Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [QUIET] · [INTERNATIONAL]

4 clusters · 54 sources · 26 days · First seen about 2 months ago · Last updated 29 days ago

Spyware surveillance allegations in Serbia

Overview

Forensic investigations by the SHARE Foundation, Citizen Lab, and Amnesty International have documented a surveillance campaign in Serbia targeting at least 14 individuals, including student activists, civil society members, opposition politicians, and journalists. Technical analysis confirmed the use of NSO Group’s Pegasus spyware via a zero-click iMessage exploit, alongside software similar to the domestic tool NoviSpy. These attacks reportedly occurred around the period of the March 2026 local elections.

Citizen Lab at the University of Toronto has since confirmed that the phone of a student movement participant was infected with Pegasus spyware. At least 14 individuals from the student movement, civil society, and the political opposition received warnings from Apple that they were likely targets of this mercenary spyware.

Opposition figures, such as MP Radomir Lazović, claim they were targeted while communicating with international officials. In response to these findings, the European Union stated that such illegal access to citizens' data would be ‘unacceptable’ if confirmed. Some European Parliament members have also urged the European Commission to freeze EU funding to Serbia and have called for the cancellation of European Commission President Ursula von der Leyen's planned visit to the country.

Serbian government officials, including President Aleksandar Vučić and Parliament Speaker Ana Brnabić, have categorically denied the allegations, describing them as baseless or ‘trivial sensationalism.’ President Vučić and the Security Intelligence Agency (BIA) have dismissed the claims as ‘stupid and senseless.’

Council of Europe Human Rights Commissioner Michael O’Flaherty and UN Special Rapporteur Gina Romero have warned of a “sharp decline” in human rights protections in Serbia, noting that reports of spyware use represent significant threats to privacy and security.

Entities

Citizen Lab · Pegasus · SHARE Foundation · NSO Group · Serbia

Claims

What the coverage asserts, and how many sources carry each claim.

[● 5 SOURCES] At least 14 people in Serbia have been targeted with advanced spyware since the beginning of 2026.
[● 4 SOURCES] Citizen Lab confirmed that at least one phone was infected by Pegasus spyware.
[● 4 SOURCES] President Aleksandar Vučić denied the allegations, calling them 'stupid and senseless' and lacking evidence.
[● 4 SOURCES] The surveillance allegedly coincided with the local elections held on March 29, 2026.
[● 3 SOURCES] The Academic Plenum in Vojvodina issued a declaration supporting students and the Student List.
[● 2 SOURCES] MP Radomir Lazović stated he was subject to wiretapping during local elections and contacts with EU officials.
[● 2 SOURCES] The European Commission stated that illegal surveillance of citizens and political opponents would be unacceptable if confirmed.
[● 2 SOURCES] Constitutional Court President Vladan Petrov remarked, 'if you have nothing to hide, why worry' regarding the surveillance.
[○ 1 SOURCE] Forensic analysis confirmed two additional infections using a new version of NoviSpy.

Timeline

29 days ago

[INTERNATIONAL] 3 sources
Citizen Lab confirms Pegasus spyware targeting in Serbia
Citizen Lab confirmed that Pegasus spyware infected the phone of a Serbian student activist, with at least 14 opposition and civil society members targeted.
about 1 month ago

[INTERNATIONAL] 2 sources
Human rights officials warn of sharp decline in Serbia
Human rights officials have warned of a “sharp decline” in Serbia, citing press harassment, police impunity, and the use of spyware against activists and journalists.
about 2 months ago

[POLITICS] 19 sources
Serbia spyware allegations: Students and opposition targeted by advanced software
Serbian activists allege at least 14 people have been targeted by advanced spyware like Pegasus. President Vučić denies the claims, while the EU warns that such surveillance would be unacceptable.
about 2 months ago

[INTERNATIONAL] 39 sources
Serbia spyware scandal: 14 activists and students targeted
At least 14 Serbian activists, students, and politicians were targeted by Pegasus and NoviSpy spyware, according to forensic reports by Citizen Lab and Amnesty International, amid allegations of state-sponsored

Sources

024info.rs · 24sata.hr · 444.hu · ana.rs · beta.rs · borncity.com · cyberinsider.com · cybernoz.com · dagensps.se · dan.co.me · danas.rs · economx.hu · europeanwesternbalkans.com · europeanwesternbalkans.rs · fr.news.yahoo.com · g7.hu · insajder.net · javanews.al · koreni.rs · kurir.rs · masina.rs · n1info.rs · naslovi.net · nedeljnik.rs · nova.rs · novatv.mk · novi.ba · oslobodjenje.ba · otvoreno.me · portalanalitika.me · prv.mk · radar.nova.rs · rfi.fr · sapo.pt · sd.rs · security.nl · securityaffairs.com · serbiantimes.info · sjevercg.me · snews.rs · srpskadijaspora.info · srpskainfo.com · technadu.com · thecyberexpress.com · thehackernews.com · therecord.media · tockanai.hr · vecernji.ba

This summary has been updated 6 times: see revision history