{"id":"SRB-CAMP-018","label":"State digital surveillance of civil society — NoviSpy, Cellebrite and Pegasus (2024–2026)","notes":"Created Sep 24 2026 to link SRB-122 (2024) and SRB-121 (2026). SRB-121 also remains in SRB-CAMP-014.","country":"Serbia","created_at":"2026-09-25T00:34:32.667914+00:00","report_ids":[],"incident_ids":["SRB-121","SRB-122","SRB-123","SRB-124"],"needs_review":false,"trigger_type":"TR-08: Proactive / Ambient","end_date_text":"Ongoing","phase_pattern":"Infrastructure deployment → escalation around elections","trigger_event":"Covert spyware deployment against journalists, activists and opposition: NoviSpy installed after Cellebrite unlocks during police/BIA interviews (2024), then Pegasus and a new NoviSpy variant around the 29 March 2026 local elections.","incident_count":4,"start_date_text":"02/2024","authorization_actor":"Security Information Agency (BIA) and police (per Amnesty, 2024); 2026 operator unattributed — denials by BIA, President Vučić and Speaker Brnabić","institutional_consequence":"Data seizure/exposure; chilling effect; vendor suspension (Cellebrite, Feb 2025); UN experts' warning (Sep 2026)"}