UK, US and Netherlands warn of Iranian spyware
The United Kingdom, the United States and the Netherlands have issued a joint warning about spyware that, according to their information, cyber actors linked to the Iranian state are using against dissidents, activists and journalists. The Jerusalem Post reports.
CHOSEN BRICK malware
The UK National Cyber Security Centre said that Iran-linked cyber actors used the CHOSEN BRICK family of spyware. According to the centre, through targeted phishing attacks on WhatsApp and Telegram, the attackers stole emails, messages and other confidential information.
According to the joint warning, this software can collect data from contact lists, email and social media accounts. It is also capable of taking screenshots and accessing a device’s microphone. The UK cyber security centre reported that the personal data of some victims later appeared on pro-Iranian leak sites.
More current news is available on the UA.News Telegram channel Telegram.
Impersonating acquaintances and fake documents
According to the UK centre, the attackers often impersonated trusted contacts in messaging apps and tailored their approaches to specific targets. In some cases, they used fake documents, including fabricated MRI scan results, to persuade people to download the malicious software.
Paul Chichester, Director of Operations at the UK National Cyber Security Centre, said that the details of the campaign demonstrate Iran’s use of digital surveillance to suppress critics of the regime. The centre, the US Federal Bureau of Investigation and the Dutch intelligence service AIVD also said that Iran almost certainly uses cyber operations to suppress people it considers threats. The Iranian Embassy in London did not immediately respond to a request for comment.
