Vladan Đokić, the rector of the University of Belgrade and an influential figure in Serbia's student protest movement, has been confirmed as a victim of Pegasus spyware, according to a report by Citizen Lab on October 19, 2026. This revelation comes just days before Serbia's snap parliamentary elections, scheduled for October 25. The infection utilized a zero-click exploit, which means Đokić's device was compromised without any action required on his part. Citizen Lab, a research group based at the University of Toronto, carried out the forensic analysis in collaboration with the Serbian digital-rights organization, SHARE Foundation. The investigation is still ongoing, with no specific date of infection identified within the year or any attribution provided for the attack. This incident is part of a broader trend of spyware targeting within Serbian civil society, with at least 16 individuals affected in 2026 alone.
Another significant case involves Rade Bajić, a senior associate at Serbia's Public Prosecutor's Office for Organized Crime. Bajić was involved in the high-profile "Generalštab" corruption investigation concerning a real estate project linked to Jared Kushner. He received alerts from Apple in August 2026, indicating potential spyware activity targeting his device. Forensic analysis of Bajić's phone is still in progress, leaving it unclear whether the device was indeed infected.
The Pegasus spyware, sold by NSO Group exclusively to governmental entities, grants its operators full access to a compromised device, enabling them to monitor private communications and activate cameras and microphones remotely. Đokić has publicly denounced the spyware incident as an intimidation tactic and has called for an independent investigation to identify and prosecute those responsible. The Serbian Security Information Agency (BIA) has dismissed previous allegations of surveillance as sensationalism, asserting adherence to legal protocols.
Citizen Lab's findings highlight a disturbing pattern of surveillance against activists, students, and political figures in Serbia. The SHARE Foundation reported on a wave of spyware attacks earlier in the year, identifying 14 individuals as targets. In response to these threats, Apple issued warnings to users in over 110 countries, including Serbia. Despite these alerts, effective legal action against those responsible for deploying spyware remains elusive.
