Apple Warns Users in 110 Countries They May Be Targeted by Mercenary Spyware

Apple sent a new wave of threat notifications on August 13 to users in 110 countries warning that their devices may have been targeted by state-sponsored mercenary spyware such as Pegasus. Apple stresses a notification is not proof of compromise and points recipients to Lockdown Mode, iOS updates and the Access Now helpline. In total, Apple's warnings have now reached users in more than 150 countries.

Key Takeaways

Apple sent a new wave of threat notifications on August 13 to users in 110 countries warning that their devices may have been targeted by state-sponsored mercenary spyware such as Pegasus.
Apple stresses a notification is not proof of compromise and points recipients to Lockdown Mode, iOS updates and the Access Now helpline.
In total, Apple's warnings have now reached users in more than 150 countries.

AI synthesis4 sources3

Apple has sent a new wave of threat notifications to users in 110 countries warning that their iPhones, iPads or Macs may have been targeted by state-sponsored mercenary spyware — and is urging recipients to enable Lockdown Mode.

The notifications, sent on August 13, warn of "mercenary spyware attacks," Apple's official term, and explicitly cite Pegasus as a known example of the threat. Such malware is typically deployed by governments or state-linked actors to surveil journalists, activists, lawyers and dissidents — often for years and without leaving a trace.

Apple's warning system, launched in 2021, alerts users when the company detects signs of an attack. This wave is one of the broadest yet: security researchers note that Apple's threat notifications have now reached users in more than 150 countries overall. Apple stresses that a warning does not mean a device has been compromised — only that an attack is "very likely" being attempted or has been attempted.

Recipients get instructions on securing their device: enable Lockdown Mode, update iOS, change Apple ID passwords and contact experts such as the Access Now helpline. Lockdown Mode, introduced in 2022, sharply restricts features like links, attachments and FaceTime to shrink the attack surface.

The announcement follows months of reporting on new, hard-to-detect spyware campaigns, including against opposition figures in several countries. Security researchers call Apple's transparency exemplary, but note the warnings are only as good as Apple's own detection: those not flagged by Apple's systems may never learn they were targeted at all.