AnonyMousKIT PhaaS Platform Exploits Voice AI to Phish iPhone Passcodes

A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature. According to reporting, the operation uses voice AI agents to phish iPhone passcodes through sophisticated social engineering campaigns. The platform's infrastructure enables threat actors to deploy AI-driven voice calls or messages that trick victims into revealing their device passcodes and iCloud credentials. Once obtained, these codes can be used to unlock stolen iPhones and disable Apple's Activation Lock, potentially allowing unauthorized resale or use of the devices. The campaign targets Apple device users globally and represents a evolution in PhaaS operations by integrating voice AI technology into phishing workflows. Security analysts note that the use of AI voice agents adds a layer of credibility to the social engineering attempts, making them harder for users to detect as fraudulent. Apple has not released a specific security update addressing this PhaaS operation, as the exploit relies on user interaction rather than a software vulnerability. Users are advised to remain vigilant against unsolicited requests for passcodes and verification codes, and to enable all available security features on their Apple ID accounts.