BELGRADE – The Citizen Lab, in collaboration with the SHARE Foundation, has confirmed two new high-profile cases of advanced spyware targeting in Serbia.
The victims include University of Belgrade Rector Vladan Đokić and Senior Prosecutorial Associate Rade Bajić of the Public Prosecutor’s Office for Organized Crime, according to the SHARE Foundation, it was reported by FoNet agency.
The organization warned that deploying spyware against academic and judicial figures raises profound concerns regarding widespread digital surveillance and the erosion of institutional independence in Serbia.
Forensic analysis confirmed that Professor Đokić’s mobile device was compromised earlier this year by NSO Group’s Pegasus spyware via a zero-click exploit, according to a recent statement.
Đokić, a prominent pro-democracy figure, has earned widespread recognition for championing student-led demonstrations and defending university autonomy.
Meanwhile, Rade Bajić, a senior prosecutorial associate who investigated the General Staff’ case implicating high-ranking state officials, received an official Apple security notification in August warning that his device had been targeted with mercenary spyware with a high degree of confidence.
On September 2, 2026, the Share Foundation reported that at least 14 individuals in Serbia—including students, activists, a member of parliament, and a local opposition councilor—had been targeted by advanced spyware earlier in the year.
The Foundation noted that while the widespread deployment of spyware against journalists, activists, and civil society members first came to light in 2024, subsequent attacks expanded significantly throughout 2025 and 2026 to encompass an even broader demographic, including farmers and opposition politicians.
The organization emphasizes that these worrying trends are particularly concerning ahead of the snap parliamentary elections scheduled for October 25, a critical period during which the safeguarding of freedom of expression, political engagement, and personal privacy is paramount.
By definition and operational purpose, spyware functions as malicious software – a program or set of commands designed to manipulate other programs or data within a computer or network – the deployment of which constitutes a criminal offense under the Serbian Criminal Code.
Furthermore, experts highlight that utilizing spyware facilitates unauthorized access to all stored data on a device, intentionally inflicting harm not only on the targeted user but also on any third parties whose personal information resides within that system.
