Iranian Spyware Alert: Beware of Fake VPNs and Starlink Apps!
New Android spyware, DCHSpy, disguises itself as VPN apps and Starlink services to target dissidents and activists. Linked to Iran’s MOIS, it collects a wide array of personal data. Its distribution is especially suspicious given Starlink’s recent ban in Iran, making DCHSpy a tech-savvy spy with a questionable sense of humor.

Hot Take:
Looks like the Iranian Ministry has been busy playing ‘cyber-spy’ games, treating Android phones like their personal information buffet. Pro tip: If an app promises to give you the moon (or Starlink), it’s probably just looking to steal your WhatsApp chats instead!
Key Points:
- Android spyware linked to the Iranian Ministry is masquerading as VPN and Starlink apps.
- The spyware, dubbed DCHSpy, collects a wide range of personal data.
- DCHSpy is believed to be the work of MuddyWater, an Iranian nation-state group.
- The spyware is particularly targeting dissidents, activists, and journalists.
- Starlink-related lures are being used despite Iran’s recent ban on the service.
Already a member? Log in here