Citizen Lab and the SHARE Foundation have confirmed that Vladan Djokic, the rector of Belgrade University, had his phone compromised by NSO Group's Pegasus spyware.. this breach occurs amid intense student-led demonstrations in Serbia following a fatal station collapse.
The Pegasus Breach of Rector Vladan Djokic
Citizen Lab reported that it could confirm with high confidence that the phone of Belgrade University rector Vladan Djokic was infected with Pegasus spyware in 2026. The analysis was conducted in partnership with the SHARE Foundation, a Serbian digital rights organization.. According to Citizen Lab, the software used is capable of infiltrating smartphones via "zero-click" attacks, which allow the operator to activate cameras and microphones or read private messages without the user ever interacting with a malicious link.
The SHARE Foundation has warned that without a transparent investigation, this type of digital repression could spread throughout Serbian society. the group argues that the lack of accountability sends a message that unlawful surveillance is acceptable, potentially silencing every critical voice in the country.
16 Deaths in Novi Sad and the Student Uprising
The targeting of Vladan Djokic coincides with a period of severe civil unrest triggered by a canopy collapse at a train station in Novi Sad, which killed 16 people. University students have taken to the streets to demand accountability, claiming the tragedy was the result of graft-fueled negligence during renovation work. As the head of Belgrade University,Vladan Djokic has supported these protests and resisted government pressure to end student blockades in the capital.
The pressure on the rector has not been limited to digital surveillance. As reported by the AP, police raided the offices of Vladan Djokic in March, citing an investigation into the death of a student. Meanwhile, President Aleksandar Vucic has repeatedly claimed, without providing evidence, that the student protests are being organized by foreign entities to destabilize the nation.
14 Hacked Activists and the Case of Rade Bajic
The breach of the Belgrade University rector is not an isolated incident but part of a broader pattern of surveillance in Serbia. In September, digital rights groups reported that at least 14 students and activists had their phones infected with spyware, including the Pegasus tool. This suggests a systematic effort to monitor the coordination of the anti-government movement.
Further evidence of surveillance emerged involving associate prosecutor Rade Bajic, who received an Apple Threat Notification on his device in August. Rade Bajic had been working on a corruption case involving a real estate project linked to Jared Kushner, the son-in-law of former U.S. President Donald Trump. After speaking out about alleged government corruption related to the transformation of a former military compound into a project involving Jared Kushner, Rade Bajic was replaced in his position.
NSO Group's 2021 U.S. Trade Blacklist Status
The technology used in these attacks was developed by the Israeli firm NSO Group, which has faced significant international sanctions. In November 2021, the U.S. Commerce Department placed NSO Group on its trade blacklist after finding evidence that the company's spyware was used by foreign governments to target government officials, journalists, and activists. This designation severely restricts the company's ability to access U.S. technology and goods.
Despite these international warnings, the Serbian government has consistently denied involvement in such hacking campaigns. While the government denies these claims, the pattern of targeting individuals like Vladan Djokic and Rade Bajic aligns with the documented use of Pegasus by various regimes to stifle internal dissent.
Whether Rade Bajic's Phone Was Officially Compromised
A critical point of uncertainty remains regarding the exact status of the phone belonging to associate prosecutor Rade Bajic. While the Apple Threat Notification serves as a strong indicator of a state-sponsored attack, a separate forensic analysis is still underway to determine if the device was successfully hacked. This remains one of the few unverified claims in the current reporting .
Furthermore, Serbian authorities have not provided an immediate comment on the Citizen Lab findings regarding Vladan Djokic. The silence from the government, combined with the ongoing analysis of Rade Bajic's device, leaves a gap in the official record regarding who authorized the surveillance and for what specific purpose.
Comments 0