Apple's Spyware Alerts Are Real Warnings, Not Phishing—Take Them Seriously
Apple has been sending push notifications directly to lock screens when it detects that a user's device has been targeted by state-sponsored spyware, such as tools from NSO Group or similar vendors. These alerts aren't spam or a false alarm—they stem from Apple's threat intelligence team identifying sophisticated, targeted attacks, often aimed at journalists, activists, dissidents, or executives.
Security researchers are urging recipients to act quickly: contact digital security organizations like Access Now or Citizen Lab, avoid dismissing the notification as a glitch, and consider getting a forensic check of the device. Because spyware like Pegasus can operate without any visible sign of compromise, Apple's detection is often the only warning a target will ever get.
The notifications are part of Apple's broader effort to combat mercenary spyware, including lawsuits against NSO Group and continued hardening of iOS against zero-click exploits.