Amnesty-Cellebrite.pdf

# Executive summary Amnesty International's Security Lab documents systematic unlawful digital surveillance in Serbia: multiple civil-society members and journalists were targeted with commercial spyware (NSO Pegasus and Intellexa Predator), a newly disclosed domestically configured Android implant called "NoviSpy", and invasive use of Cellebrite UFED to unlock devices and enable infections; forensic traces, hardcoded server IPs and configuration artifacts link NoviSpy infrastructure to Serbia's BIA, Google confirmed the malware as malicious, and a Cellebrite-linked Android privilege-escalation vulnerability (CVE-2024-43047) was identified and patched.