Apple Notifies Users in 100 Countries About Mercenary Spyware Attacks

Apple has notified iPhone users in 100 countries about attempts to infect their devices with mercenary spyware, a highly sophisticated form of espionage software that targets specific individuals. These attacks are aimed at people of interest, such as journalists, activists, and politicians, using advanced resources to compromise devices remotely.

The notifications are sent via email and iMessage, as well as appearing on the user's Apple account page. They warn of attempts to compromise the iPhone associated with the Apple account, emphasizing the seriousness of the threat and recommending immediate action.

Known Cases and Ongoing Investigation

Among the reported cases, the one involving Italian journalist Ciro Pellegrino stands out. He received a notification from Apple informing him of an attempted attack. Pellegrino and other colleagues were investigating extremist groups in Italy, which may have motivated the attack.

The Israeli company Paragon Solutions has been identified as the developer of the spyware used in some of these attacks. Although the company claims that its products should not be used against journalists or activists, investigations have revealed that espionage tools were employed against members of NGOs and journalists in Italy.

How to Identify and React to Threat Notifications

Apple's threat notifications are sent from official addresses, such as threat-notifications@apple.com, and do not ask the user to click on links, open files, or provide personal information. Upon receiving a notification, it is recommended to:

• Verify the authenticity of the message by accessing account.apple.com.

• Update the device to the latest version of iOS.

• Activate Lockdown Mode, available in Settings > Privacy & Security > Lockdown Mode.

• Seek expert assistance, such as that offered by the Digital Security Helpline of Access Now.

Lockdown Mode: Advanced Protection for Users at Risk

Lockdown Mode is an iOS feature designed to protect users who may be targets of sophisticated cyberattacks. When activated, the device restricts certain functionalities, such as message attachments and calls from unknown numbers, increasing security against intrusion attempts.

Security Updates and Apple's Commitment

In response to the attacks, Apple released the iOS 18.4.1 update, fixing vulnerabilities exploited by the attackers. The company reaffirms its commitment to user security and continues to monitor and notify potential targets of mercenary spyware.

Source TechCrunch / Apple

Read also...

Image credit to Alireza Khoddam on Unsplash