Table of Contents
Introduction
Apple has sent a fresh wave of spyware attack alerts to users in 110 countries. These notifications warn individuals that they may have been targeted by mercenary spyware — highly advanced surveillance software used by governments and private companies.
Since 2021, Apple has been sending these threat notifications to users who may be at risk. The company has now alerted customers in over 150 countries worldwide.
Apple's spyware alerts are high-confidence warnings that you may have been individually targeted by mercenary spyware. Take them seriously.
What Is Mercenary Spyware?
Mercenary spyware is a type of surveillance software sold by private companies to governments and law enforcement agencies. It is designed to secretly monitor everything you do on your device.
Unlike regular cybercrime, mercenary spyware is:
- Extremely expensive — costing millions of dollars per exploit
- Highly sophisticated — using advanced techniques to bypass security
- Specifically targeted — focusing on a very small number of individuals
Companies like NSO Group (Pegasus) and Intellexa (Predator) are well-known mercenary spyware vendors. Their tools can record calls, read messages, access cameras, and track location — all without the victim knowing.
Who Is Being Targeted?
Apple's threat notifications are typically sent to people who may be targeted because of who they are or what they do. This includes:
- Journalists — reporting on sensitive topics
- Activists — advocating for human rights or political change
- Politicians — government officials and diplomats
- Business leaders — executives in sensitive industries
- Lawyers — handling high-profile cases
- Researchers — studying controversial subjects
Apple does not attribute the attacks to any specific attackers or countries. The company says sharing this information could help spyware vendors refine their tactics.
How Apple Notifies Users
If Apple suspects you have been targeted by mercenary spyware, you will receive notifications in three ways:
- On your iPhone: A "Apple Threat Notification" alert appears on the Lock Screen and in Settings
- By email: A notification is sent to your Apple Account email address from threat-notifications@email.apple.com
- On your Apple Account page: A threat notification banner appears after you sign in to account.apple.com
How to Identify a Legitimate Apple Threat Notification
Scammers often send fake security alerts. Here's how to know if an Apple threat notification is real:
- Email sender: Legitimate emails come from threat-notifications@email.apple.com
- No links to click: Apple does not ask you to click links or download anything to verify the alert
- No personal information requests: Apple will never ask for your password, credit card, or personal details
- Appears in Settings: The alert will appear on your device's Lock Screen and in Settings
- Appears on Apple Account page: The banner shows after logging into account.apple.com
How to Protect Your iPhone
Apple recommends these security steps to protect your device:
- Update to the latest software. Always install the latest iOS updates, which include security patches.
- Secure your device with a passcode. Use Touch ID or Face ID for additional protection.
- Enable two-factor authentication (2FA). This adds an extra layer of security to your Apple Account.
- Turn on Stolen Device Protection. This feature prevents unauthorized changes to your Apple Account.
- Install apps only from trusted sources. Only download apps from the official App Store.
- Enable Lockdown Mode. This extreme security feature blocks many common attack vectors.
- Do not open links or attachments from unknown senders. These could be phishing attempts.
Final Thoughts
Apple's spyware alerts are a serious warning. Mercenary spyware is one of the most advanced digital threats in existence today. It is not regular malware — it is targeted, expensive, and designed to evade detection.
Key takeaways:
- Apple has sent spyware alerts to users in 110 countries
- Mercenary spyware targets specific individuals, not the general public
- Legitimate Apple notifications appear on your device, via email, and on your Apple Account page
- Enable 2FA, Lockdown Mode, and keep your iPhone updated
- If you receive a threat notification, take it seriously and follow Apple's security recommendations
If you need help securing your devices or want to learn more about protecting your business from advanced threats, contact SystemLogicIT for a free security assessment.