A phishing-as-a-service (PhaaS) platform called AnonyMousKIT is automating the theft of Apple ID credentials needed to remove Activation Lock from stolen iPhones, SOCRadar found. “By leveraging a critical flaw – the use of bare relative paths – the investigation unraveled a reseller supply chain of 506 domains and 168 storefront brands active since early 2024. Despite leveraging advanced AI to mimic ‘Apple Support,’ basic coding errors exposed production logs and operator rosters,” researchers wrote. Researchers … More
The post AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Linux Foundation takes on TRACE, a hardware-backed runtime evidence specification for AI agents
Production data in testing is still common, and Tricentis’ CISO wants it gone
AI vulnerability discovery scores the highest impact of 20 emerging risks