🔶 UK and its allies warn about spyware attributed to Iran

🔶 UK and its allies warn about spyware attributed to Iran

The National Cyber Security Centre of the United Kingdom, affiliated with the Government Communications Headquarters (GCHQ), on Tuesday, 24 Shahrivar, issued a joint warning with U.S. and Dutch authorities about spyware named “CHOSEN BRICK,” which, according to them, has been used to target opponents, activists, and journalists.

The warning was issued by the National Cyber Security Centre, the FBI in the United States, and the General Intelligence and Security Service of the Netherlands (AIVD).

According to the warning, cyber actors attributed to the Iranian government have attempted—through targeted phishing—to trick at-risk individuals and get them to install malicious software.

The aim of this campaign, according to the organizations issuing the alert, was to gain access to individuals’ personal information, messages, and sensitive data.

The alert states that political opponents, civil activists, and journalists who are considered threats by the Iranian government have been targeted by this spyware in various countries, including the UK.

The National Cyber Security Centre says the Iranian government “very likely” uses cyber activity to support the crackdown on people it considers threats to itself.

Based on this report, the “CHOSEN BRICK” malware family can collect information related to victims’ contacts, emails, and social media messages. The spyware also has the capability to capture screenshots and access the device microphone.

According to the National Cyber Security Centre, this malware specifically targets Windows operating systems and, after infecting a device, does not disappear even if the system is rebooted.