# Apple warns iPhone users of spyware attacks: Critical steps to take Details on 'mercenary spyware' alerts sent to users in 110+ countries and protection measures - **Source:** [Mashable](https://brifing.si/source/3cd6d1d0-9c29-4750-8bc9-f2afefb52505) - **Published:** 2026-08-14 - **Original article:** - **On Brifing:** https://brifing.si/s/c9dce203-94da-496f-bb2c-3a8e136fa13b ## What is Apple's spyware alert? Apple sends special warnings to iPhone users targeted by state-sponsored hacking groups. These lock screen notifications are triggered by the company's internal threat intelligence system. Receiving an alert doesn't confirm infection but indicates high risk. The warnings reached users in over 110 countries starting August 13, with 150+ nations now covered. ## Who are the targets? These sophisticated attacks primarily focus on high-risk individuals like journalists, activists, politicians, and diplomats. Software developed by private tech companies infiltrates devices for comprehensive surveillance. Apple's detection system uses machine learning and behavioral analysis to identify such activities, with less than 1% false positive rate according to company claims. ## How to verify genuine alerts? Official Apple warnings never contain clickable links or app installation requests. Notifications can be cross-checked through three channels: lock screen banner, 'Threat Notifications' tab in Account Settings (with red badge), and detailed email to registered address. Desktop verification is recommended for suspicious cases. Fake alerts often mimic system messages with urgent action prompts. ## Understanding Lockdown Mode Apple's extreme protection mode significantly reduces attack surfaces. When enabled, it blocks message attachments, links, new FaceTime calls, and automatic WiFi connections. Photo album sharing pauses, and devices disconnect from peripherals. Users can't FaceTime contacts not called within 30 days. The mode is designed specifically against mercenary spyware threats. ## Immediate action steps Alert recipients should immediately contact Access Now's 24/7 Digital Security Helpline. Enabling two-factor authentication across all accounts is critical. Changing Apple ID password and updating to latest iOS version are mandatory first steps. Priority checks should focus on banking and email accounts, which are primary data targets. ## Industry context State-sponsored spyware gained notoriety after the Pegasus scandal revealed targeting of 50,000+ phone numbers in 2021. Meta reported 7 spyware firms targeting WhatsApp/Instagram users in 2023. The White House has contracted private hacker groups for cyber defense. Apple's transparency contrasts with most tech firms that don't disclose detected attacks. ## Apple's security investments The company has invested over $1.5 billion annually in cybersecurity since 2021. The Threat Notifications system launched with iOS 16 and now covers 150+ countries. While Apple doesn't share detection algorithms, it claims the system has near-perfect accuracy. Most alerts are sent during off-peak hours to ensure visibility. The program represents unprecedented transparency in consumer security. ## Why this matters These warnings establish crucial early detection against digital rights violations, especially vital for at-risk dissidents. Apple's transparency sets new accountability standards for tech giants in cybersecurity. Though fewer than 0.001% of users receive alerts, they confirm the existence of sophisticated global surveillance networks targeting civil society. ## Sources covering this story - https://mashable.com/tech/iphone-spyware-alert-what-to-do — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._