Telegram Android flaw enables hackers to disguise malware as videos

Attackers on Telegram are disguising malicious scripts as videos and tricking users into running them.

A security researcher who goes by the moniker 0x6rss has detailed a vulnerability called EvilLoader that affects the Telegram Android app. It’s similar to the bug from last year when attackers directly sent users APK files disguised as adult videos.

While Telegram fixed the previous flaw, the researcher found that its API still allows attackers to disguise malicious files as videos.

Attackers can disguise a .htm file as a video and send it to unsuspecting users. This extension is used for webpage files saved with the Hypertext Markup Language (HTML). However, web pages may also include and run JavaScript (JS) code.

If a Telegram user tries to play the disguised file, the JavaScript code inside the HTML will execute. This allows attackers to download and run additional malicious payloads.
source

Warum Ihre Verbindung Zu Sich Selbst Die Menschen Um Sie Herum Beeinflusst - Carl Jung Erklärt

https://youtu.be/7xS-_cBdF4g?si=qMgKUzi31yl4PSPU