How to Extract Screen Time Passcodes and Voice Memos from iCloud

With Elcomsoft Phone Breaker 9.20, the following Screen Time data is extracted: the Screen Time password (both parents’ and children’s, if any child accounts are present); information about all devices sharing Screen Time data through iCloud, including the list of installed applications on these devices (including Mac computers and Apple Watch). In addition, the tool extracts information about configured restrictions. You can view all of that data in Elcomsoft Phone Viewer 4.70.

👉 https://blog.elcomsoft.com/2019/10/how-to-extract-screen-time-passcodes-and-voice-memos-from-icloud/
#password #passcode #dfir #mobilesecurity #iossecurity #screentime #iphone

Four and a Half Apple Passwords

Passwords are probably the oldest authentication method. Despite their age, passwords remain the most popular authentication method in today’s digital age.
Passwords are everywhere. Even your phone has more than one password. Speaking of Apple iPhone, the thing may require as many as four (and a half) passwords to get you going. To make things even more complicated, the four and a half passwords are seriously related to each other. Let’s list them:

♦️Screen lock password;
♦️iCloud password;
♦️iTunes backup password;
♦️Screen Time password;
🔻One-time codes

In this article, we will provide an overview on how these passwords are used and how they are related to each other; what are the default settings and how they affect your privacy and security. We’ll tell you how to use one password to reset another

👉 https://blog.elcomsoft.com/2019/10/four-and-a-half-apple-passwords/

#password #passcode #appleid #mobilesecurity #iossecurity #screentime #iphone

Apple vs. Law Enforcement: Cloud Forensics

Тoday’s smartphones collect overwhelming amounts of data about the user’s daily activities, like users’ location and number of steps they walked, pictures and videos they take and every message they send or receive. Let's see the types of data that Apple does and does not deliver when served with a government request or while processing the user’s privacy request.

👉 https://blog.elcomsoft.com/2020/01/apple-vs-law-enforcement-cloud-forensics/

By Oleg Afonin

#dfir #mobileforensics #iossecurity #icloud #apple #iphone #dataextraction #cloudsecurity #smartphone #data #privacy

The Worst Mistakes in iOS Forensics

What can possibly go wrong with that iPhone? I’ll have a look (oh, it’s locked!), then switch it off, eject the SIM card and pass it on to the expert. Well, you’ve just made three of the five most common mistakes making subsequent unlock and extraction attempts significantly more difficult. Learn about the most common mistakes and their consequences.

👉 https://blog.elcomsoft.com/2020/01/the-worst-mistakes-in-ios-forensics/

by Vladimir Katalov

#mistakes #mobileforensics #ios #apple #forensics #iossecurity #icloud #iphone #dataextraction #cloudsecurity #smartphone

Apple vs Law Enforcement: Cloudy Times

Apple is using point-to-point encryption to protect certain types of data. However, it has not always been that way. Apple security model changed year after year. This article reviews the timeline of Apple security changes over time. We’ll list the security measures and discuss whether the real purpose of these changes were the customers’ security and privacy, or throwing a monkey wrench into the work of the law enforcement.

We will also try to understand where iCloud security stands today, and how safe your data is against hackers and the law enforcement.

Are you a forensic professional? I think you’ll find this article handy.

👉 https://blog.elcomsoft.com/2020/02/apple-vs-law-enforcement-cloudy-times/

by Vladimir Katalov

#dfir #mobileforensics #iossecurity #icloud #apple #iphone #dataextraction #cloudsecurity #smartphone

New Elcomsoft iOS Forensic Toolkit 6.50: jailbreak-free extraction without an Apple Developer Account

The macOS edition of Elcomsoft iOS Forensic Toolkit 6.50 drops the requirement for using a paid Apple Developer account when extracting the file system and decrypting the keychain from a compatible iPhone or iPad device. The new release also adds jailbreak-free agent-based extraction for iOS versions up to and including iOS 13.5.

👉 https://www.elcomsoft.com/news/762.html

##dfir #iphone #ios #itsecurity #iossecurity #mobileforensics

Extracting iPhone File System and Keychain Without an Apple Developer Account

Last year, we have developed an innovative way to extract iPhone data without a jailbreak. The method’s numerous advantages were outweighed with a major drawback: an Apple ID enrolled in the paid Apple’s Developer program was required to sign the extraction binary. This is no longer an issue on Mac computers with the improved sideloading technique.

👉 https://blog.elcomsoft.com/2020/09/extracting-iphone-file-system-and-keychain-without-an-apple-developer-account/

#iphone #ios #iossecurity #mobileforensics #dfir #mobilesecurity #mac #nojailbreak

Setting Up Restricted Internet Connection for iPhone Extraction

Regular or disposable Apple IDs can now be used to extract data from compatible iOS devices if you have a Mac. The use of a non-developer Apple ID carries certain risks and restrictions. In particular, one must “verify” the extraction agent on the target iPhone, which requires an active Internet connection. Learn how to verify the extraction agent signed with a regular or disposable Apple ID without the risk of receiving an accidental remote lock or remote erase command.

👉 https://blog.elcomsoft.com/2020/09/setting-up-restricted-internet-connection-for-iphone-extraction/

#ios #iphone #mobileforensics #dataextraction #iossecurity #jbfree #mac

The Issue of Trust: Untrusting Connected Devices from Your iPhone

When connecting an iPhone to a computer for the first time, you’ll see the prompt asking you whether to trust the computer. Trusting a computer enables your phone and computer to exchange information. However, should the trusted computer fall into the wrong hands, the pairing record from that computer could be used to pull information from your iPhone. Learn about the risks associated with pairing records and how to block unwanted connections by untrusting connected computers from your iPhone.

👉 https://blog.elcomsoft.com/2020/09/the-issue-of-trust-untrusting-connected-devices-from-your-iphone/

#ios #iphone #iossecurity #dfir #mobileforensics

Playing devil’s advocate: iPhone anti-forensics

Everyone’s iPhones contain overwhelming amounts of highly sensitive personal information. Even if some of that data is not stored on the device, the iPhone itself or the data inside can work as a key to other many things from bank accounts to private family life. While there are many possible vectors of attack, the attacker will always try exploiting the weakest link. Learn to think like one, find the weakest link and eliminate the potential vulnerabilities before they are exploited. This guide comes from the forensic guys making tools for the law enforcement, helping the good guys break into the bad guys’ iPhones.

👉 https://blog.elcomsoft.com/2020/09/playing-devils-advocate-iphone-anti-forensics/

#dfir #mobilesecurity #iossecurity #antiforensics #icloud #password #iphone

Cloud Forensics: the New Reality

The majority of mobile devices today are encrypted throughout, making extractions difficult or even impossible for major platforms. Traditional attack vectors are becoming a thing of the past with encryption being moved into dedicated security chips, and encryption keys generated on first unlock based on the user’s screen lock passwords. Cloud forensics is a great alternative, often returning as much or even more data compared to what is stored on the device itself.

👉 https://blog.elcomsoft.com/2021/09/cloud-forensics-the-new-reality/

#icloud #iphone #cloudforensics #iossecurity #mobileforensics