Iran snoops on enemies of the state with Chosen Brick malware controlled
using messaging apps

Date:
Wed, 16 Sep 2026 18:25:00 +0000

Description:
Chosen Brick can turn on the microphone and exfiltrate WhatsApp and Telegram information.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter UK NCSC, FBI, and Dutch AIVD warn Iran is using Chosen Brick malware against dissidents and journalists Malware steals files, captures audio, grabs WhatsApp/Telegram data, and can wipe systems entirely Operatives rely on social engineering; agencies urge awareness, MFA, updates, and endpoint monitoring Iranian hackers are
targeting enemies of the state, both local and foreign, with advanced malware capable of spying on the victims and stealing their sensitive files, experts have warned.

This is according to a new security advisory, published jointly by the UK National Cyber Security Centre, the FBI, and the Netherlands General Intelligence and Security Service (AIVD), which noted how Iranian operatives would first do extensive research into their victims - dissidents, activists, and journalists - deemed a risk to the regime. After learning as much about their targets as possible, they reach out via social media, either as someone the victims know, or as technical support for the platform theyre currently using, engaging in extended conversation until the victim lowers their guard. At one point, the attackers will try to share a piece of malware with the victims, tracked as Chosen Brick. Latest Videos From TechRadar Watch full video here: A thousand victims This malware, designed primarily for the Windows platform, has a long list of capabilities, including enumerating running processes and system information, capturing screen content, enabling the microphone to capture audio content, capturing a copy of Telegram and WhatsApp data from web browsers, downloading additional files and malware, deleting files, stealing email content, and ultimately - wiping the entire computer system. The operatives communicate with the malware using Telegram, it was said.

Iran almost certainly uses cyber activity to support the repression of individuals who are seen as a threat to the regime, such as dissidents, activists and journalists, the three agencies said in the report. In some cases, the Iranian intelligence services have plotted to kidnap or conduct lethal operations against individuals internationally, who they perceive as enemies of the regime. You may like Iran-linked group caught hiding surveillance tools in fake apps Microsoft discovers new multi-malware package 'GigaWiper' capable of deploying wipers and ransomware Iran-linked hackers claim massive FBI drone breach, threaten FPV attacks

In the advisory, the three agencies said the best defense is to simply be
more aware of social engineering. However, there are also a few technical mitigations that can help, including following NCSC advice on staying safe online, keeping all devices up-to-date (ideally through automatic updates), using antivirus software, and not disabling smart screen warnings on file downloads.

Finally, it would be wise to enable phishing-resistant MFA, make sure devices are managed with appropriate controls, turn on email scanning, deploy
endpoint and network monitoring, and conduct a search for the IoCs. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Via The Register The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/iran-snoops-on-enemies-of-the-state-wit h-chosen-brick-malware-controlled-using-messaging-apps


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)