Apple has notified more than a dozen Iranians in recent months that their iPhones had been targeted with government spyware, according to security researchers. Miaan Group, a digital rights organization focusing on Iran, and Hamid Kashfi, an Iranian cybersecurity researcher living in Sweden, reported speaking with several Iranians who received the notifications in the last year.
Spyware Attacks Against Iranians
Miaan Group published a report on the state of cybersecurity of civil society in Iran, detailing three cases of government spyware attacks against Iranians, with two occurring in Iran and one in Europe. The report mentioned that these individuals were alerted in April of this year. One of the affected individuals came from a family with a history of political activism against the Islamic Republic, with many family members having been executed. Amir Rashidi, Miaan Group’s director of digital rights and security, believes there have been multiple waves of attacks, indicating a larger issue at hand.
Government Involvement in the Attacks
Rashidi suggested that Iran is likely behind the attacks, emphasizing the need for further investigations to confirm this suspicion. He stated that there is no apparent reason for members of civil society to be targeted by entities other than the Iranian government. Kashfi, the founder of DarkCell, assisted two victims with initial forensics steps but was unable to determine the spyware maker responsible for the attacks. Some victims chose not to proceed with the investigation due to the sensitive nature of the case.
Apple’s Response and Support for Victims
Over the years, Apple has sent notifications to individuals believed to have been targeted with government spyware, aiding security researchers in documenting abuses in various countries. Apple’s support page for “threat notifications” mentioned that since 2021, users in over 150 countries have been notified of potential spyware attacks. The company recommends victims to contact AccessNow, a digital rights group that offers around-the-clock assistance in investigating spyware attacks.
Apple has not provided a comment on the notifications sent to Iranians, highlighting the ongoing challenge of government spyware targeting individuals globally.
