Why is it in the news?

• Several top opposition leaders and a few journalists have recently reported about receiving a notification from Apple about “state-sponsored attackers who are remotely trying to compromise” their iPhones.
• The notification says the attackers are likely targeting these individuals because of who they are or what they do, and advises them on how to protect themselves, including activating the ‘Lockdown Mode’ feature on their iPhones.
• Apple has been sending out these notifications since late 2021, whenever it suspects some activity resembles a state-sponsored attack. It has so far notified individuals in 150 countries.

More about the news

Identity of “State-Sponsored Attackers”

• These attackers are sophisticated, well-funded, and their tactics evolve. They might target based on identity or activities.
• They are different from regular cybercriminals who typically target masses for money.
• Further, such attacks often exploit undisclosed vulnerabilities and aim for undetectability.

Nature of Apple’s Threat Notification

• Apple does not specify any particular nation or group.
• Apple alert users potentially targeted by state-sponsored attackers.
• It has developed a detection system that identifies suspicious activities.
• The detected threats lead to notifications via email and iMessage tied to the user’s Apple ID.
• Moreover, reasons for issuing such notifications are not openly disclosed to prevent aiding attackers.

Apple’s recommendations to avoid such attacks

• Update to latest software.
• Implement a passcode and two-factor authentication.
• Use robust passwords for Apple ID.
• Only download apps from the App Store.
• Avoid unknown links/attachments.
• Utilize unique passwords for online accounts.
• Engage Lockdown Mode for heightened protection.