NAS
- Attached Storage Forensics: Security Analysis of Thecus NAS
2019 43
- Our Developments and Achievements in 2019
- BFU Extraction: Forensic Analysis of Locked and Disabled iPhones
- Challenges in Computer and Mobile Forensics: What to Expect in 2020
- Extracting Skype Histories and Deleted Files Metadata from Microsoft Account
- iOS Device Acquisition with checkra1n Jailbreak
- Forensic Acquisition of Apple TV with checkra1n Jailbreak
- What is Password Recovery and How It Is Different from Password Cracking
- Synology NAS Encryption: Forensic Analysis of Synology NAS Devices
- Using DC Dimming to Stop PWM Flickering in iPhone 11 Pro and Pro Max, Google Pixel 4 and 4 XL
- Microsoft Office encryption evolution: from Office 97 to Office 2019
- Four and a Half Apple Passwords
- Installing and using iOS Forensic Toolkit on macOS 10.15 Catalina
- How to Extract Screen Time Passcodes and Voice Memos from iCloud
- USB Restricted Mode in iOS 13: Apple vs. GrayKey, Round Two
- iOS Acquisition on Windows: Tips&Tricks
- iOS 12.4 File System Extraction
- Apple TV Forensics 03: Analysis
- How to Extract and Decrypt Signal Conversation History from the iPhone
- How To Access Screen Time Password and Recover iOS Restrictions Password
- Why iOS 12.4 Jailbreak Is a Big Deal for the Law Enforcement
- Passcode vs. Biometrics: Forensic Implications of Touch ID and Face ID in iOS 12
- Extended Mobile Forensics: Analyzing Desktop Computers
- Accessing iCloud With and Without a Password in 2019
- Breaking and Securing Apple iCloud Accounts
- iOS 13 (Beta) Forensics
- The Art of iPhone Acquisition
- Digital Forensics: Training Required
- Apple Watch Forensics 02: Analysis
- Apple TV and Apple Watch Forensics 01: Acquisition
- The Most Unusual Things about iPhone Backups
- Forensic Implications of iOS Jailbreaking
- Step by Step Guide to iOS Jailbreaking and Physical Acquisition
- You Lost Your Second Authentication Factor. Now What?
- A Bootable Flash Drive to Extract Encrypted Volume Keys, Break Full-Disk Encryption
- iOS 12 Rootless Jailbreak
- Technical and Legal Implications of iOS File System Acquisition
- Physical Extraction and File System Imaging of iOS 12 Devices
- iPhone Physical Acquisition: iOS 11.4 and 11.4.1
- Identifying SSD Controller and NAND Configuration
- Securing and Extracting Health Data: Apple Health vs. Google Fit
- Apple iTunes: Standalone vs. Microsoft Store Edition
- Why SSDs Die a Sudden Death (and How to Deal with It)
- Life after Trim: Using Factory Access Mode for Imaging SSD Drives
2018 54
- A New Method for Decrypting WhatsApp Backups
- Six Ways to Decrypt iPhone Passwords from the Keychain
- How to Reset or Recover Windows SYSKEY Passwords
- Can Forensic Experts Keep Up with the Digital Age?
- Apple Health Is the Next Big Thing: Health, Cloud and Security
- Extracting Apple Health Data from iCloud
- Messages in iCloud: How to Extract Full Content Including Media Files, Locations and Documents
- iMessage Security, Encryption and Attachments
- Google Enables Manual Google Drive Backups on Android Devices
- iPhone Xs PWM Demystified: How to Reduce Eyestrain by Disabling iPhone Xs and Xs Max Display Flicker
- Everything about iOS DFU and Recovery Modes
- Everything You Wanted to Know about Activation Lock and iCloud Lock
- iOS Forensics Training in Vienna: 17-19 Oct 2018
- iOS 12 Enhances USB Restricted Mode
- Cloud Forensics: Why, What and How to Extract Evidence
- Analysing Apple Pay Transactions
- Using Intel Built-in Graphic Cores to Accelerate Password Recovery
- Android Pie Lockdown Option: a Match for iOS SOS Mode?
