Back to News
Cybersecurity

Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

Cyber RTAugust 16, 20263 min read
Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

Apple has issued new notifications to customers potentially targeted by mercenary spyware, alerting users in 110 countries and over 150 countries to date. These sophisticated attacks target specific individuals like journalists and diplomats. Apple provides high-confidence alerts via iPhone notifications, email, and account banners, urging users to update software, use security features, and avoid suspicious links. Apple began these notifications in late 2021.

Apple has recently issued a new set of notifications to customers who are believed to have been targeted by mercenary spyware attacks. The company shared this update with TechCrunch, highlighting that users in 110 countries were alerted, adding to the over 150 countries where notifications have been sent since Apple began this initiative in late 2021. These notifications are part of Apple's ongoing efforts to combat sophisticated digital threats posed by mercenary spyware. The company emphasized the complexity and global reach of these spyware attacks, describing them as some of the most advanced digital threats currently in existence. Despite the widespread nature of these threats, Apple refrains from attributing the attacks to specific attackers or regions, maintaining a broad perspective on the issue. Typically, these notifications are directed at individuals who are targeted due to their roles or activities, such as journalists, activists, politicians, and diplomats. The attacks are highly targeted, focusing on a small number of individuals and their devices. This specificity and the resources invested by spyware vendors make these attacks more advanced than typical cybercrime activities. Apple's threat notifications are described as high-confidence alerts, indicating that a user has been specifically targeted by a mercenary spyware attack. The company urges recipients to take these alerts seriously. However, Apple does not disclose the specifics of what triggers these alerts, as revealing such information could aid attackers in refining their tactics. Users are informed of potential threats through three different channels. An Apple Threat Notification alert appears on the user's iPhone, both on the Lock Screen and in Settings. Additionally, an email is sent to the user's Apple Account email address, and a threat notification banner is displayed on the user's Apple Account page upon signing in. To enhance security, Apple advises users to update their devices to the latest software version, secure devices with a passcode, Touch ID, or Face ID, and enable two-factor authentication for their Apple account. Other recommendations include turning on Stolen Device Protection, installing apps only from trusted sources, activating Lockdown Mode, and avoiding links or attachments from unknown senders. For those interested in staying informed about such issues, Apple encourages following their updates on platforms like Google News, Twitter, and LinkedIn, where they share exclusive content on cybersecurity and other tech-related topics.