iPhone Duo Fake Preorder Uses $500 Bait To Target Crypto Wallets

Security researchers found a fake Apple iPhone Duo preorder page using a $500 voucher lure to target vulnerable iPhones and crypto wallets before Oct. 16 preorders.

Key Points:

• Exploit attempt can start when a vulnerable iPhone opens the page
• Payload targets crypto wallets, keychain credentials, notes and other personal data
• Apple says updated devices are protected against the reported DarkSword attacks

iPhone Duo Scam

Security researchers at Malwarebytes found the Apple-style page while tracking fraud tied to the iPhone Duo launch, according to findings published Sep. 29 and reported by 9to5Mac a day later.

The site offers a $500 “Authorized Partner Exclusive” voucher and AppleCare+ coverage. Official iPhone Duo preorders do not begin until Oct. 16.

Malwarebytes said the fake page also lists device sizes and colors that do not match Apple’s lineup, while several policy links on the site do not work. The exploit attempt begins before a visitor submits anything. Malwarebytes also said the page uses the leaked DarkSword exploit chain to probe vulnerable iPhones, then tries to load a separate payload that can collect device information, Apple Notes and saved keychain credentials.

Malwarebytes Wallet Risk