Apple sends new spy threat notifications: What they mean and how to stay secure

Apple has published a new support document detailing the intricacies of how it handles threat notifications and who is vulnerable.

Apple is known to alert its users about potential spyware attacks, which could be government-sponsored, time and again. This happened during the Pegasus fiasco, and now Apple is once again alerting users about another spyware attack, targeting individuals who may have been recent victims, as first spotted by TechCrunch.

Apple has now come forward to reveal intricacies about how it sends threat notifications to its users. (Gonzalo Fuentes/Reuters)

By Shaurya Sharma

Shaurya Sharma is the Technology Editor at Hindustan Times Digital Streams, where he oversees technology coverage across digital and social platforms. With over eight years of experience across editorial, video production, and digital media, his work focuses on smartphones, AI, consumer gadgets, and shaping audience-first content strategies for modern tech consumers.

He began his career in 2018 as a fashion cinematographer before turning his lifelong passion for technology into a profession. From spending his childhood immersed in tech magazines, video games, and the latest gadgets to covering the global consumer tech industry today, technology has remained a constant throughout his journey.

Over the years, Shaurya has worked with some of India’s leading media organisations, including CNN-News18, Sportskeeda, and Guiding Tech, where he led video initiatives that combined strong editorial storytelling with engaging visual and social-first execution.

A graduate in Journalism and Mass Communication from Manipal University, Shaurya has reviewed hundreds of products across categories including smartphones, laptops, gaming consoles, cameras, and wearables. Beyond work, he is passionate about animal welfare, environmental causes, and automobiles, particularly turbo-petrol cars

Read moreRead less

You may be interested in

30% OFF

Samsung Galaxy S24 5G

• Cobalt Violet
• 8 GB RAM
• 256 GB Storage

₹56,337

₹79,999

Get This

31% OFF

Samsung Galaxy S24 5G

• Cobalt Violet
• 8 GB RAM
• 256 GB Storage

₹55,524

₹79,999

Get This

Find more mobiles

Recently, two people have come forward to reveal that they indeed received notifications from Apple, alerting them about the same. These two individuals include Ciro Pellegrino, an Italian journalist and a Dutch right-wing activist named Eva Vlaardingerbroek.

“Yesterday I got a verified threat notification from Apple stating they detected a mercenary spyware attack against my iPhone,” Eva Vlaardingerbroek posted on X. “All I know for sure right now is that someone is trying to intimidate me,” she added.

As for Ciro Pellegrino, he attached a screenshot of the mail Apple sent him. “Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the iPhone associated with your Apple Account,” the screenshot of the mail reads.

Apple has since provided details about the attacks, including their detection methods and also explained how its notification process works for affected individuals. Read on for the details.

What Apple said

In the same regard, Apple on 25 April published a support document outlining the company’s exact guidelines for users. It details what users must do if they receive an Apple threat notification and explains what actually happens when such alerts are triggered.

Apple states that these notifications are intended to inform and assist users who may have been individually targeted by mercenary spyware attacks, because of “who they are or what they do.” These attacks are far more sophisticated than typical cybercriminal activity or general consumer malware.

Since 2021, Apple has confirmed that it sends out threat notifications multiple times a year whenever it detects such attacks. The company also states it has informed users in over 150 countries.

How does Apple inform users?

Apple says that threat notifications are typically sent using email and iMessage to the email addresses and phone numbers associated with the Apple account of the targeted individual. These messages include details and steps users should follow to protect their devices, including enabling Lockdown Mode.

Apple clarifies that emails are only sent from the address: threat-notifications@email.apple.com, while iMessage notifications come from threat-notifications@apple.com. Prior to 2025, email notifications were sent from threat-notifications@apple.com.

Apple has also issued general advice to help users stay protected from cybercriminals and malware

The tips include:

• Updating devices to the latest software version
• Setting a passcode
• Enabling two-factor authentication
• Using a strong password for the Apple ID
• Only installing apps from the App Store
• Using strong, unique passwords online
• Avoiding links and attachments from unknown senders

MOBILE FINDER: iPhone 16 LATEST Price, Specs And More