@ElcomSoft

ElcomSoft's Official Twitter. Password recovery, mobile & cloud forensics.

elcomsoft.com
Joined March 2009
  • Tweets7.3K
  • Following2.4K
  • Followers10.9K
722Media
'123456' #password linked to Denmark data breach affecting 8.8M people theregister.com/security/202…

'123456' password linked to Denmark data breach affecting 8.8M people

Local media reports three weakly protected accounts at small IT biz whose access to national register was abused

theregister.com
1
2
664
Low-Level Extraction of Apple HomePod mini blog.elcomsoft.com/2026/10/l… #dfir #apple #homepod #iot

Low-Level Extraction of the HomePod mini

iOS Forensic Toolkit 10.12 extracts the full file system image and the decrypted keychain from yet another IoT device: Apple HomePod mini. This is the first file system extraction of the device; the...

blog.elcomsoft.com
1
4
754
Elcomsoft Quick Triage 2.2: Timeline, file system snapshot, and a plugin engine blog.elcomsoft.com/2026/09/e… #dfir #digitaltriage

Elcomsoft Quick Triage 2.2: Timeline, file system snapshot, and a plugin engine

Elcomsoft Quick Triage 2.2 adds three things: a Timeline view that merges events from every timestamped artifact into one chronology, a file system snapshot that copies metadata without file conten...

blog.elcomsoft.com
1
868
Headteacher had the most guessable username-password combo you could imagine theregister.com/security/202…

Headteacher had the most guessable username-password combo you could imagine

Schools often don't prioritize or understand cybersecurity

theregister.com
1
529
Locked In or Locked Out? Unlocking ZIP, RAR, PDF, and Microsoft Office Passwords blog.elcomsoft.com/2026/07/l…

Locked In or Locked Out? Unlocking ZIP, RAR, PDF, and Microsoft Office Passwords

There is a whole industry selling software to protect data: full-disk encryption, rights management, key servers, the works. Almost none of it lives in an ordinary home or a two-person office. At...

blog.elcomsoft.com
4
528
Microsoft Office Passwords: What Comes Off in Seconds, What Takes Longer, and Why blog.elcomsoft.com/2026/07/m…

Microsoft Office Passwords: What Comes Off in Seconds, What Takes Longer, and Why

Microsoft Office has protected documents with passwords since Word 2.0 in 1991, and for most of that history the protection was weaker than stated. The word "password" in Office covers two completely...

blog.elcomsoft.com
8
803
The RAR Mystery: Breaking RAR4 and RAR5 Encryption blog.elcomsoft.com/2026/07/t…

The RAR Mystery: Breaking RAR4 and RAR5 Encryption

RAR encryption has an unusual reputation: in more than twenty years there has been no practical attack against the cipher, no implementation flaw worth the name, and none of the shortcuts that...

blog.elcomsoft.com
1
3
642
New from Elcomsoft: an interactive Case Advisor. Set your goal - image the disk, reset a Windows password, break a container - say what you're working with, and get a step-by-step tool workflow. triage.elcomsoft.com/ #dfir
1
545
Cracking Legacy ZIP Encryption: The Known-Plaintext Attack and Why It Still Sometimes Works blog.elcomsoft.com/2026/07/c…

Cracking Legacy ZIP Encryption: The Known-Plaintext Attack and Why It Still Sometimes Works

When someone hands you a password-protected ZIP archive, one's immediate thought is "I need to break the password". For most modern archives, that is exactly the case, and the password is the whole...

blog.elcomsoft.com
3
560
What gets forgotten is that Adobe PDF’s security model has been shaky since version 1.0, and its history includes an DMCA-related FBI arrestю Read the complete story, including the part where we were personally on the receiving end of it blog.elcomsoft.com/2026/07/t…

The Long, Strange History of PDF (In)Security - And the Arrest That Made It Personal

PDF has a reputation as the boring, dependable file format - the one you reach for when you need a document to look exactly the same on every computer, forever. What gets forgotten is that PDF's...

