Iranian Hackers Utilize CHOSEN BRICK Malware

Iranian hackers linked to the state are using a new malware called CHOSEN BRICK to specifically spy on dissidents, activists, and journalists around the world. This malware aims to steal sensitive information and monitor the communications of those affected. Government agencies have warned about the dangers posed by this malware and advise increased vigilance. The CHOSEN BRICK malware has been specifically developed for Windows operating systems and employs various techniques to infiltrate systems unnoticed. Security researchers have found that the malware spreads through phishing emails disguised as legitimate communications.

These emails often contain malicious attachments or links that download the malware upon opening. Another feature of CHOSEN BRICK is its ability to integrate into existing software to make detection by antivirus programs more difficult. The malware can also collect data from various applications and files on the infected system. This information is then sent to servers controlled by the attackers. The security situation has worsened in recent months, as more reports of attacks on journalists and human rights activists from Iran and other countries emerge.

The malware is not only used for surveillance but also to instill fear and uncertainty among the target groups. Experts warn that such attacks threaten press freedom and human rights. Government agencies in several countries have already taken measures to protect their citizens from this threat. These include information campaigns highlighting the risks of phishing and malware, as well as technical support for those affected. The U.S. government, for example, has issued a warning about the dangers of CHOSEN BRICK and similar malware variants.

CHOSEN BRICK is not the first of its kind used by Iranian hackers. Previous attacks have often been linked to other malware variants with similar objectives. Security researchers emphasize the need to continuously monitor the development of such threats and implement appropriate countermeasures. The international community has responded to the threat posed by Iranian hackers by enhancing cooperation in the field of cybersecurity. Countries like the U.S. and the U.K. have launched joint initiatives to share information about cyberattacks and improve security infrastructure.

This collaboration aims to help minimize the impact of such attacks. The use of malware like CHOSEN BRICK highlights the growing threat from state-sponsored hacker groups. The attacks target not only individuals but also organizations advocating for human rights and press freedom. Experts recommend taking security precautions and regularly updating software to protect against such threats. The CHOSEN BRICK malware was first identified in 2026 and has since triggered a variety of attacks on different target groups. Security researchers are working to analyze the malware and develop countermeasures to mitigate its impact on affected individuals. The security vulnerability CVE-2026-1234, associated with this malware, affects numerous systems worldwide and requires urgent attention from IT security professionals.