Key Facts
The UK National Cyber Security Centre and partners warned that Iranian state actors targeted dissidents, activists, and journalists with CHOSEN BRICK spyware.
Technical Details
The NCSC says the malware can collect contacts, emails, social-media messages, screen content, and microphone audio. The joint advisory describes attackers impersonating contacts through messaging applications before deploying the Windows-targeting malware.
Impact & Mitigation
Individuals at elevated risk should follow the joint advisory’s mitigation guidance, use trusted communication channels to verify unexpected files or messages, and seek specialist support where available.