Mercenary Spyware Attack Affects iPhone Users in 92 Countries, Including India

Unknown, Unknown Mongolia
A recent cyberattack has affected iPhone users from at least 92 countries, including India.
The attack is a mercenary spyware attack that aims to remotely compromise the iPhone and access sensitive data or communications.
Mercenary Spyware Attack Affects iPhone Users in 92 Countries, Including India

A recent cyberattack has affected iPhone users from at least 92 countries, including India. The attack is a mercenary spyware attack that aims to remotely compromise the iPhone and access sensitive data or communications.



Confidence

100%

No Doubts Found At Time Of Publication

Sources

83%

  • Unique Points
    • A terrifying and extremely advanced cyberattack has impacted iPhone users from at least 92 countries.
    • The extreme cost, sophistication and worldwide nature of mercenary spyware attacks makes them some of the most advanced digital threats in existence today.
  • Accuracy
    No Contradictions at Time Of Publication
  • Deception (100%)
    None Found At Time Of Publication
  • Fallacies (85%)
    The article contains several fallacies. The author uses an appeal to authority when stating that mercenary spyware attacks are some of the most advanced digital threats in existence today and that they are exceptionally well funded. They also use a dichotomous depiction by stating that everyday people typically are never a target, while high-profile individuals such as politicians, diplomats, journalists and activists commonly become targets. The author uses inflammatory rhetoric when describing the attacks as terrifying and extremely advanced cyberattacks impacting iPhone users around the world.
    • The article states that mercenary spyware attacks are some of the most advanced digital threats in existence today, using an appeal to authority.
    • The author uses a dichotomous depiction by stating that everyday people typically are never a target while high-profile individuals such as politicians, diplomats, journalists and activists commonly become targets.
    • The article describes the attacks as terrifying and extremely advanced cyberattacks impacting iPhone users around the world using inflammatory rhetoric.
  • Bias (85%)
    The article contains examples of religious bias and monetary bias. The author uses language that dehumanizes the hackers by referring to them as 'mercenary spyware attackers' which implies they are immoral and unethical. This is an example of moral judgment without evidence or context, making it biased.
    • The extreme cost, sophistication and worldwide nature of mercenary spyware attacks makes them some of the most advanced digital threats in existence today,
    • Site Conflicts Of Interest (0%)
      None Found At Time Of Publication
    • Author Conflicts Of Interest (100%)
      None Found At Time Of Publication

    82%

    • Unique Points
      • Apple sent out iPhone security alerts to people across 92 countries on Wednesday
      • The targeting is ongoing and global. The company said in the email.
      • A terrifying and extremely advanced cyberattack has impacted iPhone users from at least 92 countries
      • > Apple relies solely on internal threat-intelligence information and investigations to detect such attacks.
    • Accuracy
      • Apple sent out iPhone security alerts to people across 92 countries on Wednesday, warning that their iPhones had been remotely targeted in a mercenary spyware attack.
    • Deception (50%)
      The article is deceptive because it does not provide any evidence or sources for the claim that Apple detected a mercenary spyware attack on iPhones across 92 countries. The author uses vague and sensational language to create fear and suspicion among readers without backing up their assertions with facts or quotes from credible sources. The article also implies that Pegasus is the only possible cause of the alleged attack, ignoring other potential threats or explanations for the targeting of specific individuals. Additionally, the author does not disclose any information about how they obtained access to Apple's threat notification email or what steps they took to verify its authenticity.
      • The news was first reported by Indian business publication The Economic Times, which said that India is one of the affected countries.
      • In a help page published Wednesday, the company offered advice on what to do if you receive a threat notification.
      • Apple sent out iPhone security alerts to people across 92 countries on Wednesday, warning that their iPhones had been remotely targeted in a mercenary spyware attack. "Apple detected that you are being targeted by a mercenary spyware attack," the company said in a threat notification email seen by CNET. "This attack is likely targeting you specifically because of who you are or what you do."
    • Fallacies (85%)
      The article contains several fallacies. The author uses an appeal to authority by referencing the Digital Security Helpline at Access Now as a source of expert help for those who receive threat notifications. This is problematic because it implies that this organization has some sort of official or exclusive status, when in reality they are just one option among many resources available to people experiencing security threats. Additionally, the author uses inflammatory rhetoric by describing the mercenary spyware attack as a
      • Apple sent out iPhone security alerts to people across 92 countries on Wednesday
      • <i>This attack is likely targeting you specifically because of who you are or what you do.</i>
      • <b>If your device is compromised by a targeted mercenary spyware attack, the attacker may be able to remotely access your sensitive data, communications, or even the camera and microphone</b>
    • Bias (85%)
      The article contains examples of religious bias and monetary bias. The author uses the term 'mercenary spyware attack' to describe a targeted cyberattack that is likely targeting specific individuals based on their identity or actions. This language implies that these attacks are motivated by greed rather than ideology, which could be seen as an attempt to downplay the severity of the issue and make it seem less threatening.
      • The author uses the term 'mercenary spyware attack' to describe a targeted cyberattack
        • This language implies that these attacks are motivated by greed rather than ideology
        • Site Conflicts Of Interest (100%)
          None Found At Time Of Publication
        • Author Conflicts Of Interest (0%)
          None Found At Time Of Publication

