Apple has sent warnings to device owners about potential targeted attacks using spyware. According to initial notifications, recipients were located in 99 countries; the following day, researchers reported that the company confirmed the alerts reached 110 countries. These figures represent the countries where recipients reside, not the number of attacked individuals or compromised phones. Apple does not disclose who might be behind the actions and does not confirm the actual hacking of specific devices, but strongly recommends that recipients take the warning seriously and seek professional help.
Mass Notification and Company Position
Apple periodically sends alerts to device owners who, according to the company's intelligence, may have been targeted by spyware attacks. The warning text emphasizes the high risk that the recipient has been targeted, but does not claim that the device has already been compromised. The company does not name specific individuals, does not state whether attackers managed to access even a single device or account, and does not disclose what vulnerability or malware delivery method may have been used. Such operations are typically directed at individuals rather than mass-mailing fake messages.
Reaction of German Authorities
German lawmakers and government officials began receiving notifications from Apple on October 29. In response, Germany's Federal Office for Information Security (BSI) issued an urgent warning over the weekend, advising recipients to "assume that their devices are no longer safe." The country's government stated that they "take this incident and warning with the utmost seriousness" and are "making every effort to clarify the circumstances of what happened." Authorities launched an investigation following reports that members of the legislative and executive branches of government might have been targeted. A government spokesman declined to specify whether the head of state was among those affected.
Attack Mechanics and Target Audience
According to available information, the attacks utilized a zero-click exploit—a vulnerability that allows a device to be hacked without any action on the part of the user. Notifications were received outside Germany as well: notably, Beirut-based film director Radwan Mortada reported receiving a warning, stating he had previously been targeted by Pegasus spyware in 2017 and 2021. Cybersecurity researchers reported that prominent journalists and documentary filmmakers are also among the recipients of the warnings. In the event of a successful infection, attackers can gain access to correspondence, call history, contacts, location data, and media files.
Who is Behind the Incident
Establishing who is behind the mailing and the attacks themselves has not been possible at the time of publication. Apple does not name the alleged perpetrator, and German authorities are investigating. The company limits its advice to treating the device as potentially compromised and contacting security specialists.
