Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
Overview
Vladan Đokić, the rector of the University of Belgrade, had his iPhone infected with Pegasus spyware, a product of the NSO Group. This infection was confirmed by Citizen Lab on October 19, 2026, just six days before Serbia's snap parliamentary election on October 25. The spyware was delivered through a zero-click exploit, meaning Đokić didn't need to interact with any malicious content for the infection to occur. This incident raises concerns about the surveillance of political figures and the potential manipulation of the electoral process in Serbia. The timing of the attack, close to a major election, suggests a deliberate attempt to undermine or influence political activities in the country.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: iPhone (specifically targeting iOS devices)
- Action Required: Update iOS to the latest version; enable security features such as two-factor authentication; regularly monitor device security settings.
- Timeline: Disclosed on October 19, 2026
Original Article Summary
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia's October 25 snap parliamentary election. The infection used a zero-click exploit, meaning Đokić did not have to tap a link or
Impact
iPhone (specifically targeting iOS devices)
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Disclosed on October 19, 2026
Remediation
Update iOS to the latest version; enable security features such as two-factor authentication; regularly monitor device security settings.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Apple, Exploit.