Appleās threat notifications mark the first documented deployment of million-dollar mercenary spyware against Iranian targets, leaving investigators without clear attribution.