AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes

SOCRadar discovered AnonyMousKIT, a phishing-as-a-service platform that uses AI-generated voice calls mimicking Apple Support to steal iPhone passcodes and Apple ID credentials for removing Activation Lock from stolen devices. The investigation uncovered a reseller supply chain of 506 domains and 168 storefront brands active since early 2024, with basic coding errors exposing production logs and operator rosters.

A phishing-as-a-service PhaaS platform called AnonyMousKIT is automating the theft of Apple ID credentials needed to remove Activation Lock from stolen iPhones, SOCRadar found. “By leveraging a critical flaw – the use of bare relative paths – the investigation unraveled a reseller supply chain of 506 domains and 168 storefront brands active since early 2024. Despite leveraging advanced AI to mimic ‘Apple Support,’ basic coding errors exposed production logs and operator rosters,” researchers wrote. Researchers … More https://www.helpnetsecurity.com/2026/08/26/anonymouskit-phishing-stolen-iphone/ The post AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes https://www.helpnetsecurity.com/2026/08/26/anonymouskit-phishing-stolen-iphone/ appeared first on Help Net Security https://www.helpnetsecurity.com .