Iran-linked hackers deploy spyware to target political dissidents

Intelligence agencies in the UK and US have jointly issued a security advisory detailing a cyber espionage operation orchestrated by Iranian state-linked threat actors. The campaign centres on a spyware family designated 'CHOSEN BRICK', which security researchers say has been weaponised to target activists, journalists and political dissidents.

According to Britain's National Cyber Security Centre, the malware has been deployed to harvest sensitive information including personal emails, instant messaging data and other confidential material from victims' devices. The spyware represents part of a broader pattern of cyber operations attributed to Tehran's intelligence apparatus targeting individuals within Iran and across the diaspora.

The joint advisory comes amid escalating concerns over state-sponsored cyber activities in the region. Security experts note that such campaigns often precede physical intimidation or arrest of targeted individuals, making the disclosure particularly significant for civil society organisations operating in or monitoring the Islamic Republic.

US and UK cybersecurity authorities have urged organisations and individuals to implement enhanced security measures, including two-factor authentication, encrypted communications platforms and regular security audits. The advisory includes technical indicators of compromise to assist network defenders in identifying potential intrusions linked to the campaign.

The disclosure underscores ongoing tensions between Iran and Western nations over cyber operations, with previous incidents attributed to Iranian hackers targeting government agencies, critical infrastructure and private sector entities across multiple countries.