Apple has notified users in 100 countries that their phones may have been targeted by advanced commercial spyware. The notifications were sent after it was revealed that journalists and public figures, including Italian journalist Cyrus Pellegrino and Dutch author Eva Vlaardingerbroek, were targeted. Pellegrino, who works for Fanpage, disclosed that his phone may have been compromised by spyware, possibly linked to Paragon spyware, which has been used against critics of the Italian government. The specific type of spyware targeting Pellegrino and Vlaardingerbroek remains unclear.
Pellegrino’s article emphasized the alarming nature of such attacks, describing how spyware operates undetected on infected phones. After receiving the notification, Pellegrino immediately took precautions by putting his phone in the microwave to block any further surveillance. The spyware, which operates without the user’s knowledge, grants attackers full access to personal data, including messages and media. The journalist expressed concern about the vast amounts of sensitive information that could be exploited by malicious actors once spyware is installed.
Vlaardingerbroek, who also received a notification from Apple, confirmed she had no prior knowledge of the attack and dismissed any intimidation attempts, stating that they wouldn’t stop her. The spyware threats are part of a wider global issue involving highly sophisticated mercenary spyware, which Apple has been tracking since 2021. Despite multiple notifications, Apple has not disclosed details on the specific attackers or regions involved, although it has confirmed that these attacks affect individuals worldwide.
In a blog post, Apple explained the severity of such attacks, noting the extreme cost and sophistication involved. The company stated that spyware attacks remain one of the most advanced digital threats, with victims in over 150 countries. These threats serve as a stark reminder of how vulnerable individuals, especially public figures and journalists, are to surveillance technologies that can access and exploit personal data without detection or consent.
Reference: