Iranian-Linked Hackers Use 'Chosen Brick' Spyware to Target Dissidents

Iranian-linked hackers are deploying a new spyware, 'Chosen Brick,' via Telegram to target dissidents, activists, and journalists globally. The malware secretly monitors victims, stealing messages, contacts, files, screenshots, and audio. A joint advisory from the FBI's IC3, UK's NCSC, and Netherlands' AIVD detailed the espionage campaign, active since at least 2025. Attackers reportedly build trust through messaging apps and disguise the malware as legitimate files to trick victims into downloading it.