What happened with the recent iPhone spyware alerts in Germany?

The German government is warning politicians and public figures that they were targeted by government-backed spyware, just days after Apple issued notifications to victims. Germany’s federal cybersecurity office, known as the BSI, stated that members of the Bundestag and other notable individuals received warnings about potential cyberattacks.

According to government spokesperson Stefan Kornelius, Berlin is taking the incident and the warning very seriously, although officials did not disclose who specifically was targeted. The alerts highlight a growing trend where private vendors supply mercenary spyware to various entities.

Who is affected by these targeted cyberattacks?

The primary targets identified so far include members of Germany’s parliament, the Bundestag, alongside other notable public figures and international users like Beirut-based filmmaker Radwan Mortada. Apple’s latest batch of threat notifications reached users across 99 countries.

Because state-sponsored spyware often relies on zero-click exploits requiring no user interaction, victims are frequently unaware of the intrusion. Apple does not explicitly attribute attacks to specific governments or confirm active compromise, leaving security agencies to issue broad precautions.

How should targeted individuals respond to these threats?

Security experts recommend immediate precautionary steps if an official threat alert is received on mobile devices. Organizations should review access permissions and audit internal communications infrastructure.

Users who receive official threat notifications from Apple should assume their device may be compromised and follow institutional response protocols immediately.

  1. Treat any official Apple threat notification as a high-priority security incident.
  2. Contact internal security teams or national cyber agencies like the BSI for guidance.
  3. Isolate the affected device and avoid using it for sensitive communications.
  4. Review device logs and perform a comprehensive security audit if supported by official guidelines.