CSAIS
IDEN
CriticalEarly warningMalwareUnited states · English

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

First seen 2 Sept, 14:00 WIBLatest 23 Sept13 articles · 12 publishers
victim: serbiaVerify evidence
79
Confidence index · preliminarycomputed by the pipeline (V0.7)high
Corroborated by distinct domains
Independent sources
Victim identified
Full text available
Clustering consistency
Status and preventive steps
Early warningMachine output from news coverage; not verified by the public or institutions
Preventive steps
  • Be wary of scholarship, job, or loan offers asking for personal data or fees.
  • Install apps only from official stores and never open APK files sent over chat.
  • Keep the operating system and apps updated and leave built-in protection on.
Literacy audienceAndroid users in IndonesiaiPhone users in IndonesiaSenior high and vocational school students
Literacy topics
  1. System updates and security patches
  2. The danger of APK files and unofficial apps
  3. How to report and keep evidence

Report toPatroli Siber Polri

Extracted claims

Victimconfidence 0.60
Serbia
Actornot found
not identified
Attack typeconfidence 0.90
Malware2 differing values across articles; review needed.
Event datenot found
not identified
LocationUnited states
Target groupStudents
Status
  • D1 Machinehigh trust
Conclusion
  • D1 MachineHappened

Source chronology

13 articles, by publication time

2 September 20261 articles

  1. 14:00 WIBFirst reportfull text hashed
    Students and opposition activists targeted with spyware in Serbiaft.com

3 September 20264 articles

  1. 11:08 WIB+21 h
    Pegasus Spyware: US Congress Reacts to Serbia Surveillancesrpske.rs
  2. 14:00 WIB+24 hfull text hashed
    Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhonethehackernews.comSerbia
  3. 14:00 WIB+24 hfull text hashed
    Serbia Spyware Targeting Raises Election Concernsstratnewsglobal.com
Show all 13 articlesCollapse

3 September 2026 · continued4 articles

  1. 18:15 WIB+28 h
    Student movement leaders in Serbia report spyware on their phonesANSA

4 September 20261 articles

  1. 14:00 WIB+48 h
    MEPs demand urgent EU response to spyware in Serbiavijesti.me

7 September 20261 articles

  1. 12:51 WIB+119 h
    Serbia’s Spyware Abuse Escalates as Students Targeted in Election Run-Upbalkaninsight.com

8 September 20261 articles

  1. 12:05 WIB+142 hfull text hashed
    Members of Serbia's student movement targeted with Pegasus and other spywareescudodigital.comSerbia

15 September 20261 articles

  1. 23:53 WIB+322 h
    UN experts denounce the use of spyware against dissent in Serbia before the electionsdemocrata.es

16 September 20263 articles

  1. 00:37 WIB+323 h
    Serbia: Use of spyware against opposition and dissenting voices affects elections quality, warn UN experts (Press Release)srdefenders.org
  2. 16:22 WIB+338 h
    Spyware Fears Cast Shadow Over Serbia’s Election, UN Experts Warndevdiscourse.com
  3. 18:43 WIB+341 h
    UN Experts Demand Spyware Ban Ahead of Serbia Votesrpske.rs

23 September 20261 articles

  1. 17:01 WIB+507 h
    Serbia’s spyware scandal is also the EU’s problemedri.org
Relations between articles
77 pairs likely independent1 pairs uncertain

Evidence

Hashes prepared13full text hashed 4
first evidence_uidb24c36edd6312d50fb7cbe56
13 of 13 evidence records are in Merkle batches

Flow comparison D1–D4

each flow's preventive output; this is where they differ · D1 changed 4 times · since 29 Sept
D1Machine12 OctD2Public surveynone yetHelp reviewD3Institutionnone yetD4Official recordnone yet
Literacy audienceAndroid users in IndonesiaiPhone users in IndonesiaSenior high and vocational school students–––
Literacy topics
  1. 1.System updates and security patches
  2. 2.The danger of APK files and unofficial apps
  3. 3.How to report and keep evidence
–––
Preventive steps
  • Be wary of scholarship, job, or loan offers asking for personal data or fees.
  • Install apps only from official stores and never open APK files sent over chat.
  • Keep the operating system and apps updated and leave built-in protection on.
Report to Patroli Siber Polri
–––
Institution's reason––––

Columns D2 to D4 fill in once the public survey and institution statements are running.Summary across incidents

Related incidents

semantic similarity of the coverage, across languages
similarity 93%Spyware Targeted Serbian Protest Organizers’ Phones, Report Says+1Malware5 articles · 5 domains · spyware86
similarity 92%Serbian activists allege being hit with hi-tech spywareMalware3 articles · 3 domains49
similarity 89%“THE REGIME SPENT MILLIONS TO SPY ON US”: Students reveal how their phones were monitored using the notorious “Pegasus” spyware! (VIDEO)Malware1 articles · 1 domains21