Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Iranian state-linked hackers use CHOSEN BRICK Windows malware, spread via Telegram and WhatsApp social engineering, to spy on dissidents and journalists worldwide.
78
Product
CHOSEN BRICK
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 16, 2026
- Last mentionedSep 16, 2026
Timeline
3 articles · newest firstUS, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
US, UK, and Dutch agencies warn Iranian state actors deploy Windows surveillance malware 'Chosen Brick' against dissidents, activists, and journalists worldwide.
60
Iranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists
UK NCSC, FBI and Dutch AIVD warn Iranian state hackers deploy CHOSEN BRICK spyware via WhatsApp and Telegram lures against dissidents and journalists since 2025.
78
Appears with
- Chosen Brickmalware · 3
- Microsoft Defenderproduct · 3
- FBIorganization · 3
- Telegramproduct · 3
- Microsoftvendor · 3
- NCSCorganization · 2
- WhatsAppproduct · 2
- Iranian state cyber actorsthreat actor · 2
- Iranian state-linked hackersthreat actor · 1
- AIVDorganization · 1
- Avastvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.