Skip to content
Targeted Spyware Attacks on Mobile Devices Increase

Targeted Spyware Attacks on Mobile Devices Increase

First seen 19 Oct 2026, 11:49 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 13:18 UTC
  • •Hundreds of users received spyware threat notifications in December 2025.
  • •Apple and Google patched vulnerabilities exploited by Pegasus and Predator spyware.
  • •Targeted attacks primarily affect high-profile individuals like journalists and politicians.

In December 2025, hundreds of iPhone and Android users received notifications about targeted spyware attacks, prompting Apple and Google to patch security vulnerabilities. The spyware, notably NSO Group's Pegasus and Predator, is designed for high-profile targets like journalists and politicians. The US Cybersecurity and Infrastructure Security Agency (CISA) warned that adversaries are actively leveraging commercial spyware to compromise mobile messaging applications. Apple’s threat notifications aim to assist users who may have been targeted due to their identities or activities. The attacks are sophisticated and costly, often linked to state actors or private companies developing mercenary spyware. While the majority of users remain safe, the risk of targeted attacks is growing, particularly among specific sectors.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-12-01
Threat notifications issued
Hundreds of iPhone and Android users received alerts about targeted spyware attacks, prompting security responses from Apple and Google.
Wired
2025-12-05
Patches released
Apple and Google released security patches to address vulnerabilities exploited by spyware, including Pegasus and Predator.
Wired
Recent
CISA warning issued
CISA warned that adversaries are actively leveraging commercial spyware to target mobile messaging applications.
Wired

More articles in this cluster (2)

Following this threat?

Track Pegasus in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

Who is at risk from these spyware attacks?
High-profile individuals such as journalists, politicians, and activists are primarily targeted.
What steps should users take if notified?
Users should follow the guidance provided in the threat notifications from Apple and Google to secure their devices.
How are these attacks different from regular cybercrime?
These attacks are more sophisticated, targeted, and often involve significant resources, typically linked to state actors.