{"data":{"id":"2f01dbd6-3f5e-4e83-92e2-fd0bb122c6a9","title":"AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes","summary":"AnonyMousKIT is a phishing-as-a-service platform (PhaaS, an illegal service that automates attacks for paying customers) that uses voice AI agents to trick iPhone owners into revealing their passcodes and Apple account credentials. Once attackers obtain these credentials, they can bypass Activation Lock (Apple's security feature that links a stolen iPhone to the owner's account), access the victim's personal data like iCloud backups and passwords, and resell the unlocked device. The operation has been active since early 2024 and uses fake Apple support calls and phishing emails impersonating Apple to deceive victims.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes/","publishedAt":"2026-08-25T20:25:26.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","jailbreak"],"issueType":"news","affectedPackages":null,"affectedVendors":["Apple"],"affectedVendorsRaw":["Apple","AnonyMousKIT"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-25T20:25:26.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}