A recent change in terminology by Apple, Inc., with regard to describing cyber threats, has stirred conversations in the tech community and among privacy advocates. The technology giant has made a subtle yet significant shift in its nomenclature, replacing the term “state-backed attackers” with “mercenary” hackers in alerts to customers and across its support documentation online. This linguistic alteration emerges after months of speculation about foreign government intervention and raises questions about the political dynamics at play behind the scenes of global cyber security.
The revision in Apple’s language is not merely a cosmetic change; it is seen as a strategic move by the company to diffuse the direct association with any specific nation-states following hacking attempts. This change came to light as media outlets reported on Thursday the dispatch of a new round of such notifications to users in India as well as 91 other countries. Interestingly, despite these reports, users in these countries have not publicly acknowledged receiving such alerts.
Previously, both Apple and the Indian Union government had inaccurately claimed that users in 150 countries were recipients of hacking alerts in November, but in reality, during that time period only Indian users reported receiving such notifications. Apple has since opted to remain silent, as a spokesperson declined to offer an on-record comment regarding the adjustment in verbiage used to describe these cyber threats.
The context around this change becomes more interesting when considering the reports from last December in The Washington Post, which referred to incidents of senior officials from Prime Minister Narendra Modi’s administration contacting Apple representatives in India. These officials allegedly demanded that Apple assist in mitigating the political fallout from the hacking alerts, particularly those sent out in November. It was at this time that at least two notable Indian figures, Praveen Chakravarty from the Congress party, and Siddharth Varadarajan, founder editor of The Wire, received such alerts. Follow-up forensic examinations revealed traces of the notorious Pegasus spyware on their phones, which is known to be procured by the Indian Intelligence Bureau in 2017.
Both Chakravarty and Varadarajan, being prominent figures in political and journalistic circles respectively, are illustrative of the frequently targeted cadre of society by sophisticated cyber surveillance – politicians, journalists, and activists. Such intrusions have been linked to entities equipped with the likes of Pegasus, which is among the most advanced examples of spyware capable of covertly undermining smartphone security to access personal data and communications.
In the wake of these developments, Amnesty International, a renowned London-based rights group, has initiated a digital security helpline to support individuals who have received these alarming alerts. Their move underscores the severity and the global concern over illicit cyber practices potentially abetted by state authorities.
This evolution in Apple’s communication regarding cyber threats underscores the broader challenges faced by the tech industry in balancing transparency, user protection, and geopolitical sensitivities. While Apple’s adjustment in labelling these actions from “state-backed” to “mercenary” hackers distances itself from directly accusing governments, the concerns over state-associated cyber espionage persist.
The unfolding narrative points to a complex relationship between tech giants and government agencies worldwide, as they navigate the murky waters of digital espionage, public trust, and international diplomacy. As users increasingly rely on their digital devices for communication, work, and personal activities, the importance of establishing safeguards against malicious hacking attempts continues to escalate, underscoring the essential role of technology companies in protecting user privacy amidst a labyrinth of political pressures and ethical challenges.
