Apple threat notifications: What is mercenary spyware and how to protect against it

Apple recently sent notifications to customers who it suspected to have been targeted with spyware in their devices. The tech giant later confirmed to multiple publications that it sent out the notifications on Thursday to users targeted in 110 countries. By sending these alerts, the company reminded users about one of the most sophisticated digital threats currently in existence: mercenary spyware. If you are one of those who got the term “Apple threat notification” flashing on your screen and wondered what it actually means, here’s a breakdown of what these alerts are, why they are sent and what you should do if you ever receive one.

What exactly is Apple’s threat notification

Apple threat notifications exist for one specificpurpose: to warn and assist users who may have been individually targeted by spyware attacks. In this case, it was a notification for mercenary spyware. These operations are far more advanced than regular cybercrime, and attackers behind them pour in exceptional resources to go after a very small, specificgroup of people and their devices.

Apple says that these attacks cost millions of dollars to carry out and often don’t stay active for very long, which actually makes them harder to detect and stop in time. The good news, though, is that the majority of users will nevercome across this kind of attack in their lifetime.

Citing public reporting and research conducted by civil society groups, cybersecurity researchers, and journalists over the years, Apple says that this level of individually targeted, high-cost cyberattacks has typically been linked to state actors, including private firms that build mercenary spyware for governments, such as the NSO Group’s well-known Pegasus tool. While only a small number of individuals end up being targeted, usually journalists, activists, politicians, and diplomats, these attacks are happening constantly and across the globe.

What to do if you get Apple threat notification

If you ever receive one of these alerts, Apple provides extra guidance and recommends steps you can take to secure your accounts and devices, including turning on Lockdown Mode. The company also strongly recommends reaching out to expert organisations for help, such as the Digital Security Helpline run by the nonprofit Access Now, which offers round-the-clock emergency security assistance.

General security tips for everyone

While most people will never encountermercenary spyware, it’s still worth following some basic cybersecurity habits.

The first is to keep your devices updated with the latest software so you’re covered by the newest security patches, and protect them with a passcode, Face ID, or Touch ID.

The second most important thing to do is to turn on two-factor authentication along with a strong password for your Apple Account, and enable Stolen Device Protection for extra peace of mind.

While Apple doesn’t allow installing apps from third-party stores, ensure that you download apps only from the App Store, use strong and unique passwords across your accounts, opt for passkeys wherever they’re available

Finally, Avoid clicking on links or opening attachments sent by unknown senders.