---
title: "Apple Sends Spyware Attack Warnings: iPhones in 99 Countries Targeted by New Cyber Threats"
description: "Apple has sent a new wave of threat notifications to iPhone owners in 99 countries, warning them of targeted cyberattacks using mercenary spyware. This wave is distinct from the August alerts."
date: 2026-11-02T08:41:42.939Z
lang: en
url: https://xab.info/en/posts/apple-spyware-attack-warnings-iphone-99-countries
tags: [apple, iphone, cybersecurity, spyware, threat-notification, ios-security]
author: "Alexander Buran"
publisher: "XAB.info"
---

# Apple Sends Spyware Attack Warnings: iPhones in 99 Countries Targeted by New Cyber Threats

![Red iPhone with protective shield and digital cyberspace showing red cyber threats](https://xab.info/media/2026/11/02/apple-upredozhdenie-shpigonskih-atak-iphone-99-stran/apple-upredozhdenie-shpigonskih-atak-iphone-99-stran-1.webp)

## Key Points

- Apple sent new threat notifications across 99 countries, totaling users in over 150 countries overall
- The current wave of attacks differs from August's and is linked to a new type of spyware
- Apple does not name specific attackers and emphasizes that the figures do not equal confirmed infections
- Experts note that such attacks require millions in funding and target a very narrow group of individuals

Apple has issued a new round of security threat notifications to iPhone owners across 99 countries worldwide. Users received warnings stating that they have been targeted by a new type of cyberattack utilizing mercenary spyware. Cybersecurity researcher Costin Raiu reported this wave of notifications, emphasizing that the current alerts differ from previous warnings sent by the company back in August 2026.

### A Separate Wave of Attacks: What Is Known About the Scale

According to data shared by Raiu in his post, Apple states that the notifications are being sent to "targeted users in 99 countries, and to date, the company has notified users in over 150 countries combined." The researcher notes that this wave of attacks is separate from the August one and is associated with new attacks. Meanwhile, Apple has not claimed specific attacks or indicated which threat groups or geographic regions are behind them.

### Apple's Stance: Numbers Do Not Equal Confirmed Infections

Representatives from the Cupertino-based company clarify that the figures reflect only the geographic locations of users who received the notification. They do not represent the exact number of confirmed infections or successfully compromised devices. Apple intentionally refrains from disclosing details of its detection systems to prevent spyware developers from adapting their programs to circumvent defense mechanisms. Company notifications appear directly on the iPhone lock screen, within device settings, and are also sent to the email address associated with the Apple ID.

### Why Such Attacks Are Difficult to Detect

According to security experts, such cyberattacks "require colossal resources and are aimed at a narrow circle of individuals." Creating and executing spyware campaigns of this magnitude costs millions of dollars, which is why regular users are rarely targeted. The key difficulty in detection lies in the use of unique, short-lived tools: attackers develop specialized software that quickly becomes obsolete and is replaced by new variants, rendering traditional signature-based defense methods ineffective.

### How to Check Notifications and Secure Your Device

Experts recommend checking for notifications through your official user account. Genuine messages from Apple never require the installation of third-party files, applications, or entering passwords. To protect against sophisticated attacks, users should regularly update their operating systems, avoid installing apps from unverified sources, and remain vigilant regarding any credential requests supposedly originating from Apple.

The current situation confirms a steady trend toward an increase in targeted spyware campaigns aimed at premium mobile device owners. Apple continues to operate in proactive defense mode, alerting users before attackers can complete the vulnerability exploitation cycle.

## Fact-Check & Sources

- [Новая волна шпионских атак на iPhone: Apple предупредила пользователей в 99 странах](https://www.rbc.ua/ukr/news/nova-hvilya-shpigunskih-atak-iphone-apple-1793607841.html) - The only available source. Relays a post by researcher Costin Raiu and a quote from the Apple notification. The figures of 99 and 150 countries are cited from Apple through this source. No independent confirmation from a second source exists in the provided list.

## FAQ

### What does an Apple spyware attack notification mean?

The notification means Apple's detection system has identified signs of a targeted spyware attack on your device. This is not a confirmed infection, but a signal that your device may have been targeted.

### How many countries were affected by the new wave of notifications?

According to Apple, the new notifications were sent to users in 99 countries. Combined with previous waves, the company has notified users in over 150 countries.

### How to distinguish a genuine Apple notification from phishing?

Genuine messages from Apple appear on the lock screen, in device settings, and via the email tied to your Apple ID. They never require installing third-party files, apps, or entering passwords.

### I am an average user. Could I become a target of such an attack?

According to experts, such attacks require colossal resources and target a narrow circle of individuals. Creating such campaigns costs millions of dollars, so regular users are rarely targeted.