Apple Warns Users in 92 Countries of Potential Mercenary Spyware Threats

On Wednesday, Apple took the proactive step of sending out threat notifications to iPhone users in 92 countries. The notifications were intended to alert users about the possibility of being targeted by sophisticated spyware attacks carried out by mercenary groups.Apple sent out security notifications to iPhone users in 92 countries on Wednesday, alerting them to potential targeting by sophisticated spyware attacks. The notifications were distributed at 12pm Pacific Time and aimed to notify users of potential threats without disclosing the identities of the attackers or the specific countries affected.

In the notification sent to affected users, Apple warned, “This attack is likely targeting you specifically because of who you are or what you do,” indicating the personalized nature of the threat. The message also emphasized the seriousness of the situation, stating, “Although it’s never possible to achieve absolute certainty when detecting such attacks, Apple has high confidence in this warning — please take it seriously.” TechCrunch reviewed a copy of the text, highlighting the urgency of the situation and the importance of users taking appropriate action to safeguard their devices and personal information.

Apple regularly sends these types of notifications several times a year and has been alerting users to such threats in over 150 countries since 2021, according to information provided on an updated Apple support page. This indicates the company’s ongoing efforts to proactively protect its users from potential security breaches and spyware attacks.

In October of the previous year, Apple distributed a similar alert to a select group of journalists and politicians in India. Following this, Amnesty International conducted an investigation revealing the infiltration of Pegasus, a highly invasive spyware developed by the Israeli firm NSO Group, on the iPhones of numerous influential journalists in India. It’s worth noting that individuals in India are part of the demographic receiving Apple’s most recent threat notifications, as confirmed by sources familiar with the matter.

The timing of the spyware alerts coincides with preparations for upcoming elections in numerous countries. In recent months, various technology companies have issued warnings regarding increasing state-sponsored campaigns aimed at influencing electoral results. However, Apple’s notifications did not specifically comment on the timing of these alerts.

“We are unable to provide more information about what caused us to send you this notification, as that may help mercenary spyware attackers adapt their behavior to evade detection in the future,” Apple informed impacted customers. This cautious approach aims to prevent potential attackers from exploiting vulnerabilities in Apple’s security systems. By withholding specific details about the threat, Apple seeks to maintain the effectiveness of its security measures and protect users from potential harm.

In a shift from previous language, Apple now refers to the attackers as “mercenary spyware attacks” instead of “state-sponsored.” The warning emphasizes the rarity and sophistication of such attacks, particularly those involving tools like Pegasus from the NSO Group. These “mercenary spyware attacks” are distinguished as being highly sophisticated and less common than typical cybercriminal activities or consumer malware.

Apple stated that it relies solely on internal threat intelligence and investigations to detect such attacks, emphasizing its commitment to user privacy and security. While acknowledging that achieving absolute certainty in detection is challenging, Apple emphasized that its threat notifications are high-confidence alerts indicating individual targeting by mercenary spyware attacks. This underscores the critical importance of users taking immediate and serious action upon receiving such notifications to safeguard their devices and personal information.