Become a MacRumors Supporter for $25/year with no ads, private forums, and more!

MacRumors

macrumors bot
Original poster
Apr 12, 2001
54,972
17,356


Earlier today, Apple announced that it had filed suit against NSO Group, the firm responsible for the Pegasus spyware that has been used in state-sponsored surveillance campaigns in a number of countries. NSO Group seeks to take advantage of vulnerabilities in iOS and other platforms to infiltrate the devices of targeted users such as journalists, activists, dissidents, academics, and government officials.

apple-security-banner.jpeg

As part of its announcement, Apple revealed that it is notifying the "small number of users" who have been targeted via the FORCEDENTRY exploit for a now-patched vulnerability that allowed Pegasus to be installed on their devices. Apple also said that it will continue to notify users it believes have been targeted by state-sponsored spyware attacks "in accordance with industry best practices," and the company has now shared a new support document outlining how it will notify those users.

Notifications will be delivered to affected users via email and iMessage notifications to the addresses and phone numbers associated with the users' Apple IDs, with the notifications providing additional steps users can take to protect their devices. A prominent "Threat Notification" banner will also be displayed at the top of the page when affected users log into their accounts on the Apple ID web portal.

apple-id-threat-notification.png

Users will never be asked to click links or install apps via the email and iMessage notifications, so users receiving notifications should always log into their Apple ID accounts on the web to verify that threat notifications have been issued for their accounts and to learn what to do next.

Apple acknowledges that there may be some false alarms with its notifications and that some attacks may go undetected, as it is facing constantly evolving tactics from state-sponsored attackers. Apple's threat-detection methods will similarly evolve, and so the company will not be sharing information on its methods to hinder efforts by attackers to evade detection.

Regardless of whether or not you receive a threat notification from Apple, the company advises all users to take the following steps to secure their devices:
  • Update devices to the latest software, as that includes the latest security fixes
  • Protect devices with a passcode
  • Use two-factor authentication and a strong password for Apple ID
  • Install apps from the App Store
  • Use strong and unique passwords online
  • Don’t click on links or attachments from unknown senders
Finally, Apple shares a list of emergency resources at the Consumer Reports Security Planner website for those users who have not received an Apple threat notification but believe they may have been targeted by state-sponsored attackers to obtain expert assistance.

Article Link: Apple Outlines How It Will Notify Users Who Have Been Targeted by State-Sponsored Spyware Attacks
 

sw1tcher

macrumors 68030
Jan 6, 2004
2,566
5,207
Regardless of whether or not you receive a threat notification from Apple, the company advises all users to take the following steps to secure their devices:
  • Update devices to the latest software, as that includes the latest security fixes
A-ha! So that's how Apple's going to get users to upgrade to buggy iOS 15 🤣




Very sneaky, Apple. ;)
 

btbeme

macrumors 6502
Jul 29, 2010
257
427
Serious about security and privacy. Serious enough to take on State players head-on.

While this really only affects a few dozen people globally, it is a signature for what governments and their minions are ready, capable, and willing to do. You can keep pretending that “you have nothing to hide” while your privacy (and many international and Constitutional laws) get whittled away… or you can stand up to this.

And don’t think for a minute that certain social media avenues aren’t part of this… willfully or not.
 

applicious84

macrumors 6502
Sep 1, 2020
302
656
It's important to boycott Israel, which is responsible for this software, as well:

But the company’s biggest backer, the government of Israel, considers the software a crucial element of its foreign policy and is lobbying Washington to remove the company from the blacklist, two senior Israeli officials said Monday.

If Apple can stop selling its products in Turkey because of economic concerns, it can certainly stop selling products in Israel for software concerns.
 

the8thark

macrumors 601
Apr 18, 2011
4,458
1,581
Will Apple also notify us when we are targeted by Apple created spyware attacks?
One example being CSAM.

No Apple will not . . . willingly. Once exposed by the public, Apple will try to make excuses to justify their own developed spyware.

If Apple can stop selling its products in Turkey because of economic concerns, it can certainly stop selling products in Israel for software concerns.
Apple could stop selling in Israel but that would be immoral as Israel as a nation has done nothing wrong apart from the allegations Apple is suing that Israeli company for. That is a legal issue which the courts will decide, not an issue that warrants the removal of Apple products from Israeli store shelves.
 

steve09090

macrumors 6502
Aug 12, 2008
309
749
Will Apple also notify us when we are targeted by Apple created spyware attacks?
One example being CSAM.

No Apple will not . . . willingly. Once exposed by the public, Apple will try to make excuses to justify their own developed spyware.
How is CSAM spyware when they have been very open in telling people what it was and how it would work?
 

Altivec88

macrumors regular
Jun 16, 2016
213
811
I would love to update to iOS 15 so that I can be on the latest OS but I need to worry about the front door before I can start worrying about the back door. Apple what is your decision on CSAM. Won't touch iOs 15 or buy any new iOs devices until you tell us what you're doing.
 

goobot

macrumors 603
Jun 26, 2009
6,148
3,413
long island NY
It's important to boycott Israel, which is responsible for this software, as well:



If Apple can stop selling its products in Turkey because of economic concerns, it can certainly stop selling products in Israel for software concerns.
Lmao, let’s boycott a country because It has a company I don’t like, let’s boycott America cause Facebook exist and every other country in the world cause they all have only good players
 

amartinez1660

macrumors 65816
Sep 22, 2014
1,135
1,028
Serious about security and privacy. Serious enough to take on State players head-on.

