I know something about phishing and scam more or less, I raise servers made in php with serveo.net and hide the url with more things, thus making it undetectable
Iphone is difficult to penetrate, and even more so its latest versions, so for that I recommend learning the swift language offensively, more on the malware side