IC Technology & Cyber — 2026-10-29

Citizen Lab Finds Pegasus Spyware Targeted Serbian Prosecutor Investigating Belgrade Trump Tower Project

BLUFIt is unlikely that Citizen Lab publicly confirms a Pegasus infection on Bajić's device by November 30, 2026, but a positive finding would mark the first known judicial-sector targeting in Serbia's expanding spyware crisis.

Citizen Lab and the SHARE Foundation reported that a Serbian prosecutor who investigated the Belgrade Trump Tower project was targeted with spyware, and that at least 15 Pegasus targeting cases have been identified ahead of Serbia's October 25 elections 1. IBTimes UK said Rade Bajić, a prosecutorial associate in the organized crime office, received Apple threat notifications on August 13 and August 27, and that Citizen Lab's forensic analysis of his device is ongoing, so no infection is confirmed 2. Tech Times, a secondary outlet, put the confirmed 2026 target count at 16 and reported that University of Belgrade rector Vladan Đokić's phone was confirmed infected with Pegasus 3. Bajić told SHARE his work on the case was "the sole reason" for the attack, and IBTimes reported that no public evidence identifies who was responsible 23.

Analysis
Low confidence attaches to the Bajić case because the only evidence is an Apple threat notification, with forensic analysis unfinished and no indicator of compromise published. It is unlikely that Citizen Lab publicly confirms a Pegasus infection on Rade Bajić's device by November 30, 2026. The sourcing is thin: Citizen Lab only summarizes its own findings, and the two media outlets disagree on the confirmed target count and on whether Bajić's device is infected. Confirmed infections of the University of Belgrade rector and a student activist mean a positive finding would add a judicial official to the list. Attribution stays unresolved either way, since no public evidence names the operator and the October 25 vote has passed without new technical indicators. The notification may instead reflect a failed attempt or targeting unrelated to Trump Tower, leaving Bajić's motive claim his personal judgment. A confirmed compromise would give Serbian prosecutors, EU Parliament members pressing for a funds freeze, and the Commission a documented basis to act, while no confirmation leaves an alert they can set aside.

3 sources