Cybersecurity alert issued for iPhone Duo pre-sale scam

Malwarebytes Labs has issued an alert regarding a phishing scam targeting users interested in the pre-sale of the iPhone Duo and iPhone 18 Pro. Cybercriminals are using fraudulent websites that mimic official Apple pages to lure victims.

The scam typically begins with an offer for a $500 coupon, claiming it is exclusive for authorized partners and includes AppleCare+ coverage. Unlike many other scams, this attack can be triggered simply by clicking the link, without requiring the user to download any files.

Once accessed, the malicious site checks the user's software version and utilizes vulnerabilities to steal sensitive information, including device data, installed apps, Apple Notes content, cryptocurrency wallets, passwords, and saved credentials.