As hundreds of iPhone and Android users received a threat notification in December, warning them that their devices had been targeted by spyware, the question on everyone's mind is: how can you protect your smartphone from such a sophisticated threat? Being targeted by spyware may seem rare, but experts say it's essential to stay vigilant as this dangerous malware continues to proliferate worldwide.
The attack cannot be mitigated via the usual routes. If the malware has infected your smartphone, adversaries can "read messages, observe keystrokes, take screenshots, monitor notifications, and access banking apps," according to Pieter Arntz, a senior malware researcher at security firm Malwarebytes. With full system access, spyware can exfiltrate data such as emails and texts, send messages, steal credentials, and log in to cloud systems.
The most reliable way to mitigate spyware is to prevent your device being taken over in the first place. For iPhone users, Apple offers Lockdown Mode, which includes a higher level of security with reduced functionality that has improved over time as the feature has been updated. To enable Lockdown Mode on your iPhone, go to Settings > Privacy & Security > Lockdown Mode and tap Turn On Lockdown Mode.
On Android devices, Google offers Advanced Protection, which has been enhanced in Android 16 with intrusion logging, USB protection, and the option to disable auto-reconnect to insecure networks. It can be enabled via your Settings > Security & Privacy > Other Settings > Advanced Protection.
In addition to using anti-spyware features, all users should be mindful of clicking links from strangers, exercising strict control over what gets installed on their device, avoiding side-loading on Android, and ensuring their mobile operating system and apps are fully updated. Turning your smartphone off and on again can temporarily disrupt spyware, but if the malware does get on your device, the best course of action is to ditch it altogether.
Experts say that spyware can be temporarily disrupted by turning your smartphone off and on again. However, if the malware does get on your device, the best course of action is to ditch it altogether. Above all, operate with a healthy skepticism, assuming compromise is possible but avoiding paranoia that shuts down normal use.
The attack cannot be mitigated via the usual routes. If the malware has infected your smartphone, adversaries can "read messages, observe keystrokes, take screenshots, monitor notifications, and access banking apps," according to Pieter Arntz, a senior malware researcher at security firm Malwarebytes. With full system access, spyware can exfiltrate data such as emails and texts, send messages, steal credentials, and log in to cloud systems.
The most reliable way to mitigate spyware is to prevent your device being taken over in the first place. For iPhone users, Apple offers Lockdown Mode, which includes a higher level of security with reduced functionality that has improved over time as the feature has been updated. To enable Lockdown Mode on your iPhone, go to Settings > Privacy & Security > Lockdown Mode and tap Turn On Lockdown Mode.
On Android devices, Google offers Advanced Protection, which has been enhanced in Android 16 with intrusion logging, USB protection, and the option to disable auto-reconnect to insecure networks. It can be enabled via your Settings > Security & Privacy > Other Settings > Advanced Protection.
In addition to using anti-spyware features, all users should be mindful of clicking links from strangers, exercising strict control over what gets installed on their device, avoiding side-loading on Android, and ensuring their mobile operating system and apps are fully updated. Turning your smartphone off and on again can temporarily disrupt spyware, but if the malware does get on your device, the best course of action is to ditch it altogether.
Experts say that spyware can be temporarily disrupted by turning your smartphone off and on again. However, if the malware does get on your device, the best course of action is to ditch it altogether. Above all, operate with a healthy skepticism, assuming compromise is possible but avoiding paranoia that shuts down normal use.