Telegram zero day used to spread cryptomining malware
A zero-day vulnerability in the popular encrypted messaging app Telegram has subjected affected users to remote cryptomining for months, according to research released Tuesday by Kaspersky Lab. The vulnerability is in the chat app’s Windows client, Kaspersky researcher Alexey Firsh writes. The weakness specifically is in the way Telegram deals with a Unicode character that reverses the direction of text in the app. A hacker sends a victim what appears to be a .png image attachment. As a result of trickery with the Unicode character, it is actually a JavaScript file that installs malware on their system. Kaspersky found that the vulnerability has been exploited to mine cryptocurrency such as Monero, Zcash and Fantomcoin on a victim’s computer. In some cases, the zero day was used to deploy spyware or remote control malware. Firsh writes that Kaspersky doesn’t know exactly which versions of Telegram have been affected in the past, […]
The post Telegram zero day used to spread cryptomining malware appeared first on Cyberscoop.
Continue reading Telegram zero day used to spread cryptomining malware
Symphony, a secure messaging app that counts 15 of the world’s biggest banks among its investors and 200,000 paying customers, has raised a new tranche of funding to fuel its expansion into new markets. Symphony has closed in on $63 million; and according to sources close to the company, the startup is now valued at over $1 billion — confirming our reporting from December. This…