Apple has warned German lawmakers that their iPhones were targeted by spyware. Several Bundestag members received the alerts since October 29. Germany’s cybersecurity agency responded with an unusually direct instruction. It told affected lawmakers to assume their devices may already be compromised.
The Federal Office for Information Security, or BSI, published the guidance publicly. It described the threat as commercially built mercenary spyware. State actors have frequently used such tools against specific individuals. However, the BSI said it cannot confirm whether attackers actually broke in.
The alerts reached far beyond Germany alone this time. According to threat researcher Costin Raiu, Apple sent warnings to users across 99 countries. He confirmed this wave was separate from Apple’s earlier August notifications. Importantly, it was tied to entirely new attack activity.
Apple has sent these warnings several times a year since 2021. The company calls them high-confidence notifications of targeted attacks. However, it deliberately does not name the attackers involved. It also does not specify which countries face the highest risk.
Two journalists publicly confirmed receiving the latest alerts. Turkey bureau chief for Middle East Eye, Ragıp Soylu, posted his warning. He called it his third such notification this year alone. Lebanese investigative journalist Radwan Mortada also received one separately.
Mortada’s alert arrived days after releasing a documentary about attacks in Lebanon. He said he had no concrete evidence linking the two events. However, he noted the timing raised serious questions about targeting journalists.
The BSI issued specific advice for anyone who received alerts. It recommended updating iPhone software immediately as a first step. Additionally, it urged enabling Apple’s Lockdown Mode across all devices. However, it stressed Lockdown Mode does not remove existing infections.
For high-risk individuals, the agency suggested getting an entirely new phone. It also recommended resetting every account and changing phone numbers. The spyware can read encrypted messages once installed on a device. It can also activate the camera and microphone silently.
The situation carries particular irony for Germany specifically. The country’s own federal police purchased a version of NSO Group’s Pegasus spyware back in 2021.
