[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![TheHackersNews Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::209811713.png) The Hacker News [@TheHackersNews](/creator/twitter/TheHackersNews) on x 926.3K followers
Created: 2025-07-21 17:18:32 UTC

🚨 New Android spyware linked to Iran’s MOIS is posing as Starlink and VPN apps.

DCHSpy hijacks WhatsApp, mic, camera, files, and location—likely targeting dissidents post-Israel-Iran conflict.

Still spreading via Telegram.

Full report →

![](https://pbs.twimg.com/card_img/1947345388731514880/rItlpgJ3?format=jpg&name=800x419)

XXXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1947345461066469849/c:line.svg)

**Related Topics**
[telegram](/topic/telegram)
[files](/topic/files)
[whatsapp](/topic/whatsapp)
[android](/topic/android)

[Post Link](https://x.com/TheHackersNews/status/1947345461066469849)