Skip to content
Spyware Attacks Targeting Government Critics on the Rise

Spyware Attacks Targeting Government Critics on the Rise

First seen 20 Oct 2026, 21:19 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 22:21 UTC
  • •16 cases of spyware attacks reported in 2026, mainly targeting government critics.
  • •Recent infections confirmed include Pegasus spyware on the rector of the University of Belgrade.
  • •Citizen Lab corroborated two new cases involving high-profile targets in academia and law enforcement.

In 2026, 16 cases of spyware attacks have been reported, primarily targeting critics of the government, according to Andrijana Ristić from the Share Foundation. The use of spyware is reportedly increasing, with only state entities able to purchase such software. Recently, two new cases were confirmed by Citizen Lab, involving Professor Vladan Đokić, the rector of the University of Belgrade, and Rade Bajić, a senior prosecutor. Notably, the rector's device was infected with Pegasus spyware, indicating a broader scope of surveillance. The targets now include members of student movements, activists, and judicial employees, raising concerns about the autonomy of educational institutions and the judiciary. The investigation into these incidents has shown little progress, with previous cases remaining unresolved.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-20
16 cases of spyware attacks reported
Andrijana Ristić from the Share Foundation states that 16 cases have been documented this year, targeting critics of the government.
autonomija.info
2026-10-20
New cases confirmed by Citizen Lab
Citizen Lab confirmed two new cases of advanced spyware targeting high-profile individuals, including the rector of the University of Belgrade.
nedeljnik.rs

More articles in this cluster (2)

Following this threat?

Track Citizen Lab in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 2

Common questions

Who are the current targets of these spyware attacks?
The current targets include members of student movements, activists, and judicial employees.
What type of spyware has been identified?
Pegasus spyware has been confirmed on the device of the rector of the University of Belgrade.
What is the status of investigations into these attacks?
Investigations into previously reported cases have shown little progress, with no significant developments.