Researchers say a phishing-as-a-service platform called AnonyMousKIT targets people who recently lost or had an iPhone stolen by pretending to be “Apple Support.” The operation uses email/SMS/WhatsApp and AI-assisted voice calls to convince victims to share their iPhone passcode and follow a security link, allowing thieves to remove Activation Lock and resell the device.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
You lose your iPhone… and an hour later, “Hi, this is Alice from Apple Support. The Apple Store is holding your phone for security.” This is AnonyMousKIT, a phishing-as-a-service scam. The AI voice already knows your iPhone model, serial, even Find My status, then asks you to say your four- or six-digit passcode to ‘confirm ownership.’ Next, they say, “I’m sending a security link now,” and coach you through tapping a text message and entering an unlock code while you’re still on the call. Once they have your passcode and that code, they can remove Activation Lock and resell your phone. A real Apple Support agent will never ask for your iPhone passcode or coach you through a link on a call. If anyone does, hang up and contact Apple using the official Support app or website you open yourself.
This news roundup describes real social-engineering operations where attackers impersonate trusted support teams to trick people into giving up secrets. One campaign uses email/SMS/WhatsApp plus AI voice calls pretending to be Apple Support to steal iPhone passcodes, while another uses phishing…
The bulletin describes real-world social engineering where staff were tricked into disclosing sensitive data or access. In one case, Revolut employees responded to fraudulent information requests sent from a real government-domain email account, exposing extensive customer records. Separately,…
Microsoft described two real-world campaigns: an invoice fraud blast impersonating executives to trick finance teams into ACH payments, and a passkey-themed helpdesk scam that steals or bypasses authentication to take over Microsoft cloud accounts. In the second campaign, victims are called or…
Microsoft reports active intrusions where attackers trick employees with “passkey/SSO update” helpdesk pretexts delivered by phone, SMS, or even Microsoft Teams. Victims are sent to lookalike Microsoft sign-in pages or guided through device-code sign-in, letting attackers capture session access and…
Microsoft says it used a U.S. court order to seize and redirect domains tied to three Chinese-run phishing platforms that helped send hundreds of millions of scam messages worldwide. The platforms provided ready-made fake pages and messages impersonating trusted organizations, mainly to steal…
Attackers are sending calendar invitations that auto-appear in tools like Google Calendar, tricking people into clicking links or calling “support” numbers. The calendar event often mimics voicemails, payment receipts, or auto-renewals and leads to fake login pages (Microsoft/Google/PayPal) or…
