Chosen Brick, Iran’s Surveillance Malware
UK, US, and Dutch agencies warn Iranian CHOSEN BRICK malware targets dissidents and journalists via Telegram, harvesting contacts, emails, and messages since 2025.
70
Product
Adobe Flash Player
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 17, 2026
- Last mentionedSep 17, 2026
Timeline
4 articles · newest firstHow the EITest Campaign's Path to Angler EK Evolved Over Time
Unit 42 documents how the EITest campaign's gate URLs and infrastructure evolved since 2014 while still routing victims to Angler EK and diverse malware.
32
Understanding Angler Exploit Kit
Unit 42 explains exploit kit fundamentals, describing how landing pages profile victims, deliver exploits, and install malware payloads on Windows hosts.
25
Understanding Angler Exploit Kit
Unit 42 examines Angler EK operations, including rapid zero-day adoption, fileless Bedep infections, and ransomware payloads like TeslaCrypt and CryptXXX.
36
Related CVEs
by mentions- CVE-2016-003469%8.8Remote Code Execution via Crafted Website in Microsoft Silverlight 5
- CVE-2015-511999%—Use-After-Free RCE in Adobe Flash Player (ActionScript 3 ByteArray)
- CVE-2015-241953%—Memory Corruption RCE in Microsoft Internet Explorer JScript Engine
Appears with
- Unit 42organization · 3
- Angler EKmalware · 3
- Microsoftvendor · 3
- Palo Alto Networksvendor · 3
- Bedepmalware · 2
- EITestthreat actor · 2
- TeslaCryptmalware · 2
- Microsoft Silverlightproduct · 2
- Adobevendor · 2
- CryptXXXmalware · 2
- Internet Explorerproduct · 2
- FBIorganization · 1
- AIVDorganization · 1
- dissidents, journalists, and activistsvictim · 1
- Ursnifmalware · 1
- KeePassproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.