- iOS 12 Beta 5: One Step Forward, Two Steps Back
- USB Restricted Mode Inside Out
- Accessing Lockdown Files on macOS
- Training in Vienna
- Using iOS 11.2-11.3.1 Electra Jailbreak for iPhone Physical Acquisition
- This $39 Device Can Defeat iOS USB Restricted Mode
- Apple Warns Users against Jailbreaking iOS Devices: True or False?
- Breaking Deeper Into iPhone Secrets
- iOS Forensic Toolkit 4.0 with Physical Keychain Extraction
- iOS 11.4.1 Second Beta Extends USB Restricted Mode with Manual Activation
- How to Obtain iMessages from iCloud
- iCloud and iMessage Security Concerns
- Protecting Your Data and Apple Account If They Know Your iPhone Passcode
- The iOS File System: TAR and Aggregated Locations Analysis
- Apple Probably Knows What You Did Last Summer
- iOS 11.4.1 Beta: USB Restricted Mode Has Arrived
- WhatsApp Business Acquisition Guide
- Demystifying Android Physical Acquisition
- Accessing Google Account Data without a Password
- Apple Strikes Back: the iPhone Cracking Challenge
- iOS 11.4 to Disable USB Port After 7 Days: What It Means for Mobile Forensics
- Legal and Technical Implications of Chinese iCloud Operations
- Demystifying Advanced Logical Acquisition
- Google Services Blocked on Uncertified Devices
- What’s Broken in iOS for iPhone X
- iPhone X Eye Strain: How to Stop OLED Flickering in Just Three Clicks
- Breaking into iOS 11
- Get iOS Shared Files without a Jailbreak
- Apple iCloud Keeps More Real-Time Data Than You Can Imagine
- How to Instantly Access BitLocker, TrueCrypt, PGP and FileVault 2 Volumes
- Meet iOS 11.3: Apple to Make It Harder for Law Enforcement to Extract iPhone Data
- iOS 11.3 Adds Expiry Date to Lockdown (Pairing) Records
- Extract and Decrypt Android WhatsApp Backups from Google Account
- Forensic Implications of Software Updates: iOS, Android, Windows 10 Mobile
- Extracting and Making Use of Chrome Passwords
- How to Extract Media Files from iOS Devices
2017 55
- What’s New in iOS 11 Security: the Quick Reference Guide
- Extracting and Using iCloud Authentication Tokens
- iCloud Authentication Tokens Inside Out
- The Life and Death of iCloud Authentication Tokens: Historical Perspective
- iOS 11 Horror Story: the Rise and Fall of iOS Security
- Breaking Apple iCloud: Reset Password and Bypass Two-Factor Authentication
- Target: Apple Two-Factor Authentication
- The Future of Android Security: Why Google Pushes Away from SMS to Prompt Verification
- iOS 11 Makes Logical Acquisition Trivial, Allows Resetting iTunes Backup Password
- The iPhone is Locked-Down: Dealing with Cold Boot Situations
- What can be extracted from locked iPhones with new iOS Forensic Toolkit
- The art of iOS and iCloud forensics
- Can You Unlock That iPhone?
- How To Obtain Real-Time Data from iCloud and Forget About 2FA with Just an Old iTunes Backup. No Passwords Needed
- iOS vs. Android: Physical Data Extraction and Data Protection Compared
- Obtaining Detailed Information about iOS Installed Apps
- Accessing iOS Saved Wi-Fi Networks and Hotspot Passwords
- Android 8.0 Oreo: Your Text Messages Are in the Cloud Now
- Elcomsoft Phone Breaker 8, New Apple Devices and iOS 11
- iOS 11: jailbreaking, backups, keychain, iCloud – what’s the deal?
