Following Apple’s alert to iPhone users that they may have been targeted, warnings from the German government regarding spyware have reached lawmakers and public figures. The German Federal Office for Information Security (BSI) issued a notice over the weekend stating that members of the Bundestag and other prominent individuals received threat alerts from Apple. These alerts are part of a broader batch of notifications sent by Apple to users in 99 countries.
Key points
- BSI confirms that members of the Bundestag are among the recipients of Apple's alerts.
- Zero-click spyware can attack phones without any user interaction.
- Apple's alert indicates a possible lock, but does not confirm a compromise.
- It is claimed that Germany's Federal Criminal Police Office (BKA) gained access to Pegasus in 2019.
German government spyware alert prompts regulatory intervention
After learning of Apple's notifications, BSI warned politicians and public figures about government-backed spyware. Minister for Digital Affairs Karsten Wildberger stated that the relevant authorities have contacted affected individuals and provided them with advice on how to secure their devices.
Wildberger said that BSI "responded extremely quickly." He cautioned against rushing to conclusions about the specific nature of the incident, noting that he wouldn't necessarily attribute it to an AI attack, while pointing out that spyware targeting mobile phones has been around for some time.
Government spokesperson Stefan Kornelius said that Berlin is "taking this incident and warning very seriously." He did not specify which individuals within the federal government, including Federal Chancellor Friedrich Merz, were targeted.
Zero-click vulnerabilities allow spyware to attack devices without requiring the user to click on a link or open a file. These attacks can operate almost undetected, enabling spyware to steal information, location data, and other sensitive details.
Monitoring software can also capture photos, keystrokes, call content, and audio recorded through the device’s microphone. Other installation methods include malicious email attachments, fraudulent links, untrusted applications, and vulnerabilities in outdated software.
Apple’s threat notifications are sent to individuals the company believes may have been locked. Apple does not identify the government behind the attack in these notifications, nor does it confirm whether a phone has been successfully compromised solely based on the notification.
However, BSI still advises recipients to "therefore assume that their devices may have been compromised." This is also the recommendation accompanying the German government's recent spyware alert.
These alerts are not limited to Germany. Radwan Mortada, a filmmaker based in Beirut, wrote on X that Apple notified him, “Your device has been targeted again.” He had previously been targeted by spyware in 2021. The notification he received stated that Apple’s latest round of alerts covers users in 99 countries.
Private spyware vendors and Germany's Pegasus records
Governments typically purchase surveillance tools from private vendors rather than developing them themselves. Such companies are commonly referred to as mercenary spyware vendors; the Israeli NSO Group is the most well-known example, selling Pegasus.
The targeting of political figures has increased alongside a rise in spyware attacks against members of civil society. Governments use spyware for surveillance, while criminals and stalkers also exploit such software to collect information without the knowledge or consent of device owners.
It was reported that Germany’s federal law enforcement agency, the BKA, purchased access to Pegasus in 2019.
This article was generated with the assistance of artificial intelligence and reviewed by the editorial team.
Amelia Tomasicchio
As a digital marketing expert, Amelia entered the fintech industry in 2014 after writing a technical paper on Bitcoin. She previously contributed to several international cryptocurrency-related magazines and served as Chief Marketing Officer at Eidoo. She is currently a co-founder of The Cryptonomist and a marketing instructor at Digital Coach Milan. She has also authored a book on NFTs for Italian publisher Mondadori and has helped artists and companies enter this space. As an advisor, Amelia has been involved in metaverse-related projects such as The Nemesis and OVER.