Apple has issued a fresh wave of threat notifications to users in India and 91 other countries, cautioning them about potential attacks on their iPhones by "mercenary spyware," including the controversial Pegasus malware developed by the Israeli NSO Group.
The tech giant refrained from attributing the recent surge in attacks to any specific entity, mirroring a similar stance taken last October when it sent out similar warnings to Opposition leaders across party lines in India, according to The Indian Express.
These leaders, including figures such as Shashi Tharoor and Raghav Chadha, were alerted about a "potential state-sponsored spyware attack" on their iPhones.
The timing of the threat notifications, sent around 12:30 am IST on Thursday (April 11), underscores the seriousness with which Apple views these security concerns. However, the exact number of affected users remains unclear.
The notification emails, according to The Indian Express, bear subject lines such as "ALERT: Apple detected a targeted mercenary spyware attack against your iPhone," emphasizing the specific nature of the threat.
Apple warned users that such attacks, especially those involving tools like Pegasus, are exceptionally rare and sophisticated, often targeting individuals based on their identity or activities.
Despite the gravity of the situation, Apple remains cautious about divulging detailed information about the source of these threats, fearing it could aid attackers in evading detection in the future.
Alongside the threat notifications, Apple has updated its support page to offer guidance to users who may have been targeted. The company advises users to exercise caution with all links and attachments, especially from unexpected or unknown senders, as part of their proactive approach to mitigating potential risks.
This isn't the first time Apple has sounded the alarm. Since initiating these threat notifications in 2021, individuals in 150 countries have received them, indicating the widespread nature of the issue. Last year alone, at least 20 Indian iPhone users were among those who received such alerts.
Previous investigations into similar issues, notably the Pegasus controversy, have faced challenges. In 2021, the Supreme Court of India formed a committee of technical experts to investigate allegations of unauthorized surveillance using the Pegasus software. However, the committee's findings were inconclusive, citing a lack of cooperation from the Central Government.
The Pegasus scandal erupted following media reports alleging the illegal use of the software to monitor the phones of activists, journalists, and politicians. Subsequently, multiple petitions were filed in the Supreme Court seeking an inquiry into these allegations, highlighting the broader implications of state-sponsored surveillance and the need for robust safeguards to protect privacy and digital security.
As Apple continues to grapple with evolving cyber threats, the incident serves as a stark reminder of the ongoing battle between technology companies and sophisticated adversary’s intent on exploiting vulnerabilities for nefarious purposes.