AnonyMousKIT used voice AI to phish passcodes of stolen iPhones

What happened

SOCRadar disclosed AnonyMousKIT, a phishing-as-a-service kit whose voice AI impersonates Apple. It calls owners of lost or stolen iPhones and gets them to hand over the lock-screen passcode, Apple ID and verification codes, so the thieves can switch off Activation Lock.

Real device details, such as the model and Find My status, make the call sound genuine.

What was found

The kit has five AI personas and has run since early 2024 across 506 domains and 168 storefront brands. A recovered sample held 200 call records, about 90% to Brazil, and 55 transcripts from August 2025 to May 2026. Activity was also reported in South Africa, Indonesia, Italy, India and Kenya; no victim count is given.

Data at risk

• Lock-screen passcode
• Apple ID
• Verification codes
• iCloud backups
• Keychain data

What you should do

1. 1Never give your passcode, Apple ID password or a verification code to anyone claiming to be Apple, by phone, text or email.
2. 2Put only the contact details you need in a Lost Mode message.