NCSC UK on X: "A new advisory exposes Iranian state cyber attackers using malware ...

X • September 16, 2026

NCSC UK @NCSC A new advisory exposes Iranian state cyber attackers using malware dubbed CHOSEN BRICK. Our Director of Operations Paul Chichester @ 0xChich says individuals at risk should follow advice in our new advisory⬇️ ncsc.gov.uk/news/iranian-c… 9:00 AM · Sep 16, 2026 · 1,855 Views 2

Lord Iván Emiro Cañas Gutiérrez⚖️ @LordCanas 1h Why then the UK defend Palestine and all the rest of it? Plus why did the UK stop Apple’s protections?

raymond delauney @raymonddelauney 1h Not a word on this from our Israeli allies? Strange, no?

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Iranian State Actors Deploy CHOSEN BRICK Spyware Against Dissidents On September 15, 2026, the UK, US, and Netherlands issued a joint advisory regarding a spyware campaign attributed to Iranian state actors targeting dissidents, activists, and journalists. The malware, known as CHOSEN BRICK, is delivered through spear-phishing attacks on messaging platforms like WhatsApp and Telegram. Attackers impersonate trusted contacts to convince victims to download malicious files disguised as legitimate applications, including Norton Antivirus and KeePass. Once installed, CHOSEN BRICK can access sensitive information, including emails, contacts, and screen content, and can activate the device's microphone. The malware has been in use since at least 2025, and personal details of victims have appeared on pro-Iranian leak sites, increasing their risk. The advisory highlights the Iranian regime's use of digital surveillance to repress critics and outlines mitigation strategies for potential targets. 72 sources 78

Extracted Entities

NCSC UK on X: "A new advisory exposes Iranian state cyber attackers using malware ...

The full story

Extracted Entities

Attack Types (1)

Domains (1)

Malware (1)