GLOBAL/INDIA: Apple notifications highlight the unabated threat of unlawful targeted surveillance

In light of the recent news that Apple has warned various individuals worldwide, such as Indian opposition leaders and journalists, that their iPhones could have been targeted by government-backed hackers, Likhita Banerji - who works as a Researcher and Advisor on technology and human rights at Amnesty International - has offered her thoughts.

The new alerts from Apple reveal that governments are still using very intrusive spying software against people who defend human rights, report news, and hold political positions. This sad reality shows that despite many previous incidents and discoveries, leaders have not been held responsible and have not been clear about their actions. As a result, people are once again facing the possibility of being watched without their knowledge or permission.

The notifications from Apple about potential threats verify that the use of extremely intrusive spyware by government bodies globally is still ongoing without any sign of stopping.

Civil society groups, activists, and journalists in India have been subjected to illegal and uncontrolled surveillance in the past. This act of utilizing spyware technology has been employed to suppress human rights and hinder freedom of speech and assembly. In light of this situation, the recent instances where well-known journalists and opposition leaders have received notifications from Apple are particularly alarming, especially since there are state and national general elections approaching soon. We can't tolerate illegal surveillance to persist.

Amnesty International is repeating its demand that all governments put an instant stop to employing extremely intrusive spyware that cannot be checked and restricted through independent audits. Authorities that are independent need to look into the Apple security alerts immediately and objectively. It's high time that the exploitation of spyware technology is put to an end.

Apple sent out alerts to individuals around the world who were at risk, including those in India, on October 31, 2023. The notifications warned that their Apple devices and accounts had been targeted by attackers who were supported by the state. Since November 2021, Apple has issued multiple rounds of similar threat notifications. In past cases, forensic investigations have validated that countless people who received the alerts from Apple were indeed targeted and exposed to spyware like Pegasus.

Last year, Amnesty International and Citizen Lab exposed a strategy where commercial off-the-shelf malware was used in a planned attack on those fighting for human rights. The victims were specifically targeted because of their involvement in activism.

During the year 2021, a report called the Pegasus project brought to light Amnesty International's findings about how NSO Group's Pegasus spyware was employed to target and infect Indian journalists and members of civil society. As a result of this uncovering, a technical committee was established by the Supreme Court of India to look into any misuse related to this software.

The technical committee completed their investigation in the year 2022, however, the court has not disclosed the report's conclusions to the public. Additionally, the court mentioned that the Indian officials did not assist in the investigation carried out by the technical committee.

The Security Lab of Amnesty International will keep an eye on and give assistance to various organizations working for the betterment of society across the globe that have received notifications from Apple regarding security. In case you belong to the group of people fighting for human rights, journalism or activism, and have been notified of such a security alert, don't hesitate to reach out to us for digital forensics guidance.