Threat

Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain

Page published

Coverage timeline

discovered socradar.io primary 25 Aug 2026bleepingcomputer.comobserved 26 Aug 2026thehackernews.comobserved

Why it matters

AnonyMousKIT shows AI voice agents being operationalized at scale and low cost in a real criminal phishing supply chain, turning automated conversational AI into an effective social-engineering weapon against victims.

AnonyMousKIT, a phishing-as-a-service platform active since early 2024, weaponizes voice AI agents to call owners of stolen iPhones and trick them into surrendering device passcodes, Apple ID credentials, and 2FA codes to defeat Apple's Activation Lock. SOCRadar researchers recovered records of 200 AI-voice calls made between August 2025 and May 2026 across five personas (about $0.10 per call, 90% targeting Brazil), tied to 506 domains and 168 reseller storefronts.