AI Voice Phishing Kit Targets Owners of Lost Apple Devices

Apple’s Activation Lock is designed to prevent a lost or stolen device from being erased and reused without authentication from its owner. That protection makes Apple ID credentials and verification codes valuable to thieves seeking to unlock devices for resale, while phishing-as-a-service platforms lower the technical barrier for launching targeted credential-theft campaigns.

Security researchers have disclosed AnonyMousKIT, an emerging phishing-as-a-service platform aimed specifically at owners of lost Apple devices. The toolkit incorporates generative-AI voice agents that impersonate Apple support representatives during calls, alongside other phishing methods, to solicit Apple ID details and verification codes. Attackers can then attempt to remove Activation Lock and prepare the compromised device for resale.