Security researchers recently uncovered a dangerous new scam targeting people hoping to buy the upcoming Apple iPhone Duo. Criminals built a fake website that looks highly convincing to trick eager buyers. If you are waiting to place your order for the highly anticipated device, you need to watch out for this malicious webpage because simply visiting it can put your digital assets at massive risk.
A malicious webpage targets unpatched iPhone Duo phones to steal sensitive data
While official pre-orders in the US are set to open in mid-October, the fake site claims to offer early access. To lure victims in, the page advertises a massive five hundred dollar discount voucher as an exclusive partner deal. The most alarming part of this scam is that you do not even need to fill out a form or click a download button. Just opening the link is enough to trigger the malware.
The scam relies on a known exploit chain called DarkSword. Once the page loads, the hidden code immediately goes after your personal information. It scans the device for popular cryptocurrency wallets like MetaMask, Phantom, and Coinbase Wallet. If it finds them, the malware attempts to upload your wallet files and saved passwords straight to the attacker’s server.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
Beyond digital currency, the code also digs into everyday information. The attack tries to grab the contents of your notes, text messages, call history, and cached location data. Fortunately, Apple actually patched the DarkSword vulnerability back in March. This means the attack only works on older software versions that have not been updated in a while.
To keep your phone safe while shopping for a new iPhone Duo, stick strictly to verified retail channels and avoid clicking on random links sent through texts or emails. Keeping your operating system fully up to date is the easiest way to block these types of hidden threats before they can do any harm.
Discussion