UK, US and Netherlands issue advisory on Iran spyware
Western agencies say CHOSEN BRICK has stolen emails, messages and other sensitive data from Windows devices through spear-phishing campaigns.
- On Tuesday, Britain, the United States, and the Netherlands issued a joint cybersecurity advisory detailing spyware known as "CHOSEN BRICK" used by Iranian state-linked actors to target dissidents, activists, and journalists.
- Attackers often pose as trusted contacts on WhatsApp and Telegram, using fake documents including fabricated MRI results to conduct spear-phishing campaigns and persuade victims to download the malware.
- The FBI stated Iran's Ministry of Intelligence and Security uses the malware to collect intelligence and inflict reputational harm, with victim details appearing on pro-Iranian leak sites linked to "Handala Hack."
- NCSC director of operations Paul Chichester stated Iran "almost certainly" uses cyber operations to suppress perceived threats, stealing emails and messages to repress critics of the regime.
- Since the start of the Iran war, the persona "Handala" has targeted multiple United States entities, including a destructive cyberattack against Michigan-based supplier Stryker and the leak of FBI Director Kash Patel's emails.
81 Articles
81 Articles
Iran using spyware to gather information on dissidents living in the West: AIVD
Iran is using spyware to gather sensitive information about people critical of the regime living in the West, the Dutch intelligence agency said in a joint warning with the American FBI and British NCSC. Several dissidents’ stolen personal data have appeared on pro-Iran websites, NOS reports.
Iranian operators tied to Telegram-based malware targeting activists
A new malware campaign used Telegram as command-and-control infrastructure to surveil dissidents and journalists. The activity is attributed to Iranian hackers and centered on espionage, with targets drawn from politically sensitive civilian...
On Tuesday, Britain, the United States and the Netherlands issued a joint e-security alert detailing spy programs that Iran's associates use to target opponents, activists, and journalists. The British National Centre for Electronic Security said that Iranian state-related destinations used a series of spy programs known as Chuzen Brekke to steal e-mails, messages, and other sensitive information through "directed hunting" campaigns on messaging…
Coverage Details
Bias Distribution
- 44% of the sources are Center, 44% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
