Apple Sent Out a Massive Wave of Spyware Alerts. Here’s What’s Happening.
Apple just sent out a huge batch of spyware alerts. And security experts say this one is different.
Let me break down what’s happening.
The Alerts
Apple sent out a new wave of threat notifications on Friday. They went to customers in 110 countries. These alerts warn people that they’ve been targeted with powerful spyware.
Apple calls this “mercenary spyware.” It’s malware typically used by governments to spy on people.
The company has sent these types of alerts before. In the last few years, they’ve alerted people in more than 150 countries. But this latest batch appears to be the largest yet.
What “Unprecedented” Means
Security experts are calling this unprecedented.
Mohammed Al-Maskati from Access Now says they’ve received a record high number of people reaching out for help since Friday. The number is around 30% to 40% more than they usually receive after Apple sends out notifications.
Cybersecurity firm iVerify also confirmed they’re seeing an influx in threat notifications.
John Scott-Railton from The Citizen Lab put it this way:
“The scale and geographic diversity of public posts about receiving notifications are pretty unprecedented. For every public notification like this, you can imagine there’s a huge notification iceberg that the public will never learn about. This is a clear indication that something bigger is going on.”
Given the scale of this spyware campaign, it’s a reminder that Apple’s relationship with its users is increasingly complicated. On the one hand, they’re alerting people to sophisticated government spyware. On the other, they’re fighting to take a cut of purchases made outside the App Store.
I covered Apple’s proposal to charge developers a 15% commission on external link purchases, a move that could ultimately affect what you pay for apps and subscriptions. You can read that breakdown here: Apple Proposes 15% Cut on Purchases Outside the App Store.
The trust issue keeps coming up. People are supposed to trust Apple with their most sensitive data while Apple makes it harder for developers to operate outside their ecosystem. It’s a tension that isn’t going away anytime soon.
Real People, Real Stories
One of the people who received the alert is a Ukrainian Armed Forces soldier fighting the war against Russia.
He said he initially thought it was a scam, until he verified it with Apple.
“I was a bit surprised to be honest, I wouldn’t have thought I was important enough for them to target me like this. I am flattered though.”
He also said he knows other people in Ukraine’s military who received the same notification. “They were a bit worried,” he said.
Why So Many Alerts Now?
Experts have a theory.
Starting this year, Apple changed how they notify users. They now send alerts:
- On the iPhone lock screen
- In the Settings app
- Via the email associated with your Apple account
- When you log in to your Apple Account on the web
Al-Maskati said: “Apple’s new notification method has helped raise awareness of the issue’s importance, making it harder for users to ignore.”
So it’s possible that more people are receiving these alerts, but also more people are actually seeing them.
What Should You Do If You Get One?
If you receive one of these notifications, take it seriously.
Apple and experts recommend turning on Lockdown Mode. It’s a special security feature designed to make it harder to hack iPhones, iPads, and Mac computers.
Apple says they’re not aware of anyone who had Lockdown Mode enabled getting hacked.
The Bottom Line
Apple sent out a large wave of spyware alerts to customers in 110 countries. Security experts say the number of alerts is unprecedented. A Ukrainian soldier was among those targeted. The volume could be partly due to Apple’s new notification methods.
The alert is Apple telling you that you’ve been targeted by government-grade spyware. And they’re telling you to take it seriously.
