Apple on Wednesday alerted some users in 92 countries that they may have been targets of spyware. As reported by TechCrunch, the email sent read: “Apple has detected that you are the target of a mercenary spyware attack that is attempting to remotely compromise the iPhone associated with your Apple ID -xxx-.”
Apple’s message specifically emphasizes that this is a targeted attack on specific users and not a widespread attack on the general public. “This attack is likely targeting you specifically because of who you are or what you do,” the email said. “While it is never possible to achieve absolute certainty when detecting such attacks, Apple has great confidence in this warning: please take it seriously.”
While Apple doesn’t provide details on why someone might be targeted, they typically include government officials, politicians, activists, and journalists. “We are unable to provide further information about what prompted us to send you this notification, as it may help mercenary spyware attackers adapt their behavior to evade detection in the future.”
According to Apple’s Threat Notifications support document, if the company “detects activity consistent with a mercenary spyware attack,” it notifies the user through an email and iMessage notification, and displays a threat notification at the top of the page when a user logs in. appleid.apple.com, which is the web portal to a user’s Apple ID.
Apple’s support document recommends that recipients of the warning “seek expert assistance.” The company specifically states that users can contact Access Now and its digital security helpline, which is available toll-free 24/7. The helpline can help you assess risks, troubleshoot issues and provide you with advice on how to secure your devices and data.
Viruses and malware on iPhone are rare, but no device is completely invulnerable. Apple urges users to update to the most recent version of iOS supported by a device to ensure the latest security patches are installed. Learn more about iPhone malware and viruses. We also have tips on how to protect your phone from hackers.
Apple changes wording to ‘mercenary spyware’
Apple previously called the activity “state-sponsored attacks” but updated its support document on Wednesday, replacing it with “mercenary spyware.” According to Reuters, the change comes after Indian Prime Minister Narendra Modi’s government was accused of trying to hack his opposition’s iPhones. Reuters said the Indian government put pressure on Apple when it linked the attack to the state.
Apple also updated its support document to specifically call out the NSO Group, a private company that developed the Pegasus spyware. Pegasus was created to track government members, politicians, activists and journalists. A free software tool is available that checks iPhone backups for spyware such as Pegasus.