A Serbian Student Movement Member’s iPhone Infected with Pegasus Zero-Click Spyware, Exposing Personal Data and Activism Records
Last week, a disturbing incident came to light involving a member of the Serbian Student Movement whose iPhone was compromised by a zero-click exploit of the notorious Pegasus spyware. This malicious software, developed by Israeli company NSO Group, has been previously linked to high-profile surveillance operations worldwide. The infection highlights the risks faced by activists and individuals involved in sensitive or restricted activities, as their personal data and online activities can be easily intercepted.
The attack is believed to have occurred when the victim received a seemingly innocuous WhatsApp message from an unknown sender. Unbeknownst to them, this message contained a zero-click exploit that allowed Pegasus to infect their iPhone without requiring any interaction on their part. Once inside, the spyware could access sensitive data, including contact lists, messages, and even activate the device’s microphone and camera for remote surveillance.
The use of zero-click exploits like Pegasus has been widely criticized due to its ability to bypass traditional security measures, such as passwords and two-factor authentication. These vulnerabilities in messaging apps allow attackers to inject malicious code directly into a user’s device without any visible signs or warnings. In this case, the victim reportedly had no knowledge that their iPhone was compromised until they noticed suspicious activity on their phone.
The implications of this incident are far-reaching, demonstrating how easily individuals involved in activism or sensitive activities can be targeted by state-sponsored actors or malicious groups. This raises concerns about the safety and security of mobile devices used for personal and professional purposes. As we’ve seen with previous Pegasus-related incidents, compromised data can have significant consequences, including putting entire networks and organizations at risk.
This incident serves as a stark reminder that even seemingly secure devices can be vulnerable to sophisticated attacks. It’s essential for individuals involved in sensitive activities or working on restricted projects to take extra precautions when using mobile devices for communication. This includes being cautious when receiving unsolicited messages or attachments, keeping their device and software up-to-date with the latest security patches, and utilizing reputable virtual private networks (VPNs) for encrypted communication.
Ultimately, this incident underscores the importance of prioritizing digital security in today’s world, where personal data is increasingly at risk. As we continue to navigate an ever-evolving threat landscape, it’s crucial that individuals take proactive steps to protect themselves from these types of attacks. By being informed and vigilant about mobile device security, we can minimize our exposure to zero-click exploits like Pegasus and safeguard sensitive information from falling into the wrong hands.
Source: The Hacker News — 2026-09-03