ElcomSoft Co. Ltd. updates Elcomsoft Phone Viewer, the company’s forensic extraction tool. Version 5.0 gains the ability to display conversation histories and secret chats in Telegram, one of the world’s most popular instant messaging apps.
With nearly half a billion users, Telegram is an incredibly popular cross-platform instant messaging app. While Telegram is not considered the most secure instant messaging app (this title belongs to Signal), its conversation histories do not appear in either iTunes or iCloud backups.
Telegram developers emphasize end-to-end encryption for secret chats, which makes secret chats device specific. They are not part of the Telegram cloud, they cannot be extracted with cloud acquisition, and they cannot be obtained from Telegram the company with a government request. As a result, Telegram secret chats can be only extracted from the device of origin.
Elcomsoft Phone Viewer 5.0 gains the ability to display Telegram conversations by analyzing the iPhone file system image. The Telegram database is extracted from a file system image obtained with Elcomsoft iOS Forensic Toolkit or similar tool. Experts using Elcomsoft iOS Forensic Toolkit will simply open the file system image in Elcomsoft Phone Viewer to access the Telegram database complete with attachments and secret chats.
In addition, Elcomsoft Phone Viewer 5.0 enables support for the latest version of Signal, world’s most secure instant messenger. The tool offers the ability to decrypt Signal conversation databases extracted from the iPhone file system images. Experts using Elcomsoft iOS Forensic Toolkit will simply open the file system image in Elcomsoft Phone Viewer and use the extracted keychain file to decrypt the Signal database. Elcomsoft Phone Viewer will then decrypt the database and display its content in a blink of an eye.
About Elcomsoft Phone Viewer
Elcomsoft Phone Viewer is a quick and easy to use tool to help forensic experts analyze information extracted with ElcomSoft and third-party mobile acquisition tools. Experts can view and decrypt iOS backups and synced data, analyze the content of iCloud backups and browse through file system images extracted from iOS devices. The exporting feature enables expert to continue their investigation in a forensic product of their choice.
Elcomsoft Phone Viewer supports Windows 7, 8, 8.1, and Windows 10. The Mac version supports macOS X 10.8 and newer. Elcomsoft Phone Breaker operates without Apple iTunes being installed. Windows users must have iCloud for Windows installed, while Mac users must run macOS 10.11 or newer.
About ElcomSoft Co. Ltd.
Founded in 1990, ElcomSoft Co. Ltd. develops state-of-the-art computer forensics tools, provides computer forensics training and computer evidence consulting services. Since 1997, ElcomSoft has been providing support to businesses, law enforcement, military, and intelligence agencies. ElcomSoft tools are used by most of the Fortune 500 corporations, multiple branches of the military all over the world, foreign governments, and all major accounting firms.