TLDR
Scammers are circulating a fake Apple style preorder page for the unannounced iPhone Duo, promising a $500 voucher and early access. Apple has not opened preorders yet (they start October 16). The page imitates Apple's branding, footer and...
How it works
Scammers are circulating a fake Apple style preorder page for the unannounced iPhone Duo, promising a $500 voucher and early access. Apple has not opened preorders yet (they start October 16). The page imitates Apple's branding, footer and...
Red flags
- Apple is not accepting iPhone Duo preorders before October 16
- any "early" offer is fake. The page offers a $500 voucher and colors/models Apple does not sell, and its countdown resets on reload. It asks for name, email and WhatsApp number, but the form does nothing the real attack runs in the background via an invisible frame
What to do
- 1Do not click or open links advertising iPhone Duo preorders from emails, ads or messaging chats
- 2go directly to apple.com. Update your iPhone to the latest iOS release immediately to patch the DarkSword vulnerabilities. If you suspect you visited the page, disconnect from the internet
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/09/fake-iphone-duo-preorder-scam-triggers-darksword-attackFAQ
Is Fake iPhone Duo preorder page uses DarkSword exploit to attack visitors how to stay safe a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Apple is not accepting iPhone Duo preorders before October 16; any "early" offer is fake. The page offers a $500 voucher and colors/models Apple does not sell, and its countdown resets on reload. It asks for name, email and WhatsApp number, but the form does nothing the real attack runs in the background via an invisible frame
What should I do first?
Do not click or open links advertising iPhone Duo preorders from emails, ads or messaging chats; go directly to apple.com. Update your iPhone to the latest iOS release immediately to patch the DarkSword vulnerabilities. If you suspect you visited the page, disconnect from the internet
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.