The latest update to Elcomsoft Phone Viewer packs multiple improvements, enhancing compatibility with Signal and Telegram data sets extracted from iOS devices via low-level extraction.

Elcomsoft Phone Viewer is updated with better compatibility with the latest versions of Signal and Telegram apps. The update improves the handling of chat histories appearing in file system images extracted from various Apple devices with low-level extraction methods.

Signal and Telegram are immensely popular messaging platforms. Signal is renowned for its end-to-end encryption protocol. For experts, accessing Signal conversations in particular has presented significant challenges as Signal additionally protects its working database with an encryption key securely stored in the iPhone’s keychain. This in turn leads to two consequences. First, low-level extraction is the only viable solution for extracting and decrypting Signal conversation histories, and second, one needs a copy of the device’s keychain to decrypt said chat histories.

The latest update of Elcomsoft Phone Viewer software brings crucial bug fixes and enhancements, mostly related to the analysis of Signal and Telegram secure chats. While accessing Signal chat histories requires not only the full file system image but also the encryption key stored in the keychain, the latest update streamlines this process, ensuring smoother parsing of Signal data by addressing previous bugs and integrating improvements.

Telegram, while offering robust security features, also poses challenges in data extraction. Secret chats are end-to-end encrypted, are not accessible through Telegram cloud services, and can be only extracted from end-user devices of secret chat participants. The update addresses these challenges by refining the parsing algorithms and introducing bug fixes specific to Telegram data processing, including support for Telegram secret chats.

Beyond Signal and Telegram analysis, Elcomsoft Phone Viewer remains a fast and lightweight tool for parsing essential data from backups and full file system extractions. Moreover, it enables viewing and analyzing extractions from cloud downloads (via Elcomsoft Phone Breaker), further expanding its utility in digital forensics investigations. Its user-friendly interface and comprehensive feature set make it an indispensable asset for IT security specialists and law enforcement agencies alike.

Release notes:

• bugfix: Fixed various parsing issues in Signal messenger chats (names may not appear)
• new: Added support for the latest version of Telegram
• improvement: Improved handling of Telegram data for multiple accounts
• improvement: improved handling of Telegram data where information is incomplete
• minor bug fixes and performance improvements