A Serbian prosecutor investigating alleged corruption surrounding a Trump real estate project in Belgrade was targeted with Israeli-made Pegasus spyware after speaking out about political interference and abuses of power, according to research made public Monday.

Rade Bajić, a member of Serbia’s Public Prosecutor’s Office for Organized Crime, is reported to be the latest target identified in a growing spyware scandal that has engulfed the country’s political opposition, civil society and institutions.

The research is the latest by Toronto University’s Citizen Lab in collaboration with Serbian digital rights organization, SHARE Foundation, including the discovery that Bajić received an Apple Threat Notification iMessage on Aug. 13.

The spyware revelation comes amid mounting controversy over plans to redevelop the former Yugoslav military headquarters in Belgrade into a luxury Trump Tower skyscraper. The project, associated with Jared Kushner, U.S. President Donald Trump’s son-in-law, has faced allegations of political interference and irregularities surrounding the removal of the site’s protected heritage status.

Bajić’s targeting follows revelations in September that at least 14 people in Serbia, including student activists and opposition figures, had received warnings indicating they may have been targeted with sophisticated spyware. Researchers at Toronto University’s Citizen Lab confirmed a Pegasus infection in at least one case. 

“In Serbia, spyware surveillance has steadily expanded from civil society and journalists to student activists, politicians and now university and judicial representatives,” said Andrijana Ristić, a policy advisor at SHARE Foundation. “This escalation is fueled by perceived impunity and state inaction, even in cases where criminal complaints have been filed.”

Another prominent figure caught up in the surveillance scandal is Vladan Đokić, rector of the University of Belgrade, whose phone was infected with Pegasus, according to the same report.

Đokić has emerged as a prominent figure in Serbia’s protest movement after refusing to facilitate a government crackdown on student demonstrators. He has faced sustained pressure from authorities, including a police raid on his university offices on March 31, during which computers and servers were reportedly seized.

Until September, Đokić was also frequently mentioned as a potential leader of the student-backed electoral list ahead of Serbia’s planned Oct. 25 parliamentary snap elections.

The identity of those responsible for deploying Pegasus against Bajić and Đokić has not been established.

“NSO has spent a decade claiming to turn over a new leaf each time an abuse surfaces. But there is no hiding the truth: Pegasus is a technology for repression,” said John Scott-Railton, a senior researcher at Citizen Lab. “It’s no accident that people standing up for freedom in the face of corruption keep getting hacked with NSO’s products.”

An Israeli surveillance technology firm has run a large-scale operation to infect mobile phones with spyware using online advertisements to hack the devices, researchers said on Thursday.

An investigation by the University of Toronto’s Citizen Lab and cybersecurity firm Confiant Threat Intelligence laid bare an ad-based infection technique developed by an Israeli company that researchers named “AdFection.” The hacks weaponized legitimate online ad systems for espionage purposes, allowing spyware manufacturers to connect to millions of devices and identify, track and target victims.

“Plugging into the online ads ecosystem provides the mercenary spyware industry a stealthy delivery system,” said Bill Marczak, senior researcher at The Citizen Lab. He said the findings were “surely just the tip of the iceberg” of how online ads are abused for espionage.

Researchers discovered critical details of the hacking tools by analyzing devices belonging to journalists and staff at the Al Jazeera media network, finding that 45 devices of journalists and staff were targeted and some infected with Israeli-made spyware known as Candiru.

At the heart of the hacking campaign is the Israeli company Discover-Tech that describes itself as an advertising business. Citizen Lab researchers said the company facilitated surveillance for commercial spyware operators. Its platform, called Controlium, allegedly allowed spyware makers like Candiru — which in 2025 was acquired by Integrity Labs — to identify, track and target devices by loading advertisements on websites and apps.

Discover-Tech and Integrity Labs did not immediately respond to a request for comment.

The scale is striking: An analysis of four billion advertising records found that Discover-Tech’s ads appeared across nearly 200,000 websites and mobile apps in dozens of countries over four months. Among the websites that featured the ads were institutional sites of NATO, the United Nations, the European Parliament, European Commission and Council of the EU.

The technique exploits real-time bidding — the automated system used by platforms such as Google to sell advertising space and target users. Rather than persuading victims to click a malicious link, attackers can exploit advertisements to identify and potentially infect devices without any interaction from the user — a technique known as “zero-click” infections.

Discover-Tech’s advertisements directed millions of devices to servers associated with Candiru, potentially enabling large-scale surveillance and reconnaissance, researchers said. That does not mean all those devices were infected.

Citizen Lab, based in Toronto, is a globally recognized research group that previously uncovered spyware scandals targeting Catalan political figures, a member of the European Parliament and the inner circle of murdered Saudi journalist Jamal Khashoggi.

The findings triggered calls for further investigation on Thursday. “The possibility that EU institutions have been exposed should set off alarm bells across Brussels,” said Hannah Neumann, a German European Parliament lawmaker of the Greens group. Neumann herself was the victim of a cyber-espionage operation by an Iranian hacking group.

“Europe cannot claim to defend democracy while leaving its own democratic institutions vulnerable to spyware,” Neumann said.

BRUSSELS — The European Commission’s cybersecurity division is rolling out a plan to use artificial intelligence to respond to high-risk cyberattacks, according to a document obtained by POLITICO.

The undated document, written by the Commission’s IT department, sets out how to prepare the EU executive’s cyber defenses for “emerging AI-driven threats.” It proposes an action plan to shore up defenses in light of AI, with the most urgent move being the speed of response to attacks.

Governments have rushed to grapple with the rising threat brought by AI’s ability to expose and exploit cybersecurity vulnerabilities. Incidents like OpenAI’s accidental intrusion into Hugging Face have prompted calls, including at the highest political level, to be more wary of advanced AI models.

Being able to respond quickly to cyberattacks is most crucial in “high-risk scenarios,” the EU executive’s internal cyber defenders warned, saying that the ability to detect an attack is “not sufficient if containment measures cannot be taken quickly enough.”

Officials at the in-house IT department, DG DIGIT, are planning to use automated “protective measures” in specific high-risk scenarios, it said. Those scenarios were redacted in the document, which was provided to POLITICO in response to a freedom of information request.

The plan does not amount to “uncontrolled automation” and there will be strict controls in place including human oversight, according to the document.

As well as laying out the response plan, the document sets out the cybersecurity challenges the Commission faces from AI.

The most advanced AI models are expected to “significantly increase the speed, scale and adaptability of cyberattacks” and the Commission must therefore have defenses in places for an environment where “attacks are likely to become faster, more frequent and more scalable,” it said.

Risks include situations where “malicious activity occurs outside EC [European Commission] normal working hours, spreads more rapidly across systems, or results in large-scale exfiltration or operational disruption before manual intervention can be organized by EC,” they said.

The Commission’s cyber division has sought approval internally to move ahead with the plans, it said, though it’s not clear whether the plans have yet been put in place.

The Commission didn’t respond to a request for comment.