tercopy Intan Jakarta, CNBC Indonesia - Penipu memanfaatkan peluncuran iPhone Duo dan iPhone 18 Pro untuk menyebarkan situs pre-order palsu yang tidak hanya mencuri data, tetapi juga berupaya membobol iPhone yang mengunjungi website tersebut. Temuan tersebut diungkapkan Malwarebytes. Situs palsu itu dibuat menyerupai halaman Apple dan menawarkan voucher US$500 atau sekitar Rp8,9 juta serta layanan AppleCare+ bagi pengguna yang melakukan pre-order. Namun, Malwarebytes menemukan bahwa situs tersebut menyisipkan rantai eksploit DarkSword yang dapat mencoba menembus sistem iPhone yang belum diperbarui. Jika berhasil, malware dapat berupaya mencuri kredensial, data dompet kripto, hingga isi Apple Notes. "Anda tidak perlu mengisi formulir, mengetuk unduhan, atau menyetujui apa pun. Membuka halaman tersebut sudah cukup untuk memulai upaya serangan," tulis Malwarebytes dalam laporannya, dikutip Sabtu (3/10/2026). Padahal, Apple baru membuka pre-order iPhone Duo pada 16 Oktober. Malwarebytes juga menemukan sejumlah kejanggalan, seperti pilihan warna yang tidak tersedia untuk iPhone Duo, penghitung waktu yang kembali dari awal setiap kali halaman dibuka, serta tautan kebijakan privasi dan penjualan yang tidak berfungsi. Yang lebih berbahaya, serangan sudah dimulai ketika halaman dibuka. Formulir tersebut sebenarnya tidak memproses data yang dimasukkan pengguna dan hanya menampilkan pesan "Pre-Order Successful". Malwarebytes menemukan halaman itu menggunakan kode tersembunyi untuk memeriksa versi iOS dan mencoba mengarahkan pengguna iPhone ke Safari, browser yang menjadi sasaran rantai eksploit DarkSword. Jika eksploit berhasil, payload dapat mencoba mengirim informasi perangkat, daftar aplikasi, serta isi Apple Notes ke server penyerang. Kode tersebut juga mencari data dompet kripto seperti MetaMask, Phantom, Trust Wallet, Coinbase Wallet, Exodus, dan Tonkeeper. Selain itu, malware berupaya mengambil kredensial yang tersimpan di keychain iPhone serta file dompet dan data lainnya. Payload juga dapat mencoba mengakses pesan, riwayat panggilan, kontak, voicemail, email, kalender, hingga data lokasi yang tersimpan dalam cache. Malwarebytes mengatakan beberapa bagian kode yang ditemukan memiliki kemiripan dengan rantai DarkSword yang diungkap Google pada Maret. Apple telah menambal kerentanan yang dilaporkan Google tersebut. Malwarebytes tidak menguji kode tersebut langsung pada iPhone dan tidak mengamati adanya data yang benar-benar keluar dari perangkat. Namun, perusahaan mengingatkan pengguna untuk tetap memperbarui iPhone dan tidak membuka tautan pre-order dari sumber yang tidak dikenal. Pengguna yang terlanjur membuka situs tersebut disarankan memperbarui iPhone, kemudian melakukan restart. Untuk pengguna yang menyimpan aset kripto di perangkat yang mungkin terdampak. Malwarebytes menyarankan membuat dompet baru dengan recovery phrase baru dan memindahkan dana. Pengguna juga disarankan mengganti kata sandi akun penting melalui perangkat yang terpercaya dan mengaktifkan autentikasi dua faktor. Malwaretips melaporkan hal serupa. Stock looks limited, delivery dates keep moving, and a sponsored result promises the exact iPhone 18 Pro configuration you want for hundreds less. The iPhone 18 Pro pre-order scam uses freshly registered domains, sponsored posts, fake reviews, and copied Apple graphics. Countdown clocks, “only 3 left” badges, launch-weekend discounts, and delivery promises create the feeling that hesitation will cost the buyer a rare opportunity. The victim sees an advertisement for an iPhone 18 Pro, iPhone 18 Pro Max, special color, or large storage configuration. Malwaretips melaporkan hal serupa. When official delivery dates begin to slip, a store promising an iPhone 18 Pro for less money and faster shipping can feel like the answer. Other pages are more aggressive, listing a new iPhone 18 Pro for $699 or offering a buy-one-get-one deal