- iOS 11 Does Not Fix iCloud and 2FA Security Problems You’ve Probably Never Heard About
- New Security Measures in iOS 11 and Their Forensic Implications
- iOS 9.3.5 Physical Acquisition Made Possible with Phoenix Jailbreak
- How to Extract iCloud Keychain with Elcomsoft Phone Breaker
- Acquiring Apple’s iCloud Keychain
- The Past and Future of iCloud Acquisition
- Attacking the 1Password Master Password Follow-Up
- One Password to Rule Them All: Breaking into 1Password, KeePass, LastPass and Dashlane
- Breaking Passwords in the Cloud: Using Amazon P2 Instances
- Extract and Decrypt WhatsApp Backups from iCloud
- WhatsApp: The Bad Guys’ Secret Weapon
- Physical Acquisition Is…
- iCloud Outage, New Token Expiration Rules and Fixes for Authentication Issues
- Cloud Extraction Compared: What Is Available in iCloud, Google Account and Microsoft Account
- Elcomsoft Phone Breaker Offers Over-the-Air Windows 10 Acquisition
- Fetching Call Logs, Browsing History and Location Data from Microsoft Accounts
- The New Google Authentication Engine in Elcomsoft Cloud Explorer 1.31
- Android Encryption Demystified
- We Did It Again: Deleted Notes Extracted from iCloud
- On Apple iCloud security and ‘deleted’ notes
- ElcomSoft vs. The Cloud: a Game of Cat and Mouse
- Extracting Text Messages from Google Accounts
- Routes and Places: Obtaining Enhanced Location Data from Google Accounts
- How Long Does It Take to Crack Your Password?
- Extracting Unread Notifications from iOS Backups
- How to Break 70% of Passwords in Minutes
- ElcomSoft Extracts Deleted Safari Browsing History from iCloud
- How to Break 30 Per Cent of Passwords in Seconds
- Extracting WhatsApp Conversations from Android Smartphones
- iOS 10 Physical Acquisition with Yalu Jailbreak
- How Can I Break Into a Locked iOS 10 iPhone?
- Who and Why Spies on Android Users, And What They Do With the Data
- Inside ElcomSoft Lab. Part 1
- Fingerprint Readers in pre-Android 6 Smartphones: A Call for Disaster
- Government Request Reports: Google, Apple and Microsoft
2016 42
- FBI Can Unlock Most Devices They Need To
- Extracting Calls, Contacts, Calendars and Web Browsing Activities from iOS Devices in Real Time
- The Ugly Side of Two-Factor Authentication
- Microsoft Two-Factor Authentication: Always There
- Google’s Take on Two-Factor Authentication
- Bypassing Apple’s Two-Factor Authentication
- Exploring Two-Factor Authentication
- Elcomsoft Wireless Security Auditor Gets Wi-Fi Sniffer
- Acquisition of a Locked iPhone with a Lockdown Record
- Forensic Implications of iOS Lockdown (Pairing) Records
- “We take privacy very seriously” – Apple, we do not buy it, sorry
- iOS Call Syncing: How It Works
- iPhone User? Your Calls Go to iCloud
- Our First Book is Officially Out
- Elcomsoft Cloud Explorer: Extracting Call Logs and Wi-Fi Passwords
- iOS 10: Security Weakness Discovered, Backup Passwords Much Easier to Break
- Breaking FileVault 2 Encryption Through iCloud
- iCloud Photo Library: All Your Photos Are Belong to Us
- iOS Logical Acquisition: The Last Hope For Passcode-Locked Devices?
- Using Gmail API: The Forensic Way to Acquire Email
- Building a Distributed Network in the Cloud: Using Amazon EC2 to Break Passwords
- Breaking BitLocker Encryption: Brute Forcing the Backdoor (Part II)
- Mac OS Forensics: Attacking FileVault 2
- NVIDIA Pascal: a Great Password Cracking Tool
- Elcomsoft Phone Viewer 2.20 Goes Stand-Alone
- Fingerprint Unlock Security: iOS vs. Google Android (Part II)
- Elcomsoft System Recovery UEFI Support
- Breaking BitLocker Encryption: Brute Forcing the Backdoor (Part I)
- Fingerprint Unlock Security: iOS vs. Google Android (Part I)
- Understanding and Bypassing Reset Protection
- Dealing with a Locked iPhone
- Apple Two-Factor Authentication vs. Two-Step Verification
- BitLocker: What’s New in Windows 10 November Update, And How To Break It
- Smartphone Encryption: Why Only 10 Per Cent of Android Smartphones Are Encrypted
- Breaking into Microsoft Account: It’s No Google, But Getting Close
- Apple vs. the Government: Follow-up
- A Message to Our Customers, Apple and FBI
- Discounts and Novelties From Our ElcomShop!
