Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain

SOCRadar’s inside-out analysis exposes AnonyMousKIT, an AI-driven Phishing-as-a-Service tailored to unlocking stolen Apple devices by harvesting passcodes, Apple IDs, and 2FA via coordinated email, SMS, WhatsApp and AI vishing. The report documents a reseller ecosystem spanning 506 domains and 168 storefronts, leaked production logs and operator rosters, concrete IOCs (domains, IPs, hashes, email senders), and recommends layered defenses including NRD filtering, URL pattern detection, MDM controls, and hardened authentication.