without a carrier contract. A countdown says the remaining units will be released to other shoppers within minutes. Some fake bundles add AirPods, AppleCare, a charger, and a case at no cost. Malwaretips melaporkan hal serupa. A polished page appears in an ad, promises an iPhone 18 Pro before stock disappears, and makes the discount feel like a reward for acting quickly. The iPhone 18 pre-order scam is built around a real buying event. Apple announced that pre-orders for the iPhone 18 Pro and iPhone 18 Pro Max opened on September 12, 2026, with availability beginning September 18. A fraudulent store copies familiar product photography, color choices, storage options, trade-in language, and delivery estimates. Malware melaporkan hal serupa. Get 10% off using coupon code: MWNEWS10 for any flavor. Most of what we found around the launch of the iPhone Duo and iPhone 18 Pro was familiar fraud. Behind its Apple-style design and $500 voucher, the page uses the leaked DarkSword exploit chain to try to break into vulnerable iPhones. The page looks like Apple’s, down to its logo and “Copyright © 2026 Apple Inc.” footer. Uniladtech melaporkan hal serupa. It wasn't exactly a surprise when September 2026's 'Surprise and shine' event announced the folding iPhone, and while the heavily rumored iPhone Ultra was eventually unveiled as the iPhone Duo, most of the other leaks were right on the money. Speaking of dollar signs, the iPhone Duo comes with a hefty price tag and will launch at $1,999.99 on October 23. There's less than a month until the first folding iPhone releases, and considering the first iPhone from 2007 sold for a whopping $190,000 in 2023 , many are trying to get their hands on one in hopes of nabbing a collector's item. With people destined to sell their grandma in order to get an iPhone Duo, Apple sleuths have warned about a preorder cybersecurity scam that's exploiting wannabe customers. Me En melaporkan hal serupa. At the start of the two sales waves for the new iPhone 18 models, the buzz has extended far beyond customers and Apple enthusiasts, scammers are also attempting to capitalize on the hype. One of the identified websites offers users the opportunity to “purchase” new devices, complete with technical specifications and a 25% discount. Another fake website invites users to pre-order iPhone 18 Pro devices in a variety of colors, including some that differ from those officially announced by the company at launch, and to select their preferred storage capacity. Offers that seem too good to be true, as well as product selections that are broader than or differ from those officially announced by the company, should be treated as clear warning signs,” says Olga Altukhova, Senior Web Content Analyst at Kaspersky. CNBC Indonesia melaporkan hal serupa. Situs palsu itu dibuat menyerupai halaman Apple dan menawarkan voucher US$500 atau sekitar Rp8,9 juta serta layanan AppleCare+ bagi pengguna yang melakukan pre-order. Namun, Malwarebytes menemukan bahwa situs tersebut menyisipkan rantai eksploit DarkSword yang dapat mencoba menembus sistem iPhone yang belum diperbarui. Membuka halaman tersebut sudah cukup untuk memulai upaya serangan," tulis Malwarebytes dalam laporannya, dikutip Sabtu (3/10/2026). Situs tersebut menggunakan logo Apple dan mencantumkan tulisan "Copyright © 2026 Apple Inc." untuk terlihat meyakinkan. Thenationalnews melaporkan hal serupa. Scammers are using offers of discounted iPhone 18s on fake Arabic-language websites to clean out victims’ bank accounts, cyber security experts have warned. But the cyber security firm Kaspersky says it has found websites in several languages, including Arabic, English and Portuguese, that claim to be selling the iPhone 18s at a 25 per cent discount with payments in installments. Kaspersky says the fake websites have a “deceptively credible interface designed to lower the guard of users”. Olga Altukhova, senior web content analyst at Kaspersky, said scam offers often appear around high-profile device launches. Chatnews melaporkan hal serupa. 