Apple Responds To Alleged Hacking Warnings Amid Opposition's Claims Of Indian Govt.'s Cyber Snooping

In the midst of a political storm, tech giant Apple has issued a statement on Tuesday, 31st October, regarding alleged hacking warnings that have stirred controversy in India. "Apple does not attribute the threat notifications to any specific state-sponsored attacker", said the tech giant in their statement.

Several opposition Members of Parliament (MPs), including Congress's Shashi Tharoor, TMC's Mahua Moitra, and AAP's Raghav Chadha, have shared screenshots of messages from Apple warning them of potential "state-sponsored attackers" attempting to compromise their iPhones.

Opposition's Snooping Claims

The issue gained momentum as multiple political leaders received these warnings on their iPhones, sparking concerns about privacy and state-sponsored cyberattacks. Among the leaders who reported receiving these warnings are Rahul Gandhi, Priyanka Chaturvedi, Pawan Khera, KC Venugopal, Supriya Shinatre, Akhilesh Yadav, and Asaduddin Owaisi.

The warning notification read, "Apple believes you are being targeted by state-sponsored attackers who are trying to remotely compromise the iPhone associated with your Apple ID."

The message further read, "These attackers are likely targeting you individually because of who you are or what you do. If your device is compromised by a state-sponsored attacker, they may be able to remotely access your sensitive data, communications, or even the camera and microphone. While it's possible this is a false alarm, please take this warning seriously".

This development led to heightened speculation and allegations of government involvement in cyber-espionage activities.

During a press conference, Congress leader Rahul Gandhi displayed a copy of the warning email received by several opposition leaders from Apple. The message alerted them to potential "state-sponsored attackers" attempting to compromise their phones. Gandhi used this revelation to accuse the government of engaging in "distraction politics" concerning matters related to Adani.

Apple's Response: No Specific Attribution

In response to the controversy, Apple issued a statement clarifying its stance. The tech company stated that it does not attribute the threat notifications to any specific state-sponsored attacker. They highlighted the sophisticated and well-funded nature of state-sponsored attackers and the continuous evolution of their attack methods.

"State-sponsored attackers are very well-funded and sophisticated, and their attacks evolve over time. Detecting such attacks relies on threat intelligence signals that are often imperfect and incomplete. It's possible that some Apple threat notifications may be false alarms, or that some attacks are not detected" reads the statement from Apple.

Apple shed light on the challenges in detecting state-sponsored attacks, emphasizing that their detection relies on threat intelligence signals that can often be imperfect and incomplete. The statement also emphasized that, in some instances, the threat notifications might be false alarms, while some attacks might not be detected.

It stated, " We are unable to provide information about what causes us to issue threat notifications, as that may help state-sponsored attackers adapt their behavior to evade detection in the future" as quoted by ANI.

Government's Response: Shift the Responsibility to Apple

The ruling Bharatiya Janata Party (BJP) dismissed the opposition's claims of snooping, and former Union IT Minister Ravi Shankar Prasad suggested that opposition leaders should take the matter up directly with Apple and file FIRs if they have concerns.

"It is for Apple to clarify. They should file an FIR if they have any problem. Who is stopping them?", said the union minister.

Prasad cited his experience to highlight that no telephone company initiates such warnings without first consulting CERT-In, an emergency response team.

The BJP's IT Cell Chief, Amit Malviya, also took to social media to assert that the allegations would likely lead to a "damp squib."

Malviya wrote on his social media handle X (formerly twitter), "Usual suspects raising a storm over 'state-sponsored' attack and pretending to be martyrs is all good. But this hullabaloo, in all probability, like in the past, will end up as damp squib! Why not wait for Apple to clarify? Or is it too much to let go an opportunity to outrage?"

Broader Global Impact

Notably, this issue extended beyond Indian borders, with several political leaders in Uganda reportedly receiving similar warnings on their phones. According to a report in News18, the threat notifications have reportedly been received in approximately 150 countries, highlighting the global nature of concerns surrounding state-sponsored cyberattacks.