Apple has warned over a half dozen Indian politicians, other members of political parties and journalists of their iPhones being targets of state-sponsored attacks, these people said Tuesday, in a remarkable turn of events and charges just months before the general elections in the South Asian nation.
Shashi Tharoor, a key figure from the opposition Congress party; Akhilesh Yadav, the head of the Samajwadi Party; Mahua Moitra, a national representative from the All India Trinamool Congress; Priyanka Chaturvedi of Shiv Sena, a party with notable influence in Maharashtra; Asaduddin Owaisi, the leader of the All-India Majlis-e-Ittehadul Muslimeen (AIMIM); Raghav Chadha from AAP, originating from an anti-corruption crusade a decade prior and later securing a political foothold in the national capital region; Sitaram Yechury, the General Secretary of the Communist Party of India; alongside Congress spokesperson Pawan Khera, reported that they had been notified by Apple regarding a potential security attack on their iPhones.
Rahul Gandhi, Indian opposition leader, said in a media briefing Tuesday that his team too had received the said alert from Apple. Journalists Siddharth Varadarajan and Sriram Karri, along with Observer Research Foundation (ORF) India President Samir Saran shared that they had been served with identical warnings from Apple.
Apple confirmed that it has sent threat notifications to individuals. The iPhone-maker has notified individuals in nearly 150 countries. In a statement, the company told TechCrunch that it does not attribute the threat notifications to any specific state-sponsored attacker.
“State-sponsored attackers are very well-funded and sophisticated, and their attacks evolve over time. Detecting such attacks relies on threat intelligence signals that are often imperfect and incomplete. It’s possible that some Apple threat notifications may be false alarms, or that some attacks are not detected. We are unable to provide information about what causes us to issue threat notifications, as that may help state-sponsored attackers adapt their behavior to evade detection in the future.”
New Delhi has been accused of deploying the Pegasus spyware on activists and opposition leaders for years. Financial Times reported in March that India was seeking new spyware contracts.
Apar Gupta, a senior privacy activist, said the timing of these notifications was alarming.
“Public cynicism or judicial stupor should not preclude us from demanding an independent, transparent technical analysis and clear disclosures from the Government of India regarding its spyware purchases and deployments. This issue strikes at the heart of Indian democracy,” he wrote in a tweet.
Was notified by Apple late last night that my iPhone linked to my Apple ID is being targeted … I have implemented the on-device remedial measures suggested by Apple and am reaching out to experts as well …. pic.twitter.com/x9KbvcV1ez
— Samir Saran (@samirsaran) October 31, 2023
Apple has previously recommended users receiving this alert to activate the Lockdown mode, a security measure unveiled in 2022, aimed at safeguarding individuals like journalists, politicians, attorneys, and human rights advocates from state-sponsored spyware intrusions.
This mode curtails link previews in messages, minimizes Safari functionality by turning off features like just-in-time (JIT) compilers to halt malicious JavaScript execution, restricts users from opening attachments, and disables receipt of FaceTime calls from unfamiliar contacts.
More to follow.
Ivan Mehta contributed to this report.