GKRootWire
Dev Tools Why 'Zero-Cost' Value Classes Still Need Compiler HelpAI Z.ai Unmasked as Creator of Chart-Topping Ox Alpha ModelAI Robotics AI Models Are Finally Leaving Their 'GPT-2 Moment' BehindAI QueryStory Raises $6M to Make AI Answers TrustworthyAI Arga Labs raises $10M to fix how enterprise AI agents get trainedGadgets Startup Legato Exits Stealth With AI-Powered Hearing GlassesDev Tools Why 'Zero-Cost' Value Classes Still Need Compiler HelpAI Z.ai Unmasked as Creator of Chart-Topping Ox Alpha ModelAI Robotics AI Models Are Finally Leaving Their 'GPT-2 Moment' BehindAI QueryStory Raises $6M to Make AI Answers TrustworthyAI Arga Labs raises $10M to fix how enterprise AI agents get trainedGadgets Startup Legato Exits Stealth With AI-Powered Hearing Glasses
Security

New Phishing Kit Uses AI Voice Agents to Steal iPhone Unlock Codes

AnonyMousKIT automates the social engineering needed to bypass Apple's Activation Lock on stolen devices.

Researchers have identified a phishing-as-a-service platform called AnonyMousKIT that's being sold to criminals who traffic in stolen iPhones. Rather than relying on human scammers to call victims and trick them into revealing their device passcode or iCloud credentials, the kit deploys AI-generated voice agents that impersonate Apple support and walk targets through fake "recovery" steps.

The stolen credentials are then used to disable Activation Lock, the anti-theft feature that normally renders a stolen iPhone useless without the original owner's Apple ID password. Once unlocked, the devices can be resold at full value instead of being stripped for parts.

The platform reportedly packages everything a low-skill criminal needs: call scripts, spoofed caller ID, and the voice synthesis engine itself, turning device unlocking into a subscription service.

Why it matters: This is a clear sign that generative voice AI has lowered the skill floor for large-scale social engineering, letting theft rings scale phishing calls the way spam email once scaled phishing texts. Apple's Activation Lock was designed to make stolen phones worthless, but automated voice phishing directly attacks the human trust layer protecting that safeguard, not the encryption itself.

Sources: BleepingComputer