Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Cybersecurity agencies in the US, UK, and Netherlands have identified a Windows malware used by Iran's intelligence service to spy on targets globally. The malware is controlled through the Telegram messaging app. It has the capability to copy emails and chat messages from the target, take screenshots, and activate the microphone to record audio. This malware is reportedly used to target dissidents, journalists, and activists. The intelligence service's use of this malware highlights a method by which they gather information on individuals of interest.