Silent Hunters: Apple Issues Urgent Warnings Over Mercenary Spyware Strikes

Apple dispatched a fresh round of security warnings to users who were targeted by mercenary spyware designed to breach personal iPhones, iPads, and Macs. The company sends out these official security alerts whenever internal threat intelligence teams catch state-backed actors trying to compromise targeted devices.

Apple confirmed on Thursday that this latest wave of threat warnings reached targeted individuals across 110 different nations. Since launching its threat alert system, Apple has warned users across more than 150 countries, showing how widely state-sponsored surveillance tools have spread across the globe.

Along with the new alerts, Apple published updated support guides detailing a streamlined alert process. Users now receive direct push notifications right on their lock screens urging quick action. The push message pops up with clear text stating that Apple detected a mercenary spyware attack aimed directly at their device, adding that specific steps exist to shield local data.

Apple also sends matching email warnings and displays persistent alert banners inside appleid.apple.com whenever targeted users log into their accounts. John Scott-Railton, a senior researcher at the digital rights research group Citizen Lab, first pointed out this new batch of warnings across social media channels.

If you ever see one of these push alerts land on your screen, take action immediately. Getting a notification means attackers singled out your account, even if they have not successfully broken into your phone yet. Taking immediate security steps protects your personal files and blocks future exploitation attempts.

Tapping the push notification opens clear steps on how to secure your device and seek expert guidance. The system prompts users to turn on Lockdown Mode right away. Lockdown Mode restricts background system services, blocks attachment types, and stops incoming connection requests from unknown callers, making it far harder for surveillance software to succeed. Apple confirmed that it has never documented a successful mercenary spyware breach on any device running an active Lockdown Mode setup.

While highly targeted spyware strikes remain rare for average phone owners, commercial surveillance gear has spread rapidly in recent years. Bad actors and government entities routinely buy these powerful tools to target political rivals, journalists, human rights defenders, and civil society leaders.

Scott-Railton noted that Apple’s revamped push notifications make a huge difference by prompting targeted people to seek help fast. He explained that these warning signals alert targeted communities, encouraging victims to report incidents and triggering security investigations that expose broader surveillance campaigns. For example, previous Apple alerts uncovered massive political spying operations in Poland, exposing how former government officials illegally monitored opposition figures during local elections.