Threat Intelligence Brief
Curated summary with source attribution
Source: jpost.com
Threat Risk: High
Victim: Journalists, dissidents, and activists
Incident: Deployment of CHOSEN BRICK spyware via spear-phishing on WhatsApp and Telegram.
Impact: Full device compromise including theft of messages, screen captures, and microphone access.
Attacker: Iranian state-linked actors
Analysis: The CHOSEN BRICK campaign utilizes social engineering on encrypted messaging platforms to deliver malicious payloads. By posing as trusted contacts and using fabricated documents, attackers gain deep access to microphones, screens, and private communications. This operation highlights a persistent effort to repress political dissent through advanced digital surveillance.
Recommendations: Verify the identity of contacts via a secondary channel before opening files on messaging apps.; Avoid downloading unsolicited documents, especially those claiming to be medical or official records.; Implement strict device security policies and monitor for unauthorized background processes or battery drain.
Source: The Jerusalem Post
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source