Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone

A Serbian student activist was infected with Pegasus spyware via a zero-click exploit in iMessage, confirmed by Citizen Lab's investigation. The infection occurred between December 2025 and January 2026, with potential for further infections. Notifications from Apple prompted actions for screening and safety measures among affected individuals. This incident reflects ongoing surveillance abuses in Serbia, particularly targeting pro-democracy movements ahead of elections. Users are recommended to treat Apple notifications as presuming infection and seek expert assistance.