--- title: AnonyMousKIT PhaaS uses voice AI agents to phish iPhone... description: A phishing-as-a-service platform called AnonyMousKIT, active since early 2024, automates the process of retrieving Activation Lock unlock codes from stolen... canonical: https://daily.dev/posts/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes-fjl3onax3 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes | daily.dev og:description: A phishing-as-a-service platform called AnonyMousKIT, active since early 2024, automates the process of retrieving Activation Lock unlock codes from stolen... og:url: https://daily.dev/posts/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes-fjl3onax3 og:image: https://api.daily.dev/og/posts/fJl3oNAx3.png og:image:alt: AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary A phishing-as-a-service platform called AnonyMousKIT, active since early 2024, automates the process of retrieving Activation Lock unlock codes from stolen iPhones. Researchers at SOCRadar found the platform connected to 506 domains and 168 reseller storefronts, and uncovered 200 recorded phone calls made by AI voice agents impersonating Apple Support (one persona named 'Alice') between August 2025 and May 2026. The calls, costing about $0.10 each, tricked victims into revealing device passcodes, Apple Account credentials, and 2FA codes via fake Find My or Apple pages, letting attackers wipe and resell stolen devices while also exposing iCloud backups, Keychain passwords, and corporate data. Calls were concentrated mostly in Brazil, with campaigns also hitting South Africa, Indonesia, Italy, India, and Kenya. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does the AnonyMousKIT phishing kit trick iPhone owners into unlocking stolen devices? AnonyMousKIT uses stolen device data from Apple's Lost Mode feature to contact victims by email, SMS, WhatsApp, or phone, impersonating Apple with correct model and IMEI details. A voice AI agent persona, such as one named Alice from Apple Support, tells victims their lost device was found and asks them to confirm ownership by dictating their passcode, then directs them to a fake Apple or Find My page to capture their Apple ID credentials and two-factor code. _daily.dev surfaces security research like this for teams tracking emerging phishing techniques._ ### How much does it cost attackers to run AI voice phishing calls at scale, according to SOCRadar's research on AnonyMousKIT? Each AI-driven phishing call made through the AnonyMousKIT platform cost the operator about $0.10 per attempt. SOCRadar recovered records of 200 such calls made between August 2025 and May 2026, using 55 distinct transcripts across five different voice AI personas, with 90% of the calls targeting victims in Brazil. _Security teams evaluating AI-driven fraud risk can follow research like this on daily.dev._ ## Similar posts on daily.dev - [Crims hit the easy button for IT helpdesk scams](https://daily.dev/posts/crims-hit-the-easy-button-for-it-helpdesk-scams-xzznatbdy) · The Register · 3 upvotes · 0 comments - [EvilTokens Campaign Reveals Device Code Phishing Ticks Up 1,380%, Powered by AI](https://daily.dev/posts/eviltokens-campaign-reveals-device-code-phishing-ticks-up-1-380-powered-by-ai-mreylstuo) · Security Boulevard · 0 upvotes · 0 comments - [AI-Assisted Phishing Campaign Harvesting Victim Data](https://daily.dev/posts/ai-assisted-phishing-campaign-harvesting-victim-data-nwz2lwx8c) · Cyble · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#apple](https://daily.dev/tags/apple), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes-fjl3onax3) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes","url":"https://daily.dev/posts/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes-fjl3onax3","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes-fjl3onax3"},"datePublished":"2026-08-25T20:29:28.465Z","dateModified":"2026-08-25T21:57:59.158Z","description":"A phishing-as-a-service platform called AnonyMousKIT, active since early 2024, automates the process of retrieving Activation Lock unlock codes from stolen...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bc02770b14b88c13cc9e1363e0ee0800?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bc02770b14b88c13cc9e1363e0ee0800?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes-fjl3onax3","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,apple,phishing","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes-fjl3onax3#faq","mainEntity":[{"@type":"Question","name":"How does the AnonyMousKIT phishing kit trick iPhone owners into unlocking stolen devices?","acceptedAnswer":{"@type":"Answer","text":"AnonyMousKIT uses stolen device data from Apple's Lost Mode feature to contact victims by email, SMS, WhatsApp, or phone, impersonating Apple with correct model and IMEI details. A voice AI agent persona, such as one named Alice from Apple Support, tells victims their lost device was found and asks them to confirm ownership by dictating their passcode, then directs them to a fake Apple or Find My page to capture their Apple ID credentials and two-factor code. daily.dev surfaces security research like this for teams tracking emerging phishing techniques."}},{"@type":"Question","name":"How much does it cost attackers to run AI voice phishing calls at scale, according to SOCRadar's research on AnonyMousKIT?","acceptedAnswer":{"@type":"Answer","text":"Each AI-driven phishing call made through the AnonyMousKIT platform cost the operator about $0.10 per attempt. SOCRadar recovered records of 200 such calls made between August 2025 and May 2026, using 55 distinct transcripts across five different voice AI personas, with 90% of the calls targeting victims in Brazil. Security teams evaluating AI-driven fraud risk can follow research like this on daily.dev."}}]} ```