This briefing documents how a Cellebrite zero-day exploit was used to target the phone of a Serbian student activist. The attack closely matches the form of attack that we previously documented in a report, “A Digital Prison”: Surveillance and the suppression of civil society in Serbia, published in December 2024.
