# Apple Spyware Alerts Target German MPs and Global Figures

State-sponsored mercenary spyware threats prompt urgent security warnings for public officials and journalists.

- **Source:** [The Next Web](https://brifing.si/source/afe24b20-b275-4c19-b9a6-8bb3c8babae7)
- **Published:** 2026-11-02
- **Topic:** [Software & Engineering](https://brifing.si/c/engineering)
- **Original article:** <https://thenextweb.com/news/germany-lawmakers-iphones-apple-spyware-alerts>
- **On Brifing:** https://brifing.si/s/64af6a38-424a-462d-bc73-bdf7b356a830

## German Cybersecurity Agency Response

Germany’s Federal Office for Information Security (BSI) instructed lawmakers to treat iPhones as compromised following Apple’s threat notifications. Since October 29, several Bundestag members received alerts regarding mercenary spyware. The BSI requested that all affected individuals contact the agency directly to coordinate potential forensic analysis and necessary security mitigation steps immediately.

## Nature of Mercenary Spyware

The BSI defines these threats as commercially developed spyware frequently utilized by state actors against specific targets. Once an infection occurs, the software can access encrypted messages, activate cameras, and enable microphones. These tools often employ zero-click attacks, requiring no user interaction, as seen in previous campaigns involving Israeli ad firms.

## Recommended Security Mitigation Measures

The BSI advises immediate software updates and the activation of Apple’s Lockdown Mode to harden devices against future attacks. However, the agency notes that Lockdown Mode does not remove existing infections. For high-risk individuals, the BSI recommends replacing the hardware, resetting all accounts, and updating passcodes, passwords, and two-factor authentication credentials.

## Global Scope of Alerts

Apple has issued these high-confidence warnings multiple times annually since 2021, reaching users across 150 countries. Threat researcher Costin Raiu confirmed the latest wave, initiated on October 30, impacted individuals in 99 countries. These notifications remain distinct from previous August alerts, indicating a fresh cycle of targeted digital surveillance operations globally.

## Journalists Under Surveillance

Investigative journalist Radwan Mortada received an alert shortly after releasing a documentary about September 2024 pager explosions in Lebanon. Mortada, previously targeted by Pegasus in 2017 and 2021, highlighted the threat to press freedom. He noted the suspicious timing of the alert following his investigative work, despite lacking concrete evidence linking it directly.

## Accountability and Transparency Challenges

While Apple provides these alerts, the company does not publicly name specific attackers or regions. Researcher Costin Raiu stated that current logs lack signs of compromise to definitively identify the responsible actor. Citizen Lab researcher John Scott-Railton emphasized that Apple’s notifications are essential for creating accountability regarding the use of commercial spyware.

## Domestic Spyware Usage Paradox

The German government faces scrutiny as its own federal police, the BKA, previously confirmed purchasing a version of Pegasus in 2021. This internal capability contrasts with the current warnings issued to lawmakers. Meanwhile, other European officials continue to report hacks, with victims in Greece currently suing spyware manufacturers for eight million euros.

## Implications for Digital Security

The recurring nature of these alerts underscores the persistent threat posed by state-sponsored mercenary tools. As spyware becomes more sophisticated, the reliance on zero-click exploits complicates detection for even high-profile targets. Public figures must now balance the necessity of digital connectivity with the reality that their devices may be under constant surveillance.

## Sources covering this story

- https://thenextweb.com/news/germany-lawmakers-iphones-apple-spyware-alerts — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
