Apple Reportedly Notified Some U.S. State Department Employees They May Have Been Targeted by NSO Group Spyware

Apple has notified at least nine U.S. Department of State employees that they may have been targeted by state-sponsored spyware created by Israeli company NSO Group, according to a Reuters report citing four people familiar with the matter.

apple security banner
A spokesperson for NSO Group told Reuters that it will investigate and take legal action against customers using its tools illegally if necessary.

"If our investigation shall show these actions indeed happened with NSO's tools, such customer will be terminated permanently and legal actions will take place," said an NSO spokesperson, who added that NSO will also "cooperate with any relevant government authority and present the full information we will have."

Last month, Apple filed a lawsuit against NSO Group to "hold it accountable" for state-sponsored spyware targeting Apple users. Apple also said it would contribute $10 million to organizations pursuing cybersurveillance research and advocacy.

Apple said NSO Group's "spyware product" Pegasus was used to attack a "very small number of users" across multiple platforms, including iOS and Android.

Apple's legal complaint provides new information on NSO Group's FORCEDENTRY, an exploit for a now-patched vulnerability previously used to break into a victim's Apple device and install the latest version of NSO Group's spyware product, Pegasus. […]

To deliver FORCEDENTRY to Apple devices, attackers created Apple IDs to send malicious data to a victim's device — allowing NSO Group or its clients to deliver and install Pegasus spyware without a victim's knowledge. Though misused to deliver FORCEDENTRY, Apple servers were not hacked or compromised in the attacks.

Apple said NSO Group's spyware could allow for attackers to "access the microphone, camera, and other sensitive data on Apple and Android devices." Apple added that iOS 15 includes new security protections and, as of November 23, Apple said it had not observed any evidence of successful remote attacks against devices running any iOS 15 version.

In a support document, Apple said it would notify users who may have been targeted by email and iMessage "in accordance with industry best practices."

If Apple discovers activity consistent with a state-sponsored attack, we notify the targeted users in two ways:

- A Threat Notification is displayed at the top of the page after the user signs into appleid.apple.com.
- Apple sends an email and iMessage notification to the email addresses and phone numbers associated with the user's Apple ID.

These notifications provide additional steps that notified users can take to help protect their devices.

Through the lawsuit and notifications, Apple aims to cut down on the abuse of state-sponsored spyware.

"State-sponsored actors like the NSO Group spend millions of dollars on sophisticated surveillance technologies without effective accountability," said Apple's software engineering chief Craig Federighi. "That needs to change."

(Thanks, Jordan Golson!)

Note: Due to the political or social nature of the discussion regarding this topic, the discussion thread is located in our Political News forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Top Rated Comments

indychris Avatar
25 weeks ago
If there's one thing the US Govt hates, it's competition! There will be no end to the wrath when the state department finds out that someone is using their own tactics against them!
Score: 16 Votes (Like | Disagree)
deevey Avatar
25 weeks ago

I sure would like to know which state is sponsoring spying on American state dept officials. Anyone know?
Probably Virginia :cool:
Score: 11 Votes (Like | Disagree)
BWhaler Avatar
25 weeks ago
Good stuff Apple. Shut these NSO clowns down…there is blood on their hands.
Score: 11 Votes (Like | Disagree)
SenorWhyMe Avatar
25 weeks ago
Israel is not our ally
Score: 8 Votes (Like | Disagree)
Sammy in SoCal Avatar
25 weeks ago

Are you sure? It seems unlikely. I haven't heard the US isn't pulling our officials from there in protest. Surely it must be some other place. They are an ally after all. It must be Russia. Yes, that's it. It's Putin again.
Israel nearly owns the united states. They have the biggest lobby, AIPAC
Score: 7 Votes (Like | Disagree)
CarlJ Avatar
25 weeks ago

I sure would like to know which state is sponsoring spying on American state dept officials. Anyone know?
I think you don't understand what the phrase "state-sponsored" means in this context.
Score: 6 Votes (Like | Disagree)

Related Stories

applerefurbishedgoodastwo

Apple's $95 Million Settlement Over Refurbished Replacement Devices Not Being 'Equivalent to New' Moves Forward

Tuesday January 25, 2022 11:13 am PST by
Back in October, Apple agreed to pay $95 million to settle an ongoing class action lawsuit that accused the company of violating various U.S. laws and regulations by providing customers with refurbished replacement devices instead of new devices when repairs were required under AppleCare. Administrators handling the case have now updated the "Replacement Device Lawsuit" website with details...
apple amsterdam

Apple Issues Statement Following Resolved Hostage Situation At Amsterdam Store

Wednesday February 23, 2022 4:30 am PST by
Apple has praised Dutch police as well as customers and staff at an Amsterdam store where a hostage situation yesterday came to a close with no injuries to the public and the suspect detained in custody. In a statement obtained by TechCrunch, Apple said that all employees and customers are safe after the "terrifying experience" at Apple Amsterdam in Leidseplein on Tuesday. "We want to thank ...
nso israeli surveillance firm

Apple Aims to Cut Down on Spyware With Lawsuit Against NSO Group

Tuesday November 23, 2021 10:09 am PST by
Apple today announced that it has filed a lawsuit against Israeli firm NSO Group and its parent company with the aim of holding it accountable for targeting Apple users with spyware used for surveillance purposes. In the lawsuit, Apple offers up information on how NSO Group infiltrated the devices of iPhone owners and how it utilized the Pegasus spyware to do so. Apple is asking for a...
iOS App Store General Feature JoeBlue

