Apple Spyware Alerts Target German MPs and Global Figures
State-sponsored mercenary spyware threats prompt urgent security warnings for public officials and journalists.
1German Cybersecurity Agency Response
Germany’s Federal Office for Information Security (BSI) instructed lawmakers to treat iPhones as compromised following Apple’s threat notifications. Since October 29, several Bundestag members received alerts regarding mercenary spyware. The BSI requested that all affected individuals contact the agency directly to coordinate potential forensic analysis and necessary security mitigation steps immediately.
2Nature of Mercenary Spyware
The BSI defines these threats as commercially developed spyware frequently utilized by state actors against specific targets. Once an infection occurs, the software can access encrypted messages, activate cameras, and enable microphones. These tools often employ zero-click attacks, requiring no user interaction, as seen in previous campaigns involving Israeli ad firms.
3Recommended Security Mitigation Measures
The BSI advises immediate software updates and the activation of Apple’s Lockdown Mode to harden devices against future attacks. However, the agency notes that Lockdown Mode does not remove existing infections. For high-risk individuals, the BSI recommends replacing the hardware, resetting all accounts, and updating passcodes, passwords, and two-factor authentication credentials.
4Global Scope of Alerts
Apple has issued these high-confidence warnings multiple times annually since 2021, reaching users across 150 countries. Threat researcher Costin Raiu confirmed the latest wave, initiated on October 30, impacted individuals in 99 countries. These notifications remain distinct from previous August alerts, indicating a fresh cycle of targeted digital surveillance operations globally.
5Journalists Under Surveillance
Investigative journalist Radwan Mortada received an alert shortly after releasing a documentary about September 2024 pager explosions in Lebanon. Mortada, previously targeted by Pegasus in 2017 and 2021, highlighted the threat to press freedom. He noted the suspicious timing of the alert following his investigative work, despite lacking concrete evidence linking it directly.
6Accountability and Transparency Challenges
While Apple provides these alerts, the company does not publicly name specific attackers or regions. Researcher Costin Raiu stated that current logs lack signs of compromise to definitively identify the responsible actor. Citizen Lab researcher John Scott-Railton emphasized that Apple’s notifications are essential for creating accountability regarding the use of commercial spyware.
7Domestic Spyware Usage Paradox
The German government faces scrutiny as its own federal police, the BKA, previously confirmed purchasing a version of Pegasus in 2021. This internal capability contrasts with the current warnings issued to lawmakers. Meanwhile, other European officials continue to report hacks, with victims in Greece currently suing spyware manufacturers for eight million euros.
8Implications for Digital Security
The recurring nature of these alerts underscores the persistent threat posed by state-sponsored mercenary tools. As spyware becomes more sophisticated, the reliance on zero-click exploits complicates detection for even high-profile targets. Public figures must now balance the necessity of digital connectivity with the reality that their devices may be under constant surveillance.
Original article: The Next Web — Apple Spyware Alerts Target German MPs and Global Figures