ElcomSoft Co. Ltd. said it has released Elcomsoft Explorer for WhatsApp, an all-in-one tool for easy acquisition, extraction and analysis of WhatsApp communication histories.
The new tool offers multiple local and cloud acquisition options, enabling experts to extract and decrypt WhatsApp data from iTunes, iCloud and WhatsApp proprietary backups. Automatic decryption and built-in viewer come standard, while the ability to export data will be included into the upcoming Forensic edition.
Acquisition options include support for local (iTunes) and over-the-air iOS backups stored in Apple iCloud or iCloud Drive. Proprietary WhatsApp backups created in iCloud Drive can also be retrieved. Cloud acquisition requires entering the correct Apple ID and password, while encrypted backups can be automatically decrypted once the correct password is supplied.
Elcomsoft Explorer for WhatsApp comes with the ability to extract standalone WhatsApp backups maintained in iCloud Drive. These backups are not device-specific; however, multiple WhatsApp backups may be available if several WhatsApp accounts (with different phone numbers) are registered within a certain Apple account. The ability to extract standalone WhatsApp backups from iCloud Drive is unique to Elcomsoft Explorer for WhatsApp.
Elcomsoft Explorer for WhatsApp downloads iOS and standalone WhatsApp backups from Apple iCloud and iCloud Drive by utilizing either the user´s Apple ID and password or by using a binary authentication token extracted from the user´s computer. Binary authentication tokens can be extracted with a tool distributed with Elcomsoft Phone Breaker. The token extraction tool is fully functional even in the free evaluation version of Elcomsoft Phone Breaker.
Founded in 1990, ElcomSoft Co. Ltd. develops state-of-the-art computer forensics tools, provides computer forensics training and computer evidence consulting services. Since 1997, ElcomSoft has been providing support to businesses, law enforcement, military, and intelligence agencies.