The Approach Comes Through Your Phone: Reading the CHOSEN BRICK Advisory

Britain's NCSC, the FBI, and the Dutch AIVD have jointly warned about spyware they attribute to Iranian state-linked actors, including Iran's Ministry of Intelligence and Security. The malware is delivered through spear-phishing on WhatsApp and Telegram and can steal contacts, emails, messages, screenshots, and microphone audio. Some victim data later appeared on pro-Iranian leak sites. Officials said the tools are almost certainly used to repress dissidents, activists, and journalists.