Serbian police and intelligence services have been accused of deploying advanced surveillance tools and a previously unknown spyware system, NoviSpy, to monitor journalists, environmental campaigners, and civil rights activists. These findings, revealed in a report by Amnesty International, have raised significant concerns about the misuse of digital tools for state control and repression.
Advanced Surveillance Technology in Action
Amnesty International’s report outlines how the Serbian authorities utilised mobile forensic products developed by the Israeli company Cellebrite. These tools, designed for legitimate law enforcement purposes, were allegedly employed to unlock and extract data from citizens’ mobile phones. The unlocked devices were then infected with NoviSpy, an Android spyware capable of capturing sensitive personal data and remotely activating a phone’s microphone or camera.
Dinushika Dissanayake, Amnesty’s deputy regional director for Europe, stated that Serbia’s actions demonstrate the use of “surveillance technology and digital repression tactics as instruments of wider state control and repression directed against civil society.” She highlighted the significant risks posed to activists when such tools are used outside strict legal frameworks.
While NoviSpy is less technically advanced than spyware like Pegasus, its capabilities are still invasive, allowing authorities to gather private data and monitor targeted individuals covertly. Amnesty’s research confirmed instances where Serbian police deployed Cellebrite technology to facilitate NoviSpy infections, including during interrogations.
Documented Cases of Abuse
One case involved investigative journalist Slaviša Milanov, who was detained in February 2024 under the guise of a drink-driving test. Although his phone was switched off, forensic analysis revealed it had been unlocked using Cellebrite’s tools and infected with NoviSpy while in police custody. Milanov noticed his phone had been tampered with after retrieving it from the station.
Similarly, environmental activist Nikola Ristić was targeted, with his device unlocked and infected during a separate incident. Amnesty International’s Security Lab attributed these infections to Serbia’s Security Information Agency (BIA), stating that the use of Cellebrite’s UFED product was crucial for installing NoviSpy.
Amnesty also reported spyware deployments targeting members of Krokodil, an organisation focused on reconciliation in the Western Balkans. Victims described the psychological toll of the surveillance, with one activist stating, “Anything you say could be used against you, which is paralysing at both personal and professional levels.”
Broader Context: Repression Amid Civil Unrest
The revelations come against the backdrop of ongoing protests in Serbia, which began following a tragic train station accident that claimed 15 lives. Demonstrators have expressed frustration over governmental inaction and alleged corruption. President Aleksandar Vučić has dismissed the protests, attributing them to foreign interference aimed at destabilising his government.
Vučić likened his situation to that of ousted leaders in the Middle East, vowing to remain in power. This narrative of external threats has coincided with increased surveillance, raising questions about the government’s broader strategy to maintain control.
International and Corporate Responses
Amnesty International has alerted Google and Android to the presence of NoviSpy. As a result, the spyware was removed from affected devices, and Google issued “government-backed attack” alerts to potential victims. Amnesty’s findings underscore the risks associated with digital surveillance tools and call for stricter regulations to prevent abuse.
Cellebrite has faced criticism for the alleged misuse of its products. In response to Amnesty’s report, the company reiterated its commitment to ensuring the ethical use of its technology. Cellebrite stated that its tools are intended for legally sanctioned investigations and require proper authorisation, such as a warrant. It pledged to investigate the claims and take corrective actions, including terminating relationships with clients found to misuse its products.
However, Amnesty argues that Cellebrite and similar firms must implement more robust due diligence measures to prevent their technology from being used in ways that violate human rights. The organisation emphasised that these tools are often repurposed for unauthorised surveillance and repression, as evidenced in Serbia.
Regional and Global Implications
The Serbian government has not responded to requests for comment, and Amnesty’s findings have added to growing concerns about the global misuse of surveillance technology. The Serbian case is part of a broader pattern of governments using digital tools to suppress dissent, intimidate activists, and monitor journalists.
The situation also echoes controversies surrounding the Pegasus spyware developed by NSO Group. While NSO has not confirmed Serbia as a client, it has faced scrutiny for the alleged misuse of its products in numerous countries. NSO maintains that it adheres to strict licensing agreements and human rights standards, but critics argue that the potential for abuse remains high.
Calls for Greater Oversight
Amnesty’s report concludes with a call for stronger international regulation of surveillance technologies. Without such oversight, the deployment of tools like Cellebrite and NoviSpy risks eroding fundamental freedoms, particularly in states with weak legal safeguards.
The misuse of surveillance tools in Serbia exemplifies a troubling trend: the weaponisation of technology to silence dissent and stifle civil society. Activists, journalists, and international observers continue to urge accountability and transparency to prevent further erosion of democratic norms.
Read also:
Sabotage Sparks Hostilities Between Kosovo and Serbia, Raising Fears of Conflict
