If you downloaded Telegram from a site called APKPure recently, congrats: You downloaded an infostealer and all of your conversations were being logged to some guy's server. image C2: 38[.]190[.]225[.]166 SHA256: 7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff

Replies (13)

inb4 obligatory 'why are you using telegram anyway' comment, I mean yeah, why the hell are you downloading Telegram especially from some third party app repo
Well... Every app is doing that ;) Ah wait... There are some msg-apps that don't like Tox, Quiet, Briar, Bitchat.
Yep. But Telegram storing all of your group chat messages and having no end to end encryption by default is expected behavior, not your actions also being sent to some random C2 server from an unknown individual. Even nonprivate instant messengers wouldn't dare stoop so low!
I don't get those preaching freedom and using telegram and Twitter, makes no sense.
Sadly I doubt any of those people will realize anything until it’s too late.