Police in Serbia are using mobile device hacking tools to break into the phones of activists and journalists and then installing spyware to track them. Amnesty International has warned In a report. The organization says the state uses devices manufactured by Israeli company Cellebrite, which are intended to help law enforcement unlock devices for forensic purposes.
Amnesty International called on the Serbian government to end these surveillance practices:
Serbian authorities must End the use of excessively invasive spyware and provide effective remedies to victims of unlawful targeted surveillance and hold those responsible for violations accountable. Cellebrite and other digital forensics companies must also conduct due diligence to ensure that their products are not used in a way that contributes to human rights abuses.
Amnesty International gathered various accounts of Serbian authorities processing the phones of civil society members who were detained under various pretexts, with additional procedures (such as drug testing and psychological evaluation) leading to further detention. Additional time was added over the period of time, and hence the total amount of time officers had access to their phones. During this time, police will plant “Novispy” – a spyware program possibly developed by the state – on their phones. Amnesty International documented that (since patched) some devices were broken using the Qualcomm vulnerability.
One case reported by 404 media Slaviša Milanov, deputy editor of the Serbian news outlet FAR, and the editor-in-chief were driving together when they were stopped by Serbian authorities, who detained them and confiscated their phones. When the phones were returned they noticed Changes, such as data and Wi-Fi being turned off and apps using too much energy.
Milanov says his Android device, a Xiaomi Redmi Note 10S, had extra software running on it when he got it back and that police extracted 1.6GB of data, even though he didn't give up his password.
Victor Cooper, Cellebrite's senior director, responding to Amnesty International's questions, said that the company's products are “strictly licensed for lawful use” which requires warrants or legally sanctioned investigations as per the end user agreement. . Cooper also told 404 Media that Cellebrite is investigating the “alleged misuse” of their technology and “stands ready to pursue appropriate sanctions” with any relevant agencies.