The Serbian government is facing significant scrutiny after Amnesty International released a damning report detailing the use of advanced spyware, NoviSpy, to unlawfully monitor journalists and activists. This extensive surveillance operation, reportedly conducted by the police and the Security Information Agency (BIA), has raised serious questions about privacy and civil liberties within Serbia.
The 87-page report, titled "A Digital Prison: Surveillance and Suppression of Civil Society in Serbia," sheds light on how Serbian authorities employed mobile forensic products from the Israeli company Cellebrite to extract sensitive data from the mobile devices of journalists, environmental activists, and other members of civil society.
According to the findings, the police have been using Cellebrite’s tools to first access mobile devices and then infect them with the new spyware, NoviSpy. This software is capable of capturing personal data and even remotely activating the microphone or camera on the targeted devices. Notably, this has put journalists like Slaviša Milanov, who reported experiencing invasive surveillance practices firsthand, at considerable risk.
Milanov recounted his harrowing experience after being detained under the pretext of a routine traffic stop. "It was a very unpleasant feeling," he said. Upon his release, he discovered unusual activities on his phone and difficulty accessing Wi-Fi and mobile data. Forensic analysis later revealed traces of Cellebrite's technology combined with the newly uncovered spyware, NoviSpy.
"Our investigation reveals how Serbian authorities have used surveillance technology and digital repression tactics as instruments of wider state control and repression directed against civil society," explained Dinushika Dissanayake, Amnesty International's Deputy Regional Director for Europe. She emphasized the significant risks activists face when such invasive technologies are employed outside stringent legal frameworks.
The report elaborated on the systematic surveillance practices adopted since at least 2018, which have included not only NoviSpy but also more notorious spyware like NSO Group's Pegasus. While the latter is more advanced, NoviSpy still enables severe privacy invasions, raising alarms about its routine use against activists and journalists alike.
Instances of unauthorized access to devices became more evident when Amnesty conducted interviews with affected individuals. One case highlighted involved environmental activist Nikola Ristić, whose phone was tampered with similarly during police interaction. Activists report feeling a lasting psychological impact from such surveillance: "Anything you say could be used against you, which is paralyzing at both personal and professional levels," one activist shared.
The broader situation is underscored by the backdrop of intense civil unrest within the country. The spark for recent protests came after a tragic train accident, leading many to voice their displeasure over government actions and alleged systemic corruption. President Aleksandar Vučić has denounced the protests, attributing them to foreign influences aimed at destabilizing his governance.
Simultaneously, the pervasive surveillance appears aimed at muffling dissent and bolstering government retention of power. Whistleblowers and activists are becoming increasingly wary as the government seemingly tightens its grip on civil liberties by employing technology to stifle free expression, association, and peaceful assembly.
Despite the seriousness of these allegations, the Serbian government has not offered any commentary on Amnesty’s report. Meanwhile, international reactions are mounting, calling for regulatory frameworks to thwart such abuses. Amnesty has reached out to tech giants like Google to alert users about potential infections from NoviSpy, leading to the removal of the spyware from some affected devices.
The reports also mentioned concerns about Cellebrite's products enabling serious human rights violations. Facing scrutiny for the alleged misuse of its technology, Cellebrite acknowledged it would review the claims of its products being employed for unconstitutional surveillance, reiteratively asserting they only advocate for lawfully sanctioned investigations.
Nevertheless, Amnesty International argues for heightened due diligence and oversight over surveillance technology. The misuse of such tools isn’t unique to Serbia and reflects wider trends observed across various global contexts where authoritarian regimes resort to digital methods for tracking and silencing dissent.
Currently, activists and journalists are urging for accountability and transparent practices, emphasizing the need for urgent reform to stave off the erosion of democratic norms. The dire effects of NoviSpy and the systemic repression reveal the troubling ways technology can transform resistance movements and undermine freedom.
Among the many recommendations made by Amnesty International, the organization pressed for Serbia to halt its use of invasive spyware ceaselessly. The call for absolute accountability and swift investigative actions is non-negotiable to safeguard the rights of individuals and preserve the integrity of civil society within the nation.
