Telekopye Toolkit Used as Telegram Bot to Scam Marketplace Users

By Deeba Ahmed
Telekopye Toolkit was previously identified in August 2023 as being leveraged for a phishing scam by Russian cybercriminals.
This is a post from HackRead.com Read the original post: Telekopye Toolkit Used as Telegram Bot to Scam Marketpl… Continue reading Telekopye Toolkit Used as Telegram Bot to Scam Marketplace Users

WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users

A WhatsApp mod with a built-in spy module has been spreading through Arabic and Azeri Telegram channels since August 2023. Continue reading WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users

Supply Chain Attack Targeting Telegram, AWS and Alibaba Cloud Users

By Deeba Ahmed
KEY FINDINGS Cybersecurity firm Checkmarx has discovered a new wave of supply chain attacks exploiting bugs in popular…
This is a post from HackRead.com Read the original post: Supply Chain Attack Targeting Telegram, AWS and Alibab… Continue reading Supply Chain Attack Targeting Telegram, AWS and Alibaba Cloud Users

Does Telegram allow you to see shared contacts of people you are connected to? [closed]

Few years back, I made an account on Telegram & then used it to chat to some people anonymously because I had read that Telegram doesn’t share your number or name with people who you chat with. However, I discovered that Telegram allow… Continue reading Does Telegram allow you to see shared contacts of people you are connected to? [closed]

Google “confirms” that exploited Chrome zero-day is actually in libwebp (CVE-2023-5129)

The Chrome zero-day exploited in the wild and patched by Google a few weeks ago has a new ID (CVE-2023-5129) and a description that tells the whole story: the vulnerability is not in Chrome, but the libwebp library, which is used by many popular applic… Continue reading Google “confirms” that exploited Chrome zero-day is actually in libwebp (CVE-2023-5129)

Fake Signal and Telegram Apps in the Google Play Store

Google removed fake Signal and Telegram apps from its Play store.

An app with the name Signal Plus Messenger was available on Play for nine months and had been downloaded from Play roughly 100 times before Google took it down last April after being tipped off by security firm ESET. It was also available in the Samsung app store and on signalplus[.]org, a dedicated website mimicking the official Signal.org. An app calling itself FlyGram, meanwhile, was created by the same threat actor and was available through the same three channels. Google removed it from Play in 2021. Both apps remain available in the Samsung store…

Continue reading Fake Signal and Telegram Apps in the Google Play Store