Students and opposition activists targeted with spyware in Serbia

Live updates

1. 7d ago

   Forensic Experts Confirm Digital Attacks on Serbian Opposition

   Civil rights organization forensic experts have confirmed the deployment of Pegasus and NoviSpy against political figures and activists in Serbia. The digital targeting compounds existing political tensions and places external pressure on the European Union to respond to the surveillance operations. Investigations previously showed that at least 14 Serbian students, opposition activists, and political figures faced advanced spyware intrusions since the start of the year, with some infections occurring while victims were held in police detention.

   Why it matters

   The targeted surveillance coincides with heightened political friction and electoral activity across the country. Civil rights groups are pressing international bodies to address the digital targeting of domestic political figures and student movements.

   What is confirmed

   • Forensic experts from civil rights organizations confirm the use of Pegasus and NoviSpy against Serbian activists and politicians.

   What to watch next

   • Further official responses from European Union institutions regarding the spyware campaign
   • Additional technical disclosures from civil rights organizations regarding the scope of infections
   Sources used for this update (7)

   1. jen.jiji.com — US Open, today Cobolli-Blockx - Live
   2. www.heise.de — Spyware ahead of elections: Digital attack on Serbia’s opposition
   3. jen.jiji.com — 4 Renoir paintings stolen from the Museum in Cagnes-sur-Mer: they are worth 9 million euros, hunt for the thieves
   4. jen.jiji.com — Pensions, Fornero: "Giorgetti contradicts himself, the League's proposal also creates unequal treatment"
   5. jen.jiji.com — Netanyahu sues Haaretz for defamation: "Lies, no phone call with Mbz"
   6. jen.jiji.com — Tumors: early breast cancer, over 30,000 genomic tests prescribed in Italy in 5 years (2)
   7. www.bgnes.com — Vucic dissolves parliament, Serbia to hold snap elections on October 25
   confidence 90%
2. 11d ago

   Serbian Students and Opposition Figures Targeted by Pegasus and NoviSpy

   At least 14 Serbian students, opposition activists, and political figures were targeted with advanced spyware since the start of the year, according to an investigation by the Share Foundation. The operation utilized Pegasus and a new NoviSpy variant, with some infections occurring during police detention. Victims include members of the student movement, a parliamentary deputy, and a local city councilor. The Share Foundation describes this as the largest documented wave of surveillance in the country, noting the timing aligned with local elections held on March 29.

   Why it matters

   Mercenary spyware allows government agencies total access to devices, including messages, photos, and remote activation of cameras or microphones. This campaign targets pro-democracy activists and protest organizers during a period of political tension. The use of zero-click exploits means devices can be infected without user interaction.

   What is confirmed

   • At least 14 people in Serbia were targeted with advanced spyware since the beginning of the year.
   • The surveillance campaign utilized Pegasus and a new variant of NoviSpy.
   • Targets include members of the student movement, a parliamentary deputy, and a local city councilor.
   • The Share Foundation describes this as the largest wave of surveillance documented so far in Serbia.
   • The timing of the infections coincided with local elections on March 29.
   • Pegasus zero-click exploits were used to infect the iPhones of student activists.

   Still unconfirmed

   • Some spyware infections occurred while targets were in police detention.
   • Members of the Faculty of Law at the University of Niš were targeted.
   • Members of the European Parliament are demanding the freezing of EU funds for Serbia and the cancellation of Ursula von der Leyen's visit to Belgrade.

   What to watch next

   • Official response from the Serbian government regarding the BIA and MUP
   • Results of any independent investigations into the surveillance claims
   • EU decisions regarding financial aid or diplomatic visits to Belgrade
   Sources used for this update (16)

   1. Financial Times — Students and opposition activists targeted with spyware in Serbia
   2. cyberscoop.com — Pegasus, NoviSpy variant spyware found on devices of Serbian activists
   3. TradingView — More than a dozen Serbians targeted with mercenary spyware, digital rights group finds
   4. Daily Maverick — More than a dozen Serbians targeted with mercenary spyware, digital rights group says
   5. Bloomberg.com — Spyware Targeted Serbian Protest Organizers’ Phones, Report Says
   6. euractiv.com — Serbian activists allege being hit with hi-tech spyware
   7. TVP World — Serbia rocked by spyware attacks on activists and opposition
   8. thehackernews.com — Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
   9. Infosecurity Magazine — Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone
   10. The Citizen Lab — Pegasus Spyware Infection of Serbian Pro-Democracy Student Activist
   11. The Guardian — Serbians targeted with spyware in country’s ‘largest documented wave of surveillance’
   12. www.theguardian.com — Russian drone strikes Ukraine’s security services HQ, says Zelenskyy – Europe live
   confidence 90%