Apple Warns iPhone Users in 110 Countries of Mercenary Spyware Attacks

Apple has sent a new wave of Threat Notifications to people in 110 countries, warning that they may have been individually targeted by mercenary spyware capable of compromising their Apple devices. The latest notifications were issued on August 13, 2026. Apple has confirmed the notification campaign, but it has not identified a spyware vendor, operator, government, exploited vulnerability, or specific campaign behind this latest wave. The 110-country figure should not be interpreted as evidence of a single worldwide spyware operation.

Apple describes mercenary spyware attacks as highly targeted operations in which attackers devote significant technical and financial resources to compromising a very small number of carefully selected people. The company says these attacks are likely to target individuals because of “who you are or what you do.” For recipients, however, the important part is simpler: Apple considers these notifications high-confidence warnings and says they should be taken seriously.

What Apple’s new warning means

Apple’s Threat Notification system is different from the security warnings most users are familiar with. It is not a generic notification that an iPhone has encountered malware, nor is it an indication that a particular malicious application has been detected on the device.

Instead, Apple says it issues these warnings when its internal threat-intelligence work and investigations identify activity consistent with a mercenary spyware attack against an individual user. Apple deliberately does not disclose the technical signals that trigger a notification because doing so could help spyware operators change their techniques and evade future detection.

That makes the wording of the notification important. Apple is warning about targeting, not making a blanket claim that every recipient’s phone has definitely been fully compromised. A notification can indicate that Apple has identified activity associated with an attempted or suspected highly targeted attack, while forensic examination may still be required to determine whether spyware was successfully installed and what happened to the device.

There is good reason for taking the notification seriously. Previous investigations have shown that Apple’s warnings can lead to the discovery of real spyware infections. In one 2025 investigation, Citizen Lab forensically examined iPhones belonging to journalists who had received Apple’s notifications and found evidence consistent with Paragon’s Graphite spyware.

Why mercenary spyware is different from ordinary malware

The term “mercenary spyware” refers to commercial surveillance technology developed and sold to customers, including government customers, for highly targeted operations.

The economics are fundamentally different from ordinary cybercrime. A criminal distributing commodity malware may attempt to infect thousands or millions of devices because each individual victim has relatively little value. Mercenary spyware operations can work in the opposite direction. The operator may spend enormous amounts of money and engineering effort to compromise one particular person.

Apple says these operations can cost millions of dollars and may have a short operational lifespan. The company also says that the vast majority of users will never be targeted by attacks of this type.

The technical sophistication follows from that business model. A successful operation may require a chain of vulnerabilities rather than a single bug. An attacker could need an initial entry point, code execution, privilege escalation, sandbox escape and mechanisms for maintaining access or collecting information while minimizing forensic evidence.

The attack surface is also unusually broad. Mobile operating systems process enormous amounts of complex, potentially attacker-controlled data through messaging, image and video decoders, web browsers, networking components, document parsers, Bluetooth, operating-system services and other subsystems. A vulnerability in one of those components can sometimes become the first link in a larger exploit chain.

Zero-click attacks are one reason these operations are so difficult to detect

One of the most concerning capabilities demonstrated in mercenary spyware investigations is the zero-click exploit.

A conventional phishing attack might require a victim to open a malicious document or tap a link. A zero-click attack attempts to remove that requirement. The malicious content is delivered to a service or component that processes it automatically, giving the exploit an opportunity to execute without deliberate interaction from the target.

That does not mean every Apple spyware notification represents a zero-click attack. Apple has not said what exploit or delivery mechanism was involved in the August 2026 notification wave.

But previous cases demonstrate why this class of attack is taken seriously. In 2023, Citizen Lab documented BLASTPASS, an NSO Group Pegasus exploit chain that targeted iPhones through maliciously crafted iMessage content and was capable of compromising devices without victim interaction. The attack involved vulnerabilities in components responsible for processing PassKit and malicious images.

Another investigation into Paragon’s Graphite spyware found evidence of a sophisticated iMessage-based zero-click attack against an iPhone. Citizen Lab reported that Apple subsequently confirmed the attack had been mitigated in iOS 18.3.1 and assigned it CVE-2025-43200.

These cases illustrate the basic problem Apple and other platform vendors face. A user can follow conventional security advice and still be targeted if the attack is exploiting a vulnerability in a component that processes incoming data automatically.

Why Apple is not naming Pegasus

Apple’s support documentation specifically mentions Pegasus from NSO Group as an example of mercenary spyware, but Apple has not attributed the August 2026 notifications to Pegasus or NSO Group. That is an important limitation on what can currently be concluded.

Pegasus is one of the best-documented examples of commercial spyware. Apple has previously taken legal action against NSO Group and described the company’s technology as sophisticated, state-sponsored surveillance technology. Apple has also worked with researchers investigating Pegasus infections and previously notified users targeted through NSO Group’s FORCEDENTRY exploit.

