Serbian Authorities Compromise Activists’ Phones with Hacking and Spyware Installation

Photo credit: www.theverge.com

In Serbia, law enforcement has been reportedly utilizing mobile device hacking technologies to infiltrate the smartphones of activists and journalists, subsequently installing surveillance software to monitor their activities. This alarming assertion comes from a recent report by Amnesty International, which indicates that these invasive actions involve tools manufactured by the Israeli firm Cellebrite, which are typically intended for lawful forensic investigations.

The report emphasizes the need for immediate corrective actions, urging the Serbian government to discontinue these intrusive surveillance efforts. Amnesty International has expressed that the authorities must cease their use of aggressive spyware, provide restitution to those affected by unlawful surveillance, and ensure that accountable parties face consequences for their actions. Moreover, it calls on companies like Cellebrite to conduct thorough assessments to guarantee that their technologies are not employed in ways that infringe on human rights.

Amnesty International compiled numerous accounts from individuals connected to civil society groups who encountered extensive detention processes under varying circumstances. These processes often included additional actions, such as drug testing and psychiatric evaluations, which prolonged the time authorities had to access the detainees’ smartphones. During these intervals, the police allegedly installed a spyware application known as “Novispy,” which appears to be developed by the state. Some smartphones were reportedly accessed through a previously identified (but now patched) vulnerability within Qualcomm products, as detailed in the organization’s findings.

One illustrative case described by 404 Media involves Slaviša Milanov, the deputy editor of Serbian news outlet FAR, who, along with his editor-in-chief, was detained by Serbian authorities while driving. The authorities confiscated their devices, and upon return, the journalists noted several suspicious changes, including modifications to data settings and unusual energy consumption by apps.

Milanov, using a Xiaomi Redmi Note 10S, reported that his device was operating unauthorized software after it was recovered, alongside claims that law enforcement had extracted a staggering 1.6GB of information from his phone without his consent to share his password.

Responding to the concerns raised by Amnesty International, Victor Cooper, a senior director at Cellebrite, stated that their products are strictly authorized for legal usage, necessitating a warrant or a legally sanctioned investigation in line with their end user agreements. He also mentioned to 404 Media that the company is actively looking into the alleged improper use of their technologies and is ready to impose necessary sanctions in collaboration with relevant authorities.

Source
www.theverge.com