Iranian spyware targeting dissidents, they pose as a friend on WhatsApp/Telegram, send you a file that looks like a normal app and once you open it they grab your screen, mic, emails, and messaging sessions.

news

tech

![](https://www.ncsc.gov.uk/sites/default/files/2026-09/Chosen%20brick.svg)Iranian spyware targeting dissidents, they pose as a friend on WhatsApp/Telegram, send you a file that looks like a normal app and once you open it they grab your screen, mic, emails, and messaging sessions.

Sources: [NCSC](https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists) (pdf) and [SecurityWeek](https://www.securityweek.com/us-uk-dutch-agencies-expose-iranian-chosen-brick-surveillance-malware/) (article)