Apple spyware alert reaches 110 countries

This week, Apple warned users in 110 countries that their iPhones might have been hit by spyware, which the National Law Review defines as software secretly or surreptitiously installed into an information system to gather info on individuals or organizations without their knowledge, calling it a malicious code capable of compromising the device.

Apple detected a mercenary spyware attack targeted at your iPhone. There are actions you can take now to protect your data and device.

Apple, The National Law Review

It delivers the warning through a push notification that appears on the iPhone lock screen and urges the recipient to take action. Apple also sends the same warning to users by e-mail. The National Law Review defines spyware as software secretly or surreptitiously installed into an information system to gather info on individuals or organizations without their knowledge, calling it a malicious code. Once installed, spyware transmits the collected data to another party without the user’s consent or gains control over the device without the user’s awareness.

Spyware commonly includes password‑stealing tools, banking Trojans, and keyloggers. On mobile devices, spyware can harvest SMS messages, call logs, contacts, e‑mails, browsing history, and photos. Mobile spyware can also record keystrokes, activate the microphone or camera, take screenshots, and track the phone’s location via GPS. Attackers typically install mobile spyware by exploiting unsecured WI-FI networks, flaws in the operating system, or by distributing malicious applications.

When successful, such spyware lets an attacker take complete control of a phone without the owner’s knowledge or permission. Spyware used by an abusive partner to track a victim’s device is also referred to as stalkerware. The Federal Trade Commission has issued guidance on how to detect spyware infections and how to protect oneself from them. Possible indicators of a spyware infection include the device overheating, the battery draining unusually fast, unfamiliar messages or pop‑ups, a sudden rise in data usage, and the appearance of unknown apps.

Users should treat any spyware alert from Apple or another manufacturer as serious and follow the recommended steps immediately. Guardian Digital recommends using strong, unique passwords as a basic measure to help prevent spyware compromise. It advises enabling multifactor authentication on accounts to add an extra layer of security against spyware. Guardian Digital suggests regularly reviewing the applications installed on a device to spot any that look suspicious.

Guardian Digital advises using a virtual private network to encrypt traffic and reduce the risk of spyware infection. CISA recommends activating lock‑down mode on iPhones to limit potential spyware exploitation. CISA advises rebooting smartphones at least once a week to help disrupt any persistent spyware. It recommends implementing user‑account controls to restrict what software can do on a device.

CISA urges users to keep their operating system and all applications up to date with the latest security patches. CISA advises installing reputable antivirus or anti‑malware software capable of detecting spyware. It recommends managing application permissions so that apps only receive the access they truly need. CISA advises vetting applications before installing them to avoid introducing spyware‑laden software.

CISA stresses keeping physical control of smartphones to prevent unauthorized installation of spyware. It promotes the use of secure messaging apps that encrypt conversations to hinder spyware interception. CISA advises browsing only websites that begin with HTTPS to reduce exposure to spyware‑delivery vectors.