> TritonInfoSec News
Home / Sep 16, 2026 / Story
0
#6 The Hacker News general September 15, 2026 at 16:29 UTC

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

By [email protected] (The Hacker News)

AI Summary

A joint advisory from US, UK, and Netherlands cybersecurity agencies detailed an Iranian intelligence-operated Windows malware controlled via Telegram that exfiltrates emails, chat messages, and screenshots, and activates the microphone to surveil dissidents, journalists, and activists worldwide. The Telegram-based C2 mechanism is notable for its operational security appeal to state actors and its targeting of high-risk individuals rather than traditional corporate networks.

Read full article → https://thehackernews.com/2026/09/iranian-hackers-…

Relevance score: 86.0/100

# More from September 16

  1. 1
    Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution The Hacker News
  2. 2
    Cisco patches Secure Email Gateway zero-day exploited in attacks BleepingComputer
  3. 3
    CISA: Critical VMware RCE flaw now exploited by ransomware gangs BleepingComputer
  4. 4
    China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE The Hacker News
  5. 5
    Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases SecurityWeek
  6. 7
    Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites BleepingComputer
  7. 8
    Japan's Digital Agency says VPN flaw exposed 246,000 personnel records BleepingComputer
  8. 9
    Cisco warns customers of actively exploited zero-day in email gateways CyberScoop
  9. 10
    KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens The Hacker News