Iran-Linked Spyware Targets Global Dissidents via Spear-Phishing

Iranian state-linked operatives are systematically compromising the digital security of journalists, activists, and dissidents through a sophisticated spyware suite known as Chosen Brick. A joint advisory from the United Kingdom, the United States, and the Netherlands warns that this malicious software facilitates the covert exfiltration of private communications.

Editorial·September 15, 2026·reads: 426

Iran-Linked Spyware Targets Global Dissidents via Spear-Phishing

The campaign relies on targeted spear-phishing tactics deployed across encrypted messaging platforms, including WhatsApp and Telegram. By masquerading as trusted contacts or legitimate services, these actors trick targets into interacting with malicious links that grant the spyware access to sensitive emails, messages, and internal device data.

British security officials from the National Cyber Security Centre confirmed that the operation is part of an ongoing effort by state-backed entities to monitor and silence critics. The cross-border collaboration between the three nations aims to expose these digital intrusion methods and bolster defenses for high-risk individuals operating under surveillance threats.