Apple Warns of Spyware Attacks Targeting Global Users

Apple Alerts Users to Potential Government Spyware Attacks

Apple this week issued warnings to a number of individuals believed to have been targeted by state-sponsored spyware, as reported by two of those allegedly affected.

Previously, Apple has proactively informed users who were potential targets or victims of spyware, directing them to seek assistance from a nonprofit organization specializing in cyberattack investigations. Similar notifications have also been periodically dispatched to users by other technology firms, including Google and WhatsApp, in recent years.

Confirmation of Notifications

As of Wednesday, only two individuals have publicly disclosed receiving these alerts from Apple. These notifications indicate a potential compromise of their devices.

Ciro Pellegrino, a journalist with the online news platform Fanpage, detailed in an article that he received both an email and a text message from Apple on Tuesday. The message alerted him to being the target of spyware. It also indicated that he was not alone in being targeted.

According to Pellegrino’s report, the message stated, “Today’s notification is being sent to affected users in 100 countries.”

Pellegrino expressed surprise, stating, “Did this really happen? Yes, it is not a joke.”

The second individual to come forward is Eva Vlaardingerbroek, a Dutch activist associated with right-wing political views, who shared information on X (formerly Twitter) on Wednesday.

Details of the Apple Alert

“Apple detected a targeted mercenary spyware attack against your iPhone,” the alert read, as shown in a video posted by Vlaardingerbroek on X. “This attack is likely targeting you specifically because of who you are or what you do. While absolute certainty is unattainable in detecting these attacks, Apple has high confidence in this warning – please take it seriously.”

Vlaardingerbroek interpreted the notification as “an attempt to intimidate me, an attempt to silence me, obviously.”

Neither Pellegrino nor Vlaardingerbroek responded to a request for comment from TechCrunch.

Unclear Spyware Campaign

The specific spyware campaign to which these Apple notifications pertain remains currently unknown. Last year, Apple alerted users in numerous countries on two separate occasions regarding potential targeting by unspecified spyware.

Apple has not yet issued a response to a request for comment regarding this matter.

Previous Incidents and Investigations

Pellegrino represents the second Italian journalist this year to be notified of potential targeting by this type of spyware, often referred to as “mercenary” spyware. This designation arises from the fact that the technology is frequently developed by companies that subsequently sell it to governmental entities.

Earlier this year, in February, WhatsApp notified Pellegrino’s colleague, Francesco Cancellato, that the platform had “interrupted the activities of a spyware company which we believe attacked your device.”

In Cancellato’s situation, WhatsApp identified Paragon Solutions, an Israeli company, as the creator of the spyware. Citizen Lab, a digital rights organization with over a decade of experience investigating spyware, confirmed their investigation into these attacks targeting WhatsApp users.

Following Cancellato’s disclosure, two additional individuals associated with Mediterranea Saving Humans, a non-governmental organization dedicated to assisting in immigrant rescue operations, also reported being targeted by Paragon.

Reports indicate that Paragon severed its relationship with its Italian government client in the wake of these revelations.