A phishing service called AnonyMousKIT is helping criminals unlock stolen iPhones by tricking owners into giving up their passcodes and Apple account details. SOCRadar says the platform has been active since early 2024, is tied to 506 domains and 168 reseller brands, and uses email, SMS, WhatsApp, and AI voice agents posing as Apple Support to collect device passcodes, Apple ID credentials, and two-factor authentication codes so attackers can disable Activation Lock, access iCloud backups, and recover Keychain secrets.
Why it matters: This matters to consumers and organizations because a stolen phone can become a gateway to personal, financial, and work data if the owner is socially engineered after the theft. People with lost or stolen iPhones should treat any message or call claiming Apple found the device as suspicious and should never share a device passcode, Apple ID password, or verification code.
info@thehackernews.com (The Hacker News)
2026.08.26
96% relevant
This appears to cover the same underlying campaign: criminals impersonating Apple Support with AI-generated calls and fake Apple pages to trick stolen-device owners into disclosing passcodes, Apple ID details, and 2FA codes.
Bill Toulas
2026.08.25
100% relevant
This article establishes a distinct tracked story around the AnonyMousKIT PhaaS operation, including its Apple-device theft workflow, AI voice phishing personas, scale, and infrastructure.
← Back to all stories