        73%

        • Unique Points
          • Apple sent threat notifications to iPhone users in 92 countries on Wednesday
          • The notification did not disclose the attackers' identities or the countries where users received notifications.
          • Apple has high confidence in this warning and advises taking it seriously.
          • > Apple sends these kind of notifications multiple times a year and has notified users to such threats in over 150 countries since 2021.
          • The spyware alerts arrive at a time when many nations are preparing for elections.
          • Apple's alerts did not remark on their timing, but many tech firms have cautioned about rising state-sponsored efforts to sway certain electoral outcomes in recent months.
          • > Apple previously described the attackers as 'state-sponsored', but has replaced all such references with 'mercenary spyware attacksƔ
          • The warning to customers adds that mercenary spyware attacks are exceptionally rare and vastly more sophisticated than regular cybercriminal activity or consumer malware.
          • > Apple relies solely on internal threat-intelligence information and investigations to detect such attacks.
          • Although our investigations can never achieve absolute certainty, Apple threat notifications are high-confidence alerts that a user has been individually targeted by a mercenary spyware attack and should be taken very seriously.
        • Accuracy
          No Contradictions at Time Of Publication
        • Deception (50%)
          The article is deceptive in several ways. Firstly, the author claims that Apple sent threat notifications to iPhone users in 92 countries on Wednesday at 12 p.m Pacific Time. However, this information is false as there are only a few countries where such alerts were sent and it was actually done earlier than stated.
          • Apple said it sent the alerts to individuals in 92 nations at 12 p.m Pacific Time Wednesday.
        • Fallacies (85%)
          The article contains several fallacies. The author uses an appeal to authority when stating that Apple has high confidence in the warning and that it relies solely on internal threat-intelligence information and investigations to detect such attacks. This statement implies that Apple is a reliable source of information, but this assumption should not be taken for granted without further evidence.
          • Apple sent threat notifications to iPhone users in 92 countries on Wednesday
          • The company said it sent the alerts to individuals in 92 nations at 12 p.m. Pacific Time Wednesday.
        • Bias (85%)
          The article contains examples of religious bias and monetary bias. The author uses language that dehumanizes the attackers by referring to them as 'mercenary spyware attacks' which implies they are not legitimate actors but rather criminals who engage in illegal activities for money.
          • > Apple sent threat notifications to iPhone users in 92 countries on Wednesday, warning them that they may have been targeted by mercenary spyware attacks. <br> The company said it sent the alerts to individuals in 92 nations at 12 p.m. Pacific Time Wednesday.
            • The notification, which TechCrunch has seen, did not disclose the attackers' identities or the countries where users received notifications.
            • Site Conflicts Of Interest (50%)
              None Found At Time Of Publication
            • Author Conflicts Of Interest (50%)
              The author has a conflict of interest on the topic of mercenary spyware attacks as they are reporting for TechCrunch which is owned by NSO Group. The article also mentions Pegasus, a product developed by NSO Group that was used to target journalists and politicians in India.
              • The author reports for TechCrunch, which is owned by NSO Group.

