hacker-news Sep 3, 2026 · Crawled Sep 3, 2026

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

1 Malware

AI Summary

A member of Serbia's student protest movement had their iPhone infected with NSO Group's Pegasus spyware via an iMessage zero-click exploit between December 2025 and January 2026. The exploit has since been patched in iOS 18.4.1. At least 14 individuals in Serbia, including activists and opposition figures, have been targeted with advanced spyware in 2026, coinciding with local elections. A new variant of NoviSpy Android spyware was also identified, suggesting ongoing surveillance operations by Serbian authorities or affiliated actors.

AI-extracted · verify before operational use

Extracted Entities 1 found

Malware Chrysaor →

MITRE ATT&CK TTPs 3 techniques

T1190 Exploit Public-Facing Application · Initial Access T1203 Exploitation for Client Execution · Execution T1211 Exploitation for Defense Evasion · Defense Evasion