Apple warns users in 110 countries of potential mercenary spyware attacks

# Apple Sends Record Spyware Warnings to Users Across 110 Countries

Apple has issued an unusually large wave of spyware threat notifications, warning users in 110 countries that their devices may have been targeted by sophisticated surveillance software. The notifications, sent on August 14, represent what is believed to be the company’s largest campaign of its kind so far.

The alerts are designed to warn users who Apple believes may have been targeted by “mercenary spyware,” a type of highly sophisticated malware typically developed by private surveillance companies and sold to governments or other state-linked actors. Such tools can potentially be used to secretly monitor individuals, including journalists, activists and other members of civil society.

Apple made clear that receiving a notification does not necessarily mean a device was successfully compromised. Instead, the company sends the alerts when it detects activity or receives intelligence indicating that a particular user may have been targeted.

The scale of the latest campaign has also caught the attention of cybersecurity organizations. Access Now, a nonprofit that provides around-the-clock digital security assistance, said it has received a record number of requests following the warnings. The organization reported that inquiries were roughly 30% to 40% higher than its usual volume.

Apple’s warnings appeared directly on affected users’ devices, while notifications were also delivered through email and Apple account sign-ins. The company encouraged recipients to take immediate steps to protect their accounts and devices.

One of the key protections Apple recommends is Lockdown Mode, a security feature designed to restrict certain device functions and reduce potential avenues that sophisticated attackers could exploit. The feature is particularly intended for people who may face highly targeted digital threats.

Security researchers say the latest notification campaign could reveal only a small portion of a much larger surveillance problem. Researchers at Citizen Lab noted that many people who receive such alerts may seek professional assistance, potentially uncovering additional cases that are not publicly reported.

The geographic spread of the latest warnings has also raised concerns among researchers. Reports from users in different countries suggest that sophisticated spyware campaigns continue to affect people far beyond a single region or organization.

Among those who reported receiving an alert was a Ukrainian Armed Forces soldier, who said he was surprised by the warning and did not consider himself an obvious target. Other members of the Ukrainian military reportedly received similar notifications.

The broader issue has previously been linked to spyware such as Pegasus, developed by surveillance company NSO Group. Investigations by Citizen Lab and Amnesty International have documented cases in which Pegasus was allegedly used against political critics and other individuals.

The latest Apple warnings underscore the growing challenge posed by commercial spyware, which has become increasingly sophisticated and difficult for individuals to detect. For users who receive an alert, cybersecurity experts recommend taking the warning seriously and seeking professional assistance rather than assuming it is simply a routine security message.