23-07-2025
Apple Issued A New Spyware Warning To Iranians—What To Know
Researcher believed Iran's government is behind the Apple spyware attacks.
Apple has been issuing spyware warnings for some time, to alert those targeted by the dangerous malware so they can take action. Recently, one of these warnings was targeted at Iranian dissidents living in the country and overseas, according to a report in Bloomberg.
The claims come from a report by Miaan Group, a digital rights organization that focuses on Iran, and Hamid Kashfi, an Iranian cybersecurity researcher who lives in Sweden. The pair told TechCrunch they had spoken to Iranian iPhone users who have received the Apple notifications over the last year.
'Two people in Iran come from a family with a long history of political activism against the Islamic Republic. Many members of their family have been executed, and they have no history of traveling abroad,' Amir Rashidi, Miaan Group's director of digital rights and security, told TechCrunch. 'I believe there have been three waves of attacks, and we have only seen the tip of the iceberg.'
Iranian iPhone Users Targeted Ahead of Iran-Israel War
The spyware victims' iPhones were hit ahead of the Iran-Isarel war, raising interesting questions about who could have been behind the attacks. More than a dozen Iranian iPhone users were identified as having been targeted by the government spyware, but human rights groups estimate that this is just a fraction of the total.
The attacks could have been perpetrated by another nation state, such as Israel — or even in a joint initiative with the U.S. This has happened before, in 2010, when the two are alleged to have been behind a devastating attack on an Iranian nuclear facility using a worm called Stuxnet.
However, Miaan Group's Rashidi told TechCrunch he believes Iran's government is behind the Apple spyware attacks. Further investigation is needed, but there is no reason for members of civil society to be targeted by anyone else, he said.
It is unclear which spyware maker is behind the recent attacks on iPhones. However, the most recent reports have seen Paragon Graphite target devices.
The news that Iranian dissidents were targeted comes as researchers at Lookout identified Iranian government affiliated threat group MuddyWater using DCHSpy spyware to attack Android users. DCHSpy collects WhatsApp data, accounts, contacts, SMS, files, location and call logs — and can record audio and take photos.
I asked Apple to comment on this latest report and will update this article if the firm replies.
Spyware Targeting iPhones — What To Do
I have covered numerous reports of spyware targeting iPhone users, with variants including Pegasus and LightSpy which take advantage of unpatched software vulnerabilities.
It's therefore integral that people who could be attacked keep their iPhones up to date. In addition, turning your iPhone on and off again can disrupt the malware, temporarily disabling it.
Apple itself recommends Lockdown Mode, which reduces the functionality of your iPhone but also stops spyware from taking hold. If you do think you're a victim of spyware, or if Apple has sent you a notification, contact Access Now or Amnesty for help.
