Get the latest tech news
Telegram zero-day for Android allowed malicious files to masquerade as videos
Researchers at ESET found an account on an underground forum selling an exploit for a zero-day vulnerability in the Telegram app.
Researchers have discovered a zero-day exploit for the Telegram messaging app on Android devices that could have allowed attackers to send malicious payloads disguised as legitimate files. It was sold for an unspecified price by a user with the username “Ancryno.” In its post, the seller showed screenshots and a video of testing the exploit in a public Telegram channel. The option can be disabled manually, but in that case, the payload could still be installed on the device if a user tapped the download button in the top left corner of the shared file.
Or read this on r/technology
