# Apple mercenary spyware threat notifications

> Live situation record from CLSTR: https://clstr.news/situations/apple-mercenary-spyware-threat-notifications
> Updated: 2026-08-15T16:38:28.000Z. Sources: 54. Developments: 2.

Apple has issued a new wave of high-priority threat notifications to iPhone users in 110 countries, warning of potential targeted attacks by sophisticated mercenary spyware. These attacks are designed to steal information or track high-profile individuals, including journalists, activists, politicians, and diplomats.

The notifications are delivered through multiple channels. To ensure users do not miss these critical warnings, Apple has updated its notification method; alerts now appear directly on the iPhone Lock Screen and within the Settings app, in addition to traditional email, web banners, and messages during Apple account logins. This update aims to prevent warnings from being missed in email spam folders or dismissed as phishing attempts.

Apple describes these as ‘high-confidence warnings based on detected patterns of activity consistent with advanced digital espionage.’ While the presence of an alert does not guarantee a device has been compromised, Apple recommends that affected users immediately activate ‘Lockdown Mode’ and seek professional assistance from digital security organizations like Access Now. Users are advised to verify the legitimacy of any alert by signing into their official Apple account at account.apple.com.

Historically, these tools have been linked to state actors using software from private companies like NSO Group’s Pegasus or Cytrox’s Predator. Apple has been issuing these warnings multiple times a year since 2021 and has alerted users in more than 150 countries since the program began. To prevent attackers from evading detection, Apple does not publicly disclose the specific criteria used to identify targeted users or the identities of the attackers.

## Claims

- Apple has issued threat notifications to users regarding mercenary spyware attacks. (corroborated by 7 sources)
- The latest wave of notifications was sent to users in 110 countries on August 13. (corroborated by 6 sources)
- Since the launch of the system, Apple has sent alerts to users in over 150 countries. (corroborated by 3 sources)
- Mercenary spyware attacks are highly sophisticated, expensive to develop, and often linked to state actors. (corroborated by 3 sources)
- Targeted individuals often include journalists, activists, politicians, and diplomats. (corroborated by 3 sources)
- Since 2021, Apple has issued these warnings to users in approximately 150 countries total. (corroborated by 3 sources)
- Targeted individuals include journalists, activists, politicians, and diplomats. (corroborated by 3 sources)
- Alerts now appear as notifications on the iPhone Lock Screen and within the Settings app. (corroborated by 2 sources)
- Apple recommends enabling Lockdown Mode for users who receive these notifications. (corroborated by 2 sources)
- Apple recommends that affected users enable Lockdown Mode to increase device protection. (corroborated by 2 sources)
- Users can verify the legitimacy of an alert by signing into account.apple.com. (single source)

## Timeline

### 2026-08-15: Apple issues spyware threat alerts to iPhone users in 110 countries

Apple has alerted iPhone users in 110 countries about potential mercenary spyware attacks, using new Lock Screen and Settings notifications to warn high-risk individuals like journalists and diplomats.

9 sources. https://clstr.news/cluster/apple-warns-iphone-users-in-110-countries-of-sophisticated-spyware

### 2026-08-13: Apple warns users in 110 countries of mercenary spyware attacks

Apple has warned users in 110 countries about targeted mercenary spyware attacks, recommending the activation of Lockdown Mode to protect against highly sophisticated cyber threats.

46 sources. https://clstr.news/cluster/caseplay-launches-nemunemu-kumakun-smartphone-cases

---
Cite as: Apple mercenary spyware threat notifications. CLSTR, https://clstr.news/situations/apple-mercenary-spyware-threat-notifications
