Unlawful Use of Cellebrite Tools Sparks Concerns Over State Surveillance and Human Rights Violations

 Digital forensic tools, originally designed to aid lawful investigations, are increasingly being misused to target activists, journalists, and civil society groups. This troubling trend raises significant concerns about state surveillance and the erosion of fundamental human rights.

A recent report by Amnesty International has exposed the alarming misuse of advanced digital forensic tools and covert spyware by Serbian police and intelligence agencies. Among the tools implicated are Cellebrite products, developed by the Israeli firm renowned for its mobile data extraction technology. Cellebrite’s tools, including its flagship UFED (Universal Forensic Extraction Device), are capable of unlocking smartphones and accessing extensive data. Once unlocked, spyware such as NoviSpy can be installed, granting authorities the ability to harvest sensitive information, remotely activate cameras and microphones, and conduct pervasive surveillance.

Dinushika Dissanayake, Amnesty International’s Deputy Regional Director for Europe, expressed grave concerns over the Serbian authorities’ use of these technologies as instruments of state control. “When used outside strict legal frameworks, Cellebrite products pose an enormous risk to rights activists,” she warned.

The report highlights chilling cases of misuse. Investigative journalist Slavisa Milanov, for example, was briefly detained in February under the guise of a drink-driving test. During his detention, Milanov’s Android phone, handed over while powered off, was tampered with at a police station. Amnesty’s forensic analysis confirmed that a Cellebrite device was employed to unlock the phone, enabling the installation of NoviSpy spyware. Similar tactics were reportedly used against environmental activist Nikola Ristic and members of civil society organizations like Krokodil, which advocates for Balkan reconciliation.

Evidence from Amnesty links the deployment of NoviSpy to Serbia’s Security Information Agency (BIA). Donncha O Cearbhaill, head of Amnesty’s Security Lab, confirmed that Cellebrite’s UFED technology was instrumental in the spyware’s installation. Following Amnesty’s findings, Google acted to remove NoviSpy from affected devices.

For those targeted, the psychological toll is severe. One anonymous activist described the ordeal as “incredibly painful,” emphasizing the constant fear that any action or communication could be weaponized against them. Others have spoken about the stark choice between self-censorship and risking severe repercussions while continuing their work.

Amnesty International has called for greater accountability from digital forensic companies like Cellebrite, urging them to implement stricter safeguards to prevent the misuse of their technologies. While Cellebrite maintains that its products are intended for lawful use with proper warrants, Amnesty’s findings indicate significant lapses in oversight.

Both Cellebrite and Serbian authorities declined to comment on the report. Amnesty has underscored the urgent need for robust due diligence by forensic technology firms to ensure their tools do not become instruments of oppression, undermining civil liberties and human rights.

This case underscores the growing need for international scrutiny and regulation of surveillance technologies, ensuring they are not weaponized against the very citizens they should protect.