iCloud Backups In The Clear

     It seems that Elcomsoft, a Russions security firm, has discovered that iCloud backups can be readily had "in the clear" should you be able to obtain the Apple ID and password of an account.  Basically, this would allow unencrypted access to the users iOS backups (full and incremental) with the user being unaware.  At first this may seem fairly difficult to access the user/pass combo, but Elcomsoft's own software can be used to obtain such from local iTunes backups.
     What does this allow law enforcement/nefarious users to see, you may ask.  General phone usage including recently received and dialed phone numbers as well as text messages and e-mails.  It basically speeds up the process of having to decrypt a local backup and, since iOS devices backup on the fly, someone with your credentials could continue to track you at almost real-time.

Comments

Popular Posts