A Serbian prosecutor who investigated an allegedly illegal scheme by the authorities to help the Trumps build a tower in Belgrade has been targeted with advanced spyware, according to expert analysis.
Revealed: Serbian ruler’s secret role in ‘illegal’ effort to help Trump business
The finding points to a troubling new development in the authoritarian Serbian regime’s campaign to undermine what is believed to be the first criminal case tied to the global money-making efforts of the US president’s family—a venture critics describe as a “pay to play” scheme that trades the Trump administration’s favor for business opportunities.
Rade Bajić, the targeted prosecutor, said: “In my opinion, my involvement in this case was the sole reason for this unlawful spyware attack.”
Analysts at Citizen Lab, a digital forensics laboratory, have not yet established who was behind the attack, but the Serbian regime has previously been caught using spyware against its opponents.
View image in fullscreenA screenshot from Trumpbelgrade.com shows renderings of the proposed Belgrade development. Photograph: Trumpbelgrade.com
News of the alleged hack follows the Guardian’s revelations last week that Aleksandar Vučić, Serbia’s president, personally ordered that a cherished site in Belgrade be stripped of its legal protection so it could be handed over for a $500m Trump hotel and tower. Vučić, one of the Balkans’ most influential nationalists, hosted the US president’s son Donald Jr—”dear Don,” as he calls him—and son-in-law Jared Kushner as he ingratiated himself with the Trumps.
At the weekend, Vučić responded to the Guardian’s revelations about his role in the scandal by confirming details of a previously secret meeting. He indicated he had done nothing wrong. “I fought for my people,” he said. “And that’s what I’ll continue to do in the future.”
Last year prosecutors brought a landmark indictment against senior members of Vučić’s regime, accusing them of abusing their office to unlawfully strip the General Staff building—a monument to Serbia’s recent difficult history—of its protected status. They face years in jail if convicted.
Kushner, who was leading the Trump Belgrade development, called off the plans after the charges were made public. Vučić vowed reprisals, denouncing the prosecutors, including Bajić, a member of the specialized organized-crime unit that brought the indictment.
Bajić has said he was taken off the case without explanation shortly before the indictment was published. He went on to address one of the ongoing protests against the regime triggered by widespread corruption, telling demonstrators in February: “The law will be equal for all.”
View image in fullscreenJared Kushner, left, was hosted in Belgrade by the then president, Aleksandar Vučić. Photograph: Instagram/Aleksandar Vucic
In August, Bajić received a message from Apple saying it had “detected a targeted mercenary attack against your iPhone.”
Citizen Lab researchers, who have been analyzing Bajić’s phone, said this was “a high confidence indicator that his device was likely targeted with mercenary spyware, such as Pegasus.”
Working with the Share Foundation, a Serbian rights group, they previously identified spyware attacks against anti-government protesters. In at least one case, the Citizen Lab analysts discovered Pegasus on a protester’s phone. “A zero-click infection with Pegasus spyware would not have been visible to the target, and would give the Pegasus attacker total access to the device,” they said of that discovery.
The Guardian’s Pegasus Project revealed how journalists, activists, politicians and others have been targeted by governments using the spyware. NSO Group, the Israel-based company that makes Pegasus, has been approached for comment.
View image in fullscreenAleksander Vučić, seen here with Donald TTrump Jr. cannot run for a third presidential term, so he is trying to become Serbia’s prime minister. Photograph: Facebook/Aleksandar Vucic. Vučić, who stepped down late last month and called snap elections for 25 October, hopes to extend his 12-year rule by switching from president to prime minister. He has been approached for comment, as has the prosecutors’ unit, which has said it may bring more charges in the General Staff building case. Representatives of the Trumps and Kushner have denied they engaged in “pay to play” arrangements and said they were not involved in the Serbian authorities’ decision to strip the building of its protected status.
Frequently Asked Questions
FAQs Serbian Prosecutor Investigating Belgrade Trump Tower Targeted with Spyware
1 What happened here in simple terms
A Serbian prosecutor who was investigating the Belgrade Trump Tower project was reportedly targeted with spyware malicious software used to secretly monitor someones phone or computer
2 What is spyware
Spyware is software that secretly installs on a device and collects information like messages calls location or microphone and camera activity without the user knowing
3 What is Pegasus and is that what was used
Pegasus is a powerful commercial spyware made by the Israeli firm NSO Group that can infect phones without any click Reports about this case have pointed to sophisticated spyware of that type though the exact tool and who deployed it may still be under investigation
4 Who is the prosecutor
The prosecutor was handling a case connected to the Belgrade Trump Tower project a realestate deal involving the Trump Organization in Serbias capital The targeting drew attention because it hit someone investigating a highprofile project
5 Why would someone spy on a prosecutor
Possible motives include wanting to learn about the investigation intimidate the prosecutor or monitor their contacts Authorities have not confirmed who was behind it
6 How does spyware get onto a phone
Older spyware needed you to click a bad link Advanced tools like Pegasus can infect a phone through missed calls texts or even zeroclick exploits no action by the user required
7 How would I know if my phone has spyware
Signs can include battery draining fast unusual data usage overheating strange background noises or unexpected reboots But good spyware often leaves no visible trace so a professional forensic check is the reliable way to find out
8 What should I do if I suspect Im targeted
Dont reset or wipe the phone that destroys evidence Stop using it for sensitive communication put it in airplane mode and contact a digitalsecurity organization or forensic expert
9 What is a zeroclick attack
Its an attack that works without the victim doing anything no link to tap no file to open That makes it very hard to prevent with normal caution
10 Can antivirus apps detect this kind of spyware
Usually not Commercial spyware like Pegasus is designed to evade standard antivirus
