# German Lawmakers Targeted by Sophisticated State-Backed Spyware Attacks Apple threat notifications alert German officials to potential zero-click iPhone compromises. - **Source:** [TechCrunch](https://techcrunch.com) - **Published:** 2026-11-02 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/78b414dd-36ae-45d5-88de-fb5cca4ba664 ## Government Warning Issued Germany's federal cybersecurity office, the BSI, issued a formal warning to Bundestag members regarding potential spyware infections. This alert follows notifications sent by Apple to various public figures, indicating their iPhones were targeted by state-backed cyberattacks. The government is treating these security warnings with extreme caution, though specific targets remain undisclosed. ## Zero-Click Exploit Risks The identified spyware utilizes zero-click exploits, allowing attackers to compromise devices without requiring user interaction like clicking links. This method enables the silent theft of sensitive data, including private messages and precise location history. Because these attacks leave minimal traces, the BSI advises officials to assume their devices are fully compromised. ## Global Scope of Alerts Apple's latest round of threat notifications reached users across 99 countries, indicating a widespread campaign rather than a localized incident. Beirut-based filmmaker Radwan Mortada confirmed receiving a new alert, noting a history of previous targeting. This global distribution suggests that the threat actors are operating on a massive, international scale. ## The Mercenary Spyware Market The incident underscores the growing influence of private vendors who supply sophisticated surveillance tools to government entities. These mercenary spyware makers often provide capabilities that states rarely develop internally. The industry remains opaque, with tools like the NSO Group's Pegasus software frequently linked to high-profile surveillance operations against civil society members. ## German Agency Procurement The German federal law agency, the BKA, reportedly acquired access to the controversial Pegasus spyware in 2019. This historical context complicates the current situation, as the government now faces threats from similar technologies. The overlap between state-purchased tools and targeted attacks highlights the complex security landscape facing modern political institutions. ## Privacy and Attribution Challenges Apple maintains a policy of not attributing specific attacks to individual governments or confirming if a device is definitively compromised. This lack of granular attribution forces organizations like the BSI to adopt a precautionary stance. Consequently, officials must manage the uncertainty of potential espionage without clear evidence of the perpetrator's identity. ## Impact on Public Figures While the government spokesperson Stefan Kornelius confirmed the severity of the situation, the identities of specific high-level targets remain confidential. It is currently unknown if Chancellor Friedrich Merz was among those notified by Apple. This ambiguity creates significant operational risks for the German government as they assess potential data breaches. ## Future Security Implications The prevalence of zero-click spyware signals a shift in how political figures must approach mobile security. As these tools become more accessible to various actors, the reliance on standard device protections is proving insufficient. Future security protocols will likely require more rigorous hardware-level defenses to counter these persistent, invisible surveillance threats. ## Sources covering this story - https://techcrunch.com/2026/11/02/germany-says-lawmakers-iphones-may-have-been-hacked-with-spyware/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._