Back Facebook

Iranian Hackers Use Fake Norton Antivirus to Spread Windows Spyware

Facebook • September 16, 2026

The FBI warns Iranian state- hackers spreading 'Chosen Brick' spyware through fake apps that pose as password manager KeePass and messaging app Telegram.

que raro... Ahora que Iran corrió a USA de medio oriente... Salen con la historia de los ciberataques... Misma historia del 9-11...

The GGI Global Governance Initiative warns the FBI being a slanted agent for unilateral interests ? 8.3 billion people population global paradigm. America. Circa 300 million people.

"Most relevant" is selected, so some may have been filtered out.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Iranian State Actors Deploy CHOSEN BRICK Spyware Against Dissidents On September 15, 2026, the UK, US, and Netherlands issued a joint advisory regarding a spyware campaign attributed to Iranian state actors targeting dissidents, activists, and journalists. The malware, known as CHOSEN BRICK, is delivered through spear-phishing attacks on messaging platforms like WhatsApp and Telegram. Attackers impersonate trusted contacts to convince victims to download malicious files disguised as legitimate applications, including Norton Antivirus and KeePass. Once installed, CHOSEN BRICK can access sensitive information, including emails, contacts, and screen content, and can activate the device's microphone. The malware has been in use since at least 2025, and personal details of victims have appeared on pro-Iranian leak sites, increasing their risk. The advisory highlights the Iranian regime's use of digital surveillance to repress critics and outlines mitigation strategies for potential targets. 72 sources 78

Extracted Entities

Iranian Hackers Use Fake Norton Antivirus to Spread Windows Spyware

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (2)

Tools (1)