Are you getting spyware alerts to iPhone's lock screen: What you need to know

An iPhone user may already know that Apple sends security warnings when it believes a device has been specifically targeted by highly sophisticated spyware. These attacks are very different from ordinary cybercrime.

Now, Apple has expanded how these warnings are shown. The company is displaying threat notifications directly on the iPhone Lock Screen and in Settings, in addition to alerts sent through email and Apple Account pages.

What Apple has changed

Unlike standard cybercrime, mercenary spyware attacks are exceptionally targeted and require extensive resources, often costing millions of dollars. Consequently, these operations impact only a small group of individuals, historically including diplomats, politicians, activists and journalists.

Must Read: Apple’s 20th anniversary iPhone to get a major glass makeover in 2027: What we know so far

Apple stated that it has dispatched its most recent round of warnings to individuals across 110 countries. Since 2021, the firm has periodically released these notifications multiple times a year, ultimately reaching users in over 150 nations.

Why these spyware alerts matter

These attacks involve highly sophisticated mercenary spyware and can require significant resources to deploy. Pegasus, developed by NSO Group, is one example of the type of spyware Apple has referenced.

Apple does not identify a specific attacker or country when it sends an individual warning. The company also does not reveal the exact indicators it uses to identify potential attacks, saying that doing so could help spyware developers evade detection.

Must Read: ChatGPT for Mac gets Computer History feature: How it works and what you should know

What should you do if you get an alert?

If you receive a genuine Apple threat notification, Apple recommends taking it seriously and enabling Lockdown Mode, particularly if you believe you could be specifically targeted. The feature limits certain apps, websites and device functions to reduce potential attack surfaces.

You should also watch out for fake warnings. A genuine Apple notification will not ask you to click a link, install an app or configuration profile, or share your Apple Account password or verification code.

If you receive a suspicious message, you can independently visit account.apple.com and sign in to check whether a genuine threat notification is displayed. This provides a safer way to verify an alert without interacting with potentially malicious links.