Iranian hackers use CHOSEN BRICK Windows malware to spy on targets

September 16, 2026 · BleepingComputer · Severity: HIGH

Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide.

Key Takeaways

Iranian state-linked hackers are deploying CHOSEN BRICK Windows malware to spy on dissidents, activists, and journalists worldwide per government agency warnings.
The CHOSEN BRICK malware provides persistent surveillance capabilities on compromised Windows systems targeting individuals critical of the Iranian government.
High-risk individuals including activists and journalists should implement advanced endpoint protection and practice digital hygiene against state-sponsored malware.