This report documents how Serbian authorities have deployed surveillance technology and digital repression tactics as instruments of wider state control and repression directed against civil society. The report reveals Serbia’s pervasive and routine use of spyware, including NSO Group’s Pegasus spyware, alongside a novel domestically-produced Android NoviSpy spyware system, disclosed for the first time in this report. The report also highlights widespread misuse of Cellebrite’s UFED mobile forensics tools against Serbian environmental activists and protest leaders.