Serbian authorities have been accused of hacking into the phones of activists and journalists, installing spyware to track their activities, according to a report by Amnesty International. The human rights organization claims that the police are using tools built by Israeli company Cellebrite, which are intended to help law enforcement unlock devices for forensic purposes, to break into the phones of civil society members.
The report alleges that Serbian authorities are detaining activists and journalists on false premises, only to confiscate their phones and use Cellebrite tools to extract data and install spyware. In some cases, the police have exploited a since-patched Qualcomm vulnerability to gain access to the devices. Amnesty International has gathered various accounts of such incidents, including one involving the deputy editor and editor-in-chief of Serbian news outlet FAR, who were stopped by authorities, detained, and had their phones confiscated.
When the phones were returned, the individuals noticed changes, such as data and Wi-Fi being toggled off, and apps using an unusual amount of energy. In one instance, the deputy editor, Slaviša Milanov, reported that his Android device, a Xiaomi Redmi Note 10S, was running extra software when he got it back, and that the police had extracted 1.6GB of data despite him not providing his password.
Cellebrite has responded to the allegations, stating that their products "are licensed strictly for lawful use" that requires a warrant or a legally-sanctioned investigation per the end user agreement. The company's senior director, Victor Cooper, said that Cellebrite is investigating the "alleged misuse" of their technology and is "prepared to impose appropriate sanctions" with any relevant agencies.
Amnesty International is calling for the Serbian government to end these surveillance practices, which it deems a violation of human rights. The organization is also urging Cellebrite and other digital forensic companies to conduct adequate due diligence to ensure that their products are not used in a way that contributes to human rights abuses.
The report highlights the growing concern over the use of surveillance technology by governments to track and monitor citizens, often under the guise of national security or law enforcement. As technology continues to advance, it is essential for companies and governments to prioritize human rights and ensure that their actions do not infringe upon individuals' privacy and freedom.
The incident also raises questions about the responsibility of technology companies in ensuring that their products are not used for malicious purposes. As the use of surveillance technology becomes more widespread, it is crucial for companies like Cellebrite to take proactive measures to prevent their tools from being used to violate human rights.
In conclusion, the allegations of Serbian authorities hacking into activists' phones and installing spyware are a stark reminder of the need for greater transparency and accountability in the use of surveillance technology. As the world becomes increasingly dependent on digital devices, it is essential for governments, companies, and individuals to prioritize human rights and privacy in the face of emerging technologies.