Science & Tech · Cybersecurity · 6 hrs ago
Researchers say Serbian university rector was infected with Pegasus spyware
Researchers say Pegasus spyware infected Vladan Djokic’s iPhone, making the University of Belgrade rector the latest Serbian critic reported to have been targeted.
The Citizen Lab and the SHARE Foundation said the infection used a zero-click exploit, which does not require a person to click a link or open a file.
Former prosecutor Rade Bajic said Apple warned him his phone had been targeted, but researchers have not confirmed whether his phone was infected or what spyware may have been involved.
Djokic has backed student-led anti-corruption protests, while Bajic worked on a case involving officials and plans to redevelop a protected historic site in Belgrade.
The cases come amid a wider pattern of spyware targeting in Serbia, including 14 people reported targeted in an earlier wave, and ahead of a parliamentary election on Sunday.
The investigation into Bajic’s device is ongoing, while the Serbian Interior Ministry did not respond to requests for comment.
Researchers say Serbian academic Vladan Đokić’s iPhone was infected with Pegasus spyware in 2026.
Former prosecutor Rade Bajić said Apple warned him on August 13 that his phone had been targeted with mercenary spyware, but researchers could not confirm whether it was hacked.
The findings were announced on October 19 by the SHARE Foundation and The Citizen Lab.
The cases come amid student-led anti-corruption protests and ahead of a Serbian parliamentary election.
Researchers said a separate wave of surveillance reported in September included 14 people targeted with advanced spyware.
- Who
- University of Belgrade rector Vladan Đokić and former prosecutor Rade Bajić were targeted, researchers said.
- What
- Đokić’s iPhone was infected with Pegasus spyware. Bajić received an Apple warning, but researchers could not confirm whether his device was hacked.
- When
- The findings were announced on October 19, 2026. Apple warned Bajić on August 13.
- Where
- Serbia; Đokić’s case involved his iPhone, and Bajić’s device was also reportedly targeted.
- Why
- Bajić believes his work on a corruption case involving a protected historic site led to the targeting. A motive for the attack on Đokić was not stated.
Serbian opposition figures and researchers
Serbian officials
Allegations of surveillance
Serbian opposition figures and researchers
Researchers said Đokić’s phone was infected with Pegasus and that Bajić received an Apple spyware warning.
Serbian officials
Officials have previously dismissed allegations of cyberespionage.
Bajić’s case
Serbian opposition figures and researchers
Bajić said his involvement in a corruption case was the sole reason for the alleged spyware attack.
Serbian officials
Officials’ response to this specific allegation was not stated.
The Novi Sad railway station canopy collapsed, preceding the student-led anti-corruption protests.
Serbian authorities raided Đokić’s offices and reportedly seized computers and servers.
Apple sent Bajić a warning that his phone had been targeted with mercenary spyware.
The SHARE Foundation described a wave of spyware targeting 14 people in Serbia.
The SHARE Foundation and The Citizen Lab announced findings about Đokić and Bajić.
- Confirmed infection
- Đokić’s iPhone was infected with Pegasus, researchers said.
- Potential target
- Bajić received an Apple spyware warning; researchers could not confirm an infection.
- Zero-click exploit
- The Citizen Lab said no action by the user was needed for Đokić’s infection.
- September surveillance wave
- 14 people were targeted, according to the SHARE Foundation.
- Bajić’s case
- His work involved allegations over protections on a historic Belgrade site.
3 sources
What people are saying
In my opinion, my involvement in this case was the sole reason for this unlawful spyware attack.
We found with high confidence that it was infected with NSO Group’s Pegasus spyware in 2026
The infection leveraged a zero-click exploit. No action, such as a click or opening a file was necessary for infection.
I would definitely say that [spyware] is widespread