GoKawiilAnonyMousKIT phishing service uses AI voice bots to unlock stolen iPhones
Threat intelligence firm SOCRadar has exposed AnonyMousKIT, a phishing-as-a-service platform active since early 2024 that automates theft of Apple Activation Lock codes needed to unlock stolen iPhones. The operation spans 506 domains and 168 reseller storefronts, and uses AI-driven voice calls impersonating Apple to trick victims into handing over unlock credentials, iCloud data, and Keychain passwords.
GoKawiil's interpretation of the reporting above, not reported fact.
This shows criminal groups scaling social engineering with cheap AI voice agents—each call costs roughly ten cents—making mass phishing of device owners economically viable at industrial scale. It also highlights that Apple's Activation Lock, while effective at deterring casual resale of stolen phones, can still be circumvented through human deception rather than technical exploits, putting owners' personal data and accounts at risk even after their device is stolen.
- AnonyMousKIT automates retrieval of Activation Lock codes from stolen iPhones using AI voice agents posing as Apple support.
- The service supports a large criminal ecosystem with 506 domains and 168 reseller storefronts selling unlocked stolen devices.
- Most phishing calls analyzed targeted victims in Brazil, costing operators about $0.10 per call attempt.
YubiKey 5C NFC Security Key — When phishing crews are running AI voice agents to trick people into handing over Apple ID credentials and passcodes, a hardware security key is the strongest backstop. The YubiKey 5C NFC works with iPhone over NFC and USB-C devices, so a stolen password alone can't unlock your account.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-25
Published there as: “AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.