AI-Powered AnonyMousKIT PhaaS Steals Apple IDs and 2FA Codes to Unlock Stolen iPhones

Researchers uncovered AnonyMousKIT, an AI-powered Phishing-as-a-Service platform that uses Apple-themed emails, SMS/WhatsApp lures and AI voice agents to socially engineer iPhone owners into revealing passcodes, Apple ID credentials, and 2FA codes so criminals can remove Activation Lock and resell devices. The service operates as a credit-based ecosystem with hundreds of domains and storefronts, recorded hundreds of voice calls and email attempts, and exposure of operational logs containing operator records and configuration details.