Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Government advisories flag a previously undocumented Iranian state-linked Windows implant called CHOSEN BRICK, deployed for surveillance of dissidents and journalists—European NGOs and media should heighten vigilance.
Summary written by editorial AI · Source link below
Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide. [...]
Editorial Analysis
European organisations collaborating with civil-society or media groups in the Middle East may face collateral targeting or lateral espionage from this campaign.
Cross-reference current endpoint telemetry against published CHOSEN BRICK indicators and ensure EDR policies block the documented delivery vectors.
A new Iranian state-sponsored surveillance tool targeting dissidents could pose collateral risk to European partners of civil-society organisations.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at BleepingComputer in a new tab.
More from the Threat Intel Desk
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking1d
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot2d
- Trust Is Not What It Seems — And Fraudsters Are Counting on It3d
- AI Tools Are Generating Massive Attacks for Little Cost3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)3d