← Back to Timeline
STANDARD CYBER UNVERIFIED

Western Allies Issue Joint Advisory on Iranian State-Linked Spyware Operations

Sep 15, 2026 09:32 AM CT Global cybersecurity,espionage,iran,us,uk,netherlands,surveillance

Summary

The UK, US, and Netherlands issued a joint cybersecurity advisory identifying spyware used by Iranian state-linked actors to target dissidents, activists, and journalists. This highlights Iran's ongoing use of cyber tools for intelligence gathering and suppression of opposition, contributing to the broader hybrid warfare dimension of the conflict theater.

Full Content

UK, US and Netherlands issue advisory on Iran spyware Britain, the United States and the Netherlands on Tuesday issued a joint cybersecurity advisory detailing spyware they say is used by Iranian state-linked actors to target dissidents, activists and journalists. Britain's National Cyber Securit...

Sources (1)

T3 Middle East Eye
50% reliable Link

Actor Responses

Iran AGGRESSOR

State-linked actors identified as using spyware to target dissidents and journalists.

United States DEFENDER

Issued joint advisory detailing the threat and attribution.

Israel NEUTRAL

Not directly mentioned in this specific advisory event.

Related Events (2)

→ PARALLEL TO 92% confidence
STANDARD IRGC Intensifies Domestic Mobilization and International Dissident Suppression Campaign

"The new event details Western exposure of Iranian state-linked cyber operations targeting dissidents, which directly corroborates and runs parallel to Event 4's report on the IRGC intensifying domestic mobilization and international dissident suppression campaigns. Both events describe the same strategic effort by Iran to suppress opposition using different tools (cyber vs. general mobilization)."

← PARALLEL TO 95% confidence
STANDARD Iranian Cyber Actors Deploy CHOSEN BRICK Spyware Against Western Activists and Press

"The new event details the specific deployment of CHOSEN BRICK spyware by Iranian actors, which is the precise subject of the joint advisory issued by Western allies in event 12. Both events describe the same ongoing cyber campaign and intelligence gathering efforts against Western targets."