Apple will alert users exposed to state-sponsored spyware attacks


Protect Your Access to the Internet

AppleInsider is supported by its audience and may earn commission as an Amazon Associate and affiliate partner on qualifying purchases. These affiliate partnerships do not influence our editorial content.

As part of Apple’s initiative to battle state-sponsored spyware, or more specifically the surveillance and monitoring of Apple device owners, the company is introducing a system that will alert users when they are believed to be targets of such attacks.

On Tuesday, Apple announced that it filed suit against NSO Group and its parent company over the creation and deployment of the Pegasus spyware.

Ostensibly developed to aid in law enforcement campaigns, Pegasus relies on vulnerabilities, like the now-patched FORCEDENTRY exploit, to install a surveillance package capable of granting access to iOS and Android device microphones and cameras, as well as onboard data. The tool is sold — allegedly indiscriminately — to governments with poor human rights track records, who have in the past used it to monitor journalists, activists, researchers, politicians and other targets of interest.

Apple said it is notifying a “small number of users” who were targeted by FORCEDENTRY, and promised to continue to alert customers if and when future attacks are detected.

“Any time Apple discovers activity consistent with a state-sponsored spyware attack, Apple will notify the affected users in accordance with industry best practices,” the company said.

The system is already active, as a Reuters report on Wednesday details alert messages that were sent to at least six Thai activists and researchers.

Apple explains threat notifications in a support document. While the inherent nature of state-sponsored attacks — expensive, complex and highly targeted — precludes most users from being exposed, Apple says that if one of its customers is affected they can expect to be informed in two ways: a prominent alert notification displayed at the top of the Apple ID website and alerts sent via email and iMessage to the address and phone number associated with an Apple ID.

Notifications from Apple will never ask users to click links, open files, install…