Por Renan Filho · 2026-10-19**Lead**
Security researchers have identified a new strain of spyware designed specifically for Apple’s iPhone that can silently extract passwords, private photos, and other sensitive data without the user’s knowledge. The malware, which exploits a chain of zero-day vulnerabilities in iOS, has been observed in targeted attacks against journalists, political activists, and business executives in the United States over the past several weeks. The discovery was made by a team of independent security analysts who declined to be named due to ongoing investigations, but whose findings have been shared with Apple and federal law enforcement.
**Context**
The spyware, which researchers are calling “StealthCapture” for its ability to bypass iOS’s built-in privacy protections, is delivered through a sophisticated phishing campaign. Victims receive a text message or email that appears to come from a trusted contact, containing a link to a seemingly legitimate website. Once the link is tapped, the exploit silently installs a monitoring payload that gains root-level access to the device. From there, the spyware can read iMessage and WhatsApp conversations, capture screenshots, record audio through the microphone, and access the device’s camera. Most critically, it can steal passwords stored in the iCloud Keychain and exfiltrate photos from the user’s library.
This is not the first time iPhone users have faced such threats. In recent years, spyware like Pegasus, developed by the Israeli firm NSO Group, has been used by governments to surveil journalists and dissidents. However, the new malware appears to be the work of a different, less well-funded group, according to researchers. Unlike Pegasus, which often requires physical access or a sophisticated zero-click exploit, StealthCapture relies on user interaction — a single tap on a malicious link. That makes it slightly easier to defend against, but also harder to detect because it does not leave obvious traces in the device’s system logs.
Apple has released a security update in response to the findings, patching the vulnerabilities exploited by the spyware. The company urged all iPhone users to update to the latest version of iOS immediately. In a statement provided to FORTIS NEWS, an Apple spokesperson said the company takes “any report of targeted spyware extremely seriously” and that it is working with law enforcement to track down the perpetrators. The spokesperson did not provide further details about the number of affected devices or the identity of the attackers.
**Analise**
The emergence of this spyware underscores a troubling trend: the democratization of surveillance tools. While state-sponsored spyware has long been a concern for high-profile targets, the new malware appears to be available on the dark web for a relatively modest fee, making it accessible to private investigators, corporate espionage agents, and even cybercriminals. Security experts warn that as the barrier to entry lowers, the number of potential victims expands dramatically. “We are moving from a world where only a few hundred people are at risk of targeted spyware to one where thousands, if not millions, could be affected,” said a researcher familiar with the investigation, speaking on condition of anonymity because they are not authorized to discuss the case publicly.
The impact on personal privacy and national security is significant. Stolen passwords can lead to account takeovers, financial fraud, and identity theft. Exfiltrated photos can be used for blackmail or reputational damage. For journalists and activists, the loss of confidential communications can endanger sources and undermine democratic processes. The fact that the spyware targets iPhones — long considered the most secure consumer smartphones — also raises questions about the effectiveness of Apple’s walled-garden approach. While Apple’s rapid patch is commendable, the company’s reliance on reactive security updates means that users are vulnerable until they install the fix. Many users delay updates, leaving a window of opportunity for attackers.
**Fontes**
This article is based on information from independent security researchers who requested anonymity due to the sensitivity of ongoing investigations, as well as a public statement from Apple issued on October 18, 2026. Additional context was drawn from previous reports on mobile spyware by Citizen Lab and Kaspersky Lab, both of which have documented similar threats in the past. No specific individuals or organizations were named as victims to protect their privacy.