德国联邦议会议员iPhone遭间谍软件瞄准：网络安全局称收到苹果警告应假定设备已被攻破
德国联邦信息安全局（BSI）近日警告说，多名德国联邦议会议员和其他知名人士自10月29日以来陆续在自己的 iPhone 上收到苹果公司发出的威胁通知，提示其设备遭到所谓「雇佣间谍软件」的攻击。BSI 在10月30日致联邦议会议员的信中通报了这一情况，并在11月的说明中表示，目前无法判断这些通知意味着设备已被成功入侵，还是仅为攻击尝试，收到通知的人应假定自己的设备可能已被攻破。
德国数字部长 Karsten Wildberger 11月1日晚在德国公共广播联盟（ARD）的节目中证实，联邦议会议员和联邦政府成员都收到了苹果的间谍软件警告。政府发言人 Stefan Kornelius 表示，德国政府「非常严肃地」对待这一事件与苹果的警告，但他没有透露哪些政府成员收到了通知，也没有说明总理 Friedrich Merz 是否在其中。据《明镜》周刊报道，收到警告的人中包括近期陪同 Merz 出访新加坡、日本和韩国的代表团成员。
BSI 说，这类雇佣间谍软件由商业公司开发，过去常被国家行为体用于针对特定个人；它可以通过「零点击」方式感染设备——例如通过一条特制信息，在机主无需打开或点击任何内容的情况下完成入侵。一旦设备被攻破，攻击者可以读取包括加密通讯应用在内的消息，并访问通话、联系人、日历和位置信息。
苹果公司不指认攻击来自哪个政府，也不确认设备是否真的已被入侵。苹果最新一轮威胁通知发给了99个国家的用户。BSI 提醒，真正的苹果警告绝不会要求用户点击链接、打开文件、安装应用或描述文件，也不会索要密码和验证码；收到通知的人可以联系 BSI 服务中心报告情况。
German Lawmakers' iPhones Targeted by Spyware: Cybersecurity Agency Tells Recipients of Apple Alerts to Assume Their Devices Are Compromised
Germany's Federal Office for Information Security (BSI) has warned that several members of the Bundestag and other public figures have, since October 29, received threat notifications from Apple on their iPhones warning of attacks using so-called mercenary spyware. In an October 30 letter to Bundestag members and a November advisory, the BSI said it cannot determine whether the notifications indicate successful compromises or only attempted attacks, and that anyone who received one should assume their device may have been compromised.
Digital Minister Karsten Wildberger confirmed on the evening of November 1, on public broadcaster ARD, that members of the Bundestag and of the federal government had received Apple's spyware warnings. Government spokesperson Stefan Kornelius said the German government was taking the incident and Apple's warning "very seriously," but he did not say which government members had received alerts or whether Chancellor Friedrich Merz was among them. Der Spiegel reported that those warned included members of the delegation that recently accompanied Merz on visits to Singapore, Japan and South Korea.
The BSI said mercenary spyware is commercially developed and has frequently been used by state actors against specific, targeted individuals. It can infect a device through so-called zero-click attacks, for example via a specially crafted message that requires no action by the recipient. Once a phone is compromised, attackers can read messages, including in encrypted apps, and access calls, contacts, calendars and location data.
Apple does not attribute the attacks to any government or confirm whether a device was actually infected. Its latest round of threat notifications went to users in 99 countries. The BSI noted that a genuine Apple warning never asks recipients to click links, open files, install apps or profiles, or share passwords and verification codes, and said recipients can report their case to the BSI Service Center.
来源：德国联邦信息安全局
发布：GSM·美国（发布链接）
图片来源：图：德国柏林的联邦议会大厦（国会大厦，资料图）。照片 CC BY-SA 4.0，作者 Daniel Schwen，经 Wikimedia Commons。 / Photo: The Reichstag building in Berlin, seat of the German Bundestag (file photo). CC BY-SA 4.0, by Daniel Schwen, via Wikimedia Commons.
GSM Global · 本篇英文版 English edition of this story
