Fake iPhone Duo Website Spreads Malware Targeting Crypto Wallets
A fake website pretending to offer pre-orders for Apple's upcoming iPhone Duo has been found to spread malware that targets cryptocurrency wallets and personal data. The website, which resembles an official Apple page, promises a $500 discount voucher described as an 'Authorized Partner Exclusive'.
The malicious webpage uses the DarkSword exploit chain against vulnerable iPhones, collecting device identification information, checking installed applications, and attempting to access content stored in Apple Notes.
Once it identifies a targeted wallet and successfully communicates with the attackers' server, the malware attempts to upload wallet files, extracted credentials, and photo thumbnails. It also tries to access messages, contacts, call logs, voicemails, emails, calendar appointments, and cached location data.
The website's threat was discovered ahead of the official iPhone Duo pre-orders, which are scheduled to begin on Friday, October 16. Users should be cautious when visiting unfamiliar websites promising early access or unusually large discounts and keep their iPhones updated.