While this really only affects a few dozen people globally, it is a signature for what governments and their minions are ready, capable, and willing to do. You can keep pretending that “you have nothing to hide” while your privacy (and many international and Constitutional laws) get whittled away… or you can stand up to this.

And don’t think for a minute that certain social media avenues aren’t part of this… willfully or not.
and even your life itself could get whittled away.
Those reports of Pegasus targeted at journalists, dissidents, whistleblowers… man, that can only mean trouble, black mirror type of trouble.

Any authoritarian government or those that have lost their integrity in general must be drooling at this.
Mexico was mentioned as having several target requests, Mexico has a cartel problem that’s running it totally entangled with the government from bottom to top (source: news, documentaries, “true to life” movies and I lived there for a few years)… I WOULD NOT want myself exposed because I reported some governor being part of some illegal trade of all sorts.

Rant:
While I understand that some like or don’t like open or closed ecosystems, hot bulky non portable vs streamlined slim portable hardware, can repair vs can’t repair, economical vs expensive, etc. this is one of the things I don’t get why it doesn’t get near enough traction… where is all the rage, mob, news, YouTube channels and videos against this NSO group and many similar others?
Could say that’s maybe because it doesn’t touch on most people’s everyday life… however, analogy: let’s suppose you can’t change and calibrate the tires and breaks of a Porsche on your own (I wouldn’t even if I can)? that would drive waves of people complaining about a feature of a car that they don’t own and would never buy because they don’t even like it.
 

Altivec88

macrumors regular
Jun 16, 2016
213
811
There are 2 problems with CSAM. 1) It might not be that great in actual use (lots of false positives). 2) Conspiracy theorists have gone crazy on 'potential' (not actual) repercussions.

So act like an adult if you can't actually add to the conversation.



I never did such a thing. I asked you if you were nervous, like most conspiracy theorists are about CSAM. You said so yourself in this post. There is more to be against CSAM than those breaking the law.
So we are posting in an an article about Pegasus software. software proven to be purchased by governments to spy on iphone users and also factually resulted in at least one death. Software that is so prevalent, that Apple needs to implement a system to try to inform people that they are being spied on. Yet you want to tell me that i am conspiracy theorist and these things are not “actually” happening.

That there is no way that pegusus software will be expanded to add hashes to the CSAM system so that the governments that are already buying this can use that as another tool to spy.

Sure, if you don’t believe that’s not going to happen, then great, i know I am not going to convince you otherwise. I believe it definitely will be used for other purposes other than it was intended for.

Again. this has been repeated over and over again so there is no point in rehashing it so other than trying to get a reaction, there was no purpose in asking me if I’m nervous.
 

polyphenol

macrumors 6502a
Sep 9, 2020
843
886
Wales
Consumer Reports Security Planner - sensible for the USA. What other places will Apple point people not in the USA? Not English/Spanish speakers?
 

SpotOnT

macrumors regular
Dec 7, 2016
122
148
The point isn't simply that the company is Israeli. It is that it and the Israeli government are deeply intertwined.

As far as I can tell, it is a private company owned by its two co-founders and a private equity firm based out of the UK. It has a close working relationship with the Israel government, but it isn't a front for the Israeli secret service or anything.

NSO is like all the other private defense companies out there (Boeing, Lockheed Martin, Raytheon, General Dynamics etc.). You don't boycott the US federal government and Americans because you don't like the business decisions of Boeing. That just doesn't make any sense.
 
Last edited:

polyphenol

macrumors 6502a
Sep 9, 2020
843
886
Wales
How is it interwined?

As far as I can tell, it is a private company owned by its two co-founders and a private equity firm based out of the UK. It has a close working relationship with the Israel government, but it isn't a front for the Israeli secret service or anything. NSO is like all the other private defense companies out there (Boeing, Lockheed Martin, Raytheon, General Dynamics etc.). You don't boycott the US and Americans because you don't like the business decisions of Boeing. That just doesn't make any sense.


Technical ownership, shareholding, etc., is just one way of viewing things.

Despite Abuses of NSO Spyware, Israel Will Lobby U.S. to Defend It​

As a new accusation surfaces that NSO’s software may have been used to spy on Palestinians, Israeli officials say it is crucial to national security.
https://www.nytimes.com/2021/11/08/world/middleeast/nso-israel-palestinians-spyware.html

Israel Envoy Says Firms Like Pegasus-maker NSO Can't Sell To Non-Government Actors​

The Ambassador said that every export of NSO needed an export licence of the Israeli government, which was only granted for exporting to fellow governments.​

https://www.republicworld.com/world...r-nso-cant-sell-to-non-government-actors.html

NSO revealed as informal arm of gov’t? - analysis​

What are the broader implications of NSO for Israel-US relations?​

https://www.jpost.com/israel-news/nso-revealed-as-informal-arm-of-israeli-govt-analysis-684504
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.