Serbian Authorities Exploit Cellebrite Tools to Install Spyware on Activists' and Journalists' Phones

Amnesty International uncovers misuse of Cellebrite technology by Serbian police to bypass phone security and deploy custom spyware for surveillance.

Amnesty International's investigation reveals Serbian police used Cellebrite's UFED tools to unlock phones and covertly install custom spyware, NoviSpy, during detentions and interrogations.
The NoviSpy spyware, developed or acquired by Serbian authorities, enables extensive surveillance, including access to call logs, messages, and the ability to activate microphones and cameras remotely.
Forensic evidence links NoviSpy infections to Serbian intelligence agency BIA, with spyware installations occurring during orchestrated detentions or police interviews of journalists and activists.
A vulnerability in Android devices using Qualcomm chipsets, exploited by Cellebrite tools, has since been patched following collaboration between Amnesty International, Google, and Qualcomm.
Cellebrite is investigating the alleged misuse of its technology, stating that violations of its end-user agreement could lead to sanctions or termination of its relationship with Serbian authorities.