Apple has alerted iPhone users in 99 countries about sophisticated mercenary spyware attacks targeting their devices. This new wave of notifications, separate from earlier alerts in August, underscores the persistent threat posed by these advanced attacks. Security researcher Costin Raiu highlighted the notifications issued on October 30, 2026, indicating that Apple's alert system has now reached users in over 150 countries overall. Although Apple has not disclosed the identity of the attackers or specific regions affected, the company emphasizes that these operations are highly targeted, focusing on individuals like journalists, activists, politicians, and diplomats due to their roles.
Unlike widespread phishing campaigns, mercenary spyware attacks are meticulously designed for specific targets, making them difficult to detect and prevent. Apple's alerts are based on high-confidence assessments of targeting, rather than confirming that every notified device was compromised. The company also maintains confidentiality around detection methods to prevent attackers from adapting their tactics. While no specific spyware, like Pegasus, has been named in this instance, Apple's guidance uses historical cases to illustrate the nature of such threats.
Apple delivers threat notifications through various channels, including Lock Screen alerts, Settings, and emails associated with the user's Apple Account. Users are advised to independently verify the authenticity of these notifications by checking Apple's account website, ensuring they do not fall victim to phishing attempts. This verification step is crucial as genuine notifications will never prompt users to install apps or share sensitive information.
For those affected, Apple recommends activating Lockdown Mode, which restricts certain device functions to mitigate potential exploit avenues. This feature can be enabled in the Privacy & Security section under Settings. Additionally, Apple advises keeping devices updated and employing strong account protection measures. Users can also seek assistance from Access Now's Digital Security Helpline for expert support. For most users, staying vigilant and maintaining robust security practices remains essential.
