Tuesday, December 17, 2024

Amnesty accuses Serbia of spying on journalists and activists

Amnesty accuses Serbia of spying on journalists and activists
The phone of Serbian independent investigative journalist Slaviša Milanov infected with spyware, according to Amnesty International's report. / Amnesty International
By bne IntelliNews December 16, 2024

Amnesty International has accused Serbian authorities of conducting covert surveillance on journalists, activists and civil society members through advanced spyware and digital forensic tools, according to a report released on December 16.

The report, titled “A Digital Prison: Surveillance and the Suppression of Civil Society in Serbia”, alleges that Serbian police and the Security Information Agency (BIA) used a bespoke Android spyware system known as NoviSpy to infect the phones of dozens of targets. Amnesty claims that the spyware was covertly installed during police detentions and interviews, often using tools developed by Israeli company Cellebrite to bypass device security.

Amnesty presented digital forensic evidence linking Cellebrite’s UFED technology to the infection of activists’ and journalists’ devices with NoviSpy. The Cellebrite UFED suite, used by law enforcement worldwide, can extract data from mobile devices, including the latest Android and iPhone models, even without access to passcodes.

In one case, investigative journalist Slavisa Milanov was arrested in February 2024 under the pretext of a drunk-driving test. While in detention, Milanov’s phone was confiscated. Forensic analysis by Amnesty revealed that Cellebrite’s tools had been used to unlock his phone, enabling the installation of NoviSpy.

Another case involved environmental activist Nikola Ristic, whose phone was similarly compromised. Amnesty also documented spyware installation during an interview between BIA officials and an activist from the Krokodil organisation, which promotes reconciliation in the Western Balkans.

The NoviSpy spyware captured extensive personal data, including screenshots of email accounts, encrypted messaging apps like Signal and WhatsApp and social media activity. Amnesty disclosed its findings to Google and Android security researchers, prompting measures to remove the spyware from affected devices and alert potential targets with warnings.

Amnesty International’s deputy regional director for Europe, Dinushika Dissanayake, condemned the actions as tools of repression.

“Our investigation reveals how Serbian authorities have deployed surveillance technology and digital repression tactics as instruments of wider state control and repression directed against civil society,” she said.

The BIA has dismissed Amnesty’s claims, stating that the report contained “nonsensical statements” and asserting that its operations comply with local law.

Despite the denial, Amnesty’s findings reveal the extent of state surveillance in Serbia, and raise broader questions about freedom of speech and the press in Serbia. Activists have expressed fear and trauma from the surveillance, leading them to self-censor.

Amnesty said it had shared the report with the Serbian government before publication but received no response.

Cellebrite, the Israeli company whose tools were allegedly used in the operations, stated that it is committed to respecting human rights and reviews credible allegations of misuse. The company did not confirm whether Serbian authorities are among its customers.

The revelations are likely to intensify scrutiny of Serbia’s human rights record, particularly as arrests and interrogations of political activists continue amid widespread anti-government protests.

No comments: