Apple Alerts Nearly 100 Countries to Sophisticated Mercenary Spyware Attacks

Apple has issued a widespread alert to users across 99 countries, warning them of potential infections by mercenary spyware. The company stated that these attacks are highly sophisticated, globally distributed, and extremely costly, making them among the most advanced digital threats currently known. Apple has refrained from attributing the attacks to specific threat actors or geographical regions, emphasizing the pervasive nature of such surveillance.

This latest batch of notifications follows previous alerts sent by Apple, bringing the total number of countries notified to over 150. Recipients of these alerts often include journalists, activists, and other individuals who may be targeted due to their work or public profile. The notifications serve as a critical warning, prompting users to take immediate security measures.

Researchers from organizations like The Citizen Lab at the University of Toronto have confirmed the significance of these alerts, noting that the number of notifications suggests a substantial number of ongoing cases. John Scott-Railton, a senior researcher at Citizen Lab, advised potential victims to enable Apple's Lockdown Mode and to be wary of companies offering paid solutions for spyware infections, as these may not always be legitimate or effective.

While Apple's notifications are a crucial step in alerting users, experts like Natalia Krapiva, senior tech-legal counsel at Access Now, point out that the absence of a notification does not guarantee freedom from infection. She stressed that repressive states continue to leverage powerful surveillance technologies against civil society, underscoring the ongoing struggle against spyware abuse.

The timing of these alerts is notable, occurring shortly before crucial negotiations for the voluntary Pall Mall Process, which aims to develop industry standards for commercial hacking tools. The process seeks to establish guidelines for governments and the private sector regarding the sale and use of such technologies.

Krapiva emphasized the urgent need for consequences for the spyware industry, stating that the current system is failing to curb the uncontrolled sale and abuse of these powerful tools. The ongoing alerts from Apple underscore the persistent threat posed by mercenary spyware and the critical need for international cooperation and regulation.

Apple recommends that users who receive these notifications enable Lockdown Mode, a security feature designed to protect against highly targeted cyberattacks. Additionally, users are advised to contact digital rights organizations for further assistance and guidance. The company's proactive approach, while not foolproof, represents a significant effort to combat the growing threat of state-sponsored and mercenary surveillance.