Iranian Spyware Alert: Beware of Fake VPNs and Starlink Apps!

New Android spyware, DCHSpy, disguises itself as VPN apps and Starlink services to target dissidents and activists. Linked to Iran’s MOIS, it collects a wide array of personal data. Its distribution is especially suspicious given Starlink’s recent ban in Iran, making DCHSpy a tech-savvy spy with a questionable sense of humor.

Pro Dashboard

Hot Take:

Looks like the Iranian Ministry has been busy playing ‘cyber-spy’ games, treating Android phones like their personal information buffet. Pro tip: If an app promises to give you the moon (or Starlink), it’s probably just looking to steal your WhatsApp chats instead!

Key Points:

  • Android spyware linked to the Iranian Ministry is masquerading as VPN and Starlink apps.
  • The spyware, dubbed DCHSpy, collects a wide range of personal data.
  • DCHSpy is believed to be the work of MuddyWater, an Iranian nation-state group.
  • The spyware is particularly targeting dissidents, activists, and journalists.
  • Starlink-related lures are being used despite Iran’s recent ban on the service.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?