< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [INTERNATIONAL]

2 clusters · 51 sources · 3 days · First seen · Last updated

Spyware surveillance allegations in Serbia

Overview

Forensic investigations by the SHARE Foundation, Citizen Lab, and Amnesty International have documented a surveillance campaign in Serbia targeting at least 14 individuals, including student activists, civil society members, opposition politicians, and journalists. Technical analysis confirmed the use of NSO Group’s Pegasus spyware via a zero-click iMessage exploit, alongside software similar to the domestic tool NoviSpy. These attacks reportedly occurred around the period of the March 2026 local elections.

Opposition figures, such as MP Radomir Lazović, claim they were targeted while communicating with international officials. In response to these findings, the European Union stated that such illegal access to citizens' data would be ‘unacceptable’ if confirmed. Some European Parliament members have also urged the European Commission to freeze EU funding to Serbia and have called for the cancellation of European Commission President Ursula von der Leyen's planned visit to the country.

Serbian government officials, including President Aleksandar Vučić and Parliament Speaker Ana Brnabić, have categorically denied the allegations, describing them as baseless or ‘trivial sensationalism.’ President Vučić and the Security Intelligence Agency (BIA) have dismissed the claims as ‘stupid and senseless.’ President Vučić further asserted that he himself was monitored during his time as an opposition leader but did not contest it through official channels.

Constitutional Court President Vladan Petrov has also drawn criticism for suggesting that those with nothing to hide should not worry about surveillance, a stance condemned by political groups as a violation of constitutional privacy rights. In the wake of these developments, the Academic Plenum in Vojvodina issued a declaration supporting the Student List and calling for the protection of university autonomy and democratic institutions against political and media pressure.

Entities

SHARE Foundation · NSO Group · Citizen Lab · Aleksandar Vučić · Pegasus

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. 7 days ago

    [POLITICS] 19 sources
    Serbia spyware allegations: Students and opposition targeted by advanced software

    Serbian activists allege at least 14 people have been targeted by advanced spyware like Pegasus. President Vučić denies the claims, while the EU warns that such surveillance would be unacceptable.

  2. 10 days ago

    [INTERNATIONAL] 39 sources
    Serbia spyware scandal: 14 activists and students targeted

    At least 14 Serbian activists, students, and politicians were targeted by Pegasus and NoviSpy spyware, according to forensic reports by Citizen Lab and Amnesty International, amid allegations of state-sponsored

Sources

024info.rs · 24sata.hr · 444.hu · beta.rs · borncity.com · cyberinsider.com · cybernoz.com · dagensps.se · dan.co.me · danas.rs · economx.hu · europeanwesternbalkans.com · europeanwesternbalkans.rs · fr.news.yahoo.com · g7.hu · insajder.net · javanews.al · koreni.rs · kurir.rs · masina.rs · n1info.rs · naslovi.net · nedeljnik.rs · nova.rs · novatv.mk · novi.ba · oslobodjenje.ba · otvoreno.me · portalanalitika.me · prv.mk · rfi.fr · sapo.pt · sd.rs · security.nl · securityaffairs.com · serbiantimes.info · sjevercg.me · snews.rs · srpskadijaspora.info · srpskainfo.com · technadu.com · thecyberexpress.com · thehackernews.com · therecord.media · vecernji.ba · verige.net · vijesti.me · visualcrossing.com

This summary has been updated 4 times: see revision history