Serbian police and intelligence services have been reported to use advanced phone spyware in conjunction with mobile forensic tools to conduct unlawful surveillance on journalists, environmental activists, and other civil society members.
This alarming information comes from a recent Amnesty International report titled “A Digital Prison: Surveillance and the Suppression of Civil Society in Serbia.”
The report details how Serbian authorities deployed a custom Android spyware system, NoviSpy, alongside Cellebrite forensic tools.
These technologies have been used to covertly infect devices and extract data from mobile phones belonging to journalists and activists.
The Security Information Agency (Bezbedonosno-information Agencija – BIA) and Serbian police have reportedly employed these tactics during detentions and police interviews.
2024 MITRE ATT&CK Evaluation Results Released for SMEs & MSPs -> Download Free Guide
Cellebrite, an Israeli company known for its digital forensic products, has developed a suite of products that enable data extraction from a wide array of mobile devices, even without a passcode.
This technology has been misused to unlock devices and install NoviSpy during police custody.
Although NoviSpy is less advanced than other commercial spyware like Pegasus, it offers extensive surveillance capabilities, such as remote access to a phone’s microphone and camera.
Amnesty International’s investigation found forensic evidence showing that Serbian authorities used Cellebrite tools to bypass Android security measures.
These tools enabled the installation of NoviSpy on activists’ phones, exploiting vulnerabilities, including a zero-day flaw in Android devices with Qualcomm chipsets. Google’s security teams have since patched this vulnerability.
Impact on Journalists and Civil Society
The report highlighted cases like that of Slaviša Milanov, an independent investigative journalist whose phone was unlawfully accessed while he was detained.
Forensic analysis revealed that his phone was unlocked using Cellebrite’s tools, and NoviSpy was subsequently installed. Similar tactics were used against environmental activist Nikola Ristić during an interview with BIA officials.
These covert operations have left many Serbian activists and journalists feeling violated and paranoid. The pervasive surveillance has led to widespread self-censorship and a chilling effect on free speech.
Activists describe this as living in a “digital prison,” leading to significant anxiety and isolation.
Amnesty International urges the Serbian government to cease these invasive practices and provide remedies to those targeted by unlawful surveillance.
They also call on Cellebrite and similar companies to ensure their technologies are not used to violate human rights. Despite repeated requests for comment, the Serbian government has yet to respond to the report’s findings.
This revelation underscores the growing concern about digital surveillance tools being used worldwide to suppress civil liberties and intimidate those who advocate for human rights and freedom of speech.
Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free