Apple Alerts Users to NSO Phone Hacking in Thailand, El Salvador & Uganda

Apple Issues Security Alerts Following NSO Group Lawsuit

Apple has begun issuing threat notifications to individuals believed to be targeted by state-sponsored hacking attempts. These alerts were dispatched to users in Thailand, El Salvador, and Uganda shortly after the company initiated legal action against the NSO Group, an Israeli spyware developer.

Affected Individuals in Thailand

Reports from Reuters indicate that at least six Thai activists and researchers, known for their criticism of the government, have received these notifications. Among them are Prajak Kongkirati, a political scientist from Thammasat University in Bangkok, Sarinee Achananuntakul, a researcher, and Yingcheep Atchanont, an activist associated with the legal monitoring group iLaw.

Citizen Lab previously identified Pegasus spyware activity within Thailand in 2018, highlighting ongoing surveillance concerns.

El Salvador Targeted

A number of users in El Salvador have also been alerted to potential targeting. Specifically, 12 employees of El Faro, a digital newspaper consistently critical of the government, received the warning. Additionally, two leaders from civil society organizations and two opposition politicians were notified.

Ugandan Official Receives Alert

Norbert Mao, the president of the Democratic Party in Uganda, publicly announced via Twitter that he had also received the threat notification from Apple.

Details of the Apple Threat Notification

The alert delivered by Apple conveys a serious warning: “Apple believes you are being targeted by state-sponsored attackers who are trying to remotely compromise the iPhone associated with your Apple ID.”

The notification further explains that individuals are likely being targeted due to their identity or activities. A successful compromise could grant attackers remote access to sensitive data, communications, and even device features like the camera and microphone. While acknowledging the possibility of a false alarm, Apple urges recipients to treat the warning with utmost seriousness.

Apple's Legal Action Against NSO Group

On Tuesday, Apple filed a lawsuit against NSO Group, seeking a permanent injunction. This legal action aims to prevent the spyware maker from utilizing Apple products in its operations.

Successfully obtaining this injunction would hinder the company’s ability to discover and exploit vulnerabilities within iPhone software, thereby reducing its capacity to hack targeted individuals.

Apple's Stance on State-Sponsored Spyware

Ivan Krstić, Apple’s security chief, stated, “The steps we’re taking today will send a clear message: In a free society it is unacceptable to weaponize powerful state-sponsored spyware against those who seek to make the world a better place.”

He emphasized Apple’s commitment to user security, noting the company operates a highly advanced security engineering division and will continue to defend its users against abusive actors like the NSO Group.