Ethical Hacking News
In a recent investigation, it has been revealed that NSO Group's Pegasus and NoviSpy spyware were used to target Serbian protesters in zero-click attacks. The attacks used an iMessage zero-click exploit and targeted at least 14 individuals, including civil society activists and opposition figures. The campaign coincided with local elections and stretches toward planned early parliamentary elections in October. The investigation highlights the need for individuals to be vigilant and take steps to protect themselves from such attacks.
NSO Group's Pegasus and NoviSpy spyware were used to target Serbian protesters, raising concerns about cyber espionage and surveillance in the region. A member of Serbia's student protest movement was infected with Pegasus spyware without clicking a link or opening a file. The attack used an iMessage zero-click exploit, later patched by Apple in iOS 18.4.1. The campaign targeted at least 14 individuals, including civil society activists, opposition members, and local councilors. The use of spyware in the run-up to elections is a pattern Serbia has shown before. Individuals need to be vigilant and take steps to protect themselves from such attacks. The use of zero-click attacks is especially dangerous due to their ability to remain hidden while giving the attacker full access to the phone. Everyone should keep all devices updated to prevent zero-click exploits.
The use of NSO Group's Pegasus and NoviSpy spyware to target Serbian protesters has raised concerns about the increasing threat of cyber espionage and surveillance in the region. A recent investigation by the Citizen Lab and the SHARE Foundation has revealed that a member of Serbia's student protest movement was infected with Pegasus spyware without ever clicking a link or opening a file. The attack used an iMessage zero-click exploit, which was later patched by Apple in iOS 18.4.1.
The investigation found that the attack was part of a larger surveillance campaign that targeted at least 14 individuals, including civil society activists, opposition members of parliament, and local councilors. The campaign coincided with local elections held on March 29, 2026, and stretches toward planned early parliamentary elections in October, following months of student-led anti-government and anti-corruption protests.
The use of Pegasus and NoviSpy spyware to target activists and opposition figures specifically in the run-up to elections is not subtle and fits a pattern Serbia has shown before. The country has a history of using commercial spyware, and the use of NoviSpy tools to install spyware on activists' phones has been previously documented by the Citizen Lab.
The investigation highlights the need for individuals to be vigilant and take steps to protect themselves from such attacks. The Citizen Lab's guidance is unambiguous: treat any Apple Threat Notification as a presumed infection and get expert help immediately, rather than waiting to see if anything seems wrong. Individuals can contact the SHARE Foundation directly or reach out to Access Now's Digital Security Helpline for support.
The use of zero-click attacks, which require no action from the victim, is especially dangerous because they can remain hidden while giving the attacker full access to the phone. The investigation concludes that the zero-click exploit used in this attack has been rendered ineffective by a patch from Apple in recent iOS versions, and urges everyone to keep all devices updated.
In conclusion, the use of NSO Group's Pegasus and NoviSpy spyware to target Serbian protesters highlights the increasing threat of cyber espionage and surveillance in the region. It is essential for individuals to be aware of the risks and take steps to protect themselves, while also acknowledging the need for governments and companies to take action to prevent such attacks.
Related Information:
https://www.ethicalhackingnews.com/articles/NSO-Groups-Pegasus-and-NoviSpy-Spyware-Used-to-Target-Serbian-Protesters-in-Zero-Click-Attacks-ehn.shtml
https://securityaffairs.com/198377/intelligence/pegasus-and-novispy-used-against-serbian-protesters.html
Published: Thu Sep 3 18:10:12 2026 by llama3.2 3B Q4_K_M