blog.elcomsoft.com
2
665
On Apple’s 2FA and iCloud data acquisition: Elcomsoft Phone Breaker update blog.elcomsoft.com/2026/07/t… #dfir #icloud #apple #ios

Two-Factor Authentication and iCloud: A Short History, and What We Fixed in Phone Breaker 11.03

Two-factor authentication is the least glamorous security feature, and probably the most important one. A password is "something you know", which really means "something that can be phished, reused,...

blog.elcomsoft.com
1
8
1,230
Quick look at usbliter8 exploit, focusing only on A12, comparing it to checkm8 and contributing some of our own research blog.elcomsoft.com/2026/07/a… #dfir #apple #usbliter8

A12 usbliter8 BootROM sigpatches

BootROM exploits are an important part of modern low-level forensic acquisition, and our Elcomsoft iOS Forensic Toolkit is no stranger to it. It allows getting code execution at the earliest stage on...

blog.elcomsoft.com
1
17
60
4,809
A new update to iOS Forensic Toolkit is out. The headline feature is an alternative installation method for the extraction agent – that is, deploying it onto an iPhone while bypassing the mandatory pairing requirement. Here is how it works blog.elcomsoft.com/2026/06/s… #dfir #apple

Sideloading the extraction agent: a Stolen Device Protection workaround

A new update to iOS Forensic Toolkit is out. The headline feature is an alternative installation method for the extraction agent - that is, deploying it onto an iPhone while bypassing the mandatory...

blog.elcomsoft.com
1
1
10
1,313
iOS Forensic Toolkit can now get past Stolen Device Protection. What we have built is a way to install the extraction agent without ever pairing the iPhone to the workstation over a USB port blog.elcomsoft.com/2026/06/b… #dfir #apple #ios

Bypassing Stolen Device Protection: Alternative Ways of Installing the Extraction Agent

Stated plainly: iOS Forensic Toolkit can now get past Stolen Device Protection. There is a catch, and it belongs up front: this is not a magic unlock, and anyone selling it as one is selling someth...

blog.elcomsoft.com
1
11
1,009
Elcomsoft Phone Breaker 11.2 adds the ability to download iCloud backups created on devices running iOS and iPadOS 26 and, by extension, iOS/iPadOS 27 beta blog.elcomsoft.com/2026/06/d… #dfir #apple #icloud

Downloading iOS 26 iCloud Backups

Elcomsoft Phone Breaker 11.2 adds the ability to download iCloud backups created on devices running iOS and iPadOS 26 and, by extension, iOS/iPadOS 27 beta. With this release, Elcomsoft Phone Breaker...

blog.elcomsoft.com
4
639
Every employee’s #password was stored in a single Excel file theregister.com/security/202…

Every employee’s password was stored in a single Excel file

The CEO thought this was the best way to deal with some email issues

theregister.com
1
1
537
All the #passwords were stored in Active Directory description fields theregister.com/security/202…

All the passwords were stored in Active Directory description fields

It was far too easy for a hacker to get the information

theregister.com
1
513
Downloading iPhone and iPad backups from Apple iCloud blog.elcomsoft.com/2026/05/d… #dfir #icloud

Downloading iPhone and iPad backups from Apple iCloud

Pulling a backup out of iCloud is one of the more technically demanding jobs in cloud forensics. An iCloud backup is not a single, ready-to-download file; instead, it is assembled from a large number...

blog.elcomsoft.com
2
6
813
Low-Level Extraction for iOS 17 and 18 blog.elcomsoft.com/2026/04/l… #dfir #apple #ios

Low-Level Extraction for iOS 17 and 18

We've just updated iOS Forensic Toolkit to version 10.0, significantly expanding its low-level extraction capabilities for both the extraction agent and bootloader-based methods. Previously, agent-...

blog.elcomsoft.com
1
5
861
Every day in every way, #passwords are getting worse and worse theregister.com/2026/02/23/p…

Every day in every way, passwords are getting worse

opinion: The only good password is no password at all

theregister.com
524
Load more