Fake iPhone Duo preorder page reportedly targets vulnerable iPhones for crypto wallet and data theft

A scam site posing as an early iPhone Duo preorder page is reportedly targeting older unpatched iPhones with the DarkSword exploit chain. CNET, citing Malwarebytes, and 9to5Mac reported that simply visiting the page can start the attack attempt, without needing users to click or fill out a form. The fake page mimics Apple’s style, offers a $500 voucher and presents itself as an “Authorized Partner Exclusive.” CNET reported that Apple’s real iPhone Duo preorder window opens Oct. 16, with in-store sales set for Oct. 23. According to CNET’s reporting on Malwarebytes’ findings, the scam targets iPhones running iOS 18.4 to 18.6.2, and if the exploit succeeds it can reportedly attempt to collect passwords, messages, call history, contacts, voicemail, email, photos, app information, cryptocurrency wallet data and Apple Notes.