Home / Technology / Iran's Spyware Targets Activists Worldwide
Iran's Spyware Targets Activists Worldwide
15 Sep
Summary
- Iran-linked actors use CHOSEN BRICK spyware for data theft.
- Spyware deployed via spear-phishing on messaging apps.
- UK, US, and Netherlands jointly issued a cybersecurity advisory.

Britain, the United States, and the Netherlands have jointly issued a cybersecurity advisory detailing spyware operations linked to Iranian state actors. This advisory highlights the use of a spyware family referred to as "CHOSEN BRICK".
Iranian state-linked cyber actors are reportedly using CHOSEN BRICK to target dissidents, activists, and journalists. The spyware facilitates the theft of sensitive information, including emails and messages.
These malicious activities are often carried out through spear-phishing campaigns. Such campaigns commonly exploit popular messaging platforms, including WhatsApp and Telegram, to infiltrate target systems and exfiltrate data.