If a push notification from Apple pops up on your iPhone, don’t ignore it. It could be the only way you know about a mercenary spyware attack against you.
Apple said in a post this week about the warnings that mercenary spyware attacks are “more sophisticated than regular cybercriminal activity” because attackers target specific people and their devices, making them harder to detect and prevent. Apple did not immediately respond to a request for further comment.
What to know about Apple’s spyware attack warnings
If you get one of these notifications from Apple, it’s highly likely that you’ve been targeted by the ongoing attack. On Thursday, Apple detailed what to expect from its threat notifications and the actions you should take.
“Apple threat notifications are designed to inform and assist users who may have been individually targeted by mercenary spyware attacks, likely because of who they are or what they do,” the company said. But not everyone is a target.
“Mercenary spyware attacks are highly sophisticated and are generally used by state-level actors to target politicians, activists and journalists. So most people don’t need to worry about these attacks,” said CNET Senior Writer Zachary McAuliffe, who covers Apple software.
In 2024, Apple sent out similar alerts to people in 92 countries following a similar mercenary spyware attack.
What to do if you’re a victim of a mercenary spyware attack
If Apple detects that you have been a victim of these attacks, you’ll get an Apple Threat Notification on your phone’s lock screen and in the settings, along with an email to the addresses linked to your Apple account. And you’ll see threat notification at the top of your account page when you sign in to your Apple account on account.apple.com.
If you receive these alerts, take them seriously. Apple recommends turning on Lockdown Mode right away through your iPhone’s settings. Apple also suggests contacting experts for emergency assistance via the 24/7 Digital Security Helpline.
“We are unable to provide information about what causes us to issue threat notifications, as that may help mercenary spyware attackers adapt their behavior to evade detection in the future,” Apple says.
McAuliffe says that even if you aren’t targeted, it’s always a good idea to download the latest available software update. “Those updates have the latest security fixes to help ensure your device has the most up-to-date protection possible. For more protection, you should be cautious of unknown links, use a passcode, Touch ID or Face ID on your device and enable multifactor authentication.”
See full bio