Recently, Apple notified several Iranians that their iPhones were spied on by government-grade spyware. Security researchers and digital rights groups are raising serious concerns about the growing reach of surveillance technology in Iran.
The Miaan Group, a nonprofit focused on digital rights in Iran, and cybersecurity expert Hamid Kashfi reported that more than a dozen Iranians received threat notifications from Apple over the past year. These alerts are part of Apple’s ongoing initiative to inform users targeted by what it calls “mercenary spyware,” such as NSO Group’s Pegasus or Paragon’s Graphite.
A recent Miaan Group report revealed at least three confirmed spyware attacks in April 2025—two victims in Iran and one in Europe. The targeted individuals include members of a politically active Iranian family with no international travel history. “We’ve only seen the tip of the iceberg,” said Amir Rashidi, Director of Digital Rights and Security at Miaan.
Kashfi, who runs security firm DarkCell, said he assisted victims with preliminary forensics despite no spyware vendor being identified. Unfortunately, many victims chose not to continue due to safety concerns.
This isn’t an isolated issue. Apple has issued threat alerts to users in over 150 countries since 2021, showing how widespread state-sponsored cyberattacks have become. To aid victims, Apple recommends reaching out to AccessNow, a digital rights organization that provides 24/7 forensic support and has documented spyware abuse worldwide.
Although Apple has not commented on these specific cases in Iran, the implications are clear: authoritarian regimes continue to use advanced spyware to silence dissent and monitor civil society. With rising digital threats, global cooperation between tech companies and rights groups is more critical than ever.
Stay informed. Protect your digital rights.
