• Tech Tech

Apple sends spyware alerts to users in 110 countries, flags mercenary surveillance

"There are actions you can take now to help protect your data and device."

A hand holding an iPhone displaying the Apple logo and a loading progress bar.

Photo Credit: iStock

Apple sent warnings to iPhone users around the world who it believes may have been individually targeted by advanced spyware.

The notifications reached people in 110 countries, an unusually expansive set of alerts for attacks the company said typically target only a small number of individuals.

Here's what to know

According to TechCrunch, Apple's threat notifications were sent to people who may have been targeted by "mercenary spyware." Apple said it had been issuing such warnings several times a year since 2021 and had alerted users in over 150 countries, Gizmodo reported.

Apple stated mercenary spyware campaigns are complex operations backed by "exceptional resources." Over time, these attacks have been linked to governments and commercial spyware firms such as NSO Group's Pegasus, and the people targeted include journalists, activists, politicians, and diplomats.

The company noted the alerts were not something recipients should brush off. Apple said that while a notification was not definitive proof that a device was compromised, it was a high-confidence sign that a particular user was targeted.

These notices are no longer limited to email or account alerts. Apple now shows them on lock screens and in Settings as well.

More background

If spyware makes it onto a device, the consequences can be severe. These programs can give attackers access to private information stored on a phone, including photos, documents, and even encrypted messages.

Phones often contain a huge share of people's personal and professional lives, from financial information to private conversations, and sophisticated surveillance tools are built to exploit that reality.

Access Now — the digital rights group Apple recommends to users — told TechCrunch that more people were reaching out than ever before. Director Mohammed Al-Maskati said the volume was roughly 30% to 40% above the group's usual post-alert outreach levels.

Even though Apple described the events as highly targeted attacks, the warning campaign reached more people than usual.

What can be done?

Apple said that anyone who received a warning should act quickly. The company advised enabling Lockdown Mode, its strongest security setting, for users who face unusually serious digital threats.

Lockdown Mode is an essential safeguard for these types of attacks, limiting certain device functions to make successful attacks more difficult. That includes blocking most message attachment types, restricting FaceTime calls from unfamiliar contacts, and reducing some web browsing features that could otherwise be exploited by spyware.

Apple also counseled affected users to seek expert help. The company specifically pointed people to Access Now's Digital Security Helpline for emergency cybersecurity help.

"Apple detected a mercenary spyware attack targeted at your iPhone," the notification reads, per Gizmodo. "There are actions you can take now to help protect your data and device."

Apple said, "Mercenary spyware attacks cost millions of dollars and often have a short shelf life, making them much harder to detect and prevent."

Get TCD's free newsletters for easy tips, smart advice, and a chance to earn $5,000 toward home upgrades. To see more stories like this one, change your Google preferences here.

Cool Divider