Security researchers found a fake Apple iPhone Duo preorder page using a $500 voucher lure to target vulnerable iPhones and crypto wallets before Oct. 16 preorders.

Key Points:

• Exploit attempt can start when a vulnerable iPhone opens the page
• Payload targets crypto wallets, keychain credentials, notes and other personal data
• Apple says updated devices are protected against the reported DarkSword attacks

iPhone Duo Scam

Security researchers at Malwarebytes found the Apple-style page while tracking fraud tied to the iPhone Duo launch, according to findings published Sep. 29 and reported by 9to5Mac a day later.

The site offers a $500 “Authorized Partner Exclusive” voucher and AppleCare+ coverage. Official iPhone Duo preorders do…