Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Government advisories flag a previously undocumented Iranian state-linked Windows implant called CHOSEN BRICK, deployed for surveillance of dissidents and journalists—European NGOs and media should heighten vigilance.
Summary written by editorial AI · Source link below
Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide. [...]
Editorial Analysis
European organisations collaborating with civil-society or media groups in the Middle East may face collateral targeting or lateral espionage from this campaign.
Cross-reference current endpoint telemetry against published CHOSEN BRICK indicators and ensure EDR policies block the documented delivery vectors.
A new Iranian state-sponsored surveillance tool targeting dissidents could pose collateral risk to European partners of civil-society organisations.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at BleepingComputer in a new tab.
More from the Threat Intel Desk
- Hackers pull off $133 million French bank heist via service provider2d
- Fake security tools on GitHub push backdoors and infostealers3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)3d
- CEO-spoofing scammers used AI to help steal more than $100 million, feds say3d
- Chainalysis says breach exposed credentials for all customers3d