• Many opposition party leaders received an ominous message from Apple early this week
• Apple responded about the latest alerts by re-iterating the details mentioned on its support page
• Experts believe Apple should be clear about the current status of the threat

Apple recently sent out notifications to many prominent politicians in India warning them of ‘state-sponsored attackers’ targeting their iPhone. Many opposition party leaders including TMC’s Mahua Moitra, Shiv Sena UBT’s Priyanka Chaturvedi, Congress's Shashi Tharoor, AAP's Raghav Chadha said they received the same Threat notification from Apple. 

  Apple responded to the latest claims by re-iterating the details mentioned on its support page. The company claimed that state-sponsored attackers are very well-funded and sophisticated, and their attacks evolve over time. Detecting such attacks relies on threat intelligence signals that are often imperfect and incomplete. 

  They also revealed a possible loophole in the alert system claiming that some Apple threat notifications may be false alarms, or that some attacks are not detected. They further added, “We are unable to provide information about what causes us to issue threat notifications, as that may help state-sponsored attackers adapt their behavior to evade detection in the future.” 

 Expert Opinion

  Cyber expert, Jiten Jain, during a panel discussion with Business Today’s Executive Director Rahul Kanwal,  explained how Apple should deal with the information about the cyberattacks. He said, “Apple as an OS does not give anyone, including antivirus or anti-malware companies, access to system files. It is very difficult to detect a malware on an Apple iPhone. You could detect it on an Android. So, the detection on an Apple is also very difficult. Whatever limited thing you could do is block those IP addresses or block those indicators of compromise. Leaving that responsibility to victims or the prospective victims is not a fair job.” 

  He emphasised that Apple has to inform all the users that whatever indicators of compromise they detected have been blocked or are in the process of being blocked on those platforms. He added, “This is the job they are shying away from.” 

  Mishi Choudhary, Technology Lawyer and Online Civil Rights Activist said, “Multiple folks have claimed that Apple issued an official statement on this issue. We have not seen anything that could be independently verified. All we saw was the information available on Apple Support page updated in August 2023 being twisted and attributed to Apple as some official clarification.” 

  Choudhary highlighted a report claiming that Apple has sent the threat notification in 150 countries but that doesn’t mean the recent alert is active in 150 countries. She further claimed that independent labs like Citizen Lab should look into this matter immediately and do a forensic analysis. 

 How to avoid getting hacked

  The barrage of notifications has led to concerns about data security and safety among users. In order to mitigate such risks, smartphone users, both Android and iOS, can use following tips for some additional safety: