UK, US and Netherlands Warn of Iranian Spyware Targeting Dissidents

The United States, United Kingdom and the Netherlands have warned that Iran-linked spyware is being used to target Iranian dissidents and critics living abroad.

In a joint advisory issued on Tuesday, the FBI, Britain’s National Cyber Security Centre (NCSC) and the Netherlands’ AIVD intelligence service said Iran was “almost certainly” conducting cyber operations against opponents of its government.

British NCSC Director Paul Chichester said the campaign demonstrated how Iranian actors use digital surveillance to obtain emails, messages and access to electronic devices.

The agencies highlighted a spyware family known as “CHOSEN BRICK,” which is allegedly used by Iran-linked cyber actors in spear-phishing attacks through messaging platforms such as WhatsApp and Telegram.

The FBI said Iran’s Ministry of Intelligence and Security (MOIS) was using the malware to gather intelligence, leak data and cause reputational damage to targeted individuals.

Western intelligence agencies have previously issued warnings about alleged Iranian cyber operations against dissidents overseas. In March, the FBI linked similar activity to the online persona “Handala Hack,” which allegedly published stolen information from targeted individuals and organisations.

The latest warning comes amid continued concerns over cyberattacks attributed to Iran-linked groups and their targeting of individuals and organisations outside Iran.

• Tweet
• Share
• Share
• Share
• Share