AI Voice Phishing Platform Targets Stolen Apple Device Owners

Security researchers have uncovered a sophisticated phishing-as-a-service platform that uses artificial intelligence voice calls and other deceptive tactics to steal credentials from owners of recently stolen Apple devices, enabling criminals to bypass security features and resell the phones. The platform, identified as AnonyMousKIT, has been active since early 2024 and operates like a structured criminal business, according to an investigation by the SOCRadar Threat Research Unit.

The service is designed to defeat Apple's Activation Lock, a security feature that ties an iPhone to its owner's Apple ID and renders it unusable without the correct credentials, even after a factory reset. AnonyMousKIT automates the process of harvesting the necessary information from victims. Attackers input a stolen device's serial number or IMEI into the platform, which then retrieves the model and live Find My status. Using contact information displayed on the device via Lost Mode, the platform initiates phishing campaigns through email, SMS, WhatsApp, recorded calls, or AI-generated voice agents posing as Apple Support.

The AI voice component is a key innovation. Researchers recovered 200 call...