Apple and Google Warn Users Globally of Targeted Spyware Attacks

Apple and Google have issued alerts to users worldwide, warning of sophisticated spyware campaigns that could compromise devices without user interaction. The warnings, circulated in early December 2025, highlight growing concerns over state‑linked surveillance and the commercial spyware industry, which has increasingly targeted individuals across more than 150 countries.

Apple notified users on December 2 of “targeted cyber‑attack” campaigns, though the company did not disclose the exact number of affected users or the parties behind the attacks. The alerts are designed to inform potentially vulnerable individuals, including journalists, activists, diplomats, and others whose work or status may make them prime targets. Apple’s internal threat‑intelligence systems trigger notifications when suspicious activity indicative of highly advanced hacking attempts is detected.

A day later, Google reported it had alerted “several hundred” accounts believed to have been targeted using spyware developed by Intellexa, a surveillance vendor. The affected accounts spanned countries including Pakistan, Kazakhstan, Egypt, Saudi Arabia, and Uzbekistan. The spyware, often referred to as “mercenary spyware,” can silently infiltrate devices and exfiltrate sensitive information, raising alarms about privacy and digital security.

Experts say these alerts play a crucial role in helping users protect themselves from cyber threats, prompting them to update devices, review account security, and take preventative measures. The companies’ notifications also underscore the broader challenge posed by commercial spyware, which is increasingly available to governments and other actors seeking covert access to digital communications.

The incidents have drawn attention to the global reach of spyware and the need for stronger cybersecurity measures. Governments and regulators face pressure to scrutinize companies that create and distribute these tools, while tech giants like Apple and Google work to safeguard users by detecting and warning against threats in real time. The warnings serve as a reminder that, in an era of advanced digital surveillance, cybersecurity vigilance is essential for individuals across the globe.