Chosen Brick, Iran’s Surveillance Malware Spreads via Telegram
Authorities from the United Kingdom, the United States, and the Netherlands warned about the Windows malware family Chosen Brick. According to the text, Iranian cyber and intelligence services use it to track dissidents, journalists, and activists and to collect their contacts, emails, and social media messages. The malware has been observed in targeted attacks delivered through Telegram, and stolen data from compromised devices may appear on pro-Iranian leak sites.
CERT24