Dark Storm advertises DDoS-for-hire and a $5,000 Amino demand
StealthMole tracked Telegram sales by persona GLITCH; claimed outages, including Amino, are not independently confirmed.
Stories per day · 30 days
5 RSS
Relatedandroid3wechat3ddos2extortion2hacktivism2infostealer2ios2rlottie2sideloading2spyware2account-takeover1browser-extensions1chrome1command-and-control1court-records1crypto-wallets1cve-2026-1111051dark-storm1
59 stories, newest first · one card per story
Stories tagged #telegram
Paper compares WeChat and Telegram MiniApp security designs
The qualitative study derives cross-platform analysis requirements and does not claim validated vulnerability findings.
VOLTA Infostealer Uses Claude, Gemini and Kimi AI to Rank Victims
VOLTA builds evidence bundles and feeds them to Claude Opus 4.6, Gemini 2.5 Flash and Kimi K2 via OpenRouter to generate monetization-ranked Telegram dossiers.
1
Malicious Firefox extensions impersonate Phantom, Jupiter, and Bitget
Socket says the add-ons stole recovery phrases and private keys; the Phantom copy sent secrets to Telegram and moved funds.
1
Telegram for Android flaw ran code after a voice call was answered
Versions 8.6.2 through 12.10.3 were affected; 12.10.4, released in late September, fixes MediaState handling, and no CVE was assigned as of October 29.
OffensiveCon Japan agenda covers Chrome, Telegram and iOS research
October 27–28 session titles name Skia, Telegram stickers and Muse Spark, but list no CVEs, versions or confirmed attacks.
3
Researcher claims new zero-click Telegram sticker bugs can run code on iOS
Aziz says logic flaws bypass server checks Telegram cited against rlottie bug CVE-2026-111105; no public proof or patch.
Rentable Android spyware uCreater targets WeChat, Telegram and wallets
YingGai hooks sideloaded apps to steal chats, OTPs and wallet data and can spoof camera checks.
uCreator Android spyware steals Telegram 2FA and clones WeChat
The rentable kit hides in sideloaded Telegram and WeChat copies; its code and C2 match Doctor Web’s Baohuo.
India to require WhatsApp and Telegram accounts to stay tied to active SIMs
DoT’s deadline is December 31, 2026; how far accounts stop working depends on each app’s implementation.
Prince of Persia found hosting command-and-control servers in the US
Semperis traced Tornado malware to a US host after the group appeared quiet following February strikes on Iran.
2
Here’s What Telegram Giving Data to the U.S. Government Looks Like
Court records show Telegram gave U.S. investigators a user's phone number, ID, and IP address.
3
ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
ZDI discloses a user-interaction Telegram rlottie RCE tracked as CVE-2026-111105.
Auditing the auditor: Unmasking Apex Accelerator
Elastic unmasked Apex, a fake Web3 accelerator pushing malicious npm packages and infostealers to crypto founders.
12
Telegram Desktop: one-click account takeover via IPC injection
Telegram Desktop through 7.2.8 let a clicked link steal local login files.
11
PoC Released for Telegram Desktop Flaw Enabling One-Click File Account Takeover
Public PoC shows Telegram Desktop before 7.2.9 can leak local files and sessions via a crafted link.
10
Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware
Suspected TraderTraitor operators trojanized a Terraform provider to deliver the cross-platform FLATROOF backdoor.
2
Leaked chats show Russian extortion gang sending ‘agents’ into US law firms
Leaked chats show Silent Ransom Group recruiting U.S. operatives to physically infiltrate law firms and extort them.
3
Pump-and-Dump meets Honeypot Tokens: Detection and Analysis of Telegram Bait-and-Trap Schemes
Analysis of 3,677 Telegram events shows DEX bait-and-trap honeypots earned organizers over $7 million.
Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
Huntress reports phishing that abuses Microsoft Power BI links to install rogue ScreenConnect RMM clients.
Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading
ASOS says names and contact details may have been accessed after rogue customer notifications; broader hack claims remain unproven.
4
Hackers Hide Vasilek Backdoor Inside VMware Tools to Target Medical Organizations
Partisan Zmiy hid the Vasilek backdoor in VMware Tools during a two-year medical-organization intrusion.
2
Belarusian hacktivists spent two years inside Russian healthcare network, researchers say
Belarusian Cyber Partisans maintained nearly two years of access to a Russian healthcare network, reading sensitive medical data, researchers say.
2
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
Carbonato installs Hermes Agent on hacked Docker hosts to run Telegram commands and steal AI API keys.