Moscow-based Elcomsoft has developed a new version of Phone Password Breaker 3.0 program with access into iCloud without Apple ID and the password function.
But this feature is mostly intended for our law enforcement and forensic customers, as using a password-free entry into iCloud requires a binary authentication token that must be extracted from the suspect’s computer (OS X or Windows).
But you’ll still need the suspect’s PC with iCloud Control Panel installed which has iCloud Control Panel installed. Moreover the user must’ve been logged in to iCloud Control Panel on that PC at the time the computer is seized. If the user logged out of the Panel, the authentication tokens are then deleted.
“Over-the-air acquisition from Apple iCloud without requiring the user’s Apple ID or password is great news, and no other company in the world can do it,” Vladimir Katalov boasts.
You’ll need to use command-line tools supplied with Elcomsoft Phone Password Breaker to search for and to extract authentication tokens. Note that you can extract tokens that belong to all users on that system, including domain users (if you have their system login and password).
After extracting the authentication tokens, just save them somewhere (e.g. on a USB flash drive), launch Elcomsoft Phone Password Breaker and start iCloud acquisition. You will be prompted for authentication credentials. Instead of entering login and password, you’ll need to paste the authentication token files you’ve just extracted. Don! Phone Password Breaker will now use the extracted authentication tokens to access iCloud – no login and no password needed. The tool for extracting authentication tokens is called ATEX (Apple Token Extractor).
But the function is available only in new Phone Password Breaker 3.0 Forensic Edition. For North American customers, the forensic edition of Phone Password Breaker costs US$399.
It is easy to guess that such function is necessary to the law enforcement agencies and they can get physical access to any computer.
Earlier in the Phone Password Breaker program there was a possibility to copy someone‘s iCloud information from another computer, knowing only login and the password. Now it can be done if ID and the password are unknown. However it must be kept in mind that Apple sometimes cancels tokens so others backup access isn't eternal.
