Apple issued lock-screen and Settings alerts this month warning iPhone users that their devices may have been targeted by mercenary spyware campaigns.
The scale of these notifications suggests a global escalation in state-sponsored or high-resource digital surveillance targeting private citizens and officials.
Apple identified the attacks as highly sophisticated campaigns backed by "exceptional resources" [5]. The security warnings reached users in 110 countries [1], affecting millions of iPhone users [6]. These alerts appear as notifications on the lock screen and within the device settings, urging users to verify the alert and secure their hardware.
Investigators said an "unprecedented number of Apple users received recent spyware alert" [4]. While Apple has issued similar warnings in the past, the geographic breadth of this campaign marks a significant shift in the volume of detected targets.
Mercenary spyware typically refers to software developed by private companies and sold to government agencies. These tools often utilize "zero-click" exploits, which allow attackers to infect a device without the user clicking a link or opening a file.
Apple said the threats were "highly sophisticated campaigns backed by exceptional resources" [5]. The company advised users to follow the prompts in the notification to ensure their device is not compromised.
Security researchers said the notifications are designed to help users identify when their device has been targeted by state-level actors. Because these attacks are often invisible to the average user, the lock-screen alert serves as the primary method of discovery for many victims.
“Apple described mercenary spyware attacks as "highly sophisticated campaigns backed by exceptional resources".”
The distribution of alerts across 110 countries indicates that mercenary spyware is no longer reserved for a small handful of high-profile dissidents or diplomats. The move by Apple to notify millions of users suggests that the 'attack surface' for these expensive tools has widened, reflecting a broader trend where sophisticated surveillance software is being deployed at a larger scale globally.
