The short version
- Forensic analysis indicates Rade Bajić, a prosecutor investigating the illegal stripping of protections from a Belgrade landmark, was targeted with mercenary-grade spyware likely including Pegasus.
- The digital intrusion coincides with ongoing political tensions surrounding President Aleksandar Vučić’s efforts to secure a $500 million hotel and tower deal for Donald Trump Jr. and Jared Kushner.
- While the attackers remain unidentified, Serbian authorities have a documented history of using similar surveillance tools against dissenters, raising concerns about judicial independence and safety.
A senior Serbian prosecutor who led the investigation into the controversial Belgrade Trump Tower project has been targeted with sophisticated spyware, according to new forensic analysis. The digital intrusion marks a significant escalation in the conflict between Serbia’s judicial system and its political leadership, which is currently embroiled in allegations of using state power to facilitate lucrative business deals for American associates.
Rade Bajić, a member of the specialized organized-crime unit, was removed from the case shortly before a landmark indictment was issued against senior officials. The charges allege that these officials abused their authority to strip legal protections from the General Staff building, a site considered a monument to Serbia’s recent history. This action cleared the way for a proposed $500 million development involving Donald Trump Jr. and Jared Kushner.
In August, Bajić received an alert from Apple indicating that his iPhone had been subjected to a targeted mercenary attack. Researchers at the Citizen Lab, a digital forensics laboratory, analyzed the device and determined there is a high confidence indicator that it was compromised by spyware such as Pegasus. This type of zero-click infection allows attackers total access to a device without the user’s knowledge or interaction.
Bajić believes his involvement in the Trump Tower case was the sole motive for the unlawful surveillance. He stated that the attack appears designed to undermine the criminal proceedings, which are believed to be the first case related to the global moneymaking drive of the US president’s family. Critics have described these arrangements as a pay-to-play scheme, trading administrative favor for business opportunities.
The timing of the hack follows recent revelations that President Aleksandar Vučić personally ordered the removal of legal protections from the General Staff building. Vučić, who has hosted Trump Jr. and Kushner in efforts to ingratiate himself with the family, recently confirmed details of a previously secret meeting regarding the project. He defended his actions, stating he fought for his people and indicated he had done nothing wrong.
Vučić stepped down from the presidency late last month to call snap elections for October 25, aiming to prolong his twelve-year rule by transitioning to the role of prime minister. Despite his departure from the top office, he remains a central figure in the political landscape. The Trump family representatives have denied engaging in pay-to-play arrangements and stated they were not involved in the decision to strip the building of its protected status.
The use of advanced surveillance tools against opponents is not new in Serbia. Citizen Lab researchers, working with the Share Foundation, a local rights group, have previously identified spyware attacks against anti-government protesters. In at least one prior instance, analysts discovered Pegasus on a protester’s phone, highlighting a pattern of state-sponsored digital intimidation.
Kushner called off the Belgrade development plans after the charges were made public. However, Vučić vowed reprisals against the prosecutors involved in the case. Bajić has since become a prominent figure in rolling protests against the regime, addressing demonstrators and asserting that the law must be equal for all. The prosecutors’ unit has indicated it may bring additional charges in the General Staff building case.
Analysts have not yet established who was behind the specific attack on Bajić’s device. However, given the Serbian regime’s documented history of using spyware against critics, the possibility of state involvement remains a serious concern. NSO Group, the Israeli company that produces Pegasus, has been approached for comment regarding the findings.
The situation underscores the risks faced by judicial officials challenging powerful political and business interests in the Balkans. As elections approach, the intersection of digital surveillance, corruption allegations, and international diplomatic ties continues to complicate Serbia’s democratic trajectory. The outcome of the criminal case and the integrity of the upcoming vote remain closely watched by observers.
Sources behind this briefing
Go to the original reporting
- The Guardian US↗Serbian prosecutor who investigated Belgrade Trump tower project ‘targeted with spyware’