1 Reads Last Update Oct 3, 2026 - 19:59 Share WhatsApp Foto: Seseorang memegang iPhone Duo lipat terbaru dalam acara Apple di Steve Jobs Theater di Cupertino, California, AS, pada 9 September 2026. Halaman penipuan yang dibuat menyerupai situs resmi Apple tersebut mengiming-imingi korban dengan voucher sebesar US$500 atau setara Rp8,9 juta beserta layanan AppleCare+, sebagaimana dilansir dari CNBC Indonesia. Membuka halaman tersebut sudah cukup untuk memulai upaya serangan," tulis Malwarebytes dalam laporannya. Para penipu menyertakan logo Apple serta tulisan hak cipta resmi untuk mengelabui pengunjung. Malwarebytes melaporkan hal serupa. Free Download Search Search Search Malwarebytes.com SCAMS Convincing Free Mobile phishing emails appear after data breach October 1, 2026 Free Mobile customers received very convincing phishing emails after major data breach. A fake iPhone Duo preorder page promises a $500 voucher. More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions. Malwaretips melaporkan hal serupa. The price may be $699 or $799 when the real configuration should cost substantially more. Malwaretips melaporkan hal serupa. At launch, Apple listed the iPhone 18 Pro from $1,199. If a page says only three devices remain, a shopper may skip the usual checks. Malware melaporkan hal serupa. It promises an “Authorized Partner Exclusive” $500 voucher and AppleCare+ coverage if you complete a preorder form. But Apple doesn’t open iPhone Duo preorders until October 16 . It offers 6.3-inch and 6.9-inch models in colors Apple doesn’t sell for the Duo. Uniladtech melaporkan hal serupa. Knowing how popular the iPhone Duo is going to be, Malwarebytes reminds us that we can't even preorder one until October 16 . That hasn't stopped bad actors from popping up online and promising 'official' iPhone Duo preorders ahead of Apple itself. Those looking to order the iPhone 18 were warned of the same, and even though Malwarebytes notes that most of the scams are pretty standard ones that have been seen before and aren't too hard to spot if you keep your wits about you, another is sounding alarms. Lurking behind an Apple-inspired landing page, there's a countdown clock, and everything looks pretty legit. Me En melaporkan hal serupa. · Enable multi-factor authentication and monitor accounts: activate 2FA on IDs and financial apps and regularly review statements for unauthorized activity. CNBC Indonesia melaporkan hal serupa. Padahal, Apple baru membuka pre-order iPhone Duo pada 16 Oktober. Malwarebytes juga menemukan sejumlah kejanggalan, seperti pilihan warna yang tidak tersedia untuk iPhone Duo, penghitung waktu yang kembali dari awal setiap kali halaman dibuka, serta tautan kebijakan privasi dan penjualan yang tidak berfungsi. Yang lebih berbahaya, serangan sudah dimulai ketika halaman dibuka. Formulir tersebut sebenarnya tidak memproses data yang dimasukkan pengguna dan hanya menampilkan pesan "Pre-Order Successful". Thenationalnews melaporkan hal serupa. “Consumer excitement can give cybercriminals an additional advantage and improve their chances of profiting,” she said. Photo: Kaspersky Show caption: One of the Arabic-language scam sites identified by Kaspersk… Kaspersky says that fake websites are offering the opportunity to pre-order iPhones in different colours from those officially announced by Apple and to select their preferred storage capacity. “We strongly advise users to be extremely cautious when choosing where to shop and to make purchases only through official and trusted retailers,” said Ms Altukhova. “Offers that seem too good to be true, as well as product selections that are broader than or differ from those officially announced by the company, should be treated as clear