In a move that can only be described as “VPNception,” Iranian-linked digital tricksters have managed to redefine online anonymity by ensuring everyone knows exactly what you’re doing online. Their newest concoction, the DCHSpy Android malware, is masquerading as a VPN app, proving once and for all that the best way to remain hidden is to be seen.

The Iranian Ministry of Intelligence and Security (MOIS) has apparently decided to go the extra mile for data collection, skipping the tedious process of seeking permission. Instead, they’re following the age-old adage: Why ask for access when you can take it without asking? And as a bonus, it comes conveniently packaged as a service from SpaceX’s Starlink. Because if anyone is going to spy on you, it might as well seem like it’s from outer space.

Mobile security watchdogs at Lookout are now left to play digital detective, tracking down this surveillanceware, a task only slightly less frustrating than finding a needle in a stack of fake internets. So next time you download a VPN app, remember: it might just be your ticket to an all-expenses-paid surveillance vacation sponsored by Tehran.