But the existence of another Apple notification wave does not establish that Pegasus was involved. There is now a much broader commercial spyware ecosystem. Researchers have investigated products and operations associated with companies such as Paragon, while other investigations have documented additional surveillance platforms. Citizen Lab’s forensic work has, for example, linked some Apple-notified targets to Paragon’s Graphite spyware.

Apple’s current position is deliberately more cautious. Its support documentation says the company does not attribute the attacks or resulting notifications to specific attackers or geographic regions.

Until Apple, a vendor, or independent researchers provide evidence connecting this particular notification wave to a specific spyware family, claims that the August 2026 alerts are “Pegasus attacks” would go beyond the available evidence.

The 110-country figure needs some context

The latest notification wave reached users in 110 countries, according to Apple. The company also says that, since it began sending these notifications in 2021, it has notified users in more than 150 countries in total. Those figures are significant, but they should not be read as a count of victims or infections.

Apple has not disclosed how many individual people received the August 13 notifications. It has also not said that all of the recipients were targeted as part of one operation. In fact, Apple’s own explanation points in the other direction. The company says mercenary spyware attacks are ongoing and global but does not attribute its notifications to particular attackers or regions.

A more accurate interpretation is that the August notification wave represents a large geographic distribution of individual targeting warnings. The countries involved tell us about the reach of Apple’s notification process, not necessarily the geographic origin of an attacker.

What happens technically when spyware compromises an iPhone?

A modern iPhone is not a single security boundary. It is a collection of privileged and less-privileged processes protected by multiple layers of isolation. An advanced exploit chain therefore has to overcome several defenses, depending on the vulnerability and the desired capability.

A typical high-end mobile exploit chain might begin with a memory-safety or logic flaw in a remotely reachable parser or service. If the vulnerable component processes attacker-controlled data automatically, exploitation may require no visible interaction from the victim.

The attacker then needs to turn that initial foothold into useful code execution. Modern iOS protections make that considerably harder than simply obtaining an instruction-pointer overwrite. Address Space Layout Randomization, code-signing enforcement, sandboxing and other platform protections constrain what an attacker can do after exploiting an individual vulnerability.

The next stage may involve escaping the initial sandbox or gaining additional privileges. An attacker attempting to deploy a full spyware platform needs considerably more than a single vulnerable process. It needs a path from initial code execution to access to the information and system capabilities that the operator actually wants. That can include communications, contacts, location information, photographs and other sensitive data. Depending on the spyware and its privileges, surveillance capabilities can extend much further.

This is why advanced spyware is often discussed in terms of exploit chains rather than individual vulnerabilities.

The historical record provides concrete examples. Citizen Lab’s investigation of BLASTPASS described an exploit chain capable of compromising a fully updated iPhone without user interaction. Its research into Paragon’s Graphite likewise found evidence of a sophisticated zero-click attack and subsequent spyware activity.

The important point is that these are not necessarily reusable “one-click hacks.” They can depend on a particular combination of vulnerabilities, operating-system versions, application behavior and attacker infrastructure. Once Apple patches part of the chain, the operator may have to find another route.

Why these attacks can have a short shelf life

There is practical reason mercenary spyware operators are careful about exposing their techniques. A zero-day vulnerability is valuable precisely because the vendor has not yet patched it. Once the vulnerability becomes known and is fixed, the exploit may stop working against updated devices.

Researchers have repeatedly documented this cycle. A sophisticated exploit is discovered in the wild, researchers analyze the evidence, the vendor receives technical details, and a patch is developed and distributed. Once the vulnerability becomes public, attackers lose part of the advantage they previously had.

Apple says mercenary spyware attacks can have a short shelf life and that its security teams investigate the activity and deploy protections where possible. That also helps explain why Apple does not publish the precise detection criteria behind its Threat Notifications. A detailed description of those signals could provide attackers with information about what Apple can see and what behavior may trigger a warning.

It is an unusual security trade-off: the company has to tell a victim enough to take action while withholding enough technical detail to avoid turning its detection system into a roadmap for attackers.

What Apple recommends if you receive the notification

The first step is to verify that the warning is genuine. Apple says a legitimate Threat Notification will be prominently displayed after signing in directly to account.apple.com. The company says genuine notifications do not ask recipients to click links, open files, install applications or configuration profiles, or provide an Apple Account password or verification code by email or telephone.

A fake message could attempt to exploit the fear generated by real-world reporting about Pegasus and similar tools. If the warning appears in the Apple Account portal, Apple recommends updating devices to the latest available software and considering Lockdown Mode. The company also recommends that recipients seek expert security assistance.

For people in high-risk professions or circumstances, specialist assistance can be particularly valuable because forensic examination may provide information that a normal user cannot obtain from the device interface.

What Lockdown Mode changes

Lockdown Mode is not simply another antivirus switch. Apple designed it to reduce the attack surface available to extremely sophisticated targeted attacks.

When enabled, iOS restricts or changes the behavior of several system features. Apple documents restrictions affecting messaging attachments, complex web technologies, FaceTime behavior, Apple service invitations, photo sharing, wired connections, wireless connectivity and configuration profiles, among other areas.

