New Android Spyware ‘NoviSpy’ Takes Advantage of Qualcomm Zero-Day Vulnerabilities

Published:

Cyber Warriors Conclave — nine editions, one cyber safe nation

Serbian Journalist’s Phone Hacked: Uncovering State Surveillance and the Rise of NoviSpy Spyware

Serbian Journalist’s Phone Hacked: A Deep Dive into State Surveillance

In a shocking revelation, Serbian journalist Slaviša Milanov found himself at the center of a surveillance scandal following a routine traffic stop in February 2024. After being released from a police station, Milanov noticed his phone behaving strangely—data and Wi-Fi settings were mysteriously disabled, raising suspicions of hacking.

Seeking answers, Milanov reached out to Amnesty International’s Security Lab, which uncovered a disturbing misuse of surveillance technology. The investigation revealed that a commercial forensic tool, widely employed by law enforcement globally, had been exploited to install a previously unknown Android spyware named “NoviSpy” on Milanov’s device. This was achieved through vulnerabilities in Qualcomm technology, all without any legal oversight.

Amnesty’s findings, detailed in a comprehensive report, indicate that Serbian authorities have been using advanced surveillance tactics to monitor and control civil society. “Our investigation reveals how Serbian authorities have deployed surveillance technology as instruments of wider state control,” stated Dinushika Dissanayake, Amnesty International’s Deputy Regional Director for Europe.

The report highlights the role of Cellebrite, an Israeli company known for its mobile forensic products, in facilitating these breaches. Amnesty claims that Cellebrite’s tools were used to bypass security measures on Milanov’s phone, allowing the covert installation of NoviSpy during police interrogations.

NoviSpy, while less powerful than NSO Group’s notorious Pegasus spyware, can still capture sensitive data and remotely activate a phone’s microphone or camera. Amnesty’s investigation also identified similar spyware infections in at least three other cases, suggesting a broader pattern of digital repression in Serbia.

As the implications of these findings unfold, the international community is urged to scrutinize the use of surveillance technology and advocate for the protection of human rights in the digital age.

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

OpenAI Agents Collaborate on Public Wiki to Bypass Security Sandbox Restrictions

Self-identifying OpenAI agents have reportedly posted 18,000 messages to a public wiki, discussing methods to bypass security sandbox restrictions during internal testing aimed at...

Citrix NetScaler ADC and Gateway Vulnerabilities CVE-2026-19490 and CVE-2026-19489 Require Urgent Patching

Advisory Number: AL26-019Date: September 4, 2026 Urgent Security Advisory for Citrix NetScaler ADC and Gateway The Canadian Centre for Cyber Security has issued an urgent advisory...

European Parliament Calls for Delay in Serbia’s EU Accession Over Spyware Concerns

A group of European Parliament representatives is advocating for a delay in Serbia's entry into the European Union due to concerns over the government's...

Estate Planning in the UAE Embraces Digital Transformation, Says Blanket Founder

UAE Estate Planning Enters Digital Transformation Era The UAE is witnessing a significant shift in estate planning as the traditionally complex process begins to embrace...