FBI, Allies Expose Iranian Spyware Targeting Dissidents
FBI, Allies Expose Iranian Spyware Targeting Dissidents
The News
The United States, Britain and the Netherlands issued a joint cybersecurity advisory on Tuesday detailing spyware they say Iranian state-linked actors use to target dissidents, activists and journalists, Reuters reported.
The FBI said the tools belong to a hacking software family it calls "CHOSEN BRICK," used to "collect intelligence, conduct data leaks, and inflict reputational harm" against targets, according to the Times of Israel.
Britain's National Cyber Security Centre said Iranian operators leaned on social engineering to get onto victims' devices — including luring people in with fake MRI test results, The Independent reported.
Who Was Targeted
The advisory describes dissidents, activists and journalists as the intended victims. The Independent reported the campaign hit UK-based dissidents, activists and journalists; Sky News reported British intelligence found the operation collected data from targets around the world.
Timeline
Sky News reports that British spies uncovered an Iranian cyber campaign that collected data from targets around the world.
Britain, the United States and the Netherlands publish a joint cybersecurity advisory on spyware they attribute to Iranian state-linked actors, Reuters reports.
The FBI identifies the "CHOSEN BRICK" spyware family and says it is used to collect intelligence, leak data and damage targets' reputations, per the Times of Israel.
The NCSC details the social engineering tricks used to hook victims, including fake MRI test results, per The Independent.
Reactions
The FBI framed the campaign as a tool of intimidation as much as espionage, saying the software is deployed to gather intelligence, dump stolen data and inflict reputational harm on the people it targets.
Britain's NCSC emphasized the human side of the attacks — that the Iranian operators tricked their way in with believable bait, such as phony medical results, rather than relying on exotic technical exploits alone.
The advisory is a joint product of three governments — the US, the UK and the Netherlands — which is itself the message: three Western states putting their names to the same attribution against Tehran on the same day.
What's Next
Joint advisories of this kind exist to be acted on: the three governments are pushing the technical details of the spyware out publicly so potential targets and defenders can spot and block it.
Watch for Iranian denials, for additional countries signing on to the attribution, and for further detail from the NCSC and the FBI on how many people were hit and where.
Poll
How should Washington respond to Iranian spyware aimed at dissidents and journalists?
UMass Dartmouth Running Back, 18, Stabbed to Death
Trump Vows 'AI Force,' Czar; Polls Name Change
Sep 20, 2026
Iran Sends Trump Three Conditions to End War
Sep 19, 2026
Faulty AI Intel Nearly Started War With China
Sep 19, 2026
German General Breuer Elected NATO's Top Officer
Sep 19, 2026
Nobel Laureate: War, Sanctions Crushing Iranians
Sep 19, 2026
Dutch Police Disperse Violent Far-Right Hague Protest
Sep 19, 2026
GOP Midterm Odds Fade With 45 Days Left
Sep 19, 2026
Maher Rejects Tarlov's Claim Democrats Are Less Crazy
Sep 19, 2026
Patrick Clancy Breaks Silence After Ex-Wife Killed Kids
Sep 19, 2026
Trump Cuts Park Staff, Diverts Fees to DC
Sep 19, 2026
Holocaust Heirs Sue LA Museums Over Looted Art
Sep 19, 2026
Trump's Fed Chair Hikes Rates, Defying White House
Sep 19, 2026
Miller Drives Push to Deport Illegal Immigrant Children
Sep 19, 2026
US Lifts Sanctions on Eritrea's Military, Ruling Party
Sep 19, 2026
Air Force Admits US Has Space Weapons
Sep 19, 2026
Turkey Revokes License of Iran's Mellat Bank
Sep 19, 2026
Billionaire Ratcliffe Blasts Britain Over Immigration, Taxes
Sep 19, 2026
Navajo Nation Flash Flood Kills Three
Sep 19, 2026
Explosions Over Riyadh Trigger Saudi Air Alerts
Sep 19, 2026
Sep 19, 2026