Pegasus confirmed on Belgrade rector's iPhone before Serbia election
Original title: Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
Citizen Lab reports a high-confidence zero-click infection but does not name the operator, date, or flaw.
The Citizen Lab said on October 19 that the iPhone of University of Belgrade rector Vladan Đokić was infected in 2026 with NSO Group's Pegasus through a zero-click exploit, six days before Serbia's October 25 snap election. The lab did not date the infection within 2026, identify the operator, or say what was taken. Prosecutorial associate Rade Bajić received Apple Threat Notifications on August 13 and August 27; analysis of his phone is ongoing and infection is not confirmed. SHARE earlier reported at least 14 people in Serbia targeted with spyware this year.
Unconfirmed: The operator, exploit, and infection date are unidentified, and Bajić's infection is not confirmed; BIA denied earlier spying allegations.
- The two cases raise Citizen Lab's public Serbian count this year to at least 16.
- Apple warned users in 110 countries in August; 12 of the earlier Serbian cases were notified then.
- Two earlier targets had a new version of Android spyware NoviSpy installed.
- The note names no iOS flaw and gives no case-specific patch.
- Lawyers for student Jelena Kontić filed a criminal complaint on October 6.
Impact: Full phone access, including messages, microphone, and camera
| Product | Affected |
|---|---|
| Apple iPhone | — |
- 1.Turn on iPhone Lockdown Mode and keep iOS up to date.
- 2.Treat an Apple Threat Notification as infection until an expert checks the phone.
- 3.Have close contacts screened for spyware as well.
- Products
- iPhone
- Victims
- University of Belgrade
- Countries
- Serbia
From the original article
4 min read at thehackernews.com
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia's October 25 snap parliamentary election. The infection used a zero-click exploit, meaning Đokić did not have to tap a link or
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.