Apple alerts users in 99 countries over mercenary spyware attacks

Apple has sent official security alerts to device owners in 99 countries, warning them about potential targeted attacks involving sophisticated mercenary spyware. Simultaneously, German authorities have launched an official investigation into reports that lawmakers and government officials may have been the primary targets of these operations.

• Apple notified users across 99 different countries about spyware threats.
• Reports indicate the attacks may have leveraged zero-click software vulnerabilities.
• German federal agencies advised officials to treat their devices with extreme caution.

The scale of ongoing spyware threats

The iPhone manufacturer routinely issues notifications regarding potential state-sponsored or mercenary spyware attacks. The scope of these digital threats remains substantial; for instance, back in August, Apple notified a record number of clients and cybersecurity experts across 110 countries worldwide.

The tech giant traditionally does not disclose attribution details regarding who might be behind these specific hacking campaigns. Furthermore, Apple does not definitively confirm whether a targeted device has been successfully compromised, but strongly advises recipients to take the warnings seriously and seek professional security assistance.

Investigation in Germany and Zero-Click vulnerabilities

Meanwhile, Germany's Federal Office for Information Security has officially recommended that lawmakers and government officials should «no longer consider their devices safe.» The German government noted that it is taking the incident and Apple's warnings extremely seriously, deploying all necessary resources to investigate the circumstances.

German government spokesperson Stefan Cornelius declined to clarify whether Chancellor Friedrich Merz was among those affected. However, the Financial Times reported that the attacks utilized dangerous zero-click vulnerabilities, which allow malicious actors to compromise devices without requiring any user interaction whatsoever, needing only the victims' phone numbers.

Broader implications and reactions

Among those who received the threat notification from Apple was Beirut-based film director Radvan Mortada. He noted that he had previously been targeted by Pegasus spyware in 2017 and 2021, though he remains uncertain who is behind this latest attempt.

These events underscore the continuous and evolving threat that advanced spyware poses to high-profile individuals, journalists, and government officials globally, reinforcing the critical need for constant software updates and robust device security measures.