WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users

A WhatsApp mod with a built-in spy module has been spreading through Arabic and Azeri Telegram channels since August 2023. Continue reading WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users

Supply Chain Attack Targeting Telegram, AWS and Alibaba Cloud Users

By Deeba Ahmed
KEY FINDINGS Cybersecurity firm Checkmarx has discovered a new wave of supply chain attacks exploiting bugs in popular…
This is a post from HackRead.com Read the original post: Supply Chain Attack Targeting Telegram, AWS and Alibab… Continue reading Supply Chain Attack Targeting Telegram, AWS and Alibaba Cloud Users

Does Telegram allow you to see shared contacts of people you are connected to? [closed]

Few years back, I made an account on Telegram & then used it to chat to some people anonymously because I had read that Telegram doesn’t share your number or name with people who you chat with. However, I discovered that Telegram allow… Continue reading Does Telegram allow you to see shared contacts of people you are connected to? [closed]

Google “confirms” that exploited Chrome zero-day is actually in libwebp (CVE-2023-5129)

The Chrome zero-day exploited in the wild and patched by Google a few weeks ago has a new ID (CVE-2023-5129) and a description that tells the whole story: the vulnerability is not in Chrome, but the libwebp library, which is used by many popular applic… Continue reading Google “confirms” that exploited Chrome zero-day is actually in libwebp (CVE-2023-5129)

Fake Signal and Telegram Apps in the Google Play Store

Google removed fake Signal and Telegram apps from its Play store.

An app with the name Signal Plus Messenger was available on Play for nine months and had been downloaded from Play roughly 100 times before Google took it down last April after being tipped off by security firm ESET. It was also available in the Samsung app store and on signalplus[.]org, a dedicated website mimicking the official Signal.org. An app calling itself FlyGram, meanwhile, was created by the same threat actor and was available through the same three channels. Google removed it from Play in 2021. Both apps remain available in the Samsung store…

Continue reading Fake Signal and Telegram Apps in the Google Play Store

Chinese APT Slid Fake Signal and Telegram Apps onto Official App Stores

By Habiba Rashid
Key Findings Cybersecurity researchers have warned of fake Signal and Telegram apps that have been distributed through the…
This is a post from HackRead.com Read the original post: Chinese APT Slid Fake Signal and Telegram Apps o… Continue reading Chinese APT Slid Fake Signal and Telegram Apps onto Official App Stores

Trojanized Signal, Telegram apps found on Google Play, Samsung Galaxy Store

ESET researchers have identified two active campaigns targeting Android users, where the threat actors behind the tools for Telegram and Signal are attributed to the China-aligned APT group GREF. Most likely active since July 2020 and since July 2022, … Continue reading Trojanized Signal, Telegram apps found on Google Play, Samsung Galaxy Store