- label
- State digital surveillance of civil society — NoviSpy, Cellebrite and Pegasus (2024–2026)
- country
- Serbia
- authorization actor
- Security Information Agency (BIA) and police (per Amnesty, 2024); 2026 operator unattributed — denials by BIA, President Vučić and Speaker Brnabić
- created at
- 2026-09-25T00:34:32.667914+00:00
- end date text
- Ongoing
- id
- SRB-CAMP-018
- incident count
- 4
- incident ids
- institutional consequence
- Data seizure/exposure; chilling effect; vendor suspension (Cellebrite, Feb 2025); UN experts' warning (Sep 2026)
- needs review
- false
- notes
- Created Sep 24 2026 to link SRB-122 (2024) and SRB-121 (2026). SRB-121 also remains in SRB-CAMP-014.
- phase pattern
- Infrastructure deployment → escalation around elections
- start date text
- 02/2024
- trigger event
- Covert spyware deployment against journalists, activists and opposition: NoviSpy installed after Cellebrite unlocks during police/BIA interviews (2024), then Pegasus and a new NoviSpy variant around the 29 March 2026 local elections.
- trigger type
- TR-08: Proactive / Ambient
The public research collection