Germany warns lawmakers of iPhone spyware attacks after Apple alerts

Government-backed spyware targets iPhones in Germany

The German government has confirmed that lawmakers and public figures in the country may have been targeted by government-backed spyware on their iPhones. Stefan Kornelius, a spokesperson for the German government, said the federal cybersecurity office, known as the BSI, had identified warnings sent by Apple to members of the Bundestag and other unnamed individuals. These warnings indicate potential spyware attacks, though the government has not disclosed specific details about the scope or origin of the threats.

Apple issued threat notifications to users in 99 countries, including Germany, as part of its periodic alerts for individuals it believes may have been targeted by spyware. The company does not attribute these attacks to specific governments or confirm whether a device has been compromised. The notifications follow reports of zero-click exploits, which do not require user interaction to infect a device.

Reported use of NSO Group’s Pegasus spyware in Germany

The Financial Times previously reported that Germany’s federal law enforcement agency, the BKA, purchased access to NSO Group’s Pegasus spyware in 2019. Pegasus, developed by the Israeli firm NSO Group, is one of the most well-known mercenary spyware tools and has been linked to surveillance operations by governments worldwide.

Governments rarely develop spyware tools in-house, instead relying on private vendors like NSO Group. The use of such tools has raised concerns about privacy and the potential for abuse, particularly when targeting lawmakers, journalists, and activists.

Global reach of Apple’s threat notifications

Apple’s latest batch of threat notifications was sent to individuals across 99 countries, highlighting the global scale of spyware threats. Radwan Mortada, a Beirut-based filmmaker, publicly confirmed receiving one such notification, though he did not provide details about the suspected attack.

Apple’s warnings do not specify the identity of the attackers or whether an attack was successful. The company’s notifications are designed to alert users to potential risks, particularly those who may be targeted due to their professional or public roles.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

For founders and operators, this story is a reminder of the growing risks posed by sophisticated spyware, particularly for those in high-profile roles or industries where sensitive data is handled. The use of zero-click exploits means that even security-conscious individuals can be targeted without any action on their part. While Apple’s threat notifications provide a layer of awareness, they also underscore the limitations of consumer devices in defending against state-level threats.

The involvement of NSO Group’s Pegasus spyware, which has been used by governments globally, signals that surveillance tools are not only a concern for authoritarian regimes but also for democratic states. For startups in cybersecurity, privacy, or policy advocacy, this development could drive demand for tools that detect or mitigate such threats, as well as for transparency around government surveillance practices.

Related on Lazyfounder

• Apple
• More technology news