warning signs.” Chatnews melaporkan hal serupa. Sejumlah kejanggalan terdeteksi pada situs web ini, seperti penghitung waktu mundur yang selalu reset serta pilihan warna perangkat yang tidak sesuai. Apple sendiri baru dijadwalkan membuka masa pemesanan iPhone Duo pada 16 Oktober. Kode eksploit yang digunakan menunjukkan kemiripan dengan temuan Google pada Maret lalu yang sebenarnya telah diperbaiki oleh pihak Apple. Pengguna yang terlanjur mengakses situs berbahaya tersebut diimbau untuk segera memperbarui versi iOS, melakukan restart perangkat, serta memindahkan aset kripto ke dompet baru demi menjaga keamanan data. Uniladtech melaporkan hal serupa. There's the added bonus that you're promised a $500 voucher to shave some money off that lofty launch price, but beware because the page uses the DarkSword exploit chain to target older iPhones. The fileless zero-click iOS exploit chain hones in on unpatched iPhones that are running iOS versions 18.4 through 18.7. Automatically starting when you visit a compromised website or a malicious decoy page on Safari, the exploit's payload attempts to contact its server with a device identifier, information, and status. As well as sending a list of installed apps and scraping Apple Notes, the DarkSword exploit looks for cryptocurrency wallets and attempts to recover saved credentials from your compromised phone's keychain. CNBC Indonesia melaporkan hal serupa. Jika eksploit berhasil, payload dapat mencoba mengirim informasi perangkat, daftar aplikasi, serta isi Apple Notes ke server penyerang. Kode tersebut juga mencari data dompet kripto seperti MetaMask, Phantom, Trust Wallet, Coinbase Wallet, Exodus, dan Tonkeeper. Selain itu, malware berupaya mengambil kredensial yang tersimpan di keychain iPhone serta file dompet dan data lainnya. Malwarebytes tidak menguji kode tersebut langsung pada iPhone dan tidak mengamati adanya data yang benar-benar keluar dari perangkat. Thenationalnews melaporkan hal serupa. The official price of the iPhone 18 Pro starts at Dh5,099 ($1,388), while the iPhone 18 Pro Max starts at Dh5,499. Uniladtech melaporkan hal serupa. Despite the page even having an Apple copyright at the bottom, clicking the Claim $500 Voucher” is the biggest reveal that something's amiss. The submission form lists natural titanium as an iPhone Duo color option, while size options are incorrectly listed as 6.3 and 6.9 inches instead of 7.6 inches unfolded and 5.4 inches folded. Despite fears that MagSafe charging wouldn’t be part of the iPhone Duo, it's since been confirmed, as well as a high-tech Liquid Metal hinge to make the crease less visible than other manufacturers. Some have complained that we're opening ourselves up to infinite doomscrolling due to the ability to use different apps on different screens, while the outer display showing selfies has been branded a relationship saver . CNBC Indonesia melaporkan hal serupa. Pengguna yang terlanjur membuka situs tersebut disarankan memperbarui iPhone, kemudian melakukan restart. Pengguna juga disarankan mengganti kata sandi akun penting melalui perangkat yang terpercaya dan mengaktifkan autentikasi dua faktor.
Fakta Kunci
- 1Situs palsu itu dibuat menyerupai halaman Apple dan menawarkan voucher US$500 atau sekitar Rp8,9 juta serta layanan AppleCare+ bagi pengguna yang melakukan pre-order.
- 2Membuka halaman tersebut sudah cukup untuk memulai upaya serangan," tulis Malwarebytes dalam laporannya, dikutip Sabtu (3/10/2026).
- 3Stock looks limited, delivery dates keep moving, and a sponsored result promises the exact iPhone 18 Pro configuration you want for hundreds less.
- 4The iPhone 18 Pro pre-order scam uses freshly registered domains, sponsored posts, fake reviews, and copied Apple graphics.
Sumber Berita
CNBC Indonesia
Data dihimpun dari sumber berita terpercaya dan disajikan untuk tujuan informasi. Kunjungi tautan sumber untuk laporan lengkap.