CYBERSECURITYTRACKER
Permanent story citation

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5046

As cited

Copy frozen at (site build).

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

Researchers disclosed details of AnonyMousKIT, a phishing-as-a-service platform that uses rented artificial intelligence (AI) voice agents to call stolen device owners impersonating Apple Support. The attackers attempt to extract device passcodes and two-factor authentication codes to circumvent Apple's Activation Lock protection.

Why it matters: Apple device owners and security teams need to recognize this social engineering threat: legitimate Apple Support will never call asking for passcodes or authentication codes, and stolen device owners should verify caller identity through official channels before sharing any credentials.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

Researchers disclosed details of AnonyMousKIT, a phishing-as-a-service platform that uses rented artificial intelligence (AI) voice agents to call stolen device owners impersonating Apple Support. The attackers attempt to extract device passcodes and two-factor authentication codes to circumvent Apple's Activation Lock protection.

Why it matters: Apple device owners and security teams need to recognize this social engineering threat: legitimate Apple Support will never call asking for passcodes or authentication codes, and stolen device owners should verify caller identity through official channels before sharing any credentials.

VendorsApple
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary