Fake iPhone Duo Preorder Sites Offer a $500 Voucher — Opening the Page Can Expose Your Passwords and Photos

A fake website is offering early reservations for Apple's new foldable iPhone Duo, promising a $500 voucher and free AppleCare+ coverage. The site copies Apple's logo and copyright notice and uses a countdown clock to pressure you into acting, then asks for your name, email address, and phone number. The catch: according to Malwarebytes, hidden software begins trying to break into your phone as soon as the page opens, even if you leave the form blank. The attack uses a hacking tool called DarkSword to exploit weaknesses in older iPhone software; if it succeeds, criminals could reach saved passwords, personal notes, photos, messages, and information from cryptocurrency wallets. One easy tell: the scam site offers colors that Apple does not sell — the iPhone Duo is available only in Night Sky and Star White.

Apple says phones with up-to-date software are protected against the reported attacks, so keep yours updated: on your iPhone, open Settings, tap General, then Software Update, and turn on Automatic Updates. To learn about the iPhone Duo or to order when preorders open, type apple.com directly into your browser instead of following links in emails, texts, advertisements, or social media posts. If you did open the page, Malwarebytes recommends updating and restarting your iPhone, changing passwords that may have been exposed from a device you trust (start with your email, Apple Account, and banking accounts), turning on two-factor authentication, securing any cryptocurrency funds, and reporting the scam at IC3.gov.