Apple Warns of Spyware Attacks Targeting German Lawmakers - Startups and venture capital

Several members of Germany’s Bundestag and other public figures received Apple alerts about targeted attacks involving mercenary spyware. The BSI says a compromised iPhone could expose messages and other sensitive data, but it is not known whether the devices were successfully infected.

Several members of Germany’s Bundestag and other public figures have received warnings from Apple about suspected attacks using mercenary spyware. The company began sending alerts on October 29, 2026, and Germany’s Federal Office for Information Security (BSI) informed lawmakers about the threat and recommended precautions the following day.

The BSI says spyware on a compromised iPhone could give attackers access to messages, including those sent through encrypted messaging apps, as well as calls, contacts, calendar entries and location data. It could also allow them to activate the device’s microphone and camera. The agency has not confirmed whether any confidential communications were actually accessed.

The attacks may not require victims to take any action. According to the BSI, a specially crafted message could infect a device without being opened, a method known as a zero-click attack. People targeted in this way may not notice the infection.

Apple described the activity as an attack involving mercenary spyware. The BSI characterizes this software as advanced surveillance tools developed commercially and often used in the past on behalf of state actors against selected individuals. The identity of those behind the current attacks, and whether anyone commissioned them, is not known.

The BSI also said it could not determine whether Apple’s threat notifications indicated successful compromises or attempted attacks. Apple describes its alerts as highly reliable warnings that a person has been targeted.

The agency advises affected people to contact the BSI. It recommends updating the device’s operating system unless specialists are due to examine it for evidence of spyware. Those who believe their risk of infection is high may consider replacing their phone, resetting accounts used on the device and changing their phone number. The BSI also recommends changing passwords, removing unfamiliar linked devices and enabling two-factor authentication.

Apple’s Lockdown Mode can make future attacks more difficult by restricting certain features, including message attachments, link previews and FaceTime calls from unknown people. The BSI cautions that the mode does not remove spyware already on a device.

Sources: Handelsblatt.