Scammers have launched what is claimed to be a pre-order site for the iPhone Duo, but if you are on an older iOS, simply going to the page installs malware.
Genuine iPhone Duo pre-orders start on October 16, 2026, and Apple is now promoting that you can "get ready" from October 12. If you're interested, follow the links on AppleInsider, or go straight to apple.com.
Not to overplay this, if you already have iOS 26 or later, or if you have the latest update to iOS 18, you should be safe. This latest attack appears to use the DarkSword malware, and Apple patched iOS to protect against this in April 2026.
Even so, simply do not go to any "pre-order" site that is sent to you over email, or Messages. Don't even go out of curiosity, because according to Malwarebytes, just opening the page is enough.
The site in question, which of course no one will link to, is reportedly very well designed and looks like an Apple one. It also looks comparatively innocent, since it does not ask for money, it asks users to express interest in pre-ordering.
It even offers a $500 voucher and AppleCare+ coverage for filling out that form. If you've been around Apple long enough, this should alert you because the company would never give a quarter off the retail price of anything.
Then, too, while the iPhone Duo is not yet available, details of it such as the available colors, are well known. This particular scam site lists colors that do not even exist.
The scam requires users to be on the Safari browser, but it will also take steps to make sure they are. If you were foolish enough to go to the page in any other app, you'd get "Browser Restricted."
On the iPhone, you get that plus it automatically opens Safari for you. DarkSword then attempts to bypass iOS security.
If it succeeds, because the iPhone has not been updated to include Apple's security patch, then the malware goes to work. It sends device details, passwords from the keychain, the contents of Apple Notes, and multiple cryptocurrency wallets.
Then it accesses, or tries to access, call history, voicemails, email, calendar entries, and even location data.
Again, be sure to update your iPhone's iOS. Under Settings, General, Software Update, tap to install the latest iOS version available for your iPhone. There is also an option for Automatic Updates and you should turn that on, too.
Rather than clicking on any link sent to you, always open a browser window and go directly to the vendor's website. If the offer is real, it will be there too.
But also just be aware. It's no one's job to remember order dates and model colors or specifications. Yet if a deal seems to be too good to be true, such as $500 off an iPhone Duo, it is.
