Install
State‑Linked Operations
Campaigns tied to state actors and their cutouts.
- 1 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in State‑Linked Operations
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
2+ hour, 33+ min ago (491+ words) US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C. Cybersecurity and intelligence agencies in the US, UK, and Netherlands have issued a joint advisory warning of a…...
Chosen Brick spyware uses Telegram to target dissidents on Windows – 4sysops
4+ hour, 36+ min ago (24+ words) Iranian state-linked actors are using Chosen Brick, also known as HEAVYGRAM, to spy on dissidents, activists, and journalists through Windows devices. A new joi...
NightEagle APT targets Russian organizations
5+ hour ago (605+ words) posted 16 Sep 2026 In most incidents, the attackers used compromised valid credentials to gain access to corporate VPNs. VPN connections originated from IP addresses in the Russian segment linked to Cloudflare WARP tunnels, as well as from IP addresses associated with…...
British spies uncover Iranian cyber attacks targeting dissidents, journalists
4+ hour, 50+ min ago (183+ words) According to findings from the UK’s National Cyber Security Centre (NCSC), alongside the US Federal Bureau of Investigation (FBI) and the Netherlands’ AIVD intelligence service, the operation relies on advanced spyware designed to harvest sensitive data and monitor targets. The…...
Iranian Hackers Use Fake MRI Results to Infect Victims With CHOSEN BRICK Spyware
6+ hour, 29+ min ago (636+ words) Iranian state-linked hackers are using fake MRI scan results to infect selected people with CHOSEN BRICK, a Windows spyware family built for long-term surveillance. The campaign has targeted individuals in the United Kingdom, United States and Netherlands since at least…...
China-Aligned Hackers Hide PeckBirdy Malware C2 Inside Casino and Adult Websites
5+ hour, 57+ min ago (653+ words) Exploiting a vast and routinely ignored category of internet infrastructure to blend malware traffic into apparent gambling activity. The activity expands on earlier findings by Trend Micro, which identified PeckBirdy as a flexible JScript-based C2 framework used by China-aligned actors against…...
UK, US and Netherlands expose Iran linked spyware campaign targeting dissidents
6+ hour, 2+ min ago (597+ words) Digital Watch Observatory UK, US and Netherlands expose Iran linked spyware campaign targeting dissidents A joint advisory from UK, US and Dutch agencies details how Iran linked actors allegedly used CHOSEN BRICK spyware. On 15 September, cybersecurity agencies in the United…...
NCSC and Allies Warn of Iranian Spyware Campaign
6+ hour, 36+ min ago (447+ words) The UK and its allies have warned opponents of the Iranian regime that they may be subject to targeting by a Tehran-backed spyware campaign. An advisory published yesterday by the National Cyber Security Centre (NCSC), the FBI and the Netherlands…...
Joint cybersecurity advisory issued on Iran-linked spyware
14+ hour, 10+ min ago (628+ words) Wed, 16 Sep 2026 Fri, 11 Sep 2026 Sat, 12 Sep 2026 Mon, 07 Sep 2026 Fri, 04 Sep 2026 Sun, 13 Sep 2026 Wed, 09 Sep 2026 Sun, 06 Sep 2026 Tue, 15 Sep 2026 Mon, 14 Sep 2026 Thu, 10 Sep 2026 Britain, the United States and the Netherlands yesterday issued a joint cybersecurity advisory detailing spyware they say is…...
UK, US and Netherlands issue advisory on Iran-linked spyware
18+ hour, 43+ min ago (287+ words) LONDON, Sept 15 (Reuters) – Britain, the United States and the Netherlands on Tuesday issued a joint cybersecurity advisory detailing spyware they say is used by Iranian state-linked actors to target dissidents, activists and journalists. Britain’s National Cyber Security Centre said Iranian…...