Apple Sent Out iPhone Spyware Alerts In 99 Countries — Here's What You Need To Know

Apple fans, be aware that the company has sent notifications to users in 99 countries due to a spyware threat emanating from an unknown source or sources. For users, threats are nothing new, as a spyware attack back in February 2026 was targeting both Android and iPhone owners — though this latest round of threats has involved several notable figures. The warning comes hot on the heels of news that German officials in federal and parliament positions have confirmed they were among those who were targeted.

Per an Apple support document posted in 2024, the company had already notified users in over 150 different countries that they had been targeted by what Apple calls "mercenary" spyware attacks. These are typically well-funded attacks directed at high-profile individuals — think politicians and activists — and when Apple notices signs that one might have occurred or been attempted on a device, it sends the affected user what it calls a "threat notification." Now, according to a post from Costin Raiu on X, Apple sent out another batch of threat notifications in late October 2026 that reveal the company has detected further mercenary spyware attacks affecting users in 99 countries.

As of now, Apple hasn't attributed the potential attack to any person or region in particular. Should a user receive one of these warnings, Apple's support documentation has a couple of recommendations, including enabling Lockdown Mode and requesting assistance through Access Now's Digital Security Helpline. Apple also recommends that all users should keep their devices up to date and rely on security passcodes such as Face ID or Touch ID. Naturally, users should consider enabling these iPhone security settings, as well.

Apple has been quiet regarding the specific countries that have received threat notifications about mercenary spyware, though Germany's Digital Minister Karsten Wildberger has confirmed that members of the federal government and members of the parliament have received the warning. Germany has not confirmed how many individuals have received the warning, nor did representatives from the country state if the attack was successful in infecting devices. Germany's own Federal Office for Information Security is telling those who received the warning to assume the attack succeeded.

Given the circumstances around the threat notifications being sent out, it left some journalists pondering if it was a "zero-click" attack from nefarious parties. A zero-click attack is a way to send a user malicious code through device exploits rather than having the user take a specific action. According to Apple, these types of attacks can be especially damaging and can often extend far beyond a typical online threat. Be that as it may, it's not confirmed that this recent spate of threat notifications involves any kind of zero-click threat.

As a reminder, users can enable Lockdown Mode on an iPhone by going to Settings > Privacy & Security > Lockdown Mode. However, remember that this capability is only available in iOS 16 or later. Lockdown Mode may also heavily impact your device functionality, as it takes measures such as blocking most messaging attachments or even certain web technologies. Those who believe they've been impacted should also check by signing in through the official Apple Account page rather than clicking any mysterious links. Users should also remember that it's absolutely a myth that iPhones can't be affected by malware.