How to Tell If That Apple 'Threat Notification' Is Legit

Threat actors are ever uncovering ways to make their attacks look much believable—often by utilizing urgent information matters that push victims to enactment quickly—so you should ever beryllium skeptical of messages and notifications informing you that your instrumentality aliases relationship has been compromised. That said, if you person a spyware informing from Apple via push notification, it's apt real, and you shouldn't disregard it.

Apple's threat notification strategy is designed to alert individuals who person been targeted by mercenary spyware, specified arsenic Pegasus, which tin silently infect devices and way everything a personification does. Since 2021, the institution has sent these alerts aggregate times a year. In the immense mostly of cases, those affected are successful high-profile positions—such arsenic politicians, journalists, and activists—that are astatine a precocious consequence of being targeted. That intends the mean personification is improbable to ever person 1 of these notifications, truthful it's important to understand really they activity and beryllium capable to place what's morganatic and what's not.

Verify Apple threat notifications earlier taking action

According to Apple's support document, threat notifications are now being distributed via push notifications to affected users' iPhones. These alerts will look connected the Lock Screen and successful Settings. Users will besides person an email alert to the reside linked to their Apple Account sent from [[email protected]]. (Previously, Apple sent alerts via email and Messages.) Lock Screen alerts will person a reddish informing icon and publication "Apple Threat Notification: Apple detected a mercenary spyware onslaught targeted astatine your iPhone. There are actions you tin return now to thief protect your information and your device."

You May Also Like

If you person a push notification aliases an email that appears to beryllium from Apple, you should return it earnestly and also verify it successful your instrumentality Settings and Apple Account dashboard, arsenic scammers whitethorn effort to capitalize connected this by sending clone alerts that impersonate Apple. When you spell to Settings connected your iPhone, you'll spot an Apple Threat Notification paper conscionable beneath your main profile. Then, log into account.apple.com—there will beryllium a banner astatine the apical of the page branded "Threat Notification" pinch a nexus to position further details.

Legitimate threat notifications from Apple will ne'er require you to click links, download files, instal apps, aliases supply credentials by email aliases phone. If you're urged to do immoderate of these things, it's a scam. You should beryllium particularly wary of security-related notifications if you're not a high-risk iPhone personification who is apt to beryllium targeted.

That said, affected users are advised to travel Apple's recommended steps to protect themselves. This whitethorn see turning connected Lockdown Mode, an OS-level information mounting that severely limits iPhone features successful bid to artifact malicious actors from gaining access. If you person an Apple threat notification, you tin besides interaction Access Now's Digital Security Helpline, which is disposable 24/7, for assistance.