Apple Alerts Iranians of Government Spyware Threats Ahead of Israel Conflict
In mid-2025, Apple issued threat notifications to over a dozen Iranian iPhone users, warning them they were likely targeted by sophisticated spyware. These attacks resemble state-level cyber-espionage tools often compared to NSO Group’s Pegasus, known for its ability to remotely hijack iPhones. Security researchers from Miaan Group (Texas) and DarkCell (Sweden) confirmed these alerts came after activity detected in early 2025, just before the conflict between Iran and Israel began.
The Targets and the Threat
The alerts were sent to civil society figures and activists, including individuals inside Iran and one based in Europe. According to Amir Rashidi, Miaan Group’s director of digital rights and security, two of the victims came from politically active families with no history of international travel. Researchers suggest there may be three waves of attack, prompting a belief that this is just the “tip of the iceberg”.
Who’s Behind It?
Attributing responsibility is complicated. While the technical resources needed resemble a nation-state operation, Rashidi points to potential Iranian government involvement—though experts caution the attackers could also be foreign state actors.
Apple’s Role and Advisory Actions
Apple’s notification system—launched in 2021—alerts users when devices show signs of mercenary spyware. In these alerts, Apple stated their “high confidence” in the detection, emphasizing that the attacks cost millions and were rare in sophistication.
The notifications advise users to immediately update iOS, enable Lockdown Mode, and consider contacting digital-security experts like AccessNow.
Broader Implications
These alerts mark the first confirmed case of advanced spyware hitting Iranians both domestically and abroad. Apple previously sent notifications affecting journalists and activists in over 150 countries using high-end spyware. The emergence of attacks ahead of regional conflict points to a troubling trend where technology becomes a frontline in geopolitical tension and civil control.
