News in short

• Apple reportedly sent spyware threat notifications to iPhone users in 99 countries.
• Germany’s BSI is investigating reports of spyware attacks targeting lawmakers and public figures.
• The reported attack used a zero-click vulnerability, meaning victims did not need to open a link.
• Authorities have not disclosed the spyware’s name or confirmed whether all affected countries faced the same attacker.
• Apple’s threat notifications appear on the iPhone Lock Screen and in Settings.

Apple has reportedly sent spyware threat notifications to iPhone users across 99 countries. The latest alert wave has prompted an investigation in Germany, where lawmakers and public figures were reportedly targeted.

According to a report by the Financial Times, Germany’s Federal Office for Information Security (BSI) warned Bundestag lawmakers and other public figures about a potential compromise. The notice reportedly advised recipients to assume their iPhones had been compromised if they received an Apple threat notification.

Apple reportedly began sending the latest alerts on October 29. The company has not publicly identified the spyware involved in the reported attacks.

Germany investigates reported attacks on lawmakers

Germany’s BSI has launched an investigation into the reported spyware attacks. A spokesperson for Chancellor Friedrich Merz told the Financial Times that the government was taking the incident and warning seriously.

The reported attacks allegedly used a zero-click vulnerability. This type of exploit can compromise a device without requiring its owner to tap a link or open a malicious file.

According to the report, attackers needed only the phone numbers of their targets. However, authorities have not disclosed the name of the spyware or confirmed the identity of the attackers.

The software is reportedly similar to Pegasus, the spyware developed by Israel-based NSO Group. The company has said it sells its surveillance technology only to governments and other authorities.

Spyware of this kind can potentially access messages, contacts, calendars, location data, photos and stored documents. It may also access text messages protected by end-to-end encryption once it compromises a device.

Apple’s threat notifications and global reach

The latest alerts were not limited to Germany. TechCrunch reports that Apple sent threat notifications to users in 99 countries.

It remains unclear whether the attacks in every affected country came from the same threat actor. Investigative journalist and documentary filmmaker Radwan Mortada also said he received an alert by email. Mortada has previously claimed he was targeted by Pegasus between 2017 and 2021.

Apple’s Threat Notifications system is designed to warn users when the company believes their devices may have been targeted by mercenary spyware. The alerts appear on the iPhone Lock Screen and inside the Settings app.

Receiving a notification does not identify the attacker or explain every detail of the suspected attack. However, Apple’s warning indicates that it believes the user may have been targeted.

The latest reports highlight the risks posed by highly targeted spyware. Unlike common scams, these attacks may not depend on users clicking suspicious links. The investigation in Germany is ongoing, and key details about the spyware and the wider campaign remain unknown.