Government agencies warn that Iranian state-linked hackers are using CHOSEN BRICK to spy on dissidents, activists, and journalists by stealing messages, screenshots, and audio. The malware is spread through social engineering on WhatsApp and Telegram, hides with Windows persistence, and sends stolen data through Telegram and cloud services. #CHOSENBRICK #Iranian #Telegram #WhatsApp #FBI
Keypoints
- CHOSEN BRICK targets dissidents, activists, and journalists worldwide.
- The malware steals email, Telegram, and WhatsApp communications.
- Attackers use impersonation lures through WhatsApp and Telegram messages.
- Fake apps like Norton Antivirus and Adobe Flash Player are used to deliver the malware.
- Stolen data is sent through Telegram and cloud services, and may appear on pro-Iranian leak sites.