GoKawiilFake iPhone Duo preorder site exploits unpatched iPhones to steal crypto wallets
Ahead of Friday's official iPhone Duo preorder launch, a fraudulent website mimicking Apple's design and offering a fake $500 discount is using the leaked DarkSword exploit chain to attack vulnerable, unpatched iPhones. Malwarebytes researchers say simply visiting the page can trigger an attack that harvests device data, notes, keychain credentials and cryptocurrency wallet files from apps like MetaMask, Phantom and Coinbase Wallet, then exfiltrates them to a remote server.