Apple Sends New iPhone Alerts Warning of Mercenary Spyware Targeting

Summary
Apple says its latest high-confidence alerts warn that specific iPhone users may have been targeted by mercenary spyware. The alerts do not identify the spyware; users can verify them at account[.]apple[.]com and enable Lockdown Mode.
Key points
- Apple sent a new batch of threat notifications on August 13, warning recipients they may have been individually targeted by mercenary spyware.
- Apple describes the alerts as high-confidence, but says its investigations cannot achieve absolute certainty.
- The alerts do not identify the spyware or attribute individual cases to a government, company, or region; the article says there is no evidence this batch is specifically related to Pegasus.
- Apple cites NSO Group's Pegasus as an example of mercenary spyware and says forensic investigations confirmed Pegasus infections in some previous cases.
- Users can verify an alert by signing in directly at account[.]apple[.]com; Apple says genuine alerts will not ask users to click a link, install software, or provide account credentials.
- Apple recommends taking alerts seriously, enabling Lockdown Mode, and contacting a cybersecurity expert if affected.
Article Details
- Event Type
- Apple issued a new batch of high-confidence threat notifications warning iPhone users that they may have been individually targeted by mercenary spyware attacks.
- Impact
- The alerts indicate suspected targeted activity but do not identify the spyware, attribute the alerts to a specific actor or government, or establish that the current notifications involve Pegasus. Apple recommends taking alerts seriously, enabling Lockdown Mode, and verifying notifications by signing in directly to account.apple.com.
