Live data from Hacker News

Apple alerts users in 92 nations to mercenary spyware attacks

techcrunch.com

1–10 of 301 posts

Re: Apple alerts users in 92 nations to mercenary spyware attacks

#2
If I got a message that said:

  “Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the iPhone associated with your Apple ID -xxx-,” it wrote in the warning to affected customers."
I would assume it's fake, part of some phishing scam. How can we know something like this is real? I'd be even more likely to think it's fake if it looks different than all the other messages I get.

Edited to add: As a comment below pointed out if you "sign in to appleid.apple.com" it'll confirm, which even I would trust! Thanks to quitit for pointing that out.

Re: Apple alerts users in 92 nations to mercenary spyware attacks

#3

If I got a message that said: “Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the iPhone associated with your Apple ID -xxx-,” it wrote in the warning to affected customers." I would assume it's fake, part of some phishing scam. How can we know something like this is real? I'd be even more likely to think it's fake if it looks different than all the othe…

But if the phishing scam manages to display such a message in a different way on your phone, you can’t trust the phone anymore as it has likely been hacked.

Re: Apple alerts users in 92 nations to mercenary spyware attacks

#4

If I got a message that said: “Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the iPhone associated with your Apple ID -xxx-,” it wrote in the warning to affected customers." I would assume it's fake, part of some phishing scam. How can we know something like this is real? I'd be even more likely to think it's fake if it looks different than all the othe…

I heard it should show as a badge/banner on top of your iCloud Web Panel in the browser.

Edit: on top of the message you get

Re: Apple alerts users in 92 nations to mercenary spyware attacks

#5

If I got a message that said: “Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the iPhone associated with your Apple ID -xxx-,” it wrote in the warning to affected customers." I would assume it's fake, part of some phishing scam. How can we know something like this is real? I'd be even more likely to think it's fake if it looks different than all the othe…

at the end it says that you can check the validity by signing in to icloud, there an alert banner is shown

Re: Apple alerts users in 92 nations to mercenary spyware attacks

#6

If I got a message that said: “Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the iPhone associated with your Apple ID -xxx-,” it wrote in the warning to affected customers." I would assume it's fake, part of some phishing scam. How can we know something like this is real? I'd be even more likely to think it's fake if it looks different than all the othe…

> How can we know something like this is real?

From apple's website:

"To verify that an Apple threat notification is genuine, sign in to appleid.apple.com. If Apple sent you a threat notification, it will be clearly visible at the top of the page after you sign in."

https://support.apple.com/en-lamr/102174

Re: Apple alerts users in 92 nations to mercenary spyware attacks

#8
There’s a reddit thread by somebody who got one of these:

https://old.reddit.com/r/iphone/comments/1c10jai/i_have_rece...

The interesting thing IMO is they claim to just be some random college student. Which seems believable because if they were a real secret squirrel I guess they wouldn’t ask reddit about it, haha.

I wonder if the hackers are targeting people based on phone numbers or something. (I could imagine a college student recently getting a new number and ending up with one that’d been associated with a target—I guess? Although you’d hope there’d be a way to retire numbers that are known to be targets).

Re: Apple alerts users in 92 nations to mercenary spyware attacks

#9

There’s a reddit thread by somebody who got one of these: https://old.reddit.com/r/iphone/comments/1c10jai/i_have_rece... The interesting thing IMO is they claim to just be some random college student. Which seems believable because if they were a real secret squirrel I guess they wouldn’t ask reddit about it, haha. I wonder if the hackers are targeting people based on phone numbers or something. (I could imagine a c…

Well the they might be just a college student, but they could have a relationship with the actual target in some way. And if it's part of a complex operation they could be trying some indirect approaches.
Post reply on HN