Pegasus Spyware Targets Serbian Student Movement Member

The iPhone of a member of Serbia's student protest movement was compromised by NSO Group's Pegasus spyware, according to new findings released by the Citizen Lab in collaboration with the SHARE Foundation. The analysis confirmed that a sophisticated "iMessage zero-click exploit" was employed to infect the device, allowing for the covert installation of the Pegasus spyware. This type of exploit is particularly concerning as it requires no interaction from the target, meaning the user does not need to click a link or open a file for the infection to occur.

Citizen Lab, a research laboratory at the University of Toronto, specializes in investigating digital espionage and has a history of uncovering the use of surveillance technology against civil society. The SHARE Foundation, a Belgrade-based organization focused on digital rights, assisted in the investigation within the Serbian context. Their joint findings provide "high-confidence indicators" of the spyware's presence and the method of its deployment. The specific version of Pegasus used and the exact timing of the infection were not detailed in the initial announcement, but the confirmation of a zero-click exploit highlights the advanced capabilities of the surveillance tool.

Pegasus spyware, developed by the Israeli technology firm NSO Group, is designed to be installed on mobile phones to remotely extract messages, photos, emails, call history, and track the user's location. NSO Group maintains that its products are sold exclusively to vetted government intelligence and law enforcement agencies for the stated purpose of combating terrorism and serious crime. However, numerous reports from organizations like Citizen Lab and Amnesty International have documented the spyware's use against journalists, human rights defenders, political dissidents, and lawyers worldwide, raising significant concerns about its potential for abuse and its impact on freedom of expression and privacy.

The infection of a student activist's phone within the context of ongoing protests in Serbia is particularly noteworthy. Student movements have historically played a significant role in political change and social activism in various countries. The use of advanced surveillance technology against such groups can have a chilling effect on their activities, potentially deterring participation and stifling dissent. This incident underscores the ongoing global debate surrounding the ethics and regulation of spyware technology and its implications for civil liberties in democratic societies. Further details regarding the specific exploit chain and the potential scope of the surveillance are anticipated as the investigation progresses.