Small, three page thread, with no less than FIVE links to a dangerous, foreign social media platform that’s been a tool for hackers and Russian cyber attacks.
If a poster don’t care about their own cyber security, that’s their business. Exposing everybody else to infection and theft is sooo un-Q!
If you’re opening these faceless links, you’re trusting the person who links it has your best interest at heart, or maybe just hasn’t bothered to check. Or maybe just doesn’t care.
To wit:
Quote:
Originally Posted by bambino
|
Quote:
Originally Posted by bambino
|
Quote:
Originally Posted by bambino
|
Quote:
Originally Posted by bambino
|
Quote:
Originally Posted by bambino
|
https://www.laptopmag.com/news/teleg...hijack-your-pc
https://www.keepsolid.com/passwarden...ther-user-data
https://www.forbes.com/sites/zakdoff...h=343218c87857
Yes, Telegram Really Is ‘Dangerous’ For You
Zak Doffman06:00am EDT
A stark new warning today, with millions of you exposed as a malicious new threat exploits Telegram to target you with dangerous malware—even if you’re not a user. If you’re hit by this cyber attack, you risk data theft, spyware, ransomware and even a complete system takeover. Here’s how to check if you’re infected.
Serious new warning issued too millions over Telegram cyber security threats
Last year, Telegram’s Pavel Durov, warned that “using WhatsApp is dangerous.” But now that provocative attack has come back to bite. A new security report, issued today, warns of “a growing cyber threat where hackers use Telegram, the instant messaging app with over 500 million active users, as a command and control system.”
Durov’s WhatsApp warning focused on hacks to the Facebook-owned messenger itself, where, he said, backdoors had been planted to extract user data. He also cautioned WhatsApp users over the lack of end-to-end encrypted backups. These were very targeted, very specific attacks, perpetrated by sophisticated threat actors.
On a wider scale, the use of messengers to spread malware is not new. Earlier this month, Check Point warned that a rogue Netflix security-bypass app on Google’s Play Store was abusing Android’s “Notification Listening Service” to intercept incoming WhatsApp messages on victims’ phones, and then automatically reply to those messages with dangerous, malware-laced attachments and links.
MORE FROM FORBESNew Warning For WhatsApp Users As Videos And Photos Are DeletedBy null
Clearly, Telegram has that same risk—any messenger can be exploited to send dangerous messages, attachments and links, and you should always be wary of links and attachments, even if they appear to come from friends. But there are much more serious dangers with Telegram that can’t be mitigated by a user’s common sense alone.
Telegram is significantly more complex than its direct rivals, the likes of Facebook Messenger, WhatsApp, iMessage and Signal. Its architecture now serves more than 500 million users, through a spider’s web of connected endpoints and its own cloud back-end. It provides seemingly limitless groups and channels, and a range of other sophisticated features, including its own “bot platform.”
As Telegram explains, “bots are simply Telegram accounts operated by software—not people—and they'll often have AI features. They can do anything—teach, play, search, broadcast, remind, connect, integrate with other services, or even pass commands to the Internet of Things.” Unfortunately, that’s not all those bots can do.
Check Point, which also issued this new Telegram warning, says it has “tracked 130 cyber attacks that used malware managed over Telegram by attackers in the last three months... Even when Telegram is not installed or being used, it allows hackers to send malicious commands and operations remotely via the instant messaging app.”
Telegram enabled cyber attack
Telegram enabled cyber attack
Check Point
The malware itself is not spread by Telegram messages—which its why, as Check Point says, it doesn’t matter whether you have it installed or not. The threats are sent to users through simple email campaigns. But once a crafted email attachment is opened on a user’s Windows PC, the bundled Telegram bot manages the links back to the attacker’s command and control server, managing the attack.
As Check Point says, “the popularity of Telegram-based malware aligned to the growing usage of the messaging service worldwide” has become a “growing trend,” a trend that’s getting ever worse. “Dozens of new types of Telegram-based malware, have been found as ‘off-the-shelf’ weapons in hacking tool repositories on GitHub.”
Telegram brings several benefits to attackers and their campaigns—primarily that the platform is known and trusted and so will evade many defences. “Telegram is a legitimate, easy-to-use and stable service that isn't blocked by enterprise anti-virus engines, nor by network management tools,” Check Point says.
Beyond that, an attacker can easily create a new bot without disclosing identifying information, making attribution and interception much harder. Telegram’s install-base is also vast and growing quickly, enabling attackers “to use their mobile devices to access infected computers from almost any location globally.”
This threat vector is not new. Such use of Telegram bots goes back years. But, as Check Point has now clearly shown, despite this the problem has not been addressed. “We believe attackers are leveraging the fact that Telegram is used and allowed in almost all organizations, utilizing this system to perform cyber attacks, which can bypass security restrictions,” says Check Point’s Idan Sharabi.
MORE FROM FORBESiPhone Users Should Change Google Maps Settings After Data Harvesting DisclosureBy null
The specific malware identified by Check Point is “ToxicEye,” a new remote access trojan, or RAT. Not only can this RAT steal data or begin a ransomware lockup of a user’s files, it can even hijack the mic and camera on a PC. Windows users can search for “C:\Users\ToxicEye\rat.ex e” on their systems to see if they have been infected.
If you have that file, then you need to delete it and take immediate advice from your company’s IT support desk if this is a work machine. If it’s on a PC at home, then make sure you install and run a high-quality antivirus program as soon as you can.
Sharabi told me that both individuals and organisations are at risk from these Telegram-enabled attacks, suggesting that “Telegram communications can be blocked in order to protect against this type of threat. Each individual or security admin should remediate this threat based on their desired security policy.”
Be careful brothers and sisters.
