PhishingHelp Net Security·3 hours ago
AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes
AnonyMousKIT, a phishing-as-a-service platform discovered by SOCRadar, uses AI-generated voice calls impersonating Apple Support to trick users into revealing iPhone passcodes and Apple ID credentials needed to bypass Activation Lock on stolen devices. The operation has maintained a network of 506 domains and 168 storefronts since early 2024, though researchers exposed the infrastructure through basic coding errors that left production logs and operator information accessible. Despite its sophisticated AI voice technology, the platform's reliance on bare relative paths and poor security practices made it vulnerable to investigation and takedown efforts.