iPhone Duo pre-orders don’t open until October 16, but scammers aren’t waiting.
Security researchers at Malwarebytes have found a fake pre-order page for Apple’s first foldable that looks almost identical to the real thing. It even offers a $500 discount voucher labeled as an “Authorized Partner Exclusive.” Behind that polished design is something much nastier.
The page uses the DarkSword exploit chain, which targets older iPhones that haven’t been patched. And here’s the scary part. You don’t have to tap anything, fill out a form, or download a file. Just opening the page is enough to launch the attack.
What the malware goes after
If the exploit works, it starts by grabbing your device identifier and status, then tries to send off a list of your installed apps and the contents of your Apple Notes. From there, it hunts for crypto wallets, including MetaMask, Phantom, Trust Wallet, Coinbase Wallet, Exodus, and Tonkeeper. It also tries to pull saved credentials from your iPhone’s keychain.
If it finds one of those wallets, it attempts to upload wallet files, keychain data, and even photo thumbnails. That could put your money at serious risk.
It doesn’t stop there, either. The malware also goes after your messages, contacts, call history, voicemail, email, calendar, and cached location data. It can even check in with its server for new instructions.
This isn’t DarkSword’s first time in the headlines. Google and other security researchers first uncovered it back in March, and Apple patched it later that month. Shortly after, a newer version leaked onto GitHub, putting it in the hands of pretty much anyone who wanted it. So if your iPhone is running outdated software, you’re a target.
Protecting yourself is simple. Don’t open links unless you trust the sender and were expecting them. And keep your iPhone updated. Apple just released iOS 26.7.1 to fix another actively exploited flaw, so if you’ve been putting off updates, now’s the time.
Let’s be real, the iPhone Duo is Apple’s most hyped phone in years, and scammers know it. When pre-orders open, stick to Apple’s website, the Apple Store app, or your carrier. No legitimate retailer is handing out $500 off a phone that isn’t even up for pre-order yet.
The post A Fake iPhone Duo Pre-Order Page Is Hacking iPhones Without a Single Tap appeared first on Android Headlines.
