Archive · 15 Sep 2026
US, UK and Netherlands Warn of Iranian Spyware Campaigns
The United States, United Kingdom and Netherlands released a warning about cyberattacks.
They said Iranian state-linked groups used spyware called CHOSEN BRICK.
Spyware is software that secretly collects information from people or devices.
The groups allegedly sent specially designed messages to trick targets.
This method is called spear-phishing.
The targets included dissidents, activists and journalists.
The attacks reportedly used messaging platforms such as WhatsApp and Telegram.
The stolen information could include emails, messages and other sensitive data.
The United States, United Kingdom and Netherlands issued a joint cybersecurity advisory on Tuesday.
The advisory identified a spyware family called CHOSEN BRICK.
Iranian state-linked actors allegedly used CHOSEN BRICK in spear-phishing campaigns.
The campaigns targeted dissidents, activists and journalists, according to the advisory.
The spyware was used to steal emails, messages and other sensitive information through WhatsApp and Telegram.
- Who
- The United States, United Kingdom, Netherlands and Iranian state-linked cyber actors are named in the advisory.
- What
- A joint cybersecurity advisory detailed CHOSEN BRICK spyware and its alleged use against dissidents, activists and journalists.
- When
- The advisory was issued on Tuesday.
- Where
- The alleged campaigns operated through messaging platforms including WhatsApp and Telegram.
- Why
- The spyware was allegedly used to steal emails, messages and other sensitive information.
- Spyware family
- CHOSEN BRICK
- Named actors
- Iranian state-linked cyber actors
- Targets
- Dissidents, activists and journalists
- Attack method
- Spear-phishing campaigns
- Platforms
- WhatsApp and Telegram
- Reportedly stolen data
- Emails, messages and other sensitive information
- Issuing authorities
- The United States, United Kingdom and Netherlands