Germany's BSI warns Bundestag members of possible government-backed spyware compromise after Apple threat notifications
Germany's federal cybersecurity office (BSI) warned that members of the Bundestag and other unnamed prominent individuals received Apple threat notifications saying their iPhones may have been targeted by government-backed spyware. A government spokesperson said Berlin is taking the incident "very seriously" but did not say who was targeted, including whether Chancellor Friedrich Merz is among them. Apple's latest batch of notifications reportedly went to users in 99 countries, and a Beirut-based filmmaker, Radwan Mortada, also received one. The actor and the sponsoring government behind this round of attacks are unknown.
Detalhes técnicos
- Apple sends threat notifications periodically to users it believes were targeted by spyware. It does not attribute attacks to specific governments and does not confirm whether a device was actually compromised.
- Such spyware often relies on zero-click exploits and can steal messages, location data and other sensitive information. The article does not confirm the exploit used in this campaign.
- The article names no CVEs, IOCs or malware family for this campaign.
Remediação
- The BSI advises that anyone who receives an Apple threat notification should assume the device may have been compromised.
Linha do tempo
-
Germany's BSI warns Bundestag members of possible government-backed spyware compromise after Apple threat notifications
ler a análise desta fonte ocultar
Germany's federal cybersecurity office (BSI) warned that members of the Bundestag and other unnamed prominent individuals received Apple threat notifications saying their iPhones may have been targeted by government-backed spyware. A government spokesperson said Berlin is taking the incident "very seriously" but did not say who was targeted, including whether Chancellor Friedrich Merz is among them. Apple's latest batch of notifications reportedly went to users in 99 countries, and a Beirut-based filmmaker, Radwan Mortada, also received one. The actor and the sponsoring government behind this round of attacks are unknown.
Technical Details
- Apple sends threat notifications periodically to users it believes were targeted by spyware. It does not attribute attacks to specific governments and does not confirm whether a device was actually compromised.
- Such spyware often relies on zero-click exploits and can steal messages, location data and other sensitive information. The article does not confirm the exploit used in this campaign.
- The article names no CVEs, IOCs or malware family for this campaign.
Remediation
- The BSI advises that anyone who receives an Apple threat notification should assume the device may have been compromised.