If your phone pops up a notification telling you to "seek professional security help immediately," that's not scam-text-level noise. John Scott-Railton, senior researcher at the University of Toronto's Citizen Lab, posted a screenshot of the alert on X, writing that Apple had just sent out a new round of mercenary spyware threat notifications—"this means tech like Pegasus, used by governments to surveil you."
Apple confirmed to TechCrunch that it has updated the user experience of these warning notifications, making it easier for recipients to find follow-up information, and has launched a new support page explaining what mercenary spyware is and what to do if you're targeted.
According to Apple, mercenary spyware refers to highly sophisticated surveillance tools developed by companies and typically sold to nation-states or government agencies, targeting journalists, activists, politicians, and diplomats. A single attack can cost millions of dollars and is highly targeted—ordinary users are almost never targeted—but this kind of software is also extremely difficult to detect and defend against.
Apple admits its own investigations "can never achieve absolute certainty," but stresses that it only sends out "high-confidence alerts," meaning the individual user has genuinely been targeted by mercenary spyware and should take it seriously. As for how it determines who's being attacked, Apple says it can't reveal the details, since attackers could use that information to evade detection in the future.
Getting the notification doesn't mean your data has already been leaked—it just means Apple detected activity on your device consistent with a mercenary spyware attack. Apple recommends users who receive the alert turn on Lockdown Mode, which enables extreme protections, including blocking most message attachments, FaceTime calls, Apple service invitations, and shared album invites. Apple also advises seeking professional help, specifically pointing to the Digital Security Helpline run by the nonprofit Access Now for emergency response support.
