Threats · 11h ago

Pegasus targeting reaches Serbian rector and suspected prosecutor

The SHARE Foundation and Citizen Lab say Pegasus infected University of Belgrade rector Vladan Đokić in 2026, while prosecutor Rade Bajić is a suspected target in a Serbian spyware campaign that has reached at least 15 people.

Citizen Lab found a zero-click exploit: Đokić’s phone was infected without him tapping a link or opening a file. That removes user action from the entry path, so advice focused on spotting suspicious messages would not have stopped this infection.

The reporting extends documented targeting beyond students, journalists and protest-linked figures to a university rector. Bajić received an Apple threat notification, but his device remains under analysis—not a confirmed infection. If university or prosecution leaders use these phones for sensitive work, their communications and relationships may be exposed; the findings do not establish what data was accessed or that either institution’s network was breached.

Timeline

Sources

3 sources covering this story

Part of the PlainSec briefing for 2026-10-20

Editions

Related stories