SecurityLobstersabout 2 hours ago
Telegram Desktop Allows Account Takeover
11 min read
A researcher discovered that clicking a crafted link in a Telegram group allows attackers to steal login credentials via IPC injection. The flaw stems from how the app handles commands, letting a malicious link execute arbitrary file reads to grab encrypted session keys.
Level
Hype check
Tap to vote and see what everyone thinks.