If Apple Alerts You to a Spyware Attack, Take It Seriously

Apple has rolled out a new batch of notifications to users it suspects might have been targeted by spyware capable of breaching their devices. The tech giant regularly sends these alerts to notify customers that their iPhones, iPads, or Macs may have been compromised by spyware typically used by government entities.

On Thursday, Apple informed TechCrunch that alerts were dispatched to users across 110 nations. So far, Apple has alerted clients in over 150 countries, underscoring the widespread reach of government-backed spyware on a global scale.

In a recently released support article, Apple mentions that it will directly notify users through push notifications on their iPhone lock screens, urging them to take necessary action. Apple has told TechCrunch that it has improved the user experience to make it easier for users to access vital information related to next steps.

Upon receiving a threat notification, users will see a message that reads: “Apple detected a mercenary spyware attack aimed at your iPhone. There are actions you can take now to safeguard your data and device.”

Notifications are also sent via email and shown when users log into their accounts.

John Scott-Railton, a senior researcher at the digital research organization Citizen Lab, first drew attention to the latest series of spyware notifications in a thread on X.

If you receive such a notification, it’s essential to take it seriously. As previously noted, receiving an alert indicating you’ve been targeted does not guarantee that your device has been successfully compromised, but it is critical to take immediate steps to protect your device and data.

The push notification also offers guidance on whom to contact for support. Moreover, users will be recommended to activate Lockdown Mode, a security feature that significantly lowers the chances of successful spyware attacks. According to Apple, it has yet to encounter a case where a device was compromised while Lockdown Mode was active.

While incidents of spyware attacks are relatively rare, the rising surge in surveillance technology has led to its misuse by governments against critics and members of civil society.

Scott-Railton from Citizen Lab remarked to TechCrunch that these new push notifications represent a “significant improvement” in motivating individuals to seek assistance in securing their devices since Apple launched spyware alerts in 2021.

“Notifications provide an essential signal that a community is being targeted. When individuals receive an alert, many of them reach out for help, often inciting investigations that reveal numerous additional cases,” Scott-Railton explained.

He noted that without Apple’s notifications, “the entire enormous scandal surrounding spyware abuse in the Polish election wouldn’t have come to light,” referring to the ongoing controversy in Poland regarding the previous government’s use of spyware against opponents.