Apple Warns iPhone Users in 99 Countries of Spyware Attacks
Apple has sent a new wave of threat notifications to iPhone users in 99 countries, warning them that their phones may have been targeted by government-backed spyware. In Germany, lawmakers were among those hit, and the country's cyber security agency has opened an investigation.
What happened
Apple started sending the alerts on October 29. According to the Financial Times, Germany's Federal Office for Information Security (BSI) told members of the Bundestag and other public figures that if they received Apple's warning, they should assume their iPhone has been compromised.
A spokesperson for German Chancellor Friedrich Merz said the government is taking the incident and the warning very seriously.
TechCrunch reports that this batch of alerts went to users in 99 countries. It is not yet clear whether the same attackers were behind the attacks in every country.
A "zero-click" attack
The spyware was reportedly installed using a zero-click flaw. That means victims did not have to tap a link, open a file or do anything at all. The attackers reportedly only needed the target's phone number.
The spyware has not been named, but it is said to work like Pegasus, the tool made by Israel's NSO Group. Spyware of this kind can read messages even in end-to-end encrypted apps, and access contacts, calendars, photos, files and the phone's location.
Should regular iPhone users worry?
For most people, no. Apple says this kind of mercenary spyware is extremely expensive and is used against a very small number of people, usually journalists, activists, politicians and diplomats. The vast majority of iPhone users will never be targeted.
Still, if you work in media, politics, activism or a sensitive job, it is worth knowing how these alerts work.
How Apple's threat notifications work
- A warning appears at the top of your Lock Screen and in the Settings app.
- Apple also sends an email to the addresses linked to your Apple Account, from [email protected].
- A banner appears at the top of your account page when you sign in at account.apple.com.
How to tell if the alert is real
Scammers copy these warnings to trick people. A real Apple threat notification will never ask you to click a link, open a file, install an app or profile, or share your Apple Account password or verification code.
The safest check: open your browser yourself, go to account.apple.com and sign in. If the alert is genuine, it will be shown clearly at the top of the page.
What to do if you get the alert
- Turn on Lockdown Mode: go to Settings > Privacy & Security > Lockdown Mode. It blocks many of the features spyware uses to get in.
- Update your iPhone to the latest iOS version.
- Get expert help: Apple recommends the Access Now Digital Security Helpline, which works 24/7.
- Use a strong passcode, turn on two-factor authentication and Stolen Device Protection, and only install apps from the App Store.
FAQs
How many countries got Apple's spyware alert?
This latest wave reportedly reached iPhone users in 99 countries.
What is a zero-click attack?
An attack that infects a phone without the owner tapping or opening anything. The attacker only needs a way to reach the phone, such as its number.
Is my iPhone infected if I didn't get a notification?
Apple only sends these alerts when it has high confidence a user was targeted. Most people will never receive one.
Does Lockdown Mode slow down my iPhone?
It doesn't slow the phone, but it limits some features, such as certain message attachments and web technologies, to reduce the ways attackers can get in.
Got questions about phone security? Ask in the comments. Read our guide on how to know if your WhatsApp is hacked and join our Telegram channel.
Comments