As cited
Copy frozen at (site build).
threat intel
Iranian Hackers Dodging Corporate Defenses to Reach Critics
British, U.S., and Dutch intelligence agencies released a joint advisory detailing how Iranian state-sponsored hackers deploy Chosen Brick spyware against dissidents, activists, and journalists. The attackers socially engineer targets to move away from corporate devices to personal computers where the malware can capture screens, record audio, and exfiltrate messages.
Why it matters: Security teams protecting dissidents, activists, journalists, and organizations with Iran-critical staff must understand this social engineering vector and implement endpoint controls on personal devices; intelligence and law enforcement agencies tracking state-sponsored threats should review the advisory for indicators of compromise and actor tradecraft.
- First seen by Cybersecurity Tracker