ON
← Back to feed
With Israeli spy equipment against opponents of the Vucic regime.
Slovenia🏛️ PoliticsProgressiveOverlooked by conservatives9/3/2026

With Israeli spy equipment against opponents of the Vucic regime.

At least 14 representatives of Serbia's civil society were targeted by cyberattacks, according to their claims, which coincided with local elections and could potentially occur before early parliamentary elections. The victims included members of student movements, activists, opposition MPs, and local councilors, as reported by the Serbian nonprofit organization SHARE Foundation, which focuses on data protection and digital security. The attacks were discovered in August after Apple warned users in 110 countries that they might have been targets of spyware from private companies. According to SHARE, this represents the largest documented wave of such attacks in Serbia to date. Members of the student movement, which has been a driving force behind anti-government protests for nearly two years, stated that the targets were not random but part of their operational teams. Two types of malware were identified on the attacked devices: Pegasus, sold by the Israeli company NSO, and NoviSpy, developed in Serbia. Both allow access to messages, location data, and phone cameras and microphones, effectively turning the devices into surveillance tools. SHARE highlighted that the period of these

Over 14 individuals in Serbia, including students, activists, and members of the opposition, have reportedly been targeted by surveillance software, according to the SHARE Foundation, a non-profit organization focused on data protection and digital security. The incidents were uncovered in August when Apple notified users in 110 countries that they might have been victims of commercial surveillance tools. This marks the largest documented wave of such attacks in Serbia to date. Among the affected were members of a student movement, activists, an opposition parliamentarian, and a local councilor. At least one device was compromised by Pegasus, a surveillance tool developed by the Israeli firm NSO Group, while at least two others were attacked using malware akin to NoviSpy, a domestically developed surveillance application first exposed by Amnesty International in December 2024. Both types of software enable remote access to messages, location data, and even the activation of microphones and cameras on smartphones, effectively transforming the devices into tools of espionage. One of the victims, a student activist, told reporters that her phone was infected in mid-August. She described how the attackers could activate the phone’s microphone and camera without her knowledge, even during private moments. “It’s not normal to do that; it’s not normal that we don’t have the right to privacy,” she said. The timing of the attacks appears to coincide with the March 29 local elections, whichSHARE Foundation noted were viewed as a test of the ability of student-backed opposition groups to organize and challenge the ruling party. The foundation warned that such digital intrusions could signal further attempts to undermine democratic processes ahead of planned parliamentary elections in October. A former director of the Serbian media outlet N1, Igor Božić, confirmed that his phone had been infiltrated by Pegasus in August 2023. He described the experience as deeply unsettling, noting that the software can access emails, messages, photos, documents, and contact lists, revealing personal relationships and potentially compromising the safety of those who trust the individual with sensitive information. “It’s hard to describe the feeling when you realize someone could track practically every move you make,” he said. The software Pegasus is sold exclusively to government entities, according to NSO Group. Despite repeated requests for comment, neither the Serbian government nor NSO Group has responded. A January report from NSO Group stated that it would collaborate with clients to resolve any potential breaches of its policies. In another case, a device linked to a student activist was infected through a “zero-click” attack, meaning the malicious software was installed without requiring any action from the user. This method was used to compromise a smartphone belonging to a student activist whose device had been seized during police interrogation, according to SHARE. The SHARE Foundation has also reported that at least 12 of the affected individuals reached out to them after receiving alerts from Apple. A Canadian cybersecurity firm, Citizen Lab, analyzed one of these cases and found that the device had been infected via a “zero-click exploit” in iMessage, allowing the surveillance software to be deployed remotely. The organization continues to examine the remaining 11 cases, as it works to confirm the extent of the breach and identify the perpetrators. The use of both Pegasus and NoviSpy highlights the sophisticated nature of the surveillance campaigns, with the latter being particularly concerning due to its domestic origin and ease of deployment. The incidents have sparked concern among digital rights advocates, who warn that such practices threaten not only personal privacy but also the integrity of electoral processes. As the country prepares for upcoming elections, the continued use of surveillance technology raises serious questions about the role of state actors and the broader implications for civil liberties.

