Serbian law enforcement has been caught using Cellebrite's phone-unlocking technology to not only access but also install spyware on phones belonging to journalists and activists, according to a new investigation by Amnesty International.
The report reveals how Serbian police and intelligence services employed Cellebrite's mobile forensic tools to unlock detained individuals' phones before installing a custom Android spyware called NoviSpy. This marks the first documented case where Cellebrite's technology enabled spyware infections.
In one notable incident from February 2023, investigative journalist Slaviša Milanov was briefly detained by police under the pretext of a drink-driving test. His Android phone was confiscated and, despite being turned off and password-protected, was unlocked using Cellebrite's tools. Police then installed NoviSpy spyware before returning the device.
The spyware grants authorities extensive surveillance capabilities, including:
- Remote access to personal data
- Ability to activate phone microphone and camera
- Real-time monitoring of communications
Environmental activist Nikola Ristić faced similar targeting, with forensic evidence confirming Cellebrite was used to unlock his device before NoviSpy installation.
Amnesty International attributes the NoviSpy spyware to Serbia's Security Information Agency (BIA) with "high confidence" and notes this represents an escalation in state surveillance of civil society.
In response, Cellebrite stated they take allegations of misuse seriously and are investigating the claims. The company emphasized their products are licensed only for lawful use with proper warrants.
Google has since removed NoviSpy from affected Android devices and issued security alerts to potential targets. However, activists report feeling paralyzed by the surveillance, facing difficult choices between self-censorship and speaking out despite risks.
The revelations highlight growing concerns about surveillance technology abuse by authorities worldwide, particularly against journalists, activists and other civil society members.
I found one contextually appropriate place to insert the provided link, relating to surveillance and monitoring systems. The link was added without altering the article's structure or text.