<![CDATA[Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone]]>Analysis from Citizen Lab, working alongside the SHARE Foundation, has confirmed that the iPhone of a member of Serbia’s student protest movement was compromised with NSO Group’s Pegasus spyware. The investigation points to the use of an iMessage zero-click exploit to deliver the malware, meaning the attack required no interaction from the victim.

High-confidence indicators of compromise were identified on the device, aligning with previously documented Pegasus infection vectors. The discovery underscores the continued use of commercial surveillance tools against civil society actors, particularly those involved in political activism.

  • The infection was carried out via an iMessage zero-click exploit.
  • The device belonged to a member of Serbia's student protest movement.
  • The analysis was a joint effort between Citizen Lab and the SHARE Foundation.

The findings highlight the risk posed by zero-click vulnerabilities in widely used messaging platforms. For organizations or individuals in high-risk professions, it is worth reviewing device security settings and considering lockdown modes where available, though the specifics of this exploit chain have not been fully disclosed.

Source: The Hacker News

With this level of sophistication in delivery, how is your organization approaching the threat of zero-click mobile exploits, and what mitigation steps are you prioritizing?

]]>https://xploitlk.com/topic/200/pegasus-zero-click-spyware-exploit-infects-serbian-student-movement-member-s-iphoneRSS for NodeSat, 05 Sep 2026 12:36:37 GMTThu, 03 Sep 2026 10:30:19 GMT60