If Apple alerts you to a spyware attack, take it seriously
Apple has issued a fresh wave of threat notifications to users across 110 countries, urging immediate action against mercenary spyware.

Stock photo for illustration only, not from the actual event
- Apple sent a new batch of spyware threat notifications to users in 110 countries on Thursday.
- The tech giant has now notified customers located in over 150 countries to date.
- Lock-screen push alerts explicitly warn users of a mercenary spyware attack targeting their iPhones.
- Users are strongly advised to enable Lockdown Mode as a robust security countermeasure.
Apple has rolled out a fresh round of notifications directed at customers who are suspected of being targeted by sophisticated spyware capable of compromising their personal devices. The tech giant periodically issues these specific alerts to inform users that their iPhones, iPads, or Macs may have been breached by surveillance software typically deployed by government entities.
According to information shared with TechCrunch, the company distributed these alerts on Thursday targeting users across 110 countries. Apple noted that it has now reached customers in over 150 countries cumulatively, providing a clear perspective on how widely government-backed spyware has penetrated the global landscape.

Stock photo for illustration only, not from the actual event
In a newly updated support document on its official website, Apple detailed that it will alert users directly via their iPhone lock screens utilizing a push notification designed to prompt immediate action. Apple also streamlined the user experience to ensure recipients can easily locate crucial information regarding what steps to take next.
Upon receipt, the security notification states: "Apple detected a mercenary spyware attack targeted at your iPhone. There are actions you can take now to protect your data and device." In addition to the lock-screen prompt, Apple dispatches parallel alerts via email and whenever affected individuals log into their respective accounts.
John Scott-Railton, a senior researcher at the digital rights group Citizen Lab, was the first to spotlight this latest wave of notifications through a series of posts on X. He emphasized that receiving such an alert warrants immediate attention and protective measures, even if it does not definitively confirm that a device breach was successful.
"Notifications create a critical signal that a community is being targeted. People get an alert, and then some of them reach out and seek help. Often this kicks off an investigation that reveals many, many more cases."
John Scott-Railton
The deployment of direct threat notifications by major platform providers represents a crucial shift in defending civil society against targeted digital espionage. Because commercial spyware developers often sell powerful exploit tools to state-sponsored actors, notifying high-risk individuals—such as dissidents, journalists, and activists—serves as an essential early warning system to contain potential surveillance operations before they inflict severe harm.
Furthermore, the interactive push notification links directly to guidance on professional security support resources and strongly encourages turning on Lockdown Mode. This specialized security toggle severely restricts device functionalities to thwart complex exploit vectors, with Apple confirming that it has yet to document a single instance where an enabled Lockdown Mode was successfully bypassed.
Source: TechCrunch
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment