Apple spyware alerts reach German government phones

Speaking on ARD’s Bericht aus Berlin, Wildberger said there had been “a notification from Apple that certain devices may have been compromised with so-called spyware.” He said a letter from Germany’s Federal Office for Information Security, the BSI, showed the alerts began reaching affected phones on 29 October and referred to an attack using “mercenary spyware.”

Wildberger did not say how many politicians or officials received the warnings, and he did not identify them. He also said the notifications do not show whether any attack succeeded. The BSI’s advice, according to him, was to assume as a precaution that a device may have been compromised.

That is not the same as proof of infection, but it is not a routine nuisance either. Apple says it sends threat notifications when it believes a user has been individually targeted by mercenary spyware, which it describes as “vastly more sophisticated than regular cybercriminal activity.” The warnings appear on the iPhone lock screen and in settings, and are also sent by email.

The practical stakes are easy to understand. According to the BSI, spyware of this kind can give attackers access to messages, including those sent on encrypted apps, as well as calls, contacts, calendars and location data. It can also switch on a phone’s microphone and camera. On a minister’s or MP’s device, that would not just expose personal material; it could expose political schedules, networks and conversations that matter precisely because they are ordinary enough to travel by phone.

There is still a great deal the public has not been told. Neither Apple nor the German authorities have said who may be behind the attack. Wildberger did not name those who received the alerts, and there is no public account yet of whether forensic checks found signs that any device was actually penetrated.

So the confirmed picture is narrow but serious: Apple sent targeted spyware warnings to people inside Germany’s federal political system, and the government’s own cyber office told those recipients to behave as though compromise was possible.