Spyware Targeted Serbian Activists Ahead of Local Elections

The Share Foundation reported that spyware targeted at least 14 Serbian student activists and politicians in early 2026. The intrusions occurred before local elections in March and specifically targeted organizers of anti-corruption protests against President Aleksandar Vucic. Findings were independently confirmed by Citizen Lab and Amnesty International’s Security Lab, with at least one instance identifying the use of Pegasus spyware developed by the NSO Group.

Targeted individuals, including student Anja Despotovic, received notifications from Apple Inc. informing them that their iPhones had been compromised. Share Foundation policy adviser Andrijana Ristic stated the Serbian government was likely responsible for the surveillance, though the government has not responded to requests for comment.

These events occur amid heightened political tension and grassroots campaigning following a deadly train station collapse in November 2024. The situation leads toward snap parliamentary elections scheduled for October.