Elcomsoft Phone Viewer can now display the complete conversation history in Telegram, one of the world’s most popular messaging apps. All types of chats are supported including secret chat sessions complete with attachments.

Elcomsoft Phone Viewer is updated with support for Telegram conversation histories. Telegram analysis is available when accessing a file system image extracted from the iPhone or iPad device with Elcomsoft iOS Forensic Toolkit by using agent-based or jailbreak-based file system imaging. Experts can now decrypt and analyse the complete Telegram communication histories including secure chats when analysing the results of iOS file system acquisition.

Telegram Secure Chats

While Telegram is not considered the most secure instant messaging app (this title belongs to Signal), Telegram supports secure chats. According to Telegram developers, all messages in secret chats use end-to-end encryption. Secret chats are device specific. They are not part of the Telegram cloud, and they cannot be extracted with cloud acquisition.

With Telegram app for iOS, neither the regular conversation history nor secret chats are backed up. The conversation history is not saved to iTunes or iCloud backups; as a result, Telegram chats cannot be obtained from the device by using logical acquisition.

The complete Telegram conversation history including the content of secret chats can be only obtained from the device of origin. The working database must be extracted from a file system image obtained with agent-based or jailbreak-based extraction.

Elcomsoft Phone Viewer 5.0 adds support for Telegram conversation histories extracted in the course of full file system imaging. Both regular and secret chats are displayed along with any attachments. Once the database is extracted from the file system image, EPV 5.0 displays the user’s Telegram account info, call logs, chats and attachments.

Release notes:

• Added support for Telegram data from TAR images, including support for multiple Telegram accounts on one device.
• Added the ability to display Telegram conversation histories including secret chats and attachments.
• Added support for the latest version of Signal 3.1.0.20.
• Bug fixes and performance improvements.