U.S. Bills Allowing Sideloading Would Cause Consumers to Be Hit With 'Malware, Ransomware, and Scams,' Says Apple

Tuesday January 18, 2022 11:42 am PST by
U.S. bills that would require major changes to the App Store would ultimately cause consumers to be targeted with malware, ransomware, and scams, Apple's Senior Director of Government Affairs Timothy Powderly said in a letter that was sent today to the Senate Judiciary Committee and that was obtained by MacRumors. Apple sent the letter as the Judiciary Committee prepares to consider the Amer...
14 16 inch 2021 mbps back to back feature

Hackers Behind MacBook Pro Schematics Leak Arrested in Russia

Friday January 14, 2022 7:23 am PST by
The ransomware hackers behind last year's MacBook Pro schematics leak have now been arrested in Russia, the FSB today announced in a press release (via Reuters). Following an initial arrest late last year, Russia's Federal Security Service (FSB) explained that it has arrested 14 members of "REvil," an organized criminal association that used malicious software to extort funds from companies. ...
tmobilelogo

T-Mobile's Latest Data Breach Linked to SIM Swap Attacks

Wednesday December 29, 2021 10:15 am PST by
Back in August, T-Mobile suffered a massive data breach impacting more than 50 million current, former, and prospective T-Mobile users, and now the cellular company is dealing with another smaller data breach incident. Reports yesterday suggested that T-Mobile was aware of unauthorized activity affecting some customer accounts, and now, T-Mobile has confirmed that those reports were due to...
apple wallet drivers license feature

Apple Announces iPhone Driver's Licenses Coming Soon to These 11 U.S. States

Wednesday March 23, 2022 11:52 am PDT by
Apple today announced that Arizona residents can now add their driver's license or state ID to the Wallet app on the iPhone and Apple Watch, providing a convenient and contactless way to display proof of identity or age. Arizona is the first U.S. state to offer this feature to residents, with many other states planning to follow suit. Apple said that Colorado, Hawaii, Mississippi, Ohio, and...
Whatsapp Feature

WhatsApp Polling Feature for Chat Groups Currently in Beta

Monday March 7, 2022 3:09 am PST by
WhatsApp is working on letting users conduct polls within groups on the chat platform, the latest beta for iOS has revealed (via WABetaInfo). The coming ability to create polls within WhatsApp groups was confirmed in screenshots that show the process of setting one up, with users able to ask a poll question and group members able to choose from pre-defined answers. Polls will only be...

Popular Stories

iPhone 14 Pro Purple Front and Back MacRumors Exclusive

iPhone 14 Pro Renders Highlight Multiple Design Changes

Wednesday May 25, 2022 8:56 am PDT by
Leaker Jon Prosser today shared ostensibly accurate renders of the iPhone 14 Pro, providing the most accurate look yet at what the device could look like when it launches later this year. In the latest video on YouTube channel Front Page Tech, Prosser revealed renders of the iPhone 14 Pro made by Apple concept graphic designer Ian Zelbo, highlighting a range of specific design changes...
iPhone 13 Always On Feature

iPhone 14 Pro Screen Refresh Rate Upgrade Could Allow for Always-On Display

Tuesday May 24, 2022 7:23 am PDT by
Last year's iPhone 13 Pro models were the first of Apple's smartphones to come with 120Hz ProMotion displays, and while the two iPhone 14 Pro models will continue to feature the technology, their screens could well boast expanded refresh rate variability this time round. To bring ProMotion displays to the ‌iPhone 13 Pro models‌, Apple adopted LTPO panel technology with variable refresh...
iPad Pro USB C Feature Coral

Deals: Apple's iPad Pro Reaches Up to $449 Off in Amazon's Latest Sales

Wednesday May 25, 2022 10:09 am PDT by
Amazon is marking down a wide variety of 11-inch and 12.9-inch iPad Pro models this week, with prices starting as low as $749.00 for the 11-inch tablet. You'll find the full list of sales below, all of which can be found on Amazon. Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep...
apple account card

Wallet App Now Supports Apple Account Cards on iOS 15.5

Wednesday May 25, 2022 5:01 pm PDT by
Apple appears to have recently updated the Wallet app to allow users to add an Apple Account Card, which displays the Apple credit balance associated with an Apple ID. If you receive an App Store or Apple Store gift card, for example, it is added to an Apple Account that was previously visible in the App Store and Apple Store apps. As of today, the Apple Account balance can also be added to...
Apple Tap to Pay iPhone

Apple Stores Rolling Out iPhone-to-iPhone Contactless Payments Starting Today

Wednesday May 25, 2022 6:54 am PDT by
Apple in February unveiled a new "Tap to Pay on iPhone" feature that will allow compatible iPhones to accept payments via Apple Pay, contactless credit and debit cards, and other digital wallets, with no additional hardware required. Apple began testing the feature at its Apple Park Visitor Center earlier this month, and now Bloomberg's Mark Gurman has tweeted that the feature will begin...
apple wwdc 2022

Apple Shares WWDC 2022 Schedule, Keynote to Take Place June 6 at 10:00 a.m PT

Tuesday May 24, 2022 9:06 am PDT by
Apple today confirmed that the keynote event for the Worldwide Developers Conference will begin at 10:00 a.m. Pacific Time on June 6, the first day of WWDC. The keynote will be an online-only event, though a select number of developers have been invited to the Apple Park campus for a viewing event. In addition to confirming the keynote date and time, Apple has shared the full WWDC 2022...