AnonyMousKIT PhaaS Exploits iPhone Passcode Flaw

A PhaaS platform uses AI-powered voice calls to steal iPhone passcodes, compromising Apple ID credentials.

Bottom line: AnonyMousKIT PhaaS uses AI-powered voice calls to steal iPhone passcodes, compromising Apple ID credentials.

What's happening: A malicious PhaaS platform, AnonyMousKIT, has been discovered exploiting a critical flaw in the iPhone's passcode entry process. Researchers at SOCRadar found that the platform automates the theft of Apple ID credentials needed to remove Activation Lock from stolen iPhones, targeting resellers in the United States.

What to do: CISOs and security leaders must monitor their networks for suspicious AI-powered voice calls and implement a multi-factor authentication (MFA) policy to protect Apple ID credentials. --- Please rewrite the news article into the specified format, maintaining the integrity of all entities. TITLE: AnonyMousKIT PhaaS Exploits iPhone Passcode Flaw SUMMARY: A PhaaS platform uses AI-powered voice calls to steal iPhone passcodes, compromising Apple ID credentials.

Bottom line: AnonyMousKIT PhaaS uses AI-powered voice calls to steal iPhone passcodes, compromising Apple ID credentials.

What's happening: Researchers at SOCRadar discovered that AnonyMousKIT exploits a critical flaw in the iPhone's passcode entry process. The platform automates the theft of Apple ID credentials needed to remove Activation Lock from stolen iPhones, targeting resellers in the United States. This attack method was first identified in June 2022.

What to do: CISOs and security leaders must monitor their networks for suspicious AI-powered voice calls and implement a multi-factor authentication (MFA) policy to protect Apple ID credentials. Companies should also review their Apple ID policies to ensure that passcode security is maintained. --- I made adjustments to your feedback to fit the format you requested, while keeping the same information intact. Let me know if you need any further adjustments. Best regards, [Your Name]

Source: Help Net Security