Apple has warned a significant number of iPhone users in 98 countries that they may have been targeted by spyware attacks that could compromise almost all of the personal data on devices .
See also: Hackers exploit MSHTML vulnerability to distribute MerkSpy spyware
The company says it can never be 100% sure of its conclusions, but it is fairly confident they are correct and urges recipients of the messages to take the security warning seriously.
Spyware can completely undermine devices
While iPhones are very secure, there is an ongoing battle between Apple and companies that invest millions of dollars in identifying and exploiting vulnerabilities and carrying out spyware attacks.
The most notorious of these is NSO, whose Pegasus software can access almost all of the personal data stored on an iPhone. The company pays very large sums of money to hackers who discover vulnerabilities that can be used for zero-click exploits – where no user interaction is required from the target.
Simply receiving a specific iMessage – without opening it or interacting with it in any way – can allow an iPhone to be put at full risk, without the owner knowing.
The company sells the software to governments, including some with very poor human rights policies. These governments often target opposition politicians, human rights activists, journalists, and lawyers.
See also: CapraRAT Spyware: Malicious applications target Android users
Apple detects attacks and notifies victims
Apple is of course working hard to close these vulnerabilities as soon as they become aware of them, but this may take time.
One of the company's steps is to try to detect when an iPhone has been compromised by spyware attacks (without necessarily knowing how this was achieved) and notify victims.
Apple notifies customers who may have been targeted by NSO
The company initially described these attacks as state-sponsored , but changed that language earlier this year, using the term "mercenary spyware attack."
See also: Arid Viper hackers distribute AridSpy spyware via apps
Spyware attacks, such as those targeting iPhones, represent a significant threat to the digital landscape, secretly targeting personal and organizational data. These malicious software programs are designed to infiltrate and monitor computing devices, collecting sensitive information without the user’s consent. Often disguised as legitimate software, spyware can record activities such as browsing habits, keystrokes, and even passwords. The consequences of a spyware attack can be severe, leading to identity theft, financial loss, and security risks. To combat this threat, it is vital to implement strong cybersecurity, including the use of up-to-date antivirus software, regular system scans, and online behavior vigilance.
Source: 9to5mac
