The Growing threat of Mercenary Spyware

Apple has issued warnings to users across more than 150 countries, cautioning them about potential attacks from what they term “mercenary” spyware. These types of attacks, far from being the work of common cybercriminals, are sophisticated operations ofen linked to state-sponsored actors.

Journalists Targeted: A Case Study

One notable instance involves italian journalist Ciro Pellegrino, who recently received one of these threat notifications. Pellegrino, a seasoned journalist with two decades of experience, expressed his shock and concern, suspecting his profession made him a target. He shared his experience, highlighting the unsettling feeling of being potentially monitored.

I have been a professional journalist for twenty years. This is the first time that something like it happens to me. It’s a horrible feeling.

Ciro Pellegrino, Italian Journalist

Pellegrino’s editor-in-chief, Francesco Cancellato, had previously been alerted to a similar threat via WhatsApp support, indicating a pattern of targeting journalists and activists with spyware like that from the Israeli firm Paragon Solutions.

Apple’s Response and Confirmation

Apple has publicly acknowledged sending these threat notifications periodically sence 2021. The company emphasizes that these “mercenary” spyware tools, such as Pegasus developed by the NSO Group, are exceptionally complex and often associated with state actors.

These tools are often employed by governments and law enforcement agencies to target criminals, but their misuse against journalists, activists, and other individuals raises serious concerns about privacy and freedom of expression.

the sophistication and Cost of Spyware Attacks

Apple underscores the complexity and cost associated with these types of attacks.

These attacks are much more complex than ordinary cybercriminal activities and general public malware, because mercenary computer hackers use remarkable resources to target a very small number of specific people and their aircraft. Spy software attacks by mercenaries cost millions of dollars and often have a short lifespan, which makes them much more difficult to detect and prevent.

Apple Statement

The ephemeral nature and high cost of these attacks make them particularly challenging to detect and defend against.

Personal precautions and Ongoing Investigations

while the origin and motives behind the attack on Ciro Pellegrino remain unclear, investigations are underway. Pellegrino, understandably concerned about the potential compromise of his devices, is taking extreme precautions.

The journalist fears that his device could allow hackers to see and hear everything he does, even accessing encrypted communications on apps like WhatsApp and Signal. He is quoted as saying he is taking extreme precautions to protect his privacy.