MalwarePublished 16 Sep 2026

Iranian hackers use CHOSEN BRICK Windows malware to spy on targets

Source Bleeping Computer

Description

Iranian state-linked hackers are deploying a Windows malware strain named CHOSEN BRICK to conduct espionage on dissidents, activists, and journalists globally. The malware is used to spy on targeted individuals, indicating a focus on surveillance rather than widespread disruption or destruction.

Impact

The malware enables Iranian state-linked hackers to conduct targeted espionage on individuals of interest, potentially compromising their privacy and security. This could lead to unauthorized data collection, monitoring of communications, and other forms of surveillance. There is no information indicating broader system compromise or disruption beyond targeted spying.

Defensive guidance

Since this is malware used in targeted attacks, standard defensive measures such as endpoint protection, user awareness, and network monitoring for suspicious activity are advisable. Specific mitigation guidance should be sought from vendor advisories or threat intelligence updates if available.

Summary

CHOSEN BRICK is a Windows-based malware strain attributed to Iranian state-linked threat actors. It is employed primarily to spy on specific targets such as dissidents, activists, and journalists worldwide. The malware facilitates covert surveillance operations by these actors, consistent with state-sponsored espionage objectives. No detailed technical information or exploitation methods are provided in the available data.

References

bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 16 Sep 2026, 21:01 UTC

References

Community reviews

Related threats