Apple Alert Globally: Apple’s Warning of Targeted State-Sponsored Attacks on Prominent Figures

About The Notification of Apple Alert: It says that attackers are likely targeting these individuals because of who they are or what they do. Individuals in 150 countries have been notified.

• Users are being advised on how to protect themselves, including activating the ‘Lockdown Mode’ feature on their iPhones.
• Previous Apple Alert Notifications: Apple has been sending notifications since late 2021, whenever it suspects some activity resembling a state-sponsored attack. 
• Attackers: Despite their emphasis on ‘state-sponsored attacks’, Apple has not attributed the threat notifications to any specific state-sponsored attacker.
• State Sponsored Attackers: These attacks are usually backed by governments to go after specific individuals and their devices, based on their identity or activities.
  • These attacks are different from the ones carried out by regular cybercriminals, which target a large number of users for financial gain.
  • These state-sponsored attacks are often short-lived, and are designed to evade detection and exploit vulnerabilities of users.

Apple Alert that provide Protective Measures: Safeguarding Against State-Sponsored iPhone Attacks

• About: Apple Alert notifications are a way of alerting and helping users who may have been targeted by state-sponsored attackers.
• Identification: Apple has developed a system that can spot activity that matches certain patterns. When an attack is detected, a “Apple Threat Notification” is sent by email and message to the email addresses and phone numbers of the iPhone user.
• Apple Alert Protective Measures for Enhanced Security
  • Software Update: The users are advised to update to the latest version of the phone’s software so as to address the bugs in the previous versions.
  • Passcode Updation: Users are advised to set up strong passcodes for their phone, as well as enable two-factor authentication.
  • Apps Download Guidelines: Users are advised to download apps only from authenticated sources, such as the App Store.
  • Avoid Unknown Links: Users must refrain from clicking on unknown links or attachments. This reduces chances of virus infestation.
  • Lockdown Mode: Users can also activate Lockdown Mode, which is a new feature introduced in the latest software updates to specifically protect against rare and sophisticated cyber attacks.
    • After activating the lockdown mode, the device will enter into a state of high security, where many usual functions will be restricted or disabled.
    • This new security feature is available on devices that run iOS 16 or later, iPadOS 16 or later, watchOS 10 or later and macOS Ventura or later.

Different Cybersecurity Threats: Apple Alert and Measures for Protection

Pegasus Spyware in the Spotlight – A Precursor to Apple Alert against Cyber attack 

• Pegasus spyware: Pegasus is a spyware developed and marketed by Israeli cybersecurity firm NSO. 
• Pegasus has the ability to execute operator commands, and send back private data, passwords, contact lists, calendar events, text messages, and live voice calls.

• • Working of The Stealthy Spyware: Pegasus
    • The spyware uses an over-the-air (OTA) option to send a push message that makes the target device load the spyware, which the target has no control over.
    • The spyware has also used the vulnerability in WhatsApp to infect the device through unattended WhatsApp calls.
    • The handler has to feed the phone number of the target and the rest of the job is done automatically.
    • There is also a provision for manual installation in case there is physical access to the target device.
  • Access Availed: Attackers can access private data such as passwords, contact lists, calendar events, text messages, and live voice calls. 
    • They can access the phone’s camera and microphone, and use the GPS to track a target.
  • Critical Features: Pegasus leaves no trace on the device, consumes less battery, memory and data so that it does not arouse suspicion.
• The Pegasus Spyware Controversy: Allegations and Investigations
  • A report in international media claimed that the Indian government had bought the Pegasus Spyware in 2017.
  • The software was alleged to have been used to spy on prominent politicians, strategists, journalists, activists, judges etc.

• • As a response, many of the target individuals approached the Supreme Court, which appointed a technical committee to conduct an investigation.
  • The committee asked the alleged targets to submit their phones for investigation. Upon investigations, the technical committee found ‘malware’ in 5 of the 29 phones.
  • However, it could not conclusively say that the malware found was Pegasus. 

Reactions to the Pegasus Spyware Allegations: Government, Parliament, and the Judiciary

• The Government: The government has stated that existing legislation prevents unauthorized surveillance and has rejected the surveillance accusations.
• Parliamentary Response: The IT committee of the Parliament, which was planning to question officials from the IT Ministry and the Home Ministry on Pegasus, could not come to a conclusion.
• Court’s Response: After the victims approached the Supreme Court regarding the issue, the apex court constituted a technical committee to examine whether the spyware had been used.

Conclusion:

Threat notification from Apple must be taken seriously and steps recommended by Apple need to be followed to secure their device and account. Commercial surveillance industry is increasingly becoming accessible, raising serious concerns about individual’s privacy.