An apple a day, a phish away.

An investigation into "AnonyMousKIT" reveals an AI-powered Phishing-as-a-Service platform that impersonates Apple Support through email, SMS, WhatsApp and AI-driven voice calls to steal Apple credentials and bypass Activation Lock. Researchers uncovered a broad criminal ecosystem—506 domains, 168 storefront brands, and 30 backend installations—and found coding flaws that exposed operational logs, shared infrastructure, developer activity, and a reseller network supporting the operation.