0000-0001-5247-3713 There is a bit of confusion about our software designed to allow breaking into password-protected systems, files, documents, and encrypted containers. We have as many as three products (and five different tools) dealing with the matter: Elcomsoft Forensic Disk Decryptor (with an unnamed memory dumping tool), Elcomsoft System Recovery and Elcomsoft Distributed Password Recovery, […]

The post Clearing Confusion About our Password Recovery Tools appeared first on WJN LLC.

0000-0001-5247-3713 2020 is a big year for the US electoral system, and with society moving to a remote structure amidst the current climate, elections may very well be the next big sector to feel an impact. US citizens could find themselves voting entirely remote — possibly through mobile phones or otherwise — changing the election […]

The post Acing election security in 2020: A conversation with Defending Digital Campaigns | Yubico appeared first on WJN LLC.

0000-0001-5247-3713 Modern jailbreaks, in addition to removing several iOS restrictions (for example, disabling signature verification, escalating privileges or bypassing the sandbox), allow obtaining low-level access to the device’s file system. This allows connecting to an iOS device via SSH and gaining almost unlimited access to the system. Some jailbreaks install an OpenSSH (or dropbear) server […]

The post iOS Jailbreaks, SSH, and root Password appeared first on WJN LLC.

0000-0001-5247-3713 Elcomsoft iOS Forensic Toolkit 6.0 is out, adding direct, forensically sound extraction for Apple devices running some of the latest versions of iOS including iOS 13.3.1, 13.4 and 13.4.1. Supported devices include the entire iPhone 6s, 7, 8, X, Xr/Xs, 11, and 11 Pro (including Plus and Max versions) range, the iPhone SE, and […]

The post Full File System Extraction for iOS 13.3.1, 13.4 and 13.4.1 appeared first on WJN LLC.

0000-0001-5247-3713 BitLocker is one of the most advanced and most commonly used volume encryption solutions. BitLocker is well-studied and extensively documented solution with few known vulnerabilities and a limited number of possible vectors of attack. BitLocker volumes may be protected with one or more protectors such as the hardware-bound TPM, user-selectable password, USB key, or […]

The post Unlocking BitLocker: Can You Break That Password? appeared first on WJN LLC.

0000-0001-5247-3713 When attacking a password, the traditional forensic workflow requires uploading the entire encrypted file or document into a password recovery tool. This approach, while simple and intuitive, has one major drawback if you are using remote computers or cloud instances to perform an attack. If the remote computer is compromised, the entire file or […]

The post Tighter Control over Personal Information with Attacks on Encryption Metadata appeared first on WJN LLC.

0000-0001-5247-3713 “We shouldn’t ask our customers to make a tradeoff between privacy and security. We need to offer them the best of both. Ultimately, protecting someone else’s data protects all of us.” Guess who said that? The answer is at the end of the article. In the meantime, we keep talking of iPhone and iOS […]

The post Apple vs. Law Enforcement: poker face? appeared first on WJN LLC.

0000-0001-5247-3713 Today’s smartphones are a forensic goldmine. Your smartphone learns and knows about your daily life more than everything and everyone else. It tracks your location and counts your footsteps, AI’s your pictures and takes care of your payments. With that much data concentrated in a single device, it is reasonable to expect the highest […]

The post Apple vs. Law Enforcement – iOS 4 through 13.5 appeared first on WJN LLC.

0000-0001-5247-3713 The USB restricted mode was introduced in iOS 11.4.1, improved in iOS 12 and further strengthened in iOS 13. The USB restrictions are a real headache for iPhone investigators. We’ve discovered a simple yet effective trick to fool it in some cases, but currently it securely protects the iPhones from passcode cracking and BFU […]

The post Working Around the iPhone USB Restricted Mode appeared first on WJN LLC.

0000-0001-5247-3713 The new build of iOS Forensic Toolkit is out. This time around, most of the changes are “internal” and do not add much functionality, but there is a lot going on behind the scenes. In this article, we will describe in details what is new and important, and how it’s going to affect you. […]

The post iOS Acquisition Reloaded appeared first on WJN LLC.