Threat Intelligence Brief
Curated summary with source attribution
Source: thehackernews.com
Threat Risk: High
Victim: Serbian activists and political opposition
Incident: Deployment of Pegasus and NoviSpy spyware via zero-click and physical access exploits.
Impact: Complete compromise of private communications and personal data for targeted activists and politicians.
Attacker: Serbian government-linked actors
Analysis: The campaign utilized an iMessage zero-click exploit to deploy Pegasus spyware, alongside a new Android-based variant of NoviSpy. These attacks coincided with local elections, indicating a targeted effort to monitor political dissent. The use of forensic tools during police detention further suggests state-led surveillance operations.
Recommendations: Update iOS to version 18.4.1 or later to patch known iMessage zero-click vulnerabilities.; Enable iOS Lockdown Mode for high-risk users to significantly reduce the device attack surface.; Enroll in Google’s Advanced Protection Program for Android users handling sensitive information.
Source: The Hacker News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source