Executive Summary
SOCRadar tracks AnonyMousKIT, a phishing service using rented AI voice agents posing as Apple Support to get stolen-device owners' passcodes and remove Activation Lock.
What Happened
Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to strip Apple's Activation Lock from stolen devices, using rented AI voice agents that call theft victims posing as Apple Support and ask for their device passcode. SOCRadar Threat Research Unit (STRU) said the platform, which it tracks as AnonyMousKIT, is credit-metered and drives lures across
Affected Products
- Apple iPhone
Vulnerability / Attack Technique
AI voice agent vishing
Technical Mechanism
Automated AI calls impersonate support staff.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
AI voice agents make vishing cheap and scalable. RealGround analysis: Apple never calls asking for passcodes.
Recommended Controls
- Warn users that support never asks for passcodes
Related RealGround Service
AI Red Teaming · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/fake-apple-support-ai-calls-target.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.