Apple Issues Urgent Alert: iPhone Users Targeted by Mercenary Spyware
Apple is sounding the alarm for iPhone users in more than 100 countries, warning of a wave of highly sophisticated spyware attacks designed to silently infiltrate devices. The company says the threat comes from mercenary-grade surveillance software capable of remotely compromising phones without the user ever knowing.
Apple has not declared who is behind the attacks. But the scale and precision of the operation point to a coordinated effort, likely aimed at individuals in politically sensitive or high-profile roles.
What Is Mercenary Spyware?
Mercenary spyware is a form of commercial surveillance software built by private firms and sold to governments or other clients. Unlike typical malware that spreads indiscriminately, this spyware is designed for targeted intrusions. It often utilizes zero-day vulnerabilities to quietly break into a device and pull sensitive data: messages, emails, call logs, even camera and microphone access.
Two names come up often:
Pegasus, made by Israeli company NSO Group
Predator, developed by Cytrox, based in North Macedonia
Both tools have been tied to surveillance campaigns targeting journalists, dissidents, and human rights advocates around the world. Victims of these digital attacks are rarely aware their device has been compromised.
How Apple Warns Users
In response to rising spyware threats, Apple launched its Threat Notification system in 2021. When it detects a possible compromise, the company alerts users through:
Email and iMessage (linked to their Apple ID)
A red banner on the user's Apple ID account page
In the most recent alert, Apple relayed this message:
"Apple detected that you are being targeted by a mercenary spyware attack... likely targeting you specifically because of who you are or what you do. Although it's never possible to achieve absolute certainty when detecting such attacks, Apple has high confidence in this warning—please take it seriously."
Real-World Impact: Journalists and Activists in the Crosshairs
These warnings aren’t just theoretical— alerts have landed in the inboxes of real people doing high-risk work.
Ciro Pellegrino, a reporter with the Italian investigative outlet Fanpage, who was notified by Apple in late April that his iPhone may have been targeted. Pellegrino, who has covered political extremism and organized crime, called the experience “terrifying.”
"It's not just about me—it's about the people I talk to, the sources who trust me. This violates everything journalism stands for."
His editor-in-chief, Francesco Cancellato, also received a similar alert. Italy's parliamentary security committee (Copasir) is now investigating whether spyware meant for criminal cases has been misused to surveil members of the press.
David Yambio, a South Sudanese activist and co-founder of Refugees in Libya, received the alert on November 13, 2024, with public reports emerging in February 2025. Apple confirmed that his notification was part of the same wave of alerts impacting multiple countries in recent months.
Yambio collaborates with the International Criminal Court to document migrant abuse and voiced his deep concern about the security breach:
"Spyware like this puts our lives and our work in danger. They don't just want to silence you—they want to see everything you see."
What You Can Do to Protect Your iPhone
Apple has laid out a few key steps for users who may be at risk:
1. Don’t go it alone
If you get a threat notification, don’t ignore it. Reach out to a cybersecurity expert or a trusted digital rights organization for assistance.
2. Update iPhone Software
Make sure you’re running the latest version of iOS, iOS 18.4.1., which includes important security fixes. You can check by going to Settings → General → Software Update.
3. Enable Lockdown Mode
For users who think they might be targeted, Lockdown Mode offers extra protection by limiting features that spyware often exploits.
To turn it on:
• Go to Settings
• Tap Privacy & Security
• Select Lockdown Mode
• Follow the instructions to enable it
These steps aren’t foolproof, but they can significantly reduce your exposure to sophisticated attacks.
Why This Matters
Most iPhone users won’t ever be targeted by this kind of spyware. But that doesn’t mean the threat isn’t real. What’s unfolding now points to a chilling trend: attacks that are surgically targeted, highly technical, and deeply invasive.
According to Apple, those being singled out are not random. They’re chosen because of who they are or what they do— often journalists, activists, or others in sensitive roles.
Staying informed, keeping devices updated, and taking advantage of Apple’s built-in security features can help reduce the risk. In cases like these, a little preparation could make a big difference.