EXPLORINEER
en

US — TechCrunch

Germany says lawmakers’ iPhones may have been hacked with spyware

Security1 min read

Germany says some lawmakers and other public figures may have been targeted by government-backed spyware. The warning came after Apple sent out notices saying their iPhones may have been hacked.

What happened

Germany's cybersecurity office, the BSI, said members of the Bundestag (the German parliament) and other well-known people got warnings from Apple. Apple said they may have been targeted by cyberattacks. The German government says it is taking the warning very seriously. It has not said who was targeted, or whether Chancellor Friedrich Merz was one of them.

Key facts

  • Apple's latest batch of threat notices went to users in 99 countries.
  • Radwan Mortada, a filmmaker in Beirut, got a new notice. He was also targeted by spyware in 2021.
  • Germany's federal police agency, the BKA, reportedly bought access to Pegasus spyware in 2019.

What is spyware?

Spyware is software that secretly spies on a phone. It can steal messages, location data, and other private information. Some attacks use zero-click exploits. These attacks work without the victim clicking a link or opening a file, so they are very hard to notice. Apple sends threat notifications to people it thinks were targeted, but it does not say which government was behind an attack or confirm that a phone was actually hacked.

Why it matters

The story shows how common these attacks are becoming, especially against journalists, activists, and other members of civil society. Governments often do not build spyware themselves. They buy it from private companies, sometimes called mercenary spyware makers. The BSI told people who get an Apple warning to assume their device may be compromised.

What to watch

  • Whether the German government names the people who were targeted.
  • Who is behind the latest round of attacks. This is still unclear.
  • Whether more countries report similar Apple warnings.

Glossary

BSI
Germany's federal cybersecurity office, which protects government systems and warns the public about digital threats.
Bundestag
The parliament of Germany, where elected lawmakers meet to make laws.
spyware
Software that secretly collects private information from a phone or computer without the owner knowing.
Pegasus
A powerful spyware tool sold by NSO Group that can take control of a phone.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

SecurityThe Register

Cops bust botnet of 1.3M infected Android TV boxes

A coalition of security firms working with Japan's National Police Agency disrupted XCPE, a backdoor used to build a botnet of more than 1.3 million Android devices across over 200 countries. Google says Shenzhen-based hardware maker Videostrong Technology deliberately embedded the backdoor in device firmware and sold access to criminal affiliates. The disruption also took down command-and-control domains used to manage affiliate malware modules, which Google says could sever access to at least 10 million more compromised devices.

SecurityThe Register

Token thieves costing companies $100K+ per day in illicit LLM charges

Criminals are hijacking corporate LLM access to run up unauthorized token charges that can exceed $100,000 a day, according to a Google Mandiant report. Some organizations saw cumulative charges reach $1 million before revoking intruders' access. The report describes this "LLMJacking" tactic as steadily increasing over the past two years, with attackers also using stolen third-party API keys and specialized roles for access and monetization.

SecurityThe Register

Thieves pilfer environment variables from Trigger AI workflow tool

Trigger.dev, a cloud-hosted platform for building AI agents and workflows, disclosed a security incident on Sunday in which an attacker gained unauthorized access to environment variables belonging to a subset of its customer organizations. The company said the exploit has been blocked and affected customers were notified of steps to take, but it has not named the affected organizations and declined to provide more details beyond a forthcoming full incident report.

SecurityITmedia

GMO press conference repeats "hourglass of life"; Internet users pile on criticism of CEO Kumagai's remarks

GMO Internet Group held a press conference on November 2 over unauthorized access to its "Onamae.com Desktop Cloud" VPS used for FX automated trading. CEO Masatoshi Kumagai repeatedly used the phrase "hourglass of life," which trended on X, while many users criticized the rambling remarks, including his discussion of AI, as hard to follow. Kumagai apologized for his recent X posts, said he would suspend his X account for a period after summarizing the conference, and did not clearly deny resigning.