- Elcomsoft Phone Breaker 5.20: Direct iCloud Access and iOS 9.3 Support
- Hacking For Dummies by Kevin Beaver (5th edition)
- Forensic Acquisition: Android
- Google Timeline: How Law Enforcement Can Use Google Data
2015 24
- What Google Knows About You, and Why It Matters
- Elcomsoft Distributed Password Recovery Updated with OS X Keychain Support and Enhanced GPU Acceleration
- A New Tool for WhatsApp Acquisition
- Physical Acquisition for 64-bit Devices, iOS 9 Support
- Extracting Data from Locked iPhones
- Elcomsoft Phone Viewer: iOS 9, Media Gallery and Location Tracking
- Overcoming iOS 9 Security in Elcomsoft Phone Breaker 5.0
- Digging Mac OS Keychains
- BlackBerry Password Keeper Escrow Key: Have We Just Found a Hidden Backdoor?
- Video Tutorial on Decryption of Windows EFS-encrypted Data
- Why Do We Need Physical Acquisition?
- Elcomsoft Forensic Disk Decryptor Video Tutorial
- Elcomsoft Phone Viewer: Faster and Easier
- Elcomsoft Wireless Security Auditor Video Tutorial
- Spring Vaccination From Boredom!
- Acquiring and Utilizing Apple ID Passwords, Mitigating the Risks and Protecting Personal Information
- Supporting Apple iCloud Drive and Decrypting Keychains from iCloud
- Meet all new Learning iOS Forensics practical guide
- Sanderson SQLite Forensic Toolkit on a Mac OS X using CrossOver
- Elcomsoft Distributed Password Recovery Video Tutorial
- Cracking Wi-Fi Passwords with Sethioz
- Distributed Password Recovery: Faster, Smarter and Cost-Effective
- How Secure Is Your Password? A Friendly Advice from a Company That Breaks Passwords
- Apple’s Take on Government Surveillance: On Its Customers’ Side
2014 6
- Elcomsoft Phone Breaker Update: Improved iCloud Acquisition, Two-Factor Authentication and Stronger Brute Force
- ElcomSoft Open Letter on Latest Developments in iCloud Security
- Keeper Password Manager & Digital Vault: security review
- Breaking Into iCloud: No Password Required
- Phone Password Breaker with all-new UI, BlackBerry 10 support, and downloading Windows Phone 8 data from the cloud
- Everything You Always Wanted to Know About iTunes and iCloud Backups But Were Afraid to Ask
2013 14
- Welcome Holidays With ElcomSoft
- Our Autumn Events Digest
- Forensic Day in Karlsruhe
- I’ve Got the iTunes Backup from the iCloud. What Shall I Do Now?
- Elcomsoft Phone Password Breaker Enhances iCloud Forensics and Speeds Up Investigations
- The New Elcomsoft iOS Forensic Toolkit
- REcon 2013: Breaking Apple iCloud
- ElcomSoft at CEIC 2013: Kindle Fire HD Hunt Succeeded
- Apple Two-Factor Authentication and the iCloud
- iCloud backups inside out
- iCloud: Making Users Spy on Themselves
- Yahoo!, Dropbox and Battle.net Hacked: Stopping the Chain Reaction
- Norwegian Teenagers Hacking iCloud Accounts
- ElcomSoft Breaks Passwords Faster with NVIDIA Tesla K20 Acceleration
2012 20
- Déjà vu
- ElcomSoft Decrypts BitLocker, PGP and TrueCrypt Containers
- ElcomSoft’s Discounts Calendar
- Elcomsoft, UPEK and more
- ElcomSoft Breaks Into MS Office 2013
- UPEK Fingerprint Readers: a Huge Security Hole
- Accelerating Password Recovery: the Addition of FPGA
- Adobe Acrobat X Support in Advanced PDF Password Recovery
- New Hardware Key for iPad 3 Passcode Verification or Is It Just Masking?
