At least 14 individuals across Serbian civil society, including student protesters, were targeted with advanced spyware earlier this year in what digital rights group Share Foundation describes as Serbia’s largest documented wave of such surveillance. The Serbian government, led by Aleksandar Vučić, denies involvement in the spying.
The infections were discovered in August after Apple issued notifications to potential victims in 110 countries about possible mercenary spyware attacks. While the full scope of the Serbian targeting remains unclear, the incidents highlight growing concerns about digital surveillance in the country.
Key Facts
- At least 14 Serbian civil society members were targeted by advanced spyware
- Student protesters were among those affected by the surveillance
- Share Foundation calls it Serbia’s largest documented wave of spyware infections
- Aleksandar Vučić’s government denies involvement in the spying
- Apple alerted victims after detecting possible mercenary spyware in 110 countries
Who Was Targeted?
The attack focused on members of Serbian civil society, including student activists involved in protests. While the identities of all victims haven’t been disclosed, the digital rights group Share Foundation confirmed this marks a significant escalation in domestic surveillance capabilities. Spyware of this sophistication typically allows operators to access messages, photos, location data and even activate microphones remotely.
How Was It Discovered?
Apple’s global notification system first alerted potential victims in August 2026 about possible mercenary spyware infections. The alerts, sent to users in 110 countries, don’t name specific attackers but warn about sophisticated surveillance capabilities. This discovery mechanism has become crucial in identifying spyware attacks worldwide, though it only reveals infections after they occur.
What We Know — and What We Don’t
Verified by the source:
- 14+ Serbian civil society members were spyware targets
- Student protesters were among the affected groups
- Share Foundation characterizes this as Serbia’s largest known spyware wave
- The Serbian government denies conducting the surveillance
Still unconfirmed:
- Specific identities of all targeted individuals
- Technical details about the spyware used
- Direct evidence linking the attacks to government entities
- Total number of devices compromised in Serbia
Why It Matters
Digital surveillance tools represent powerful threats to civil liberties, particularly when deployed against activists and government critics. This incident follows global patterns where advanced spyware increasingly targets journalists, opposition figures and human rights defenders. The scale of this attack suggests either growing surveillance capabilities within Serbia or increased foreign interest in Serbian civil society.
What To Watch
Responses from international human rights organizations and potential investigations into the spyware’s origins may provide more clarity about responsibility for these attacks. Meanwhile, digital rights advocates continue urging stronger protections against unauthorized surveillance.