SOCRadar researchers exposed AnonyMousKIT, a phishing-as-a-service platform using AI voice agents to impersonate Apple Support. The system targets stolen-iPhone owners, claiming the device is held at an Apple Store pending passcode recovery. Between August 2025 and May 2026, it made roughly 200 documented calls, mostly to Brazilian victims, at $0.10 per call. The infrastructure spans 506 domains and 168 reseller storefronts: a sprawling supply chain for a simple attack.
The documented calls show minimal success: 100 hung up, 48 timed out, 24 didn’t answer, no credentials captured. Yet the operation ran for over two years and spawned a full PhaaS marketplace. At $0.10 per call, even 1% success on a thousand-call campaign recoups costs, which explains the longevity.
The real story is the economics. Automating social engineering is now cheap enough to commodify and scale globally. Voice quality matters less than volume. When attempts cost a dime, tiny conversion rates pay out.
Sources: Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain
Coverage: Fake Apple Support AI Calls • AnonyMousKIT PhaaS voice AI agents
Related on this blog: [AUTO] Fake Codex Ads Deliver Mac Malware • [QT] Apple’s Bug Bounty Drowning in AI Noise • [AUTO] ChatGPT Powered a Fake Think Tank for Russian Disinformation