The intelligence agencies of the United Kingdom, the United States, and the Netherlands have jointly issued a warning about a sophisticated Iranian spyware campaign aimed at targeting Iranian dissidents and critics living abroad. The spyware, identified as ‘CHOSEN BRICK,’ is reportedly used by Iranian government-affiliated hackers to monitor and surveil individuals who openly criticize the Iranian regime.
This international alert comes amid growing concerns about the reach and capability of Iranian cyber operations, which increasingly target diaspora communities across the globe. CHOSEN BRICK spyware is believed to be highly intrusive, capable of collecting sensitive data including communications, location tracking, and access to personal devices such as smartphones and computers.
According to Western intelligence officials, the spyware employs advanced techniques to evade detection and gain persistent access to victim devices. Targets include activists, journalists, human rights defenders, and political opponents who reside primarily in Western countries.
The agencies emphasize that this cyber threat undermines the freedom and safety of those who express dissent against the Iranian government and reinforces Tehran’s intent to silence opposition at any cost, even beyond its borders.
The UK’s National Cyber Security Centre (NCSC), the US Cybersecurity and Infrastructure Security Agency (CISA), and the Netherlands’ National Coordinator for Security and Counterterrorism (NCTV) have released guidelines for the public to recognize suspicious applications and unsolicited communications that could be linked to CHOSEN BRICK.
Experts urge Iranian expatriates and activists to remain vigilant, utilize robust cybersecurity practices, and report any suspicious activity to local authorities and cyber defense organizations. This joint advisory is part of a broader effort to expose and disrupt state-sponsored cyber operations that threaten global human rights and digital freedoms.
This disclosure underscores increasing geopolitical tensions in cyberspace, where authoritarian regimes like Iran invest heavily in cyber espionage tools to suppress dissent beyond national boundaries. The international community continues to call for stronger cooperation to combat such malicious cyber activities and protect vulnerable communities worldwide.
In summary, the emergence of CHOSEN BRICK spyware marks a worrying development in Iran’s extraterritorial intelligence operations, posing significant risks to dissidents who advocate for democratic values and human rights. The coordinated warning from UK, US, and Dutch intelligence agencies serves as a critical alert to help secure the safety and privacy of affected individuals globally.
