Serbians targeted with spyware in country’s ‘largest documented wave of surveillance’
Source Entity
Aisha Down Global technology reporter
At least 14 Serbian civil society members were targeted by advanced spyware, including NSO Group’s Pegasus, in the country's largest documented surveillance wave. Discovered via Apple notifications, the attacks specifically targeted activists and student movements critical of the government.
The Escalation of Digital Surveillance in Serbia
In a significant development for digital rights in the Balkans, at least 14 individuals affiliated with Serbian civil society were targeted by sophisticated, mercenary-grade spyware earlier this year. This event, identified by the Share Foundation as the largest documented wave of such surveillance in the nation’s history, signals a concerning trend in the erosion of digital privacy and the targeting of political dissent through technical means.
The Mechanism of Discovery
The discovery of these infections did not stem from local security agencies, but rather from global threat notifications. Following Apple's notification to users in 110 countries regarding potential state-sponsored or mercenary spyware attacks, local investigators were able to trace the digital footprints of these intrusions. This reliance on global tech giants to act as the first line of defense underscores the asymmetry between well-funded digital espionage tools and the civil society actors they monitor.
Forensic Confirmation of Pegasus
The Citizen Lab, a globally recognized authority on digital forensic analysis, confirmed that at least one of the identified Serbian targets was infected with NSO Group’s Pegasus software. Pegasus is notorious for granting an attacker total, unrestricted access to a mobile device, including real-time communication interception, camera and microphone access, and the extraction of sensitive personal data. The deployment of such a powerful tool suggests a high-level operational capability, far exceeding the scope of traditional digital monitoring.
Targeting Civil Society and Dissent
The victims of this surveillance wave were not random targets; they were specifically drawn from the ranks of Serbian civil society. Among those identified are members of a prominent student movement that has frequently acted as a vocal critic of the government of President Aleksandar Vučić. By targeting those who organize and mobilize the public, the attackers aim to preemptively neutralize dissent and gain intelligence on the strategies of opposition groups.
Broader Implications for Democracy
The use of mercenary spyware against domestic activists represents a severe threat to democratic processes. When civil society organizations fear their communications are being monitored by state-aligned actors, it creates a 'chilling effect' that discourages free speech, legitimate protest, and political organization. This incident places Serbia in a growing list of nations where advanced digital tools are being weaponized to maintain political control at the expense of human rights.
Future Trends and Conclusion
Looking forward, the proliferation of private, mercenary spyware firms presents an ongoing challenge for international human rights law and digital privacy regulations. As these tools become more accessible to various actors, the burden on civil society to implement advanced cybersecurity hygiene will increase. The events in Serbia serve as a grim reminder that digital surveillance is no longer a theoretical threat but a tangible tool of political suppression that requires urgent, coordinated international oversight to mitigate.