Apple Issues Widespread Mercenary Spyware Alerts Across 110 Countries
Digital rights investigators report that an unprecedented volume of Apple users across 110 countries received threat alerts over the weekend, warning them that their devices were targeted by mercenary spyware.
What Happened
Apple distributed a major wave of threat notifications to users believed to be targeted or compromised by sophisticated surveillance software typically deployed by governments. These alerts were delivered across multiple touchpoints, including device lock screens, the Settings application, linked email addresses, and web account logins.
Following the alerts, digital safety groups observed a sharp surge in outreach. Access Now, a digital rights organization that Apple suggests victims contact for guidance, noted that inquiries to its helpline reached record highs, climbing 30% to 40% above typical volumes seen after earlier notification rounds. Cybersecurity firm iVerify also confirmed seeing an influx of threat notices, while multiple recipients, including a Ukrainian Armed Forces soldier, publicly or privately acknowledged receiving the warnings.
Key Highlights
- Apple notified users across 110 countries that they were targeted by commercial mercenary spyware.
- Helpline inquiries at digital rights group Access Now surged by 30% to 40% compared to typical notification periods.
- The notifications reached diverse targets, including Ukrainian military personnel fighting in the war against Russia.
- Apple expanded its alert methods this year to notify users via lock screens, Settings, linked emails, and web logins.
- Security specialists urge recipients to turn on Lockdown Mode, a protective feature Apple notes has not been breached on enabled devices.
Why This Matters
The scale of the alerts suggests that surveillance software targeting is broader and more geographically diverse than previously visible. John Scott-Railton, a senior researcher at The Citizen Lab, stated that the public reports reflect only a small portion of a much larger notification footprint. Additionally, experts point out that Apple’s updated delivery methods make alerts significantly harder for recipients to overlook, which may also explain the surge in reported incidents.
What to Watch Next
Recipients of the alerts are advised to enable Lockdown Mode on their iPhones, iPads, and Mac computers to restrict potential attack surfaces. For users who need additional support, specialized civil society organizations continue to offer assistance in investigating potential device compromises.
Frequently Asked Questions
What is mercenary spyware?
Mercenary spyware refers to advanced malicious software typically developed and sold to government entities to covertly breach and monitor specific mobile devices.
How does Apple inform users about spyware attacks?
Apple alerts users directly on their iPhone lock screens, inside the Settings application, through the email address registered to their Apple account, and upon logging in via the web.
What steps should affected users take?
Apple and cybersecurity experts advise affected users to immediately turn on Lockdown Mode and seek technical assistance from established digital rights or security organizations.
Source: Based on reporting by TechCrunch.