Listen to the episode
TLDR
Security researchers have uncovered AnonyMousKIT , a phishing as a service (PhaaS) platform that automates the theft of iPhone unlock passcodes using AI generated voice agents . The service targets stolen Apple devices, calling the victim...
How it works
Security researchers have uncovered AnonyMousKIT , a phishing as a service (PhaaS) platform that automates the theft of iPhone unlock passcodes using AI generated voice agents . The service targets stolen Apple devices, calling the victim...
Red flags
- : Unsolicited phone call claiming to be from Apple Support asking for your device passcode Caller pressures you to read or enter your passcode "to verify ownership" AI voices that sound natural but may have slight robotic cadence or scripted responses
What to do
- 1: Never share your iPhone passcode, Apple ID password, or 2FA code over the phone, no matter who the caller claims to be If your iPhone is lost or stolen, use Find My iPhone (iCloud.com/find) to lock and erase it immediately Report suspicious calls impersonating Apple to reportphishing@apple.com and your local authorities
Source
bleepingcomputer
Source reviewed by Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes/FAQ
Is AnonyMousKIT PhaaS uses voice AI to phish iPhone passcodes from stolen devices a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: Unsolicited phone call claiming to be from Apple Support asking for your device passcode Caller pressures you to read or enter your passcode "to verify ownership" AI voices that sound natural but may have slight robotic cadence or scripted responses
What should I do first?
: Never share your iPhone passcode, Apple ID password, or 2FA code over the phone, no matter who the caller claims to be If your iPhone is lost or stolen, use Find My iPhone (iCloud.com/find) to lock and erase it immediately Report suspicious calls impersonating Apple to reportphishing@apple.com and your local authorities
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.