Pegasus And NoviSpy Spyware Found On 14 Serbian Opposition Phones
SHARE Foundation traced the infections to a zero-click iMessage exploit and to NoviSpy, whose earlier version was traced to Serbia's BIA.
- SHARE Foundation counted at least 14 victims: students, activists, one MP and one local councilor.
- Apple sent threat notifications to 11 devices in August 2026, months after infections began.
- Citizen Lab and Amnesty International say police used Cellebrite tools to plant spyware on seized phones.
Why it matters: An intelligence service whose spyware infects its own opposition guards not the state but its own power.