.png){kind=logo}
Apple has sent threat notifications to users in 110 countries after identifying activity linked to suspected mercenary spyware attacks. The alerts are aimed at people who may have been individually targeted by highly sophisticated surveillance tools.
The company says mercenary spyware attacks are far more advanced than ordinary cybercrime. Such operations can require substantial resources and often target a small number of specific individuals. Journalists, activists, politicians and diplomats have historically been among those targeted.
Also Read: Apple Warns iPhone Users in 110 Countries About Mercenary Spyware Attacks
Apple threat notifications are designed to warn users when the company detects activity consistent with a targeted mercenary spyware attack. Apple describes these alerts as high-confidence warnings, although it does not disclose the specific signals used to detect an attack.
The company says these attacks have been linked in public research to state actors and private spyware companies working on their behalf. Pegasus, developed by NSO Group, is one example cited in Apple’s explanation of the threat.
Most Apple users will never receive such an alert. The attacks are highly targeted rather than widespread consumer malware campaigns.
Anyone who receives an Apple threat notification should take it seriously and review the security steps recommended by the company. Apple advises targeted users to consider enabling Lockdown Mode, which adds stronger protections across the device.
Apple also recommends seeking expert assistance. Its support guidance points affected users towards organisations such as Access Now's Digital Security Helpline for specialised security advice.
Users should verify the alert through their Apple Account rather than relying on the message alone. Apple says a genuine threat notification will appear after signing in to account.apple.com. The company will not ask users to click a link, install an app or share their password or verification code through such alerts.
Apple recommends that all users keep their devices updated and protect accounts with strong passwords and two-factor authentication. Users should also download apps from the App Store and avoid suspicious links or attachments.
Lockdown Mode is intended for people who face an unusually high risk of sophisticated attacks. It restricts certain apps, websites and features to reduce potential avenues of attack.
For most users, regular security practices offer the first line of defence. For those who receive an Apple threat notification, the warning signals a far more serious and targeted security concern.
