Fake iPhone Duo Pre-order Sites Lurking, Stealing Data and Wallets

Scammers are exploiting the launch of the iPhone Duo and iPhone 18 Pro to spread fake pre-order websites that not only steal data but also attempt to breach the iPhones of users who visit the site.

This discovery was revealed by Malwarebytes. The fraudulent sites are designed to mimic Apple’s official pages, offering US$500 (approximately Rp8.9 million) vouchers and AppleCare+ services to users who complete a pre-order.

However, Malwarebytes found that these sites embed the DarkSword exploit chain, which attempts to penetrate iPhone systems that have not been updated. If successful, the malware can attempt to steal credentials, crypto wallet data, and even the contents of Apple Notes.

“You do not need to fill out a form, tap a download, or agree to anything. Simply opening the page is enough to initiate the attack attempt,” Malwarebytes stated in its report, as cited on Saturday (3/10/2026).