On 15 September the FBI and a joint NCSC/FBI/AIVD advisory landed the same day, describing the same Iranian spyware — HEAVYGRAM to one, CHOSEN BRICK to the other. Tova Dvorin and Adrian Culley unpack how MOIS-linked operators reach dissidents, journalists and activists through fake AI-tool installers, why the MsCache.exe component steals a live Gmail OAuth session instead of a password, and the ten-second registry check any defender can run today.

NCSC briefing: https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists
FBI Flash: https://www.ic3.gov/CSA/2026/260915.pdf

Podden och tillhörande omslagsbild på den här sidan tillhör SafeBreach. Innehållet i podden är skapat av SafeBreach och inte av, eller tillsammans med, Poddtoppen.