Germany’s BSI warns lawmakers and journalists of potential iPhone spyware compromise

BSI’s response to Apple’s spyware alerts

Germany’s Federal Office for Information Security (BSI) has advised lawmakers and other individuals who received Apple’s spyware alerts to assume their iPhones may be compromised. The alerts, issued by Apple since late October, warn of mercenary spyware attacks targeting users in 99 countries, including German members of parliament and journalists.

According to the BSI, the spyware in question is commercially developed and frequently deployed by state actors. The agency clarified that it cannot confirm whether the attacks successfully breached the devices or only attempted to do so. Immediate actions recommended by the BSI include updating the device’s software and enabling Apple’s Lockdown Mode, which is designed to make further attacks more difficult—though it does not remove existing infections.

Capabilities and delivery of mercenary spyware

Mercenary spyware, such as Pegasus, Candiru, and Predator, is capable of reading messages—including those in encrypted apps—activating cameras and microphones, and exfiltrating data. These tools often exploit "zero-click" vulnerabilities, meaning they require no interaction from the victim, such as clicking a link or downloading a file.

The BSI’s warning follows similar incidents globally, including reports of spyware being delivered through online advertisements. For example, an Israeli advertising firm was found using ads to distribute Candiru spyware.

Scope and precedent of Apple’s warnings

Apple has issued spyware alerts multiple times a year since 2021, reaching users in over 150 countries. The company describes these as high-confidence warnings but does not disclose details about the attackers or affected regions. The latest round of alerts, sent to users in 99 countries, underscores the broad and indiscriminate nature of these threats.

Notable targets of such attacks include journalists and investigators. Radwan Mortada, an investigative journalist, was reportedly targeted by NSO Group’s Pegasus spyware in 2017 and 2021. In Europe, attacks have extended to lawmakers and public figures, with victims in Greece suing the makers of Predator spyware for €8 million.

Germany’s history with spyware

The BSI’s warning comes after revelations that Germany’s federal police had previously purchased Pegasus spyware, a tool developed by NSO Group. This dual role—using spyware while warning against its risks—highlights the complex challenges governments face in balancing surveillance needs with digital security.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

For founders and operators, this development is a stark reminder of the vulnerabilities even widely trusted devices face from state-level and commercial spyware. High-profile individuals—such as executives, investors, and journalists—are increasingly likely to be targeted, not just by cybercriminals but by sophisticated actors using tools like Pegasus or Predator.

The BSI’s guidance to treat devices as compromised and enable Lockdown Mode may become a baseline expectation for security-conscious organizations. For startups in cybersecurity, privacy, or digital communication, this incident reinforces demand for solutions that can detect, mitigate, or prevent zero-click exploits. It also raises questions about the long-term viability of relying solely on consumer-grade devices for sensitive communications, particularly in industries like journalism, defense, or finance.

Related on Lazyfounder

• Apple
• More technology news
• Germany warns lawmakers of iPhone spyware attacks after Apple alerts