              72%

              • Unique Points
                • Apple has warned select iPhones users about a commercial-grade spyware attack targeting devices in 92 countries.
                • The company this week sent out a threat notification email with the title:
              • Accuracy
                • Apple has warned select iPhones users about a commercial-grade spyware attack targeting devices in 92 countries.
                • > Apple sent out threat notifications to iPhone users in 92 countries on Wednesday, warning them that they may have been targeted by mercenary spyware attacks.
              • Deception (50%)
                The article is deceptive in several ways. Firstly, the title of the article implies that Apple has detected a spyware attack on iPhones when in fact it only sent out a warning email to select users about a commercial-grade spyware threat targeting devices in 92 countries. Secondly, the author claims that this is likely due to who someone is or what they do, but there's no evidence of this being true. Thirdly, the article mentions NSO Group as a possible provider of the Pegasus spyware which has been found on phones belonging to activists and journalists in past cases. However, it does not mention that governments have also bought access to this technology. Fourthly, Apple claims that Lockdown Mode is designed to stymie spyware and malware attacks but at the cost of some iPhone functionality. This statement is misleading as Lockdown mode only prevents certain features from being used which may be inconvenient for users but does not necessarily protect them from spyware attacks.
                • The author claims that this is likely due to who someone is or what they do, but there's no evidence of this being true. This statement is misleading as it implies a level of personalization in the attack which may not be accurate.
                • The title of the article implies that Apple has detected a spyware attack on iPhones when in fact it only sent out a warning email to select users about a commercial-grade spyware threat targeting devices in 92 countries. This is deceptive because it creates the impression that Apple has taken action against the spyware, but they have not.
              • Fallacies (85%)
                The article contains an appeal to authority fallacy by referencing the commercial surveillance provider NSO Group and their notorious spyware Pegasus. The author also uses inflammatory rhetoric with phrases such as 'mercenary spyware attack' and 'commercial-grade'. Additionally, there is a dichotomous depiction of Apple warning users about the threat while simultaneously promoting Lockdown Mode to defend against it.
                • Apple has warned select iPhones users about a commercial-grade spyware attack targeting devices in 92 countries.
                • The email references commercial surveillance provider NSO Group, an Israeli company notorious for developing the Pegasus spyware.
              • Bias (85%)
                The article is biased towards the commercial spyware threat and its potential impact on users. The author uses language that dehumanizes the attackers by referring to them as 'mercenary' which implies they are not acting out of a genuine concern for their clients but rather for financial gain. Additionally, the use of phrases such as 'commercial-grade spyware', 'targeted mercenary spyware attack', and 'cost millions of dollars to develop' all contribute to creating an image that commercial spyware is something dangerous and expensive.
                • The article uses the phrase
                • Site Conflicts Of Interest (50%)
                  Michael Kan has a conflict of interest with NSO Group and Amnesty International as he mentions them in the article.
                  • . Amnesty International is also offering to help any users who received the spyware notification from Apple.
                    • . To defend from the threat, the company developed Lockdown Mode
                    • Author Conflicts Of Interest (50%)
                      The author has a conflict of interest on the topic of spyware attacks and commercial-grade spyware as they are discussing NSO Group and Pegasus spyware. The article also mentions Amnesty International which is an organization that may have a vested interest in this topic.
                      • . These spyware attacks can cost millions of dollars to develop. They can then expire once the software vulnerabilities they exploit are patched. As a result, commercial spyware providers and their government customers tend to deploy such attacks in a targeted fashion, rather than through mass deployment.