German Officials Warned of iPhone Hacks Via Spyware
Translated & summarized from Maariv by baba
Germany's Federal Office for Information Security warned officials and lawmakers that their iPhones may have been compromised by spyware, requiring only a phone number for the attack. Apple began sending notifications to affected individuals on Thursday. While the specific spyware is unknown, past attacks on German officials have been linked to Russian intelligence groups, including breaches in 2015, 2016, and 2022.
The story in 5 lines · by baba
- German officials and lawmakers are warned their iPhones may be compromised by spyware.
- The cyberattack reportedly requires only a phone number and no user interaction.
- Apple has begun sending notifications to affected individuals about potential breaches.
- Past attacks on German officials have been linked to Russian intelligence groups.
- The specific spyware used in the current incident has not yet been identified.
Germany's Federal Office for Information Security (BSI) has issued an urgent warning to senior officials and members of parliament, urging them to assume their iPhones have been compromised. The alert, which began reaching recipients on Thursday, follows notifications from Apple indicating potential security breaches. The BSI's directive is clear: those who received the alert should consider their devices insecure without waiting for further confirmation, according to a Financial Times report.
The method of attack reportedly requires only a phone number and does not necessitate any user interaction, such as clicking a link or opening a file. While the specific spyware used in this incident has not been identified, the article notes that tools like the Pegasus spyware from Israel's NSO Group can access encrypted messages, contacts, call logs, location data, photos, and documents, and can even activate the device's microphone for eavesdropping.
Historically, hacker groups linked to Russian intelligence services have been active in targeting German politicians. The article cites the example of APT 28, also known as "Fancy Bear" and affiliated with Russia's GRU military intelligence, which breached the Social Democratic Party in 2022 and the Bundestag in 2015, exfiltrating significant amounts of data. Germany officially accused Russia of the 2015 breach in 2020. Additionally, Russian hackers linked to the FSB reportedly infiltrated a secure government communication network in 2016, exposing classified documents related to the Ukraine war and Brexit negotiations.
Although the perpetrator of the current attack remains unconfirmed, the historical context highlights German government officials as frequent targets of cyber intrusions. Previous breaches have exposed sensitive information, with Berlin officially attributing at least one incident to Russia. The current situation is still unfolding, with the nature of the threat becoming clearer, but its source is yet to be definitively identified.