Skip to main content

An iPhone just blocked one of the worst spyware attacks on the planet

Apple released an “extreme safety” measure bundled with iOS 16 last summer, and it’s targeted at sophisticated spyware that is usually deployed covertly against government agencies. It appears that Apple’s safety tool is effective, to a certain extent, against Pegasus — one of the most devastating surveillance attacks ever documented. 

Citizen Lab, the security group based at the University of Toronto’s Munk School of Global Affairs & Public Policy, has detailed a pair of zero-click exploits that targeted iOS 15 and iOS 16 devices last year. Labeled PWNYOURHOME and FINDMYPWN, these exploits were widely used by Pegasus-maker NSO Group against targets in Mexico and elsewhere.

Lockdown Mode information page on an iPhone 14 Pro.
Joe Maring/Digital Trends

The security lab notes that on iPhones with Lockdown Mode enabled, the target got real-time notifications if the Pegasus spyware tried to exploit the PWNYOURHOME vulnerability. NSO Group may have eventually devised a workaround against the alert system, but in general, there is no evidence that the aforementioned security flaw was abused on any device with Lockdown mode enabled.  

Recommended Videos

“Given that we have seen no indications that NSO has stopped deploying PWNYOURHOME, this suggests that NSO may have figured out a way to correct the notification issue, such as by fingerprinting Lockdown Mode,” Citizen Lab writes in its exhaustive report.

The security lab suggests that all at-risk users should enable Lockdown Mode to ensure that they don’t become the next targets of Pegasus-fueled illicit surveillance — or any such spyware that is virtually impossible to detect in the wild.

Example of an iPhone with Lockdown Mode blocking attacks from Pegasus spyware.
Example of Lockdown Mode blocking a Pegasus attack Citizen Lab

Apple says Lockdown Mode is aimed at “very few individuals who, because of who they are or what they do, might be personally targeted by some of the most sophisticated digital threats.” As such, it trades security with your average smartphone functionalities. For example, it disables certain messages, blocks access to a bunch of websites, and blocks FaceTime calls from unknown contacts, among other connectivity restrictions. 

But as they say, you can never be too sure about your security. As far as Pegasus goes, it has been deployed against journalists, activists, high-ranking officials, and political figures all across the globe. And it’s the zero-click nature of this surveillance agent and how it covertly mines almost every kind of sensitive information — from calls logs and emails to storage content — that makes it a favorite of bad actors seated in positions of state power.

With proof that Lockdown Mode is effective at stopping the spyware, anyone even remotely concerned about being targeted by Pegasus (or similar attacks) should seriously consider enabling Lockdown Mode on their iPhone ASAP.

Nadeem Sarwar
Nadeem is a tech journalist who started reading about cool smartphone tech out of curiosity and soon started writing…
I was wrong about the iPhone 16
An iPhone 16 laying on a shelf with its screen on.

The iPhone 16 is a little over a month old, and I've been using it almost nonstop since it was announced last month. I reviewed the phone for Digital Trends and bought one with my own money as my personal phone of choice.

Not long after its unveiling, I wrote an op-ed complaining about the iPhone 16's lack of a 120Hz display. I said it was the "one thing holding back the iPhone 16" and that its 60Hz screen was "an unreasonable spec." I'd still like to see the refresh rate addressed with the iPhone 17, but after living with the iPhone 16 for over a month now, I've found that it's not nearly as big of an issue as I believed it would be.
A 60Hz screen matters, until it doesn't

Read more
This iPhone 16 Pro accessory proves less is more
WaterField Designs CitySlicker Pouch for iPhone in white leather.

Now that we’re approaching the end of the year, hot tech summer and flagship phone season are winding down, too. That means I’ve been looking for fun little accessories to help me carry around all my phones and gadgets.

One of my trusted brands for tech accessories is Waterfield Designs. I’ve been using its bags and other accessories for the past decade, and they’re some of the finest bags I own. They’re built to last, as my first messenger bag is still looking fantastic.

Read more
Android 16 might give its own spin to iPhone’s Dynamic Island alerts
The DynamicSpot Dynamic Island at the top of the Pixel 7 Pro.

Over the past few weeks, we’ve come across some interesting details about the next major build of Android. Currently in development under the apparent codename of Baklava, Android 16 will reportedly bring a cool new feature called Priority modes for notifications.

If that sounds familiar, that’s because Apple already offers a bunch of focus modes toward the same goal and bolsters the system with AI-assisted priority notifications in iOS 18. It seems Google doesn’t want to be left behind, and in doing so, could very well lift from a popular iPhone trick.

Read more