A phishing kit rents an AI voice agent to call theft victims and ask for their 2FA code
SOCRadar documented AnonyMousKIT, a phishing-as-a-service platform built to strip Apple Activation Lock. An AI persona called Alice from Apple Support phones victims in three languages and asks for the device passcode, Apple ID, and a live two-factor code, at roughly ten cents a call.
SOCRadar's Threat Research Unit disclosed AnonyMousKIT on August 26, 2026, a phishing-as-a-service platform built specifically to strip Apple's Activation Lock from stolen devices. It rents Vapi's commercial voice platform to run an AI persona, "Alice from Apple Support," in English, Spanish, and Portuguese. The agent calls the theft victim, confirms the device passcode, then asks for Apple ID credentials and a live two-factor code, mirroring real support scripts closely enough to pass. Calls cost about 9.6 cents each. SOCRadar documented 200 calls between August 2025 and May 2026, mostly to Brazilian numbers, across 30 installations on 42 domains, 188 of which were still live.
Why it matters
Voice phishing used to be rate-limited by human operators who had to speak the target's language. At ten cents a call, in three languages, on rented infrastructure, that constraint is gone, and this kit is aimed at consumers rather than enterprises, which is where the cost curve bites first. The mechanic is the same one that defeats enterprise MFA: a real-time relay of a one-time code from a human who believes they are talking to support. Codes that can be read aloud can be relayed. Phishing-resistant MFA with a hardware key removes the relay entirely because there is nothing for the victim to recite. The same script works against your help desk, which is how Scattered Spider operates.
Source: The Hacker News
Related on Start with Identity
- BlogDevice code phishing industrialises: 25 kits, and Microsoft counts new campaigns daily
The OAuth device authorization flow built for smart TVs is now a phishing-as-a-service product line. Microsoft reported 10 to 15 new campaigns every 24 hours by
- BlogJalisco and OmegaLord: phishing kits built around device-code abuse
ReliaQuest found two Microsoft 365 phishing kits. Jalisco abuses the OAuth device authorization grant, generating fresh codes in real time to beat the 15-minute
- BlogThree Russian clusters move from password phishing to OAuth token theft
Google Threat Intelligence Group tracked UNC6293, UNC7005, and UNC5976 abusing device-code flow, verification-code relay, and fake Continue with Google pages to
- TechniqueDevice code phishing
The victim enters a code on Microsoft's own login page and approves a real prompt. The attacker requested that code from a second device and walks away with acc
- TechniqueAgent instruction injection
An AI coding agent reads whatever text is in front of it, an issue, a title, a comment, and treats it as instruction. If that runner also holds workflow secrets
- TechniqueAttacker-in-the-middle phishing proxy
A reverse proxy sits between the user and the real login page, relays every step of authentication including MFA, and keeps the session cookie the successful lo