Apple has once more sent out threat notification warnings to journalists and activist that are likely being targeted by goverment-sponsored spyware attacks, according to TechCrunch.
The article reports that both an Italian journalist and a Dutch activist have said Apple has sent them threat notifications vi both iMessage and email. (Apple also displays a Threat Notification at the top of the Apple Account page after a user signs in.
The notifications read:
Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the iPhone associated with your Apple Account. This attack is likely targeting you specifically because of who you are or what you do. Although it’s never possible to achieve absolute certainty when detecting such attacks, Apple has high confidence in this warning – please take it seriously.
Apple said the notification was being sent to users in 100 countries, and strongly advised the affected users to enable Lockdown Mode and to update their iPhones to iOS 18.4.1. Apple also warned against opening links or attachments from unexpected or unknown senders.
… Apple threat notifications like this one will never ask you to click any links, install an app or profile, or provide your Apple Account password or verification code by email or over the phone.
Apple says they are unable to provide more information about how they detect threats of this type, due to fears that the information could help spyware attackers to evade detection in the future.
Apple has since 2021 sent multiple threat notifications to targeted users, notifying users in more than 150 countries.
Many of the state-sponsored campaigns use a spyware package created by NSO Group. Apple filed a lawsuit against NSO Group in 2021.
Apple also advises all of its customers to protect themselves against malware, spyware, and other cyber attacks by taking the following steps:
- Update all of your devices to the latest software, as updates includes the latest security fixes
- Protect your devices with a passcode
- Always use two-factor authentication, as well as a strong password to protect your Apple Account
- Only install apps from the App Store
- Always use strong and unique passwords online
- Never click on links or attachments from unknown senders
