Highlights
- Kaspersky has found fake sites that look like the official Apple website and are selling the iPhone Duo.
- Scammers are selling fake vouchers for $500 off, with a timer running down to 30 minutes.
- Buyers should only buy the iPhone Duo from the official Apple portal and keep their iOS updated.
As excitement grows for Apple’s flagship release, the iPhone Duo, cybercriminals are weaponising consumer hype. Cybersecurity firm Kaspersky has found sophisticated phishing campaigns aimed at unsuspecting buyers in the wake of Apple’s launch of its first foldable smartphone on October 23. Fake websites posing as official Apple online stores are tricking users into handing over sensitive data and exposing their devices to sophisticated security threats.
Fake iPhone Duo pre-order sites mimic Apple’s design
Fake site mimics Apple’s official website
Scammers have noticed the interest in the iPhone Duo launch and have been quick to capitalise on it. Cybercriminals are cloning Apple’s minimalist layout, product images, typography and high-resolution marketing banners to run convincing fraudulent websites that trick prospective buyers into trusting them.
Fake $500 Voucher Offer to Attract iPhone Duo Buyers
Pre-order scam with $500 voucher
Fraudulent websites are advertising fake promotions, such as $500 vouchers, 25% discounts or even exclusive early access pre-order slots, so as to create an urgency and lower buyers’ caution. These promotional incentives entice buyers into completing forms or making advance payments before verifying the authenticity of the seller.
Kaspersky found one website that was offering the iPhone Duo at a 25 per cent discount. It was designed to mimic Apple’s official website, and there was a countdown timer, claiming there were only 30 minutes left on the offer, a common trick to pressure people to buy without thinking.
Fake Pre-Order Page Uses Apple’s Branding to Appear Legitimate
The fake pre-order pages feature official-looking checkout forms, regional currency selectors, and fake redirection notices claiming users will be seamlessly transferred to Apple’s payment gateways. Some do not Ask for payment information upfront, instead claiming that a representative will contact the buyer later to confirm the order and payment
Some websites even push users toward private WhatsApp or Telegram chats under the guise of an “inventory availability check” to record phone numbers and emails. This approach allows scammers to collect information and makes the scheme credible and legitimate.
Fake iPhone Duo Website May Target iPhones With DarkSword Exploit
Exposure of wallets or credentials could put funds at risk
The cybersecurity firm warns that advanced threat groups might host zero-day or N-day browser exploit kits on these domain networks, in addition to identity theft and payment fraud. Sophisticated malicious frameworks like the DarkSword exploit chain can exploit browser vulnerabilities to gain arbitrary code execution capabilities on vulnerable iOS hardware.
Visiting the Malicious Website May Be Enough to Trigger an Attack
The big thing about this phishing campaign is that it is zero-click. Users do not have to fill out the pre-order form, click promotional buttons, or download malicious files. When they load the page in a browser, an invisible background iframe will get triggered, which will check the software version of the target device and start delivering exploits as soon as they land on the page.
Saved Passwords, Notes and Crypto Wallet Data Could Be at Risk
If the DarkSword exploit has successfully executed on the users’ device, it deploys an in-memory payload that exploits system-wide exfiltration. The malicious code targets sensitive assets stored locally on the device, including crypto wallets, personal notes, saved passwords and metadata.
How to Identify Fake iPhone Duo Pre-Order Websites
Identifying fake pre-order websites requires a closer look at domain indicators and site mechanics. Users should beware of:
- Strange web addresses (with hyphens, extra keywords or non-Apple top-level domain)
- 25 percent or $500 vouchers Unrealistic discounts from
- Requests to talk off platform
- Other types of payment requests
How to Protect Your iPhone From Fake Pre-Order Scams
Install the recent software updates to stay safe
- Always buy your iPhone from Apple’s official retail store or authorised carrier portals.
- Install the most recent software updates to fix known vulnerabilities in Safari and WebKit.
- Use authorised security software or DNS filtering tools to block known phishing URLs.
- Type Apple directly into your address bar. Don’t click links in emails, social media ads or messaging apps.
What to do when you opened a fake iPhone Duo website
- Force restart your iPhone to clear volatile in-memory exploit payloads running in active processes.
- Update your iOS to the latest version immediately to patch underlying vulnerabilities.
- If you have any crypto wallets on that device, immediately transfer funds to new addresses created on a different, uncompromised device.
- If you’re doing high-value services, change the account passwords and log off of active sessions on a second trusted device.
