---
title: "Apple Warns Users in Dozens of Countries About Spyware Attacks: Investigation Launched in Germany"
description: "Apple has sent spyware attack warnings to device owners in dozens of countries. German authorities have launched an investigation as lawmakers and officials may have been targeted."
date: 2026-11-04T02:47:55.791Z
lang: en
url: https://xab.info/en/posts/apple-warns-users-about-spyware-attacks
tags: [apple, spyware, pegasus, cybersecurity, germany, zero-click]
author: "Alexander Buran, Roman V."
publisher: "XAB.info"
---

# Apple Warns Users in Dozens of Countries About Spyware Attacks: Investigation Launched in Germany

![A smartphone with a lock icon on the screen resting on a yellow background](https://xab.info/media/2026/11/04/apple-predupredila-polzovateley-o-shpionskih-atakah/apple-predupredila-polzovateley-o-shpionskih-atakah-1.webp)

## Key Points

- Apple sent warnings about potential spyware attacks; the notification specified 99 countries, and the company later confirmed alerts in 110 countries.
- German authorities initiated an investigation after lawmakers and executive branch officials were potentially targeted.
- Germany's BSI issued an urgent warning advising recipients to consider their devices unsafe.
- The attacks reportedly utilized a zero-click exploit; recipients include director Radwan Mortada and reportedly journalists.

Apple has sent warnings to device owners about potential targeted attacks using spyware. According to initial notifications, recipients were located in 99 countries; the following day, researchers reported that the company confirmed the alerts reached 110 countries. These figures represent the countries where recipients reside, not the number of attacked individuals or compromised phones. Apple does not disclose who might be behind the actions and does not confirm the actual hacking of specific devices, but strongly recommends that recipients take the warning seriously and seek professional help.

### Mass Notification and Company Position

Apple periodically sends alerts to device owners who, according to the company's intelligence, may have been targeted by spyware attacks. The warning text emphasizes the high risk that the recipient has been targeted, but does not claim that the device has already been compromised. The company does not name specific individuals, does not state whether attackers managed to access even a single device or account, and does not disclose what vulnerability or malware delivery method may have been used. Such operations are typically directed at individuals rather than mass-mailing fake messages.

### Reaction of German Authorities

German lawmakers and government officials began receiving notifications from Apple on October 29. In response, Germany's Federal Office for Information Security (BSI) issued an urgent warning over the weekend, advising recipients to "assume that their devices are no longer safe." The country's government stated that they "take this incident and warning with the utmost seriousness" and are "making every effort to clarify the circumstances of what happened." Authorities launched an investigation following reports that members of the legislative and executive branches of government might have been targeted. A government spokesman declined to specify whether the head of state was among those affected.

### Attack Mechanics and Target Audience

According to available information, the attacks utilized a zero-click exploit—a vulnerability that allows a device to be hacked without any action on the part of the user. Notifications were received outside Germany as well: notably, Beirut-based film director Radwan Mortada reported receiving a warning, stating he had previously been targeted by Pegasus spyware in 2017 and 2021. Cybersecurity researchers reported that prominent journalists and documentary filmmakers are also among the recipients of the warnings. In the event of a successful infection, attackers can gain access to correspondence, call history, contacts, location data, and media files.

### Who is Behind the Incident

Establishing who is behind the mailing and the attacks themselves has not been possible at the time of publication. Apple does not name the alleged perpetrator, and German authorities are investigating. The company limits its advice to treating the device as potentially compromised and contacting security specialists.

## Accounts differ

### Number of countries where Apple warnings were received

- **Apple (initial notification):** The notification stated that recipients are located in 99 countries. ([3dnews.ru](https://3dnews.ru/1150783/apple-predupredila-polzovateley-v-99-stranah-o-vozmognih-atakah-s-ispolzovaniem-shpionskogo-po))
- **Apple (subsequent confirmation next day, according to researchers):** The company confirmed sending warnings to users in 110 countries. ([itzine.ru](https://itzine.ru/news/smartphones/apple-predupredila-polzovateley-iphone-o-shpionskih-atakah.html))

*Where they agree:* Apple sent warnings about potential spyware attacks to users in many countries; the figure represents the countries where recipients reside, not the number of victims or compromised devices.

## Fact-Check & Sources

- [Apple предупредила пользователей в 99 странах о возможных атаках с использованием шпионского ПО window-new](https://3dnews.ru/1150783/apple-predupredila-polzovateley-v-99-stranah-o-vozmognih-atakah-s-ispolzovaniem-shpionskogo-po) - Primary source: notifications in 99 countries, investigation in Germany, zero-click, mention of Radwan Mortada and Pegasus 2017/2021.
- [Apple предупредила пользователей в 99 странах о возможных атаках шпионского ПО](https://unn.ua/ru/news/apple-predupredila-polzovatelei-v-99-stranakh-o-vozmozhnikh-atakakh-shpionskogo-po) - Confirms 99 countries, investigation in Germany, references The Financial Times and TechCrunch.
- [Apple предупредила пользователей iPhone о шпионских атаках в 110 странах](https://itzine.ru/news/smartphones/apple-predupredila-polzovateley-iphone-o-shpionskih-atakah.html) - Clarifies: 99 countries in notice, next day Apple confirmed 110; mentions Costin Raiu, journalists, and documentarians among recipients.
- [iPhone под угрозой: Apple предупредила пользователей в 99 странах о шпионских атаках](https://news.dialog.ua/iphone-pod-ugrozoy-apple-predupredila-polzovateley-v-stranakh-o-shpionskikh.html) - Confirms 99 countries and the nature of the warning.

## FAQ

### How many countries were affected by Apple's notification?

The initial notification cited 99 countries; the following day, researchers reported Apple confirmed alerts in 110 countries. This number represents countries where recipients are located, not the number of hacked devices.

### Did Apple confirm actual device hacks?

No. Apple does not confirm actual compromises of specific devices and does not disclose who is behind the attacks, but recommends recipients take the warning seriously and contact specialists.

### What actions did German authorities take?

The BSI issued an urgent warning advising recipients to consider their devices unsafe, and the government launched an investigation, stating it is looking into the circumstances of the incident.