Fake iPhone Duo preorder page reportedly uses iPhone exploit to steal data on load

A fake iPhone Duo preorder page is circulating ahead of Apple’s Oct. 16 preorder date, and CNET reports, citing Malwarebytes, that it can begin stealing data from vulnerable iPhones as soon as the page loads. The reported attack uses the DarkSword exploit chain, which CNET says targets iPhones running iOS 18.4 to 18.6.2 and does not include iPad or Mac entries in its code. According to CNET, the scam can expose personal and financial information, including cryptocurrency wallet data, while Apple’s actual iPhone Duo preorders are not scheduled to open until Oct. 16, with in-store sales set for Oct. 23.