Skip to main content

Report: Apple alerted Iranians to spyware attacks in lead-up to war with Israel

You may have never heard of them, but Apple sends “threat notifications” to users when it believes they’re being targeted by cyber attacks. Earlier this year that happened with several Iranians in the lead-up to the Iran-Israel war, per a new Bloomberg report. Here are the details.

Apple threat notifications were sent to over a dozen Iranian cyberattack victims

Patrick Howell O’Neill writes at Bloomberg:

More than a dozen Iranians’ mobile phones were targeted with spyware in the months prior to the country’s war with Israel, according to new research. 

Miaan Group, a digital human rights organization based in Austin, Texas, found a number of Iranians who received threat notifications from Apple Inc. in the first half of 2025, and researchers believe they only identified a fraction of the total targets.

The attacks mark the first known example of such highly advanced cyber-espionage tools being used both inside Iran and against Iranians living abroad. It’s not clear who was behind the attacks.

The report notes that at least 12 victims worked in Iran’s government or its technology sector.

Apple’s threat notifications reportedly mentioned that the attacks cost “millions of dollars” and were “exceptionally rare.”

“The extreme cost, sophistication and worldwide nature makes mercenary spyware attacks some of the most advanced digital threads in existence today,” Apple told the Iranian targets. “This attack is likely targeting you specifically because of who you are or what you do.”

Threat notifications don’t include mention of any source for the attacks, but they alert users to the need to take action.

For example, Apple’s official support document on threat notifications strongly suggests alerted users seek expert help.

That document also provides steps it recommends all users should follow for maximum security:

  • Update devices to the latest software, as that includes the latest security fixes
  • Protect devices with a passcode
  • Use two-factor authentication and a strong password for your Apple Account
  • Install apps from the App Store
  • Use strong and unique passwords online
  • Don’t click on links or attachments from unknown senders

Though the kind of advanced, expensive cyber attacks that threat notifications focus on will most likely never impact the vast majority of readers, the steps above are recommended by Apple for everyone.

Best iPhone accessories

FTC: We use income earning auto affiliate links. More.

You’re reading 9to5Mac — experts who break news about Apple and its surrounding ecosystem, day after day. Be sure to check out our homepage for all the latest news, and follow 9to5Mac on Twitter, Facebook, and LinkedIn to stay in the loop. Don’t know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Comments

Author

Avatar for Ryan Christoffel Ryan Christoffel

Ryan got his start in journalism as an Editor at MacStories, where he worked for four years covering Apple news, writing app reviews, and more. For two years he co-hosted the Adapt podcast on Relay FM, which focused entirely on the iPad. As a result, it should come as no surprise that his favorite Apple device is the iPad Pro.