Telegram fixes major security flaw discovered in Android app: Here's how you can stay safe
Cybersecurity researchers at ESET have uncovered a significant security flaw in the Telegram app for Android devices. This vulnerability, termed a "zero-day exploit," allows attackers to send malicious files that masquerade as regular videos via Telegram chats. Dubbed "EvilVideo," this exploit was discovered on an underground online forum in June 2024.
Read More: Amazon sale: Top discounts on laptops and gaming monitors from HP, Lenovo, MSI and more
The exploit enables hackers to distribute dangerous files disguised as innocent 30-second videos. These files can be sent through Telegram channels, groups, or private chats. Typically, when users receive videos on Telegram, they are automatically downloaded, provided the setting is enabled. As a result, the harmful file gets downloaded as soon as the recipient opens the chat.
ESET researcher Lukas Stefanko and his team discovered this exploit while monitoring secret online forums. They encountered a seller demonstrating the exploit's functionality in a public Telegram channel. ESET subsequently accessed this channel and obtained the malicious file for testing. Their experiments confirmed that the exploit affected older versions of Telegram, specifically those before version 10.14.5. The hackers exploited the Telegram API, a tool for developers to create and upload content, to disguise these harmful files as videos. When users attempted to play the "video," Telegram would indicate playback issues and suggest using another app, leading to the installation of a malicious application if the user complied.
Read More: 10 Netflix tips and tricks: From hidden menus to secret features, here's how to get the most from your subscription
ESET detected this issue on June 26, 2024, and promptly notified Telegram. Initially, there was no response. However, upon a second report on July 4, Telegram responded swiftly and began investigating. The issue was resolved with the release of a new app version, 10.14.5, on July 11, 2024. This update
Read more on tech.hindustantimes.com
