Apple has notified more than a dozen Iranian users in recent months that their iPhones were targeted with government spyware, according to cybersecurity researchers and a new report by the Miaan Group.
The organization, which focuses on digital rights in Iran, confirmed that several victims received the warnings from Apple, with at least three cases of confirmed spyware attacks this year alone.
Two of the targeted individuals are based in Iran and come from a family with a long history of political activism against the Islamic Republic, according to Miaan Group’s director Amir Rashidi. The third victim lives in Europe. Rashidi believes the Iranian government is likely behind the attacks but says more investigation is needed to determine the spyware’s origin.
Hamid Kashfi, an Iranian cybersecurity researcher based in Sweden, said he assisted two victims with initial forensic analysis but was unable to identify the specific spyware used. He added that some of the victims preferred not to pursue further investigation due to the sensitive nature of their work.
It remains unclear which spyware maker was behind the attacks. In the past, Apple has sent similar threat notifications in cases involving powerful surveillance tools like NSO Group’s Pegasus or Paragon’s Graphite. These so-called “mercenary” spyware tools are often sold to governments and have been used to target journalists, activists, and civil society members worldwide.
Apple has notified users of such threats in over 150 countries since 2021, though it does not reveal which countries are involved or how many individuals have been warned. To support victims, Apple advises reaching out to AccessNow, a digital rights group that offers emergency assistance to those affected by spyware.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
Apple has not issued an official comment regarding the recent notifications sent to Iranian users.
