Apple has issued a new set of threat alerts to Indian users in India and 97 other countries, warning them of a potential "mercenary spyware attack" aimed at comprising their iPhones.
"Mercenary spyware attacks, such as those using Pegasus from the NSO Group, are exceptionally rare and vastly more sophisticated than regular cybercriminal activity or consumer malware,” Apple said in the threat notification mail on July 10.
The same day IItija Mufta, media adviser and daughter of former Jammu and Kashmir chief minister Mehbooba Mufti, and Pushparaj Deshpande, founder of Samruddha Bharat Foundation, took to X claiming Apple had notified them of a possible hack on their iPhones. The company has been sending these notifications to users in more than 150 countries since 2021.
Also Read:
Apple Informs Targeted iPhone Users In India.
On July 10, Apple’s notification informed the targeted iPhone users that attacks such as those mounted on their devices “cost millions of dollars and are individually deployed against a very small number of people, but the targeting is ongoing and global.”
"The extreme cost, sophistication, and worldwide nature make mercenary spyware attacks some of the most advanced digital threats in existence today. As a result, Apple does not attribute the attacks or the notice you’re receiving to any specific attackers or geographical regions," the notification said. The company relies solely on "internal threat-intelligence information and investigations to detect such attacks", it added.
In the past, such notifications have triggered a political storm, with some opposition leaders and journalists accusing the government of spying on its opponents. The matter has even been taken to the Supreme Court. A court-appointed technical expert committee could not find Pegasus spyware in the mobile phones that were given to the forensic team.
In April, the Indian Computer Emergency Response Team (Cert-In), the country's central cybersecurity agency, found several vulnerabilities in Apple’s operating systems, especially in kep apps like the Safari web browser.
Also Read:
All Apple Devices Vulnerable To Hacking Due To This Flaw
It seems like several iOS and macOS devices have been exposed to security vulnerabilities as per research done by E.V.A. Information Security. The threat was reportedly found in CocoaPods, which is an open-source repository. Around 3 million iOS and macOS apps that were developed with CocoaPods have been vulnerable for almost a decade, the report suggests.
The threat involves CocoaPods, which programmers use to fuse existing software libraries into their apps. Currently, CocoaPods can be exploited to secretly introduce malicious code into apps that rely on them.
As E.V.A Information Security researchers, they have found many vulnerabilities in the CocoaPods dependency manager that enable any malicious actor to claim ownership over thousands of unclaimed pods. Reportedly, the malware can fuse malicious code into several popular iOS and macOS apps.