Home > List all groups > List all tools > List all groups using tool DCHSpy

Threat Group Cards: A Threat Actor Encyclopedia

Names	DCHSpy
Category	Malware
Type	Info stealer
Description	(Lookout) DCHSpy is an Android surveillanceware tool leveraged by Iranian cyber espionage group MuddyWater.
Information	<https://www.lookout.com/threat-intelligence/article/lookout-discovers-iranian-dchsy-surveillanceware>

Last change to this tool card: 16 August 2025

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	MuddyWater, Seedworm, TEMP.Zagros, Static Kitten		2017-Jul 2025

1 group listed (1 APT, 0 other, 0 unknown)

APT groups