Surveillance

Serbian security services have been documented using spyware to surveil journalists, activists, and protest organizers - with forensic analysis confirming that malicious software was installed on targets' devices during police interviews and detentions. These findings point to systematic, illegal digital surveillance of critical voices rather than isolated incidents.
September

The SHARE Foundation published forensic findings confirming that at least 14 people in Serbia had been targeted with commercial spyware since the beginning of 2026: members of the student movement, opposition activists, one member of parliament and one local councillor. Analysis carried out with the Citizen Lab and the Amnesty International Security Lab identified Pegasus, delivered through a zero-click exploit, and a new version of the domestic NoviSpy. The MP among the targets, Radomir Lazović, said the server infrastructure led to the BIA. No state body responded to the findings.
July

Interpol notified Serbian authorities that it would not issue international arrest warrants against six of the twelve Novi Sad students and activists charged with preparing acts against the constitutional order, a group that has spent sixteen months abroad in political exile. The organisation, which does not act in matters of a political character, assessed the case as political in nature. The report reached the Higher Court in Novi Sad and the defence, which announced it would again seek to lift the detention and the warrants so the six could return and attend their own trial.
March 2025

Police in Novi Sad arrested six people on suspicion of committing the criminal offense of preparing acts against the constitutional order and security of Serbia, in connection with the offense of inciting the violent overthrow of the constitutional order. Among those arrested were activists from the opposition party Movement of Free Citizens and the activist group “Attitude”. Another six activists from Novi Sad were in Croatia at the time of the arrests, and warrants were later issued for them.
Update
Spyware targeted at least 14 students, activists and opposition politicians in Serbia
Forensic analysis by SHARE Foundation, Citizen Lab and Amnesty International confirms Pegasus and a new NoviSpy version on devices of protest movement participants around the March local elections.
Update
UN Special Rapporteurs: Communication on Pressure Against Civil Society and Journalists in Serbia
Concerns over violations of privacy and risks to personal safety
Update
Student detained for six hours at SNS rally, phone hacked by security services
Ten days after BIRN and Amnesty International published findings on BIA's use of Cellebrite and NoviSpy against activists, a 23-year-old student was detained at the Sava Center during an SNS rally, held for six hours without access to a lawyer, and had his phone unlocked and data extracted without a court order.
Update
BIA used Israeli technology and homegrown spyware to surveil activists’ phones
An investigation by BIRN and Amnesty International's Security Lab reveals that Serbia's Security Intelligence Agency (BIA) used Israeli forensic tool Cellebrite to unlock activists' phones during police interviews, then installed a domestically developed spyware called NoviSpy - gaining access to messages, contacts, locations, cameras, and microphones, all without court orders.
CRTA.Plus is part of CRTA’s work to document developments related to democracy, the rule of law, and accountability in Serbia.
Crta @ 2026. All rights reserved.