spyware3 articles
Apple Pings Users in 110 Countries Over Mercenary Spyware Threats
Apple has sent threat notifications to users in 110 countries who may have been targeted by mercenary spyware attacks, bringing the total number of countries notified since 2021 to over 150. These sophisticated attacks typically target high-profile individuals such as journalists, activists, politicians, and diplomats, and represent some of the most advanced digital threats in existence. Apple delivers alerts via the iPhone lock screen, email, and the user's Apple Account page, and recommends protective measures such as enabling Lockdown Mode, using two-factor authentication, and keeping devices updated.
The MEP Investigating Pegasus Got Hacked With Pegasus. Yes, Really.
Citizen Lab researchers have revealed that Stelios Kouloglou, a former Member of the European Parliament who served on a committee investigating spyware abuse, had his iPhone repeatedly hacked with Pegasus spyware during his tenure in 2022 and 2023. Forensic analysis found the attacks exploited a zero-click vulnerability in Apple's HomeKit software, potentially giving attackers access to confidential documents and committee deliberations. While no specific government has been attributed responsibility, Citizen Lab identified an overlap with a separate campaign targeting Russian and Belarusian-speaking journalists and activists in Europe, suggesting a Pegasus operator licensed to conduct surveillance across multiple EU countries was likely responsible.
Predatorgate Victims Sue Intellexa for €8M Over Greek Spyware Scandal
Eight victims of Greece's "Predatorgate" spyware scandal have filed an €8 million lawsuit against Athens-based Intellexa SA and 13 associated individuals, including founder Tal Dilian, seeking €1 million each in moral damages for having their devices hacked between 2020 and 2021. The scandal involved Predator spyware being used to target at least 87 high-profile Greeks, including journalists, lawyers, and intelligence officials, through malicious SMS links exploiting zero-day vulnerabilities. Key figures behind the spyware have already been convicted and sentenced in Greece, and several Intellexa entities were added to the US Treasury's sanctions list in 2024, though the Greek government has consistently denied any state involvement in the attacks.