Beware: DarkSword Malware Hidden in Fake $500 iPhone Duo Page

The highly anticipated iPhone Duo from Apple is set to be available for pre-order on October 16 at 5:00 am PT, and not a moment before that. Beware of any links claiming to offer early access.

Although Apple will allow users to prepare on October 12 by loading their shopping carts, actual pre-orders will only open later in the week.

It is important to note that Apple is not offering any discounts or coupons on its new foldable flagship iPhone Duo. Historically, Apple has never provided special launch pricing for iPhones, and this trend is unlikely to change with the $2,000 iPhone Duo.

Despite this, scammers have been attempting to take advantage of the hype surrounding the new iPhone. One particular website, designed to resemble an official Apple site, is offering a “$500 voucher” as an “Apple Partner Exclusive.” However, this is a clear red flag as Apple recently raised its prices and is unlikely to offer such discounts. Moreover, the website is laden with malware, specifically the DarkSword exploit, which targets vulnerable iPhones.

The DarkSword exploit attempts to break into vulnerable iPhones to steal saved credentials, cryptocurrency wallet data, and notes.

The vulnerability can be mitigated by ensuring that devices are running recent versions of iOS, such as iOS 27, iOS 26.4, iOS 18.7.7, iOS 16.7.15, or iOS 15.8.7. Apple has not released patches for older versions like iOS 13 or iOS 14, as these devices can be updated to at least iOS 15.8.7 for protection against DarkSword. Equivalent patches are also available for iPadOS versions.

While devices running updated software are safe from DarkSword, it is advisable to avoid visiting malicious websites designed to exploit vulnerabilities.

Modern exploits like DarkSword highlight the insidious nature of cyber threats. The malicious website does not require users to interact with it actively; simply visiting the page is enough to infect unpatched iPhones or iPads.

It is crucial to keep devices updated with the latest iOS patches to protect against such threats and safeguard personal data.

Staying current with software updates is essential for maintaining device security and avoiding potential risks posed by malicious actors.