AI News Feed
Market watch
LG UltraFine Evo 32U990A-S Hits Record-Low $1,099 on Amazon, TechRadar ReportsNewegg Labor Day Deal: 32GB Kingston Fury Beast DDR4-3200 Kit Nearly Half Price at $179.99 with CodeGalaxy Z Fold 8 inner screen corners reported with excessive giveHuawei unveils Mate XT 2 tri-fold with privacy-screen edition as Apple prepares folding iPhoneWall Street Analysts Recommend Nvidia, Uber and Marvell for Long-Term GrowthLenovo, AMD and Huawei Put Local Large-Model AI at Center of New Devices
LG UltraFine Evo 32U990A-S Hits Record-Low $1,099 on Amazon, TechRadar ReportsNewegg Labor Day Deal: 32GB Kingston Fury Beast DDR4-3200 Kit Nearly Half Price at $179.99 with CodeGalaxy Z Fold 8 inner screen corners reported with excessive giveHuawei unveils Mate XT 2 tri-fold with privacy-screen edition as Apple prepares folding iPhoneWall Street Analysts Recommend Nvidia, Uber and Marvell for Long-Term GrowthLenovo, AMD and Huawei Put Local Large-Model AI at Center of New Devices
Cybersecurity

New 'AnonyMous' phishing campaign targets iPhone users with fake AI Apple support calls

Researchers found an active phishing kit abusing Apple's Lost Mode to trick iPhone owners into revealing credentials, with 500+ domains and AI voice calls.

AI News Feed · 2026-08-27 00:58

According to security researchers SOCRadar, the kit allows criminals to create fake Find My or Apple pages. They use contact details displayed on stolen iPhones to reach out to victims via email, SMS, WhatsApp, or even AI-powered phone calls, posing as Apple support agents and claiming the device has been found.

The attackers provide the victim with the correct model and IMEI details to make their claims seem genuine. They then direct victims to a spoofed Find My page to confirm their identity by entering credentials needed to unlock the phone. Those credentials are captured and used to unlock and wipe the device, which is then sold on the black market at a higher price.

SOCRadar says the earliest records of AnonyMousKIT date back to early 2024, and it has grown to more than 500 domains with over 150 storefront brands acting as resellers and affiliates. The researchers recorded about 200 calls made to victims between August 2025 and May 2026, using five AI agent personas and 55 different interaction transcripts. Each call cost the attackers $0.10, and 90% of them were directed at Brazilian victims.

A small percentage of email correspondence targeted government and corporate addresses, including attempts against South African government domains and a local university. While the campaign is global, it is mostly focused on South Africa, Indonesia, India, Kenya, Brazil, and Italy.

SOCRadar describes AnonyMousKIT not simply as a phishing kit but as "a small software business with a criminal customer base." Its main innovation is an automated, LLM-driven voice vector that runs dynamic vishing across three languages using structured pretexts synced with email and SMS lures, removing the need for fluent human callers. At the time of the report, the campaign was still ongoing.