Serbian Journalist’s Phone Hacked: Uncovering State Surveillance and the Rise of NoviSpy Spyware

Serbian Journalist’s Phone Hacked: A Deep Dive into State Surveillance

In a shocking revelation, Serbian journalist Slaviša Milanov found himself at the center of a surveillance scandal following a routine traffic stop in February 2024. After being released from a police station, Milanov noticed his phone behaving strangely—data and Wi-Fi settings were mysteriously disabled, raising suspicions of hacking.

Seeking answers, Milanov reached out to Amnesty International’s Security Lab, which uncovered a disturbing misuse of surveillance technology. The investigation revealed that a commercial forensic tool, widely employed by law enforcement globally, had been exploited to install a previously unknown Android spyware named “NoviSpy” on Milanov’s device. This was achieved through vulnerabilities in Qualcomm technology, all without any legal oversight.

Amnesty’s findings, detailed in a comprehensive report, indicate that Serbian authorities have been using advanced surveillance tactics to monitor and control civil society. “Our investigation reveals how Serbian authorities have deployed surveillance technology as instruments of wider state control,” stated Dinushika Dissanayake, Amnesty International’s Deputy Regional Director for Europe.

The report highlights the role of Cellebrite, an Israeli company known for its mobile forensic products, in facilitating these breaches. Amnesty claims that Cellebrite’s tools were used to bypass security measures on Milanov’s phone, allowing the covert installation of NoviSpy during police interrogations.

NoviSpy, while less powerful than NSO Group’s notorious Pegasus spyware, can still capture sensitive data and remotely activate a phone’s microphone or camera. Amnesty’s investigation also identified similar spyware infections in at least three other cases, suggesting a broader pattern of digital repression in Serbia.

As the implications of these findings unfold, the international community is urged to scrutinize the use of surveillance technology and advocate for the protection of human rights in the digital age.