Serbian Police Hack Protester's Phone With Cellebrite Exploit Chain
ID: 2063b6a8-f39e-59c3-8de6-5ffde307db96
STIX ID: report--2063b6a8-f39e-59c3-8de6-5ffde307db96
Feed Name: Dark Reading
Date Published: 2025-03-04
Date Updated: 2026-04-21
Author: Alexander Culafi, Senior News Writer, Dark Reading
Amnesty International found that Serbian law enforcement used a Cellebrite UFED device combined with a zero-day USB exploit chain (involving CVE-2024-53104, CVE-2024-53197, and CVE-2024-50302) to gain privileged root access and unlock a protester's Samsung Galaxy A32; forensic evidence shows USB peripheral emulation, memory grooming leading to arbitrary code execution, and attempts consistent with NoviSpy installation, highlighting misuse of forensic extraction tools and unpatched Android kernel flaws.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.