Malware Steals WhatsApp Data to Track Iran Dissidents

Researchers at cybersecurity firm Lookout have identified a new variant of DCHSpy, a malware strain that can now exfiltrate sensitive data from WhatsApp and device-stored files. The discovery came just one week after Israel launched airstrikes targeting Iran’s nuclear infrastructure. The malware steals WhatsApp data as part of a broader effort to monitor individuals perceived as threats to the Iranian regime.

First detected in 2024, DCHSpy has evolved quickly, according to Lookout. The latest version expands its capabilities, enabling it to extract messaging content and documents stored on infected devices. Analysts believe the upgrades are designed to strengthen surveillance of regime opponents.

The malware steals WhatsApp data using advanced techniques that allow it to remain undetected while transferring private information. Analysts continue to monitor its deployment and suspect it may be part of a coordinated digital espionage campaign.

Read the full report at:
https://therecord.media/malware-exfiltrates-whatsapp-iran-muddywater