Apple warns users in 110 countries of spyware attacks

Apple ↗ 1.00% dispatched a new round of threat notifications on Thursday to users in 110 countries, warning them that their devices may have been targeted by mercenary spyware attacks. The alerts, which appear directly on iPhone lock screens, represent one of the broadest waves of such warnings the company has issued since launching its notification system in 2021.

How the Warnings Work

Apple confirmed to TechCrunch that it sent out the notifications on August 13, though it did not disclose how many users were affected or which entities may have targeted them. The company has now alerted users in more than 150 countries since the program began.techcrunch+2

The notification reads: "Apple detected a mercenary spyware attack targeted at your iPhone. There are actions you can take now to protect your data and device." Apple also sends alerts by email and iMessage, ensuring recipients see the warning across multiple channels.techmymoney+1

Apple told TechCrunch it has updated the user experience to make it easier for recipients to access guidance on next steps. The company also published a new support article explaining what mercenary spyware is and what targeted users should do.9to5mac+2

Receiving a notification does not mean a device has been compromised. Apple described the alerts as "high-confidence" indicators that a user has been individually targeted, while acknowledging its investigations "can never achieve absolute certainty."appleinsider+1

Who Is at Risk

Mercenary spyware consists of surveillance tools typically sold to governments and used against high-profile individuals such as journalists, activists, politicians, and diplomats. Apple noted that most users "will never be targeted by mercenary spyware" and that such attacks cost millions of dollars to deploy.engadget+1

The company advises recipients to enable Lockdown Mode, a feature that blocks most message attachments, FaceTime calls, and invitations for Apple services. Apple said it has yet to see a successful attack against a device with Lockdown Mode enabled. It also recommends contacting the Digital Security Helpline operated by the nonprofit Access Now.techcrunch+2

Broader Context

John Scott-Railton, a senior researcher at the University of Toronto's Citizen Lab, highlighted the latest batch of notifications in a post on X, writing that the alerts concern "tech like Pegasus used by governments to spy on you." He told TechCrunch that the new push notifications are a "big improvement" over earlier methods and called them essential for uncovering broader surveillance campaigns.engadget+1

"Notifications create a critical signal that a community is being targeted," Scott-Railton said. "Often this kicks off an investigation that reveals many, many more cases." He cited the spyware scandal in Poland, where Apple's alerts helped expose the former government's use of surveillance tools against political rivals.techcrunch