The University of Belgrade's rector had his iPhone infected with Pegasus spyware just days before Serbia's election. Here's what the zero-click attack reveals about spyware risks and how to protect yourself.
Vladan Đokić, the rector of the University of Belgrade and a vocal backer of Serbia's student protest movement, had his iPhone infected with NSO Group's Pegasus spyware in 2026. The Citizen Lab confirmed the infection on October 19, just six days before Serbia's snap parliamentary election on October 25.
That timing isn't a coincidence. It's a pattern we've seen play out in country after country: spyware strikes when it can do the most damage to public trust and democratic processes.
### How the Infection Worked
The attack used a zero-click exploit, which means Đokić didn't have to tap a link, open a file, or do anything at all. The spyware installed itself silently. That's what makes Pegasus so dangerous—it leaves no obvious trace and requires no user mistake.
Once inside, Pegasus can read messages, listen to calls, track location, and access the microphone and camera. For someone like Đokić, whose phone likely held sensitive conversations about protests and political organizing, the exposure could be severe.
### Why This Matters Beyond Serbia
This isn't just a story about one university official in the Balkans. It's a reminder that commercial spyware is being used to silence voices at critical moments. Elections, protests, and political transitions are exactly when this kind of surveillance does the most harm.
And it's not just activists or politicians who are targets. Journalists, lawyers, and even business professionals in the United States and elsewhere have been caught in the crosshairs. The common thread? Someone wanted to know what they were saying and to whom.
### What You Can Do About It
You don't have to be a high-profile target to care about this. If you handle sensitive information—whether you're a journalist, an executive, or just someone who values privacy—you need to think about your digital footprint.
One practical step is using an antidetect browser. Unlike regular browsers, antidetect browsers mask your fingerprint and make it harder for trackers and malicious actors to link your activity across sites. They're not a silver bullet against military-grade spyware, but they do raise the bar for everyday surveillance.
Here's a quick checklist to reduce your exposure:
- Keep your phone's operating system and apps updated—zero-click exploits often rely on unpatched vulnerabilities.
- Use a reputable antidetect browser for sensitive web browsing, especially on desktop.
- Enable two-factor authentication everywhere, but prefer hardware keys over SMS.
- Be cautious about who has your phone number and email address.
- Regularly review app permissions and revoke anything that doesn't need access.
> "The most dangerous spyware is the kind you never notice," says a Citizen Lab researcher. "By the time you suspect something, the damage is often done."
### The Bigger Picture
NSO Group has repeatedly said its products are meant for fighting crime and terrorism. But cases like Đokić's show how easily those tools can be repurposed for political ends. The question isn't whether spyware exists—it's who gets to use it and with what oversight.
For now, Đokić's case is a warning. It's a reminder that digital privacy isn't abstract. It's about protecting real people, real conversations, and real democratic processes. And sometimes, the best defense is simply being harder to track.
