Scammers have created a fake iPhone Duo preorder page that steals crypto wallet data and more, just days before pre-orders start on Friday, October 16. The malicious website convincingly replicates Apple's design and claims to offer a $500 discount voucher as an 'Authorized Partner Exclusive.' Security researchers at Malwarebytes say the page uses the Dark Sword exploit chain to target vulnerable i Phones. Simply visiting the page can trigger the attack without any user interaction.

If successful, the malware steals saved credentials, cryptocurrency wallet data from apps like Meta Mask, Phantom, Trust Wallet, Coinbase Wallet, Exodus, and Tonkeeper, as well as notes and device information. It also attempts to access messages, contacts, call history, voicemail, email, calendar entries, and location data. The exploit chain was disclosed by Google in March, with Apple issuing a patch shortly after.