How this report was made. Objective News wrote this report from 2 source articles, using AI-assisted synthesis under our methodology. It is our own text, not a copy of any single outlet. Read our methodology.

Responsible editor: Matej BašaSpotted an error? Report it

2 reports

N1 Slovenija logoN1 SlovenijaIndependentProgressiveFactual 85Objective 709/3/2026
Big wiretapping scandal in Serbia: spyware on phones of students and journalists

The article reports on a significant surveillance scandal in Serbia involving the use of hacking software on smartphones belonging to students and opposition members. Over a dozen individuals have been targeted by spyware such as Pegasus, developed by the Israeli firm NSO, and another called NoviSpy, which operates on Android devices. The victims include activists, journalists, and students, with some alleging state involvement due to their participation in local election campaigns. The organization SHARE Foundation has documented 14 cases this year, with Apple notifying users of potential threats. Canadian firm Citizen Lab confirmed that Pegasus was installed via a 'zero-click' exploit in iMessage, bypassing user interaction. One student, Ognjen Rašić, suspects Serbian authorities were behind his targeting due to his role in a pro-independence campaign. Another case involved a police detainee whose phone was infected while being held during pre-election detention.

Bias read (Progressive): The article frames the surveillance as a politically motivated attack against dissenters, particularly those involved in opposition movements and local elections. It highlights the involvement of state actors and connects the surveillance to political activism, suggesting a broader pattern of state-

Why factuality (85): This article provides more detailed information, including references to Financial Times and Citizen Lab, which add external validation. It specifies the type of attack (zero-click exploit) and includes a quote from a victim, enhancing credibility. The mention of Apple's security updates and ongoing

Why objectivity (70): While more balanced than the first article, it still frames the issue in terms of political implications, particularly highlighting the impact on students and journalists. The language suggests a critical stance toward the use of surveillance technology, though it remains somewhat aligned with the b

Reporter logoReporterIndependentProgressiveFactual 75Objective 659/3/2026
With Israeli spy equipment against opponents of the Vucic regime.

At least 14 representatives of Serbia's civil society were targeted by cyberattacks, according to their claims, which coincided with local elections and could potentially occur before early parliamentary elections. The victims included members of student movements, activists, opposition MPs, and local councilors, as reported by the Serbian nonprofit organization SHARE Foundation, which focuses on data protection and digital security. The attacks were discovered in August after Apple warned users in 110 countries that they might have been targets of spyware from private companies. According to SHARE, this represents the largest documented wave of such attacks in Serbia to date. Members of the student movement, which has been a driving force behind anti-government protests for nearly two years, stated that the targets were not random but part of their operational teams. Two types of malware were identified on the attacked devices: Pegasus, sold by the Israeli company NSO, and NoviSpy, developed in Serbia. Both allow access to messages, location data, and phone cameras and microphones, effectively turning the devices into surveillance tools. SHARE highlighted that the period of these

Bias read (Progressive): The article highlights cyberattacks targeting civil society figures and opposition groups in Serbia, suggesting state involvement or complicity. It frames the attacks as politically motivated, undermining privacy, freedom of expression, and electoral integrity. The narrative emphasizes the potential

Why factuality (75): The article reports on a significant number of targeted attacks using surveillance software in Serbia, aligning with the cross-source consensus. It mentions specific groups affected, such as student activists and opposition members, and identifies the types of malware used (Pegasus and NoviSpy). How

Why objectivity (65): The tone leans towards concern and urgency, emphasizing the threat posed by surveillance technology. While factual, the language carries an implicit bias against the ruling regime, suggesting political implications rather than presenting a neutral analysis of the technical and legal aspects.

How each side covered it

The same event, grouped by the political lean of the outlets covering it.

How each side covered it

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Covered around the world

The same event as reported in other countries.

Covered around the world

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Claims check

Key factual claims, and how many sources assert vs dispute each.

Claims check

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Keep the news honest.

ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.

Become a Supporter

Related stories