- summary
- At a press conference on 2 September 2026, students presented the forensic findings of the spyware wave, with targets who chose to speak publicly, backed by SHARE Foundation, Citizen Lab and Amnesty. The findings reached UN experts and EU institutions; the state denied the claims.
- country
- Serbia
- date text
- 02/09/2026
- campaign id
- SRB-CAMP-018
- civic actions
- Threat notifications routed to SHARE → Citizen Lab/Amnesty for forensics; collective public disclosure with targets' consent.
- id
- CR-SRB-002
- incident id
- SRB-121
- notes
- Added Sep 25 2026. Visible fearlessness as a response: spyware aims at fear; disclosure only with each target's consent. Student Milica Popović chose to speak publicly: 'If their intention was to frighten us, or make us stop, it will not work' (The Guardian). Response type: RT-DOC (+RT-COL); counters TC-21; escalation stage 5; result: Pending — Wave documented and internationally recognised (UN experts); no investigation by Serbian authorities..
- outcome
- Consent-based public disclosure
- responders
- Serbian student movement members (targets); SHARE Foundation; Citizen Lab; Amnesty International Security Lab
- source
- https://civicspacewatch.eu/alert/serbia-student-democracy-activists-targeted-with-spyware/; https://edri.org/our-work/students-and-opposition-politicians-targeted-by-spyware-in-serbia/; https://www.ohchr.org/en/press-releases/2026/09/serbia-use-spyware-against-opposition-and-dissenting-voices-affects; https://www.reuters.com/legal/litigation/more-than-dozen-serbians-targeted-with-mercenary-spyware-digital-rights-group-2026-09-02/; https://www.theguardian.com/world/2026/sep/03/serbians-targeted-with-advanced-spyware
The public research collection