Scammers Are Using iPhone Duo Pre-Orders to Steal Passwords — Here's How to Stay Safe

The Threat of Fake iPhone Duo Pre-Orders

Cybercriminals are wasting no time capitalizing on the massive excitement surrounding Apple's upcoming hardware announcements. Although the much-anticipated iPhone Duo is not yet available and official pre-orders are not scheduled to open until October 16, malicious actors have already launched sophisticated phishing campaigns and fake promotional ads promising early access and massive discounts.

Discovered by security researchers at Malwarebytes, these fraudulent campaigns lure potential buyers in by claiming they can save up to $500 on the heavily discussed foldable device. Given that the iPhone Duo is expected to start at a premium price point of around $2,000, the temptation to secure a major discount causes many users to ignore traditional warning signs. However, security experts emphasize that if a deal seems too good to be true, it almost certainly is.

The Dangerous DarkSword Exploit Chain

What makes this particular scam far more dangerous than standard phishing attempts is its technical sophistication. According to Malwarebytes, simply visiting the malicious pre-order page can trigger a leaked DarkSword exploit chain designed to target vulnerable iOS devices. Users do not need to download malicious attachments, click additional links, or even submit their personal details into the fake form for the exploit sequence to initiate.

The exploit primarily targets iPhones running iOS versions 18.4 through 18.6.2, actively attempting to compromise system security to steal sensitive stored data. This includes saved account credentials, personal notes, and cryptocurrency wallet information. Fortunately, current reports indicate that iPads and Macs remain unaffected by this specific vector.

Recognizing the Red Flags

While the fraudulent web pages are carefully designed to mimic Apple's official aesthetic—complete with authentic fonts, copyright notices, and corporate branding—careful scrutiny reveals critical inconsistencies. For instance, some fake pre-order forms mention color options like "Natural titanium," despite the fact that official announcements confirm the iPhone Duo will only be available in Start White and Night Sky. Furthermore, the scam listings frequently misquote physical dimensions, mistakenly referencing 6.3-inch and 6.9-inch screens typical of standard iPhone 18 Pro models, whereas the true iPhone Duo features a single 7.6-inch foldable display alongside a 5.4-inch cover screen. Additionally, standard policy and legal links on these fraudulent sites typically lead nowhere.

How to Protect Your Device

To ensure your personal information and device remain secure against such sophisticated threats, cybersecurity experts recommend taking immediate preventive measures:

• Update Your Software: Ensure your iPhone is running the latest operating system updates. Upgrading past vulnerable versions closes the security gaps exploited by malware like DarkSword.
• Exercise Skepticism: Be exceptionally wary of unsolicited ads, social media posts, or emails offering unbelievable discounts or early reservation access for unreleased products.
• Stick to Trusted Retailers: Only pre-order Apple devices through authorized channels, such as the official Apple Store, major electronics retailers like Best Buy or Walmart, and reputable cellular network carriers.

If you suspect you may have accidentally visited one of these malicious sites, experts recommend immediately restarting your device, as a standard reboot typically stops active data exfiltration processes. For maximum security, users should also consider migrating cryptocurrency assets to a newly generated wallet and manually updating critical online passwords.