At least 14 opposition and student activists in Serbia were targeted with spyware since early 2026, the largest documented wave in the country.
Targets include members of the student movement, a member of parliament, and a local councilor — all from the opposition, timed around the March 2026 local elections.
Forensic analysis by SHARE Foundation, confirmed independently by Citizen Lab and Amnesty International, found infections with Pegasus and a new version of NoviSpy.
Pegasus is military-grade spyware sold exclusively to states.
Parliament Speaker Ana Brnabić denied state involvement, calling it "idiotic" to leave such traces.
SHARE Foundation called it political espionage that undermines electoral integrity.