New Android NoviSpy spyware linked to Qualcomm zero-day bugs

Amnesty International Security Lab and Google Project Zero identified NoviSpy, a persistent kernel-level Android spyware used to surveil Serbian journalists, activists, and dissidents; forensic evidence ties infections to Serbian security services and to exploitation of multiple Qualcomm adsprpc/DSP driver zero-days (notably CVE-2024-43047), with suspected zero-click VoLTE/RCS vectors enabling broad, stealthy compromise and persistence on affected devices.