UK, US and Dutch agencies expose Iranian CHOSEN BRICK spyware targeting dissidents and journalists

The UK NCSC with US and Dutch partners issued a joint advisory exposing Iranian state actors using spyware dubbed CHOSEN BRICK against dissidents, activists and journalists worldwide, including in the UK, perceived as a threat to Iran ^[1]. The actors impersonate contacts on WhatsApp and Telegram before deploying the Windows malware, which collects contacts, emails and social media messages, captures screens and accesses the microphone; stolen information has appeared on leak sites ^[1]. The NCSC recommends individuals at risk follow the advisory's mitigation steps and take up its dedicated support for high-risk individuals, including free cyber defence services ^[1].

Industries mainly affected: Media, entertainment & gaming

1. Learn the social-engineering techniques in the advisory and be wary of impersonated contacts on messaging apps ^[1].
2. Follow the mitigation steps and use NCSC high-risk individual support and free cyber defence services .