On July 11, Apple issued an alarming alert regarding an unprecedented wave of mercenary spyware attacks targeting iPhone users across 98 countries – likely including India – similar to NSO Group’s Pegasus spyware which poses serious risk to all data and activities on affected devices. Apple had previously issued warnings when major intrusions were detected on iPhones or other devices.
Apple Notifies iPhone Spyware Attack Victims Apple notifies affected users via email and iMessage, providing notifications through their email addresses and phone numbers linked with their Apple IDs. While the exact number of those affected in India remains unclear, personalized notifications were sent out, informing these individuals: “Apple has identified that you are being targeted by a mercenary spyware attack which is trying to remotely compromise the iPhone associated with your Apple ID – likely as a result of who or what you do. We believe this attack likely represents targeting you specifically due to who or what it focuses on.”
Apple does not reveal the source of these attacks, maintaining confidentiality over their sources. Apple alerts have highlighted the high cost and sophistication of these spyware tools which indicate that these attacks may be state sponsored and targeted at specific individuals.
Understanding Mercenary Spyware Threat
Mercenary spyware attacks like those conducted using Pegasus from the NSO Group are rare yet highly sophisticated compared to regular cybercriminal activity or consumer malware attacks. As these tools can be very expensive, suggesting they are used by state-run entities against specific individuals.
Recommended Actions for Affected Users
Apple provides several critical recommendations for users who receive this alert:
- Enable Lockdown Mode: Immediately activate lockdown mode on your iPhone to limit potential vulnerabilities.
- Update iOS: Ensure your iPhone is updated to the latest iOS 17 version to benefit from the latest security patches.
- Update Other Apple Devices: Make sure all other Apple devices you use are also updated to their latest versions.
- Avoid Suspicious Messages and Links: Refrain from engaging with messages and links from unknown sources to prevent further damage or data loss.