Apple Warns German Lawmakers of Spyware Attacks, Prompting Device Replacement Advisories
Apple has alerted numerous German lawmakers and foreign policy staff to potential spyware attacks, leading the German information security agency to advise recipients to assume their devices are compromised and replace them.
Apple has issued a wave of threat notifications to several German lawmakers and foreign policy staff, warning them of potential state-sponsored spyware attacks. This broad alert has prompted the German Federal Office for Information Security (BSI) to advise recipients to treat their devices as compromised and to replace them immediately. The BSI's swift response underscores the gravity with which these alerts are being taken, highlighting a significant national security concern for European officials.
The notifications were reportedly sent to members of a German delegation, including federal ministries' staffers, lawmakers, and journalists, who were traveling with Chancellor Friedrich Merz in Asia. Among the recipients who have publicly acknowledged the warning is Franziska Brantner, co-leader of the Green Party and a member of the parliament’s European Affairs Committee. Apple indicated that targets were located in 99 countries, suggesting a widespread campaign.
The BSI's advisory, issued within 24 hours of Apple's notifications, emphasizes the government's rapid reaction. While the agency has not yet determined the exact number of devices that were actually infected versus merely targeted, or the specific reasons for these individuals being pinpointed, the issuance of the alert itself signifies a notable escalation in threat activity. This incident follows earlier public confirmations from a Lebanese documentary filmmaker and a Turkish-based reporter who also received Apple warnings.
Hannah Neumann, a Member of the European Parliament and a vocal advocate against spyware, noted that the frequency and scope of these warnings are "very different this time." She highlighted a substantial increase in such targeted alerts, suggesting a significant and coordinated effort by malicious actors. Neumann has consistently raised concerns about advanced commercial spyware, particularly referencing the NSO Group's Pegasus software, and views these attacks as a severe national security threat beyond mere privacy violations.
"It's a hardcore security issue because once the technology is out there, we will see proliferation," Neumann stated. "We will see more and more actors engaging in it, and they will not shy away from using it for political espionage reasons, and apparently now somebody has done that at a large scale against the German political elite." This sentiment is echoed by digital forensic researchers who point to the timing of these revelations on the eve of the Pall Mall Process meeting in Paris, an initiative aimed at curbing the proliferation and abuse of spyware.
John Scott-Railton of Citizen Lab commented that the events in Germany serve as "the latest proof that Europe has an untreated mercenary spyware epidemic." He criticized European countries for tolerating spyware companies and even supporting the technology by becoming customers. The incident is seen as a critical moment for Germany to take decisive action to establish deterrence and demonstrate leadership in combating the growing threat of mercenary spyware.
The widespread nature of these attacks and the high-profile targets involved underscore the persistent vulnerability of even technologically sophisticated governments to advanced surveillance tools. The incident is expected to fuel further debate and calls for stricter regulations and countermeasures against the proliferation and misuse of commercial spyware.