iPhone: Apple alerts users to a rise in mercenary spyware attacks

Although “mercenary spyware” does not target every iPhone user, attacks involving this software appear to be increasing. Apple already has a system that warns affected iPhone users when they are targeted by highly sophisticated spyware.

Apple presents privacy and security as key selling points. Yet, despite its efforts to safeguard the iPhone, customers may still be targeted by highly sophisticated information-gathering spyware that the company calls “mercenary spyware”. “These attacks are much more sophisticated than regular cybercriminal activity because individuals carrying out such attacks use exceptional resources to specifically target a very small number of individuals and their devices,” the company explains. When Apple identifies this activity on a customer’s device, it sends a dedicated alert.

A rise in attacks

While these highly sophisticated attacks remain rare compared with the overall number of iPhone users, the number of reported cases now appears to be rising. A week ago, the Cupertino company confirmed that it had sent a new wave of alerts to customers affected by these attacks across 110 countries. Although Apple has not provided a precise figure, two sources indicate that numbers are indeed increasing.

According to a TechCrunch report, the investigation team at the NGO Access Now reportedly received a record number of requests for assistance following Apple’s alert wave. These requests were said to be 30 to 40% higher than usual after alerts were issued by the Cupertino company. Cybersecurity firm iVerify also confirmed an increase in threat alerts sent by Apple.

In other words, while these “mercenary spyware” attacks do not target everyone, information gathered by TechCrunch suggests that they are becoming more frequent. The outlet also reported an unusually high number of posts on social media over the weekend.

The iPhone alert that should concern you

Apple sends users an alert when it detects “activity consistent with a mercenary spyware attack” on a device. This is how the alert is displayed on the iPhone lock screen and in Settings.

Although it stresses that the “vast majority of users will never be targeted by such attacks”, Apple already offers a solution for people who may be at risk, for example because of their profession. On iPhone, the company has created a mode called “Lockdown” that disables apps and features on the device to reduce attack surfaces that spyware can exploit.