Fake iPhone Duo Preorder Page Can Steal Crypto Wallet Data and Much More
Malwarebytes said the scam can steal passwords, messages and crypto wallet data from iPhones running older iOS versions.
- Malwarebytes identified a convincing fake website promising early iPhone Duo preorders and a $500 "Authorized Partner Exclusive" voucher. The fraudulent page mimics Apple-style design to trick customers before the official Oct. 16 launch.
- This malicious site leverages the DarkSword exploit chain to target older, unpatched Apple devices. The attack initiates immediately upon loading the page in a browser, bypassing any need for user interaction to compromise vulnerable units.
- Once compromised, the exploit attempts to harvest sensitive data including saved credentials, Apple Notes, and cryptocurrency wallet information from MetaMask and Coinbase Wallet. Stefan Dasic, senior malware research engineer at Malwarebytes, said staying safe "means keeping up with technology."
- Official Duo preorders only begin Oct. 16 through Apple and Best Buy, so customers must avoid suspicious ads or URLs. Any site claiming earlier access or offering discount vouchers is a scam designed to steal personal data.
- Malwarebytes advises users to install the latest Software Update immediately via Settings to mitigate exposure. Maintaining current software protects against known exploits like DarkSword, which Apple addressed in previous security patches.
13 Articles
13 Articles
PSA: Do not open links to an early iPhone Duo pre-order page
Scammers have launched what is claimed to be a pre-order site for the iPhone Duo, but if you are on an older iOS, simply going to the page installs malware.The scam site looks so real, except for how Apple wouldn't offer a $500 voucher - image credit: Malwarebytes.Genuine iPhone Duo pre-orders start on October 16, 2026, and Apple is now promoting that you can "get ready" from October 12. If you're interested, follow the links on AppleInsider, or…
Apple Warns of Sophisticated iPhone Duo Phishing Scam Targeting Apple IDs
Apple has warned of a sophisticated phishing scam that uses fake preorder sites for nonexistent iPhone models like the "iPhone Duo" to steal Apple ID credentials, personal data, and credit card details. The professional-looking frauds spread via targeted ads and mimic Apple's store with urgency tactics. Users should only use official channels and change passwords immediately if affected.
Fake iPhone Duo Pre-Order Site Targets Crypto Wallets With DarkSword Malware, Report Warns
A fake iPhone Duo preorder website is using the DarkSword exploit chain to target vulnerable iPhones, according to Malwarebytes. The malicious page can attempt to access device information, Apple Notes, saved credentials, and data linked to crypto wallets, including MetaMask, Phantom, and Trust Wallet. Apple has patched the vulnerabilities associated with the DarkSword attacks.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
