Apple Issues New Spyware Attack Warnings to iPhone Users in 110 Countries
Apple has sent a fresh round of threat notifications to iPhone users across 110 countries, warning that they may have been targeted by highly advanced mercenary spyware. The company has been running this alert system since 2021, and over the years, users in more than 150 countries have received similar warnings.
These alerts are not routine security messages. Apple describes them as high-confidence notifications, meaning the company believes there is strong evidence that a specific user was targeted. However, Apple does not reveal the technical details behind how it detects these attacks. Keeping that information private helps prevent spyware operators from learning how to avoid detection.
Apple also makes an important distinction: receiving a warning does not automatically mean an iPhone was successfully hacked. It means Apple detected activity that strongly suggests the user was targeted by a sophisticated spyware campaign.
Mercenary spyware attacks are very different from ordinary scams, phishing attempts, or malware. They are usually expensive, highly targeted operations designed to compromise the devices of specific individuals. Apple says these attacks can cost millions of dollars and are typically aimed at people whose work or public role makes them valuable targets.
The most common targets include journalists, human rights activists, politicians, diplomats, government officials, and public figures. For the average iPhone user, the chances of being targeted by this kind of spyware remain extremely low.
Apple’s notifications do not name a specific spyware company or tool. In previous cases, however, spyware such as Pegasus has been associated with similar attacks, and security researchers have confirmed infections on some devices after earlier warning campaigns.
For anyone who receives one of these alerts, Apple recommends turning on Lockdown Mode immediately. Lockdown Mode is an optional iPhone security feature designed for people at high risk of targeted cyberattacks. It reduces certain device functions and limits some communications features in order to make spyware attacks harder to carry out.
Apple also advises affected users to seek expert help from trusted digital security organizations that provide emergency support for people facing targeted attacks.
The company says real threat notifications may appear in several places, including on the Lock Screen, in Settings, through email, and on the user’s Apple account page. Apple also warns users to stay alert for fake security messages. A genuine Apple spyware warning will never ask someone to click a link, download a file, install an app, install a configuration profile, or share their Apple Account password.
This latest wave follows earlier large-scale warning campaigns, including one sent to users in around 100 countries a little over a year ago. Apple has also previously confirmed sending alerts to more than a dozen Iranian users who were targeted in cyberattacks ahead of the conflict involving Israel.
At this stage, Apple has not said whether the newest alerts are connected to one specific spyware group, government-backed campaign, or broader surveillance operation. What is clear is that mercenary spyware remains a serious global threat, especially for individuals whose work puts them in the spotlight.
For most iPhone owners, basic security habits still matter most: keep iOS updated, use strong account protection, avoid suspicious messages, and never install unknown profiles or apps. But for those who receive one of Apple’s spyware warnings, the message is urgent: take it seriously, enable Lockdown Mode, and get professional security assistance as soon as possible.
