News (EN)

Apple warns of mercenary spyware attacks and recommends immediate iPhone restart now

Apple, Iphone
Apple, Iphone - DVKi/shutterstock.com

Apple has released important guidance for millions of iPhone users around the world. Ataques of mercenary spyware are ongoing and exploit vulnerabilities in old versions of the operating system. The company recommends immediately updating to iOS 26 or completely restarting the device.

These attacks utilize zero-click exploits that require no user interaction. Eles primarily affect devices that have not received the latest security fixes. Agências international cybersecurity organizations reinforce the need for regular preventive measures.

The recommendation for a complete restart gains prominence among experts. The procedure stops in-memory processes and removes non-persistent malicious software.

Apple
Apple – 1000 Words/shutterstock.com

What are mercenary spyware attacks

Mercenary spyware represents a highly sophisticated threat category. Empresas Private companies develop these tools and sell them to governments or state entities. The attacks cost millions of dollars and target specific individuals such as journalists, activators and politicians.

Unlike regular malware, these infections occur without clicks or downloads. Mensagens in iMessage can serve as an input vector on iPhones. Apple has identified active exploits in recently patched WebKit and kernel vulnerabilities.

Why Hard Reset Protects Your Device

Completely restarting your iPhone stops all active processes in RAM. Softwares malicious files that reside only in this area lose execution and are eliminated. Agências as well as the ANSSI of França and the NSA of Estados Unidos recommend the practice weekly.

This measure does not eliminate persistent spyware that survives a reboot. However, it significantly reduces the dwell time of non-persistent threats. Especialistas Europeans warn to avoid quick restart features of the operating system.

  • Complete shutdown removes memory-only malware.
  • Weekly restart limits impact of temporary exploits.
  • Procedure does not cause damage to hardware or user data.
  • Practice complements regular security updates.

How to perform the restart correctly

Users should prioritize hardware-based methods to ensure complete shutdown. Apple provides two main options that prevent malware restart simulations. The process takes less than a minute and preserves all stored information.

First method involves pressing volume and side buttons simultaneously. The shutdown slider appears on the screen for confirmation. Após drag, wait 30 seconds until the device turns off completely.

Second method applies in cases of frozen or non-responsive screen. Pressione quickly volume up, then volume down and hold the side button. The Apple logo indicates the restart is in progress.

Update to iOS 26 as a permanent solution

The iOS 26 update incorporates critical fixes against known exploits. Dispositivos from iPhone 11 onwards support the latest version. Usuários of older models receive iOS 18.7.3 as a safe alternative.

Hundreds of millions of iPhones remain on previous versions by the owners’ choice. Analistas estimate that more than half of active devices have not migrated to iOS 26. Essa situation creates a window of opportunity for attackers.

The update process requires an automatic system restart. Isso ensures full application of security patches. Usuários must connect the device to power during installation.

Recommendations from international agencies

The French ANSSI is on par with the American CISA in cyber authority. The agency advises a total weekly shutdown without using operating system resources. Alguns spyware simulates restarts to maintain persistence.

The NSA has maintained similar guidance since previous years. Reinícios regular disrupt malware connections in memory. The practice benefits all users regardless of their risk profile.

Additional protective measures

Lockdown Mode provides extreme defense against sophisticated attacks. The feature restricts functionality to reduce attack surface. Apple has never recorded successful infection on devices with the mode enabled.

Keeping iOS updated remains the main protection barrier. Notificações threat reaches targeted users directly. Essas messages appear at the top of the Apple ID page.

  • Enable automatic updates on Ajustes > Geral > Atualização from Software.
  • Check current version at Ajustes > Geral > Sobre.
  • Consider Lockdown Mode in Privacy & Security for high risk.
  • Avoid jailbreaks that remove native system protections.

Global impact of current threats

Apple has sent notifications to users in over 150 countries since 2021. Ataques evolve quickly and require exceptional resources from developers. Ferramentas like NSO’s Pegasus Group exemplify the level of sophistication involved.

Independent research confirms active exploitation of vulnerabilities patched in December 2025. Unpatched Dispositivos remain vulnerable indefinitely. Migrating to iOS 26 eliminates known risks permanently.

Ordinary users rarely become direct targets of these campaigns. However, leakage of exploits to common criminals is a growing concern. Medidas preventive measures benefit the entire installed base of iPhones.

Final steps to immediate safety

Immediately check the iOS version installed on your device. Atualize for iOS 26 if supported or perform hard reset now. Repita the procedure weekly until system migration is complete.

The combination of updating and regular restarts provides robust protection. Agências Governments and manufacturers converge on the same practical recommendations. Usuários Attentive people minimize risks without significant additional effort.

To Top