AnonyMousKIT: Inside the AI Voice Phishing Service Unlocking iPhones

Stolen-phone resale has always depended on beating Apple’s Activation Lock, and criminals have usually done that with scripted phishing texts and a fair bit of manual social engineering. SOCRadar’s research, published this week, shows that workflow has been automated end to end. The platform, dubbed AnonyMousKIT, wraps a commercial voice AI into a subscription service that anyone can rent to call stolen-device owners, impersonate Apple Support, and talk them into reading out the exact code needed to strip Activation Lock and resell the phone clean.

What makes this worth a security team’s attention isn’t the underlying scam, Apple Support impersonation is old news, it’s the industrialization. AnonyMousKIT isn’t a lone operator with a burner phone and a script. It’s a maintained software product with a customer base, a pricing model, and enough scale that researchers could map its infrastructure the way they’d map a legitimate SaaS company.

How the Platform Actually Works

A subscriber starts with nothing more than a device’s serial number or IMEI, typically obtained alongside a stolen phone. AnonyMousKIT looks up the device model and pulls its live Find My status, giving the operator a sense of whether the legitimate owner has already reported it lost. From there the platform coordinates outreach across email, SMS, WhatsApp, prerecorded calls, and, in the cases SOCRadar analyzed most closely, live AI voice agents.

The voice agent isn’t a custom model built for the job. It’s a rented commercial conversational AI product, configured with five distinct personas. Three of them use the same core identity, “Alice Dias, Apple Support,” localized across English, Spanish, and Brazilian Portuguese. The script follows a consistent shape: confirm the victim owns the device in question, describe a supposed attempt to unlock it at a physical Apple Store, ask whether the victim received a text with a security link, resend it if they say no, and walk them through entering either that code or their passcode directly. Once captured, the credentials get handed off for Activation Lock removal, and the device re-enters the resale pipeline scrubbed of its original owner’s identity.

Scale, Structure, and How Researchers Got In

SOCRadar’s visibility into the operation came partly from an operational security failure on the platform’s own end: bare relative paths in its code exposed production logs and an operator roster that wasn’t meant to be public. That gave researchers a rare direct look at a live PhaaS backend rather than reconstructing it secondhand from victim reports.

What they found was a genuinely large operation. AnonyMousKIT ties back to 506 domains and 168 separately branded storefronts, each acting as its own reseller front while running on the same underlying platform. The structure is three tiers deep: a developer who builds and maintains the core system, licensing buyers who purchase access and stand up their own branded storefronts, and operators who actually run the phishing campaigns against victims day to day. That’s the classic malware-as-a-service org chart, just applied to voice social engineering instead of a payload.

The recovered logs are small in absolute terms, 200 calls and 55 transcripts, but the targeting pattern is sharp: 179 of those 200 calls went to victims in Brazil. Total spend on the voice-call infrastructure across that sample came to $19.24, a reminder of how cheap commercial voice AI has made this kind of operation to run at scale. The platform has reportedly been active since early 2024, which means this specific automation layer predates most of the mainstream alarm about AI voice cloning in fraud, it just hadn’t been publicly dissected until now.

Why This Matters Beyond Stolen Phones

The interesting part for anyone tracking AI-enabled crime isn’t the Activation Lock angle specifically, it’s the business model. AnonyMousKIT demonstrates that voice AI has crossed a threshold where standing up a credible, multilingual, always-available social engineering operation no longer requires a call center or fluent scammers. A single developer can build the orchestration layer once, wire it to a rented voice AI product, and license it out to dozens of resellers who never need to write a line of code or speak a second language convincingly. The three-tier structure means the group building the automation is largely insulated from the operators actually defrauding victims, which is the same liability-laundering pattern seen in ransomware-as-a-service and increasingly in AI-driven fraud kits.

It’s also a useful data point on how these platforms get caught. This wasn’t detected through the phone calls themselves, it was a basic web security mistake, exposed relative paths leaking production logs, that handed researchers the operator roster and call records. Criminal infrastructure built on rented commercial AI still has to expose an admin backend somewhere, and that backend is often built with far less care than the fraud script running on top of it.

Defensive and Detection Guidance

For consumers, the practical advice is unchanged but worth repeating given how convincing these calls are: Apple does not call customers to verify Activation Lock status or ask for passcodes over the phone, full stop. Any inbound call claiming to be Apple Support asking for a numeric code should be treated as fraudulent regardless of caller ID, language fluency, or how specific the story about a store visit sounds.

For carriers, device resellers, and fraud teams, the more actionable signal is behavioral rather than content-based: campaigns like this generate a distinctive pattern of Find My status lookups against serial numbers or IMEIs shortly before a wave of outbound contact attempts to the registered owner. Monitoring for automated bulk device-status queries, rather than trying to detect the AI voice calls themselves, is likely to catch this kind of operation earlier in its pipeline. For security researchers, the SOCRadar disclosure is also a reminder that PhaaS platforms built on commercial AI APIs inherit the same basic web infrastructure weaknesses as any other SaaS product, and that exposed logs and admin paths remain one of the more reliable ways into an otherwise opaque criminal supply chain.

References

• AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes
• Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain
• Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
• AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes