Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
Researchers uncover AnonyMousKIT, a phishing-as-a-service platform using AI voice agents to bypass Apple's Activation Lock on stolen devices.

Key Takeaways
- AnonyMousKIT is a PhaaS platform that uses AI voice agents to impersonate Apple Support and extract passcodes and 2FA codes from theft victims.
- The service is credit-metered, indicating a commercial criminal ecosystem.
- The attack targets owners of stolen Apple devices (iPhone, iPad, Mac) to bypass Activation Lock and facilitate resale.
Related Security News

Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The sentencing, reported by BleepingComputer in September 2026, concluded a federal case targeting individuals who abused their military backgrounds to conduct financially motivated email fraud. The attacks spanned multiple years prior to sentencing, though specific victim counts and total financial losses were not detailed in the reporting. The case underscores the legal consequences of using military credentials and training for cyber-enabled fraud.

![Placeholder Domain third-party[.]com Observed Serving ClickFix Lure to Windows Browsers](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhy4aXDWSC5cKzOZO8lRbk8o5I1fHPlCGbfxxYL6tyJxauEL-8EVj7-AypDhYt_Wg6bDLqlj0UK4LrGJdeI4ChsksaB6tTZxo8ikCLdwC0wjRfJPE_Z1qM_CVUg7s1ORdmWW2XTDtlPPDcI8JvelrbmJhcjVthnqYWQrZ7ySnIMMPRZfa_VzgaBCWyWc_JJ/s1700-nu-rw-lo-l85-e365/third.jpg)

