Chosen Brick: Iranian spyware disguised as medical records targets dissidents

The UK's National Cyber Security Centre, the FBI, and the Dutch AIVD have issued a joint alert regarding Chosen Brick, a spyware tool linked to Iranian state-sponsored hackers. The malware targets dissidents, activists, and journalists by building trust over months before delivering malicious files. Disguised as fake MRI results or legitimate software like Norton Antivirus and KeePass, the spyware infiltrates Windows systems to exfiltrate contacts, messages, and screen data while disabling Microsoft Defender.