Apple has issued a warning to some iPhone users in India, alerting them to a potential "mercenary spyware attack" similar to Pegasus, which aims to gain remote control of their devices. This is the second notification of its kind sent to users in India and 98 other countries.
Background and Details
Since 2021, Apple has been notifying users in over 150 countries about these sophisticated attacks. According to the company's threat notification, such spyware attacks are exceptionally rare and far more advanced than typical cybercriminal activities or consumer malware.
Apple's latest notification explains that these attacks cost millions of dollars to execute and are targeted at a very small number of individuals, yet the threat remains global and ongoing.
Government and Apple Responses
Neither Apple nor the Ministry of Electronics and Information Technology (MeitY) responded to inquiries about the recent notifications. However, in April, the Indian Computer Emergency Response Team (Cert-In) highlighted multiple vulnerabilities in Apple's iPhone and iPad operating systems, particularly affecting the Safari web browser.
Cert-In warned that flaws in Safari versions before 17.4.1 and iOS and iPadOS versions before 17.4.1 could allow attackers to execute arbitrary code on targeted devices. In October 2023, Apple had similarly notified users in several countries, including India, about "state-sponsored" attacks, although the company did not specify which state actors were involved.
Implications and Advice
These notifications underscore the importance of maintaining up-to-date software and being vigilant against potential threats. Users are advised to update their devices to the latest software versions and follow best practices for cybersecurity to protect against such sophisticated attacks.
Recent Updates:
Microsoft Asks China Employees to Ditch Android, Switch to iPhones
Microsoft Mandates iPhones for Employees in China, Phases Out Android Devices
Apple iPhone 15 Series Now Available at Discounted Prices on Amazon!