Citizen Lab confirms zero-click Pegasus on Belgrade rector's iPhone
Citizen Lab confirmed Pegasus spyware on Belgrade University rector Vladan Đokić's iPhone via a zero-click exploit, six days before Serbia's election. Researchers count 16+ targets in the country in 2026, and Apple also warned prosecutor Rade Bajić. Citizen Lab has not named who deployed Pegasus; the source cites no fix.
What happened
Citizen Lab confirmed Pegasus spyware on Belgrade University rector Vladan Đokić's iPhone via a zero-click exploit, six days before Serbia's election. Researchers count 16+ targets in Serbia in 2026. Apple also warned prosecutor Rade Bajić in August.
Why it matters
The attack required no action from the victim, and spyware of this grade exposes messages, calls and device data of public figures. The case touches sensitive targets: the rector backed the student movement, and Amnesty International has documented Serbian authorities using Cellebrite tools against opponents. Citizen Lab has not named who deployed Pegasus.
What to do
People and executives with a target profile should seek digital forensics on their devices, as the case advises. Review targeted spyware risk on leadership phones. The source cites no fix or patch.
For the technical team
- Affected
- iPhone do reitor da Universidade de Belgrado e de outros alvos na Sérvia (Pegasus, ataque zero-click) · iPhone of rector Vladan Đokić (confirmed); iPhone of prosecutor Rade Bajić (Apple warning, still under analysis by Citizen Lab). 16+ targets in Serbia in 2026 per researchers. No versions cited.
- Exploitation
- Exploitation confirmed by Citizen Lab in the rector's case. Bajić case: Apple warning in August about mercenary spyware, under analysis. No attribution to group or country; NSO Group says it sells only to governments.
- Fix
- The source cites no fix.
- Vector
- iPhone compromised via a Pegasus zero-click exploit; the victim never had to tap anything. The source gives no component or specific vulnerability.
- More details
- Serbian authorities raided the rector's offices in March and seized computers and servers. Amnesty International has documented Serbian authorities using Cellebrite tools to unlock opponents' phones and sometimes plant spyware. SHARE Foundation says Bajić had investigated officials suspected of forging documents to clear a Trump Tower project in Belgrade linked to Jared Kushner.
Timeline
Incident opened with Citizen Lab's confirmation on rector Vladan Đokić and Apple's warning to prosecutor Rade Bajić.
Sources 1 source
- @IntCyberDigest @IntCyberDigest
