Do Son 
Apple has begun issuing alerts regarding targeted attacks involving spyware allegedly procured by state-affiliated entities. According to journalist Ciro Pellegrino, he received the warning both via email and SMS. The message stated that he had been targeted in an attack due to factors related to his identity or professional activities. It also noted that similar notifications had been sent to affected individuals in 100 countries around the world.
The second individual to confirm receipt of the alert was Dutch human rights advocate and public figure Eva Vlaardingerbroek. In a video statement, she displayed a screenshot of Apple’s warning, which referred to a “targeted mercenary spyware attack” and emphasized that the company had a “high degree of confidence” in the accuracy of the alert, urging her to treat it with utmost seriousness. Vlaardingerbroek interpreted the message as an attempt at intimidation and coercion.
Apple also recommended that victims of such attacks reach out to specialized non-profit organizations that investigate cyber espionage. Although the specific organization was not named in the notification, Apple has previously referred affected users to groups such as Citizen Lab.
At the time of publication, only two individuals—Pellegrino and Vlaardingerbroek—had publicly acknowledged receiving the alert. Apple has not disclosed which spyware campaign was responsible for the attack and has not responded to inquiries from journalists. Similar incidents occurred last year, when the company twice issued alerts to users across dozens of countries without revealing details about the malware used.
Other tech companies also issue such warnings. Both WhatsApp and Google periodically notify users who may have been targeted by spyware campaigns. In February, WhatsApp informed Pellegrino’s colleague, Francesco Cancellato, that his device had been attacked using a tool developed by the Israeli firm Paragon Solutions. Around the same time, members of the Italian humanitarian organization Mediterranea Saving Humans were also reported to have been targeted. According to media reports, Paragon subsequently terminated its contract with the Italian client.
It remains unclear whether the new alert from Apple is linked to the same company or represents a separate, undisclosed operation. However, the scale of the notification campaign—spanning 100 countries—underscores the ongoing and widespread activity within the mercenary spyware industry.
