Summary Points
- A zero-click iMessage exploit was used to infect an iPhone with NSO Group’s Pegasus spyware, with signs of infection occurring between December 2025 and January 2026.
- Since January 2026, at least 14 individuals in Serbia, including activists and political figures, have been targeted with advanced spyware, often linked to protests and elections.
- The widespread use of invasive Android spyware, such as NoviSpy and its variants, has confirmed direct targeting of detained individuals, with instances of message leaks and detection across multiple devices.
The Threat, Attack Techniques, and Targets
The threat involves Pegasus spyware, created by the NSO Group. It infects iPhones without the user clicking anything. This attack uses a zero-click exploit in Apple’s iMessage. The exploit was active between December 2025 and January 2026. Apple fixed this in iOS version 18.4.1, released in April 2025.
The targets include members of Serbia’s student movement, activists, a member of parliament, and a local councilor. Since early 2026, at least 14 people in Serbia have been targeted. The timing of the attacks was around local elections in March 2026. Some victims also had their Android phones infected with new spyware called NoviSpy, especially after police confiscated their devices.
This shows that both iOS and Android devices are at risk. The spyware can be delivered silently, without the user knowing, making detection difficult.
Impact, Security Implications, and Guidance
The infections can give attackers access to personal messages, calls, and other private data. Such surveillance can threaten privacy, political activism, and free speech. The use of advanced spyware also raises serious security concerns about government abuse and hacking.
Apple responded by releasing updates to fix the exploit. Users should keep their devices updated to the latest software version. Turning on Lockdown Mode on iOS can provide additional protection. Android users should consider strong security measures like Google’s Advanced Protection Program.
For more detailed guidance, users should consult their device vendors or official security authorities. They can provide specific steps to protect against these types of threats.
Stay Ahead with the Latest Tech Trends
Stay informed on the revolutionary breakthroughs in Quantum Computing research.
Access comprehensive resources on technology by visiting Wikipedia.
ThreatIntel-V1
