Apple Warns iPhone Users in 110 Countries of Mercenary Spyware via New Lock Screen Alerts

The threat notification now appears on the iPhone lock screen with the exact message: "Apple detected a mercenary spyware attack targeting your iPhone. There are measures you can take right now to help protect your data and device", and Apple has redesigned the notification interface to make next steps easier.
Apple is shifting from quieter, email-based warnings to real-time push alerts on the iPhone lock screen, describing these as the most direct warning system yet for state‑sponsored spyware targeting high-risk individuals.
Apple notes that there have been no recorded cases of a device being compromised while Lockdown Mode is enabled, underscoring that enabling this feature makes attacks significantly more difficult even as warnings should still be taken seriously.
Apple’s ongoing battle with mercenary spyware includes a historical reference to suing NSO Group in 2021 and continuing warnings since at least 2019, with prior notifications delivered by email before the lock-screen push system.
Apple has sent spyware warning alerts to iPhone users in 110 countries, telling them their devices may have been targeted by mercenary spyware, according to 9to5Mac and BleepingComputer. The alerts now appear directly on the iPhone lock screen, making them harder to miss than older email-only warnings.
The exact message reads: "Apple detected a mercenary spyware attack targeting your iPhone. There are measures you can take right now to help protect your data and device." BleepingComputer reports the total number of countries where Apple has sent such alerts now exceeds 150.
Apple has redesigned how it delivers spyware warnings. In the past, the company sent alerts by email — easy to overlook. Now, warnings appear as push notifications on the iPhone lock screen in real time, according to TechBuzz. Apple is also sending follow-up reminders by email and through in-account messages to make sure users see them.
Tech observers call the push-notification system a critical upgrade. High-risk users — journalists, activists, and government officials — are the main targets of these attacks. A lock-screen alert is far harder to ignore than a message buried in an inbox.
Mercenary spyware is sold by private companies to governments. The most well-known tool is Pegasus, made by Israel's NSO Group. Once installed, it can read messages, listen through the microphone, and track a phone's location — all without the owner knowing, according to Mezha.
Apple sued NSO Group in 2021 and has been sending spyware warnings since at least 2019. The company does not name which spyware or which government is behind any specific attack. Experts stress that users should take these alerts seriously even if their device has not yet been fully compromised.
Apple urges anyone who gets a warning to turn on Lockdown Mode right away. The feature limits certain phone functions — like some web browsing tools and message attachments — to make it much harder for spyware to get in. Apple says there are no recorded cases of a device being compromised while Lockdown Mode was enabled, according to Whalesbook.
That is a strong track record. The trade-off is reduced functionality — some apps and features work differently in Lockdown Mode. But for journalists, activists, or officials who received an alert, security experts say the protection is worth it.
Apple's warnings are part of a larger, ongoing effort to push back against government-backed spyware. The company has invested heavily in security infrastructure and continues to update how it detects these attacks, according to 9to5Mac. Investors and analysts view these targeted alerts as separate from any systemic breach of Apple's systems.
The scale is significant. Warnings now cover more than 150 countries total, BleepingComputer reports. That reach shows how widespread mercenary spyware has become — and why Apple says building a faster, more visible warning system is now a top priority.
Publishers
11
Articles
5
Reach
16