In recent months, Apple has informed several Iranian users that their iPhones have been monitored using government spyware. This information was reported by the digital rights organization Miaan Group, specializing in Iran, and Iranian cybersecurity expert Hamid Kashfi, who resides in Sweden.
According to the latest report from Miaan Group, in April 2025, Apple sent threat notifications to three individuals living in Iran and Europe. Two of them belonged to a family known for political activism and had never traveled abroad.
Amir Rashidi, head of digital rights at Miaan Group, stated that the Iranian government could be behind these attacks, and the targets are mainly civil society activists. He noted that these attacks are still in their early stages and could escalate significantly.
Hamid Kashfi provided initial technical assistance to some victims but was unable to precisely identify which spyware was used. Additionally, many victims recognized the seriousness of the threat but refused to continue deeper investigations.
Currently, the spyware manufacturer behind these attacks is unknown. However, in recent years, Apple has sent warnings to users regarding government spyware such as NSO Group’s Pegasus and Paragon’s Graphite.
Apple reports that since 2021, it has sent such notifications to users in more than 150 countries but does not disclose the names of the countries or the number of users. Apple recommends affected users contact the AccessNow organization, which offers 24/7 assistance in investigating spyware.
Apple has not issued an official statement regarding these warnings sent to Iranian users.
