← Back to Timeline
STANDARD CYBER UNVERIFIED

Iranian Cyber Espionage Campaign Targets Critics via Medical Data Spoofing

Sep 15, 2026 01:57 PM CT Tehran, Iran cyber,espionage,iran,western-intelligence,spyware

Summary

Western intelligence agencies have identified a new Iranian cyber operation using spyware disguised as MRI scan results to target critics. This development highlights Iran's continued investment in sophisticated cyber espionage capabilities to suppress dissent and gather intelligence, contributing to the broader hybrid warfare dimension of the conflict theater.

Full Content

UK, US and Dutch intelligence agencies issue warning about cyber tool dubbed Chosen Brick

Sources (1)

T2 Financial Times
70% reliable Link

Actor Responses

Iran AGGRESSOR

Conducted cyber espionage operations using disguised spyware to hack critics.

United States NEUTRAL

Issued warnings regarding the cyber tool dubbed Chosen Brick.

Related Events (2)

→ PARALLEL TO 85% confidence
STANDARD Iranian State Media Asserts Resilience of Nuclear Knowledge Against Military Strikes

"Both events demonstrate Iran's multi-domain strategy to assert resilience and project power. While Event 5 focuses on political rhetoric regarding nuclear program survivability, the New Event highlights cyber capabilities used for espionage and suppression. Together, they illustrate the hybrid nature of Iran's conflict posture, combining nuclear deterrence narratives with active cyber operations."

→ PARALLEL TO 75% confidence
STANDARD Iranian Official Asserts Nuclear Program Resilience Against Military Strikes at IAEA

"Both events represent distinct theaters of Iranian state activity aimed at maintaining strategic advantage. Event 15 involves military assertions of nuclear program resilience at an international body, while the New Event involves covert cyber operations. They are parallel efforts to sustain Iran's strategic position amidst external pressure."