The underlying security idea is straightforward: if a feature provides an attacker with a remotely reachable and complex parser or execution environment, reducing that feature’s functionality can reduce the opportunities for exploitation.

That inevitably creates usability costs. For example, some message attachments and link previews are restricted, complex websites may not work normally, some FaceTime functionality is limited, and certain device connections require the device to be unlocked. Apple also restricts configuration-profile installation while Lockdown Mode is active.

Apple therefore does not recommend Lockdown Mode as a default setting for everyone. It describes it as an extreme protection intended for the small number of people who may be personally targeted by sophisticated attacks.

For someone who has received a genuine Threat Notification, however, the functionality trade-off is much easier to justify.

A warning does not tell you everything about the attack

One of the biggest misconceptions surrounding these notifications is that the alert itself provides a complete incident report. It does not.

Apple explicitly says it cannot provide information about what causes it to issue a notification because that information could help spyware operators adapt their behavior.

The notification therefore does not necessarily tell the recipient which vulnerability was used, who was behind the operation, whether exploitation succeeded, what spyware was deployed, how long the activity lasted, or exactly what information was accessed. Independent forensic work can sometimes answer some of those questions.

Citizen Lab’s investigations demonstrate why this matters. Researchers have examined device artifacts from Apple-notified individuals and, in some cases, reconstructed evidence of spyware targeting and infection. In its Graphite investigation, for example, researchers were able to identify technical artifacts connecting activity on affected iPhones to Paragon’s spyware infrastructure.

That does not mean every notification will produce the same forensic result. A sophisticated attacker may remove evidence, use techniques that leave limited artifacts, or target a device in a way that makes later reconstruction difficult.

Apple’s warning should therefore be treated as an important signal, not as a substitute for a forensic investigation.

Apple has been issuing these warnings since 2021

The current system is not new.

Apple began notifying users about state-sponsored spyware targeting in 2021. Its later support documentation broadened the terminology to “mercenary spyware” and describes the attacks as exceptionally sophisticated, expensive and targeted. Apple says it has continued sending notifications multiple times per year when its investigations identify activity that meets its high-confidence threshold.

Apple’s 2021 response also included action against NSO Group. The company filed a lawsuit against NSO Group in November 2021 and described Pegasus as sophisticated state-sponsored surveillance technology. Apple also highlighted security technologies including Pointer Authentication Codes, BlastDoor and the Page Protection Layer as part of its efforts to defend against sophisticated attacks.

In 2022, Apple introduced Lockdown Mode as an additional layer specifically intended for people facing highly targeted digital threats.

The strategy has therefore developed into a combination of platform hardening, exploit mitigation, threat intelligence, user notification and cooperation with independent researchers.

What this latest wave does and does not tell us

At this point, several facts are established. Apple confirmed that a new batch of Threat Notifications was sent on August 13, 2026, and that the notifications reached users in 110 countries. Apple describes its Threat Notifications as high-confidence warnings concerning individual targeting by mercenary spyware. The company has not attributed the latest activity to a particular spyware vendor, operator or country.

What remains unknown is equally important. Apple has not publicly identified the spyware involved in this specific notification wave. There is no confirmed public attribution to NSO Group or Pegasus. The number of people notified has not been disclosed, and the available information does not establish that all recipients were targeted as part of a single coordinated campaign.

Those gaps should not be filled with speculation. The 110-country figure makes the notification wave notable, but it is not evidence by itself of a single global surveillance campaign. The safest conclusion is that Apple detected activity it considers consistent with highly targeted mercenary spyware attacks and decided that affected users warranted direct warnings.

What iPhone users should do

For ordinary iPhone users, there is no reason to panic simply because Apple has issued another round of notifications. Apple itself says most people will never be targeted by mercenary spyware.

The situation is different if an actual Threat Notification appears on your Apple Account.

Verify the notification by signing in directly to account.apple.com, rather than following a link in an email or message. Update the iPhone and other Apple devices associated with the account. If the threat model warrants it, enable Lockdown Mode across supported devices. Apple also recommends obtaining expert assistance, particularly for people who may face targeted surveillance.

The broader lesson is that keeping an iPhone updated remains important even when the user never sees a suspicious application or message. Modern mercenary spyware can operate at a level where traditional signs of compromise are not obvious to the victim.

And that is precisely why Apple’s Threat Notifications matter.

They do not make an iPhone impossible to compromise, nor do they reveal every detail of an attack. What they provide is something that is otherwise difficult for a targeted individual to obtain: a warning from the platform operator that its own threat-intelligence and investigation systems have identified activity serious enough to warrant direct notification.

For the recipients of the August 13 warnings, that is the part that should not be ignored.

Editor’s note: The August 2026 notification wave has not been publicly attributed by Apple to Pegasus, NSO Group, or another specific spyware vendor. Claims that identify a particular actor or spyware family without additional evidence should therefore be treated as unconfirmed.