thread.news
← Back
BGenerally CredibleWorld🇬🇧UK🇮🇷Iran🇺🇸US⚠ Coverage gap9/15/2026, 5:00:32 PM
US and UK Agencies Warn of Iranian 'Chosen Brick' Spyware Campaign

US and UK Agencies Warn of Iranian 'Chosen Brick' Spyware Campaign

The US and UK governments have issued a joint advisory warning that Iranian state-linked hackers are using a spyware tool called 'Chosen Brick' to target dissidents. The software is reportedly designed to exfiltrate sensitive personal data, including emails and private messages.

Share
Coverage
leftcenterrightinternationalinvestigative

The National Cyber Security Centre (NCSC) in the United Kingdom, alongside counterparts in the United States, has identified a specific family of spyware known as 'Chosen Brick' being deployed by actors linked to the Iranian state. According to the advisory, the primary objective of this cyber campaign is the surveillance and targeting of dissidents.

The technical analysis indicates that the spyware is capable of compromising personal devices to gain unauthorized access to private communications. Once installed, the software allows operators to steal emails, messaging data, and other sensitive information stored on the target's device. While the advisory confirms the existence and use of the tool, it does not provide a comprehensive list of specific victims or the total number of individuals impacted by the campaign.

This disclosure is part of a broader effort by Western intelligence agencies to expose state-sponsored cyber espionage activities. By publicly identifying the 'Chosen Brick' tool, officials aim to help organizations and individuals improve their security posture against Iranian cyber operations. The advisory serves as a warning that state-linked groups continue to refine their digital toolkits to monitor political opponents and critics of the Iranian government. As of now, there is no information regarding the specific methods used to initially infect target devices, nor has the Iranian government provided an official response to these allegations.

📡 Media Analysis

How each outlet framed the story — angles, word choices, and what they chose to push or ignore.

NDTVCenterA

Reported the advisory as a straightforward security alert without additional political commentary.

"Iranian state-linked cyber actors"

"Iranian state-linked cyber actors"

🔍 What Nobody's Reporting

  • ·Lack of detail regarding the specific delivery methods used to infect devices with the spyware.
  • ·Absence of a response or statement from Iranian officials regarding the allegations.
  • ·No information provided on the scale or duration of the 'Chosen Brick' campaign.

📰 Sources

0 A-rated source(s) among 1 total. Lowest trust: NDTV (B)