iPhone notification from Apple sparks concerns about 'mercenary spyware'

An Apple push notification warned some users about a mercenary spyware attack targeting their iPhones on Thursday. The notification, issued by Apple, read, "Apple detected a mercenary spyware attack targeted at your iPhone. There are actions you can take now to help protect your data." Apple updated its support website on Thursday to provide more details about the "threat notification" it had sent out.

The company explained that Apple threat notifications aim to inform and assist users who may have been personally targeted by mercenary spyware attacks, likely due to their profession or activity. Apple has been sending such threat notifications since 2021, but offered fewer instructions on how to address potential device compromises.

The tech giant recommended users keep their software up to date, use two-factor authentication, and enable the stolen device protection feature to minimize the risk of mercenary spyware affecting their systems. If a user receives a threat notification, Apple suggests enlisting expert help, such as the emergency security assistance provided by the Digital Security Helpline at the non-profit Access Now.

According to Apple, mercenary spyware attacks are "exceptionally well funded" and are generally linked to state actors, including private companies developing spyware on their behalf, like Pegasus from the NSO Group. The notification comes just days after cybersecurity firm Kaspersky released findings about its products. Kaspersky noted that there is a protection gap between macOS and Windows-based devices, with 12% of its users reporting malware infections compared to 9% of Windows users.

Additionally, Kaspersky's data shows that 42% of Windows users use some form of cyber security software, while only 35% of macOS users have such tools installed. Experts emphasize that any internet-connected device, regardless of its operating system, requires cyber security software to protect against various threats, including malware and phishing.