THREATOPS

THREAT OPS › Threat News › US, UK Agencies Detail Iranian Malware Campaign Targeting Dissidents

US, UK Agencies Detail Iranian Malware Campaign Targeting Dissidents

medduo_decipherPublished 2026-09-17

<p class="wp-block-paragraph">A new joint advisory from multiple law enforcement agencies this week warned of an Iranian cyber campaign targeting dissidents and journalists in the U.S., UK, and elsewhere. </p>

<p class="wp-block-paragraph">The advisory centered on a malware family called Chosen Brick, which has been used since at least 2025. This malware has enabled Iranian state actors to

MITRE ATT&CK techniques

Malicious FileT1204.002
Social EngineeringT1684
Social MediaT1593.001

Indicators of compromise

https://www.ic3.gov/CSA/2026/260915-2.pdfurl

Original source: https://decipher.sc/2026/09/16/us-uk-agencies-detail-iranian-malware-campaign-targeting-dissidents/