- Explaining that new iCloud feature
- Get More Apples :)
- ElcomSoft Helps Investigate Crime Providing Yet Another Way to Break into iOS with iCloud Attack
- New Features in EPPB
- iOS DFU Mode Starter: Automating the Apple Dance
- Mobile password keepers don’t keep the word
- Updated iOS Forensic Toolkit Ready for iOS 5.1, Tries Top 100 Common Passcodes First
- Breaking Wi-Fi Passwords: Exploiting the Human Factor
- ElcomSoft Half-Switches to OpenCL
- ElcomSoft Discovers Most of Its Customers Want Stricter Security Policies but Won’t Bother Changing Default Passwords
- Breaking Apple iWork Passwords
2011 15
- We know what makes you happy, so here are our holiday discounts! :)
- Newer iOS Forensic Toolkit Acquires iPhones in 20 Minutes, Including iOS 5
- EPPB: Now Recovering BlackBerry Device Passwords
- New version of EPPB: Recovering Master Passwords for BlackBerry Password Keeper and BlackBerry Wallet
- Visiting BlackHat and DefCon 2011
- Elcomsoft iOS Forensic Toolkit highlighted in SANS Information Security Reading Room
- iOS Forensic Toolkit: Keychain Decryption, Logical Acquisition, iOS 4.3.4, and Other Goodies
- ElcomSoft at Techno Security Conference and AMD Fusion Developer Summit
- How to trace criminals on Facebook
- Extracting the File System from iPhone/iPad/iPod Touch Devices
- ElcomSoft Breaks iPhone Encryption, Offers Forensic Access to File System Dumps
- Have you chosen you next smartphone? Why not BlackBerry? :)
- Nikon Image Authentication System: Compromised
- EuroForensics Conference 2011
- ElcomSoft Opens a Password Store to Sell Passwords Balancing Strength and Memorability
2010 26
- Cracking BlackBerry backups is now slower… but still possible, thx to GPU acceleration
- BlackBerry password cracking: multi-threaded, with hardware-accelerated AES
- Canon cannot or mustn’t provide image validation feature?
- Firefox, Safari, Opera, and Chrome Passwords Cracked
- Hacking For Dummies, 3rd Edition by Kevin Beaver
- Smartphone Forensics: Cracking BlackBerry Backup Passwords
- Mind your passwords, make them different
- iPhone 4 Performance
- Measuring iPhone Performance
- Peeking Inside Keychain Secrets
- International System Administrator Appreciation Day
- Something new….
- CCFC 2010
- 0 day
- Password Usage Behavior Survey, Take 2
- ‘Casual and Secure’ Friday Post
- ATI is at it. Again.
- Elcomsoft iPhone Password Breaker
- Back from Infosec
- ElcomSoft at EuroForensics 2010 in Turkey
- ATI and NVIDIA: Making Friends out of Enemies
- Why you should crack your passwords
- New password-cracking hardware
- iPhone/iPod Backup Password Recovery
- It was Data Privacy Day… our warmest congratulations!
- 123 Out Goes… Your Password
2009 113
- The 5th China Computer Forensics Conference
- New sweeping WPA Cracker & its alternatives
- ElcomSoft at INTERPOLITEX-2009
- ElcomSoft at it-sa, Nuremberg, Germany
- Need to protect your VBA macro ? Simply damage the file !
- Now: long-awaited ElcomSoft Password Recovery KIT
- Load yourself to the full with books and music for free
- More on Radeon HD 5000
- AMD vs NVIDIA, next round
- Fastest GPU(s)
- Advanced Office Password Recovery: customizing the preliminary attack
- SysAdminDay
- Office 2010: two times more secure
- ElcomSoft News
- Password masking: myths and truths
- Disaster Recovery and its key objectives
- Encryption and decryption from security law perspective (Part II)
- Rumored AMD Phenom II X4 TWKR chips accessible?
