Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

Summary

A phishing-as-a-service platform called AnonyMousKIT is using AI voice agents to impersonate Apple Support. These AI agents call owners of stolen Apple devices, attempting to trick them into revealing passcodes and two-factor authentication codes to bypass Activation Lock.

IFF Assessment

FOE

This attack leverages AI to enhance phishing scams, making it more convincing and potentially leading to the compromise of sensitive user information and device access.

Defender Context

This highlights a growing trend of AI being weaponized for sophisticated phishing attacks, particularly targeting victims of device theft. Defenders should be aware of AI-generated voice scams and educate users to be extremely cautious when receiving unsolicited support calls, especially when asked for sensitive information.

Read Full Story →