< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 54 sources · 3 days · First seen · Last updated

Apple mercenary spyware threat notifications

Overview

Apple has issued a new wave of high-priority threat notifications to iPhone users in 110 countries, warning of potential targeted attacks by sophisticated mercenary spyware. These attacks are designed to steal information or track high-profile individuals, including journalists, activists, politicians, and diplomats.

The notifications are delivered through multiple channels. To ensure users do not miss these critical warnings, Apple has updated its notification method; alerts now appear directly on the iPhone Lock Screen and within the Settings app, in addition to traditional email, web banners, and messages during Apple account logins. This update aims to prevent warnings from being missed in email spam folders or dismissed as phishing attempts.

Apple describes these as ‘high-confidence warnings based on detected patterns of activity consistent with advanced digital espionage.’ While the presence of an alert does not guarantee a device has been compromised, Apple recommends that affected users immediately activate ‘Lockdown Mode’ and seek professional assistance from digital security organizations like Access Now. Users are advised to verify the legitimacy of any alert by signing into their official Apple account at account.apple.com.

Historically, these tools have been linked to state actors using software from private companies like NSO Group’s Pegasus or Cytrox’s Predator. Apple has been issuing these warnings multiple times a year since 2021 and has alerted users in more than 150 countries since the program began. To prevent attackers from evading detection, Apple does not publicly disclose the specific criteria used to identify targeted users or the identities of the attackers.

Entities

Access Now · NSO Group · Citizen Lab · Apple · Ayata

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

Timeline

  1. about 22 hours ago

    [TECHNOLOGY] 9 sources
    Apple issues spyware threat alerts to iPhone users in 110 countries

    Apple has alerted iPhone users in 110 countries about potential mercenary spyware attacks, using new Lock Screen and Settings notifications to warn high-risk individuals like journalists and diplomats.

  2. 3 days ago

    [TECHNOLOGY] 46 sources
    Apple warns users in 110 countries of mercenary spyware attacks

    Apple has warned users in 110 countries about targeted mercenary spyware attacks, recommending the activation of Lockdown Mode to protect against highly sophisticated cyber threats.

Sources

1001web.fr · 6yka.com · 835.jp · actualidadiphone.com · aktuelno.me · altroconsumo.it · analyticsinsight.net · android-mt.ouest-france.fr · androidworld.it · appbank.net · appgamers.de · baocalitoday.com · beautypost.jp · bg-mania.jp · blaublitz.jp · borncity.com · built.itmedia.co.jp · canaltech.com.br · chiba.goguynet.jp · chinesepress.com · clark.ed.jp · commercepick.com · dev.to · diariolaregion.cl · digitalmarketreports.com · ebook.itmedia.co.jp · expreso.ec · fnn-news.com · gigazine.net · gonkaku.jp · gr.pcmag.com · granvalley.co.jp · it-daily.net · jugem.jp · kaszaper.hu · koreastardaily.com · latestly.com · laverdadnoticias.com · m.thanhnien.vn · memesita.com · mobileworld.it · mobility.smartworld.it · mondomobileweb.it · movilzona.es · nuevolaredo.tv · okinawatimes.co.jp · sbctv.gr · servicesmobiles.fr

This summary has been updated 2 times: see revision history