- Password by Toolman
- Reasonable, appropriate, adequate…security (Part I)
- Thunder Tables – now registered trademark
- Password Recovery Tools Are Legal In Germany
- Intel Larrabee, AMD Llano: when?
- Squeezing your First Amendment rights
- AMD Phenom II 42 TWKR Black Edition is the new black
- The U.S. statutes on password related crimes – overview by states
- ATI’s Hall of Fame
- Keyboards unreliable for keeping… transmitting secrets
- More than 100.000 websites are in ‘safe hands’ now
- The smallest password cracking device
- Did You Change Your Password on a Happy ‘Change Your Password Day’?
- Dark Tangent called for help in strengthening homeland security
- Home and Corporate Wireless Security
- New iPhone
- From COMPUTEX TAIPEI
- Microsoft UK NTO turns from praxis to theory
- Preliminary Larrabee perfomance revealed
- Hard news from COMPUTEX 2009
- Password Usage Behavior Survey Announced
- Officers of Indian Customs To Be Punished For Password Breach
- Nvidia Unveils 1U Server With 2 Tesla GPUs On Board
- More reasons to hack your PC
- Eurocrypt 2009 Highlights
- Using Passwords Online
- Getting hot? Cooling news have come
- When CPU is not enough
- The era of cyber tsars
- Intel news: Larrabee delayed, Nehalem-EX Xeon previewed
- Living to the 64-bit rhythms
- Adobe PDF security
- Best graphics cards
- Thunder Tables™ Explained
- Frequently Asked Question: Advanced Office Password RECOVERY or Advanced Office Password BREAKER?
- Secret Questions Are Vulnerable To Guessing Attacks, Study Says
- Cost-effective video cards
- Too much security won’t spoil the router, will it make it better?
- CUDA-enabled applications
- Week of Scams
- Overclocked AMD/ATI card
- Laptop security – myths and mistakes
- NIST drafts new enterprise password management (open to publication, distribution and adaptation!)
- More on SLI
- Password-related news
- Hard disk recovery
- Dc4420
- Green password policy? No re-use!
- What does “The only way to break into PGP” mean?
- On the Infosec once again
- From InfoSecurity, “the number One in Europe”
- GPU Assisted Password Cracking at Troopers 2009
- NVIDIA about Intel
- Wardriving with NVIDIA
- One More Good Password Pattern Idea
- More cores, faster password cracking
- More on NVIDIA GT300
- Dangerously Easy Password Recovery
- TROOPERS09 – are you with hackers or what?
- Adobe Reader [in]security
- Wireless Security Survey
- Six-Core Opterons (Istanbul)
- Military Strike Fighter F-35 Materials Hacked
- Tesla supercomputer
- ATI Radeon HD 4770 expected next month
- Password cracking with Apple Mac Pro
- Intel Gulftown
- NVIDIA GT300
- How to grow your graphics card effectiveness
- E-Discovery
- Password cracking with Microsoft cofee
- NEW: Rainbow Tables for password-protected Excel spreadsheets
- Electronic records security and encryption
- Microsoft Office 14
- New ATI Radeon card
- “I bet you want the password, bet you wanna log in?”
- Smart Password Mutations Explained
- Great hot water supply
- Windows Passwords
- Nvidia Quadro FX 4800
- Fastest video card
- Surveillance Self-Defense Project fills the gaps in your security policy
- ATI, NVIDIA and WPA/WPA2 passwords
- Lotus Notes ID files password cracking
- 23 NVIDIA GeForce GTX 295s packed into one system
- Welcome to ElcomSoft Blog!
- WPA Benchmark
- User Authentication Through Desktop Scanner
- ATI and NVIDIA engaged in long-running battle
- Remember Password On This Computer? – Never more!!
- Password Recovery Tambourine
- EFS-Encrypted Data Recovery
- Teach Yourself Secure Passwords
- AutoINcomplete
- Pen Testing with Distributed Password Recovery and GPUs