Product Launch: Acquire and Analyze Communications With New Elcomsoft Explorer for WhatsApp

Nov 25, 2015, 07:27 ET from ELCOMSOFT

MOSCOW, Russia, November 25, 2015 /PRNewswire/ --

ElcomSoft Co. Ltd. announces the release of Elcomsoft Explorer for WhatsApp, an all-in-one tool for easy acquisition, extraction and analysis of WhatsApp communication histories. The new tool offers multiple local and cloud acquisition options, enabling experts to extract and decrypt WhatsApp data from iTunes, iCloud and WhatsApp proprietary backups. Automatic decryption and built-in viewer come standard, while the ability to export data will be included into the upcoming Forensic edition. 

"WhatsApp is the number one instant messenger in the United States and many parts of Europe", says Vladimir Katalov, ElcomSoft CEO. "With its secure point-to-point messaging, WhatsApp communications cannot be traced or requested from the provider. One can only obtain WhatsApp data from end-user devices or data backups, which is what our product is for." 

Read our blog post A New Tool for WhatsApp Acquisition

Acquisition options include support for local (iTunes) and over-the-air iOS backups stored in Apple iCloud or iCloud Drive. Proprietary WhatsApp backups created in iCloud Drive can also be retrieved. Cloud acquisition requires entering the correct Apple ID and password, while encrypted backups can be automatically decrypted once the correct password is supplied. The built-in viewer enables simultaneous view of multiple WhatsApp backups obtained from different sources, and includes searching and filtering for quickly locating contacts and messages or discovering conversations occurred during a certain date range. Messages, calls, contacts and pictures sent and received during conversations can be viewed, searched or filtered.

Elcomsoft Explorer for WhatsApp comes with the ability to extract standalone WhatsApp backups maintained in iCloud Drive. These backups are not device-specific; however, multiple WhatsApp backups may be available if several WhatsApp accounts (with different phone numbers) are registered within a certain Apple account. The ability to extract standalone WhatsApp backups from iCloud Drive is unique to Elcomsoft Explorer for WhatsApp.

Elcomsoft Explorer for WhatsApp downloads iOS and standalone WhatsApp backups from Apple iCloud and iCloud Drive by utilizing either the user's Apple ID and password or by using a binary authentication token extracted from the user's computer. Binary authentication tokens can be extracted with a tool distributed with Elcomsoft Phone Breaker. The token extraction tool is fully functional even in the free evaluation version of Elcomsoft Phone Breaker.

WhatsApp Acquisition, Extraction and Analysis 

With more than 900 million active users, Facebook-owned WhatsApp messenger is one of the most popular instant messaging tools. In many countries including the United States and parts of Europe, WhatsApp is by far the most popular tool for exchanging instant messages. WhatsApp applications are available for all popular mobile platforms including Android, Apple iOS, Blackberry, Microsoft Windows Phone 8.x and Windows 10 Mobile.

WhatsApp quickly became a popular target for spammers, hoaxers and cyber criminals. However, the messenger app is designed to use secure end-to-end communications, making it impossible to either intercept messages or request communication histories from service providers. As a result, acquisition is only possible from end-user devices or data backups produced by such devices and saved either locally or stored in a cloud.

About Elcomsoft Explorer for WhatsApp 

Elcomsoft Explorer for WhatsApp is an all-in-one tool for acquiring, extracting and viewing WhatsApp communication histories. Supporting a wide range of acquisition options, Elcomsoft Explorer for WhatsApp can extract WhatsApp data from local iTunes backups, retrieve WhatsApp databases from iCloud backups and download stand-alone WhatsApp backups from Apple iCloud Drive. Cloud acquisition requires entering the correct authentication credentials (Apple ID and password). Encrypted backups can be decrypted automatically once the correct password is supplied.

The built-in viewer offers convenient access to contacts, messages and pictures sent and received during conversations. Multiple WhatsApp databases can be analyzed at the same time. Searching and filtering make it easy locating individual messages or finding communication sessions that occurred over a certain date range.

Pricing and Availability 

The Home edition of Elcomsoft Explorer for WhatsApp is immediately available. The advanced Forensic edition with additional acquisition and filtering options is in the plans. Elcomsoft Explorer for WhatsApp Home is available to North American customers for $79. Pricing for the upcoming Forensic edition is to be announced. Local pricing may vary.

System Requirements 

Elcomsoft Explorer for WhatsApp supports Windows Vista, Windows 7, 8, 8.1, and Windows 10 as well as Windows 2003, 2008 and 2012 Server. Downloading iOS backups and files from iCloud requires iCloud for Windows to be installed.

About ElcomSoft Co. Ltd. 

Founded in 1990, ElcomSoft Co. Ltd. develops state-of-the-art computer forensics tools, provides computer forensics training and computer evidence consulting services. Since 1997, ElcomSoft has been providing support to businesses, law enforcement, military, and intelligence agencies. ElcomSoft tools are used by most of the Fortune 500 corporations, multiple branches of the military all over the world, foreign governments, and all major accounting firms. ElcomSoft is a Microsoft Partner (Gold Application Development), Intel Premier Elite Partner and member of NVIDIA's CUDA/GPU Computing Registered Developer Program.

Contact: Olga Koksharova,, Fax: US (toll-free) +1-866-448-2703, UK +44-870-831-2983