An exploit developer, previously suspected of leaking company tools and subsequently fired from a Western spyware and zero-day firm named Trenchant, received a notification from Apple that their personal iPhone was targeted by government spyware. Apple has been known to send alerts to users who may have been targeted by state-sponsored attackers. These attacks, often deployed against a small number of individuals like journalists, activists, and politicians, are considered some of the most advanced digital threats due to their cost, sophistication, and global nature.
Apple's spyware alert system is designed for specific cases, targeting individuals based on their roles or access to sensitive information. The notification appears as a warning on the Apple ID account page and via email or iMessage, stating that Apple has detected a mercenary spyware attack specifically targeting the user. These attacks utilise advanced tools like the Pegasus spyware.
While Apple does not attribute the attacks to any specific threat actor or region, the company has been actively working to counter the misuse of commercial spyware. This includes legal action against companies like NSO Group, the developer of Pegasus. Apple has also been updating its systems to protect users from such threats, advising users to remain vigilant and update their devices.
