Apple adds new MacBook Air configs, iPhone 16 Plus models, more to refurb store

Apple has begun sending alerts to iPhone users, warning them of potentially targeted spyware attacks. These notifications appear as a banner on the device's lock screen and home screen, informing users that Apple has detected activity consistent with a mercenary spyware attack. The alerts are part of Apple's existing threat detection features, designed to protect users' data and devices.

Mercenary spyware attacks are highly resource-intensive and often associated with state-sanctioned espionage. They typically target individuals with political affiliations, such as journalists, activists, politicians, and diplomats. Apple uses internal threat intelligence technology to detect such activity, and if users receive an alert, it indicates that they are a high-confidence target.

Apple sent threat notifications to users in over 110 countries on August 13 and to more than 150 countries to date. Users should not be alarmed if they receive the alert, as it does not necessarily mean spyware has been installed on their device. However, it does mean that Apple has high confidence that they are a target and that they should take immediate action to protect their information.

To verify the alert's authenticity, users should ensure that it does not include clickable links, attachment requests, password logins, or app installations. If any of these elements are included, the alert is likely a fake. In addition to the on-screen alerts, iPhone users will also receive a threat detection notification in their device's account settings, under their Apple Account information. A red notification badge should appear next to the Apple Threat Notifications option.

If users feel unsure about the alert's legitimacy, they can log into their account via a desktop computer or laptop to view an additional threat notification banner at the top of the page. If the alert appears in all three locations—on-screen, in account settings, and via email—users can be confident that it is genuine.

Upon receiving a spyware alert, users should take immediate steps to secure their accounts and protect their personally identifiable information. Apple recommends seeking assistance from experts and directs users to partner organization Access Now and its 24/7 helpline. Users can also enable Lockdown Mode on their devices, which isolates specific apps, websites, and features susceptible to such attacks.

In Lockdown Mode, users cannot access message attachments, click links, or share photo albums with contacts. They cannot FaceTime contacts who haven't been called within the last 30 days, and certain web browsing features and automatic WiFi joining are disabled. Other devices are automatically disconnected from the phone.