Top News

Technology Desk: If you use iPhone, then it is important to be cautious about the security of the phone. Apple sends threat notifications to its users from time to time regarding extremely dangerous and high-level cyber attacks. A big threat among these is Mercenary Spyware. It is very different from ordinary viruses or common malware and can use very advanced technology to target specific people.

According to Apple, such attacks target a very small number of specific people and their devices. The company has sent alerts to such users several times since 2021 and till now threat notifications have been sent to users in more than 150 countries. Apple also clarifies that most users never become victims of this type of attack.

What is Mercenary Spyware?

Mercenary Spyware is a type of highly advanced spying software. It is considered different from viruses or phishing malware used by ordinary cyber criminals.

According to Apple, there can be a lot of resources and expertise behind such attacks. In many cases, such spyware developed by private companies has been used to target very specific and sensitive people. The name of spyware like Pegasus has also come up in this context.

The target of these attacks is usually not every iPhone user. Sensitive targets such as journalists, activists, politicians, government officials and other high-profile people have been linked to such attacks in the past.

How can Spyware reach the phone?

These types of attacks can be extremely complex. In some cases, attackers may try to take advantage of security vulnerabilities that were not previously known to the device manufacturer. For this reason, attacks like Zero-Click Attack are considered extremely dangerous. In these, the user may not even need to click on any suspicious link or install any app. However, it is not the case that every Mercenary Spyware attack happens in a zero-click manner. The attack techniques and weaknesses used may differ from case to case.

What can happen if spyware reaches the phone?

The purpose of such sophisticated spyware may be to gain access to the device and the sensitive information contained therein. Private data, messages, contacts and other information could potentially be at risk.

This is why Apple considers such attacks more serious than normal malware. According to the company, Mercenary Spyware attacks are extremely expensive and complex and are often targeted at a small group or specific individual.

How does Apple give Threat Notification?

If Apple, based on its investigation, receives a high-confidence indication that a user may personally be the target of a Mercenary Spyware attack, the company sends him a Threat Notification.

This alert can appear in two major ways. The user can see it after logging into his Apple Account at account.apple.com. Apart from this, Apple can also send information through email and iMessage to the email address and phone number. According to Apple, these notifications should be taken seriously.

How to Identify Genuine Apple Threat Notification?

This thing is especially important to keep in mind. Cyber ​​criminals may also try to send fake threat notifications in the name of Apple. According to Apple, genuine Threat Notifications never ask you to click a link, open a file, install an app or profile, or provide an Apple Account password or verification code in an email or phone. If you get such an alert, log in to your account by going directly to accounts.apple.com and check whether the Threat Notification is visible there or not.

What to do immediately if you get threat notification?

If such an alert has been received from Apple, then it should not be ignored considering it as a general security warning.

1. Turn on Lockdown Mode

Apple has given Lockdown Mode for high-risk users. This further strengthens the security of the device by limiting the general features of the iPhone to some extent.

To turn it on in iPhone:

It can be turned on by going to Settings > Privacy & Security > Lockdown Mode. According to Apple, Lockdown Mode places additional limitations on Messages, web browsing, FaceTime, connectivity and some other features for security.

2. Get help from experts

Apple recommends seeking help from expert cybersecurity organizations in such cases. The company specifically mentioned Access Now's Digital Security Helpline, where people facing such targeted attacks can get security help.

3. keep your phone updated

It is very important to keep the iPhone on the latest iOS version. Software updates also include patches that fix security vulnerabilities. Apple recommends all users to keep their devices updated to the latest software.

How much do ordinary iPhone users need to fear?

The most important thing about Mercenary Spyware is that not every iPhone user is its target. Apple clearly states that such attacks target a very small number of specific people and that most users will never fall victim to such an attack. Still, it is important to follow general cyber security rules.

Do these things to keep your iPhone safe
Always keep iPhone updated to the latest iOS.
Use a strong passcode.
Keep Two-Factor Authentication turned on on your Apple Account.
Use strong and different passwords for different accounts.
If possible, download apps from the App Store only.
Be wary of unknown emails, messages and attachments.
Avoid clicking on suspicious links.
If you believe you are the target of a specific cyberattack, consider using Lockdown Mode.

When should Lockdown Mode be used?

Lockdown Mode is not a general security setting that every user is required to keep on all the time. Apple designed it for the very small number of people who may be at risk from a highly complex and targeted cyberattack.

When turned on, some common features of the phone are limited, because its purpose is to prioritize security over convenience. According to Apple, Lockdown Mode should be used after updating the device to the latest software.