Breaking Apple iCloud Keychain explained by Vladimir Katalov

Breaking Apple iCloud Keychain explained by Vladimir Katalov CEO from ElcomSoft

Everybody knows about Apple iCloud backups — how to disable this feature, or if you are on the other side how to download the icloud data.

However, iCloud is not just about backups in our days is much more information stored there. There is quite a lot of data that is also being synced across all the devices and kept in the iCloud servers, including contacts, calendars, notes, media files, documents, 3rd party application data, passwords, credit card numbers, mail signatures, custom text shortcuts, call logs and much more. Even if you disable syncing completely (but still have the iCloud completely), some data

Even if you disable syncing completely but still have the iCloud accont some data still goes to Apple servers and so accessible by both Apple and probably 3rd parties for example: from hackers or government.  There is no such option to sync them, but it is still there.

You may think that using two-factor authentication makes your data safe, but in fact it does not. Even more, this “protection” make it easier to access some data, such as passwords and contacts numbers. Check the video presentation at Hack In The Box Security Conference:

Breaking Apple iCloud Keychain explained by Vladimir Katalov CEO from ElcomSoft