Unmasking the Surveillance State: Spyware Misuse in Serbia Calls for Global Attention

In recent revelations that have stirred international concern, Amnesty International has reported that Serbian authorities are using mobile device hacking tools to breach activists’ and journalists’ phones, installing spyware to track their activities. This surveillance, facilitated through tools developed by the Israeli company Cellebrite, is meant for legitimate forensic purposes but is reportedly being misused in Serbia, raising significant human rights questions.

Alarming Reports from the Ground

Amnesty International’s report uncovers a troubling practice where Serbian police allegedly detain activists and journalists under various dubious charges. During these detentions—often prolonged through additional procedures such as drug tests and psychological evaluations—authorities reportedly gain unlawful access to the individuals’ mobile devices. Once in possession of the devices, they reportedly deploy “Novispy,” a state-developed spyware, by exploiting vulnerabilities such as a now-patched Qualcomm bug.

A concrete example of this practice emerged in the case of Slaviša Milanov, the deputy editor of the Serbian news outlet FAR. Milanov, alongside his editor-in-chief, was stopped and detained by Serbian authorities while traveling. Upon release and after reclaiming their phones, Milanov found unwanted software running on his Android device—specifically a Xiaomi Redmi Note 10S. He noted a surprising extraction of 1.6GB of data, all without his password being entered. The return of their devices was marred with indicators such as toggled-off data and Wi-Fi settings and increased energy consumption by apps, suggesting manipulation during the period of detention.

Calls for Accountability and Action

This report has prompted a forceful response from Amnesty International, which is urging the Serbian government to cease such invasive surveillance tactics immediately and to provide reparation to those targeted unlawfully. Amnesty advocates for accountability for those responsible for violating the rights of these individuals. Furthermore, they emphasize the need for digital forensic companies like Cellebrite to enforce stringent due diligence processes, ensuring their products cannot be used in ways that infringe on human rights.

Cellebrite, through Victor Cooper, its senior director, reiterated that its products are meant for legitimate and lawful investigations, contingent upon appropriate legal authority and warrants. They have assured that they are investigating any potential misuse of their technology and are prepared to take necessary actions against inappropriate usage.

Key Takeaways

The allegations against Serbian authorities highlight a worrying trend of technology misuse for political and social control, turning tools meant for legal security purposes into mechanisms of oppression. This situation underscores a critical need for international oversight and robust policies to prevent the misuse of surveillance technologies. As governments and law enforcement agencies worldwide grapple with balancing security and privacy, these revelations remind us of the importance of transparency, accountability, and stringent regulation to protect civil liberties. The case of Serbia serves as a stark reminder of how quickly technology can become an instrument for invasive surveillance, particularly in the absence of strong legal and ethical guidelines.