Overview
A phishing-as-a-service (PhaaS) operation dubbed AnonyMousKIT has been uncovered deploying autonomous voice AI agents to contact owners of stolen iPhones and trick them into surrendering device passcodes, Apple ID credentials, and two-factor authentication codes. Active since early 2024, the platform enables criminal resellers to bypass Apple’s Activation Lock — a feature designed to render stolen devices unusable — by socially engineering the original owner rather than attacking Apple’s infrastructure directly.
Threat intelligence firm SOCRadar exposed the operation after exploiting the platform operator’s use of bare relative paths, gaining visibility into infrastructure, call records, and interaction transcripts.
Technical Analysis
AnonyMousKIT operates as a structured criminal ecosystem with four principal capabilities:
- Device intelligence gathering — the platform extracts owner contact details from the iPhone’s Lost Mode feature (name, phone, email) to personalise attacks.
- Multi-channel phishing — victims are contacted via email, SMS, WhatsApp, or phone call, with messages impersonating Apple and citing correct device model and IMEI to establish legitimacy.
- Voice AI vishing — an AI voice agent operating under five distinct personas conducts live phone calls. SOCRadar recovered 200 call records and 55 interaction transcripts spanning August 2025 to May 2026, with 90% of calls targeting victims in Brazil. Cost per attempt: approximately $0.10.
- Credential capture — victims directed to fake Find My / Apple pages are prompted to submit their device passcode, Apple Account password, and 2FA code.
The recovered credentials are then used to disable Activation Lock, dramatically increasing the resale value of stolen devices and enabling access to iCloud backups and Keychain secrets. The platform supports 506 domains and 168 storefront reseller brands.
The use of AI voice agents is significant: they eliminate the need for human operators on individual calls, reduce per-attempt cost to near-zero, and allow the platform to scale vishing campaigns that were previously labour-intensive.
Framework Mapping
- AML.T0047 (AI-Enabled Product or Service) — AnonyMousKIT is itself a criminal AI-enabled service offering automated social engineering at scale.
- AML.T0103 (Deploy AI Agent) — Voice AI agents are autonomously deployed to conduct multi-turn deceptive conversations with victims.
- AML.T0088 (Generate Deepfakes / Synthetic Personas) — The agent operates under five distinct synthetic personas to avoid victim pattern recognition.
- LLM08 (Excessive Agency) — The AI agent acts with full autonomy in a sensitive, deceptive context without human oversight per interaction, representing an uncontrolled agentic deployment risk.
Impact Assessment
The primary victims are iPhone owners whose devices have been stolen. Secondary impact extends to the integrity of Apple’s Activation Lock as a theft deterrent. The $0.10-per-call economics make large-scale campaigns trivially affordable, and the platform’s reseller model means any low-sophistication criminal can access these capabilities. The Brazil-centric targeting (90% of calls) suggests a geographically concentrated criminal supply chain for stolen Apple hardware.
Mitigation & Recommendations
- Never disclose passcodes or 2FA codes via any inbound channel — Apple does not request these by phone, SMS, or email.
- Enable an alphanumeric passcode — longer passcodes increase resistance even if partial information is leaked.
- Set a Recovery Key — this makes it significantly harder for attackers to access your Apple Account even with stolen credentials.
- Verify device loss reports independently — if you receive a message claiming your device has been found, navigate directly to apple.com/findmy rather than clicking any link.
- Report suspicious contacts to [email protected] and local law enforcement.