Topic

Surveillance of journalists and activists

Targeted digital intrusion against reporters, dissidents and human rights workers, where a single compromised device can expose sources and expose people to harassment or arrest.

Current clusters

build1 publisher

CHOSEN BRICK routes its commands through a Telegram bot issued per victim device

A joint NCSC, FBI and AIVD advisory traces the implant's exfiltration to Telegram and three object storage hosts. The same advisory tells defenders not to read traffic to those services as malicious on its own.

Publishers:dev.to

Reality

Evidence70
Adoption42
Hype gap−8
Incentives25
Confidence62