Serbian Activists Targeted with Advanced Spyware: Investor Risks Highlighted

On September 4, a report documented the use of sophisticated commercial spyware against activists in Serbia. The investigation, cited by technology-and-human-rights researcher Meredith Veit of the Business and Human Rights Centre, describes the episode as the latest illustration of how spyware can be deployed beyond its stated purpose of combating terrorism and serious crime.

The Guardian

Veit notes that, despite industry assurances that such tools are restricted to law-enforcement targets, spyware has repeatedly been linked to surveillance of journalists, opposition politicians, lawyers, judges, academics and civil-society groups. The cumulative fallout for vendors includes costly litigation, criminal complaints, sanctions, tightened export controls, convictions of senior executives and, in some cases, the collapse of the companies themselves.

The Guardian

The analysis warns that investors who overlook these developments expose their portfolios to multiple layers of risk:

The Guardian

• Financial risk – legal fees, potential fines and loss of value in spyware firms.

The Guardian

• Reputational risk – association with technologies used to silence dissent can damage brand perception, especially for development finance institutions, pension funds and other entities with social-impact mandates.

The Guardian

• Operational risk – portfolio companies may become secondary targets, requiring resources to defend against breaches and protect sensitive data.

The Guardian

Veit recommends that responsible investors screen commercial-spyware firms out of their investment universe, require fund managers to trace and eliminate indirect exposure throughout investment chains, and press portfolio companies to adopt safeguards that prevent the proliferation of surveillance tools.

The Guardian

The Serbian case underscores a systemic challenge: the commercial spyware market’s lack of transparent oversight creates cascading threats that extend beyond the immediate victims. By financing firms whose products can be weaponized against democratic institutions, investors may inadvertently fund activities that undermine the very stability and social value their mandates aim to protect.

The Guardian