Cyber security researchers have said in a report that hackers are using a flaw called “Evil Video” to send a malicious 30-second file to Telegram users.
Recently, a major flaw has been detected in the popular messaging platform Telegram app. And hackers exploit this flaw to send malicious files to users' accounts. Although these files look like videos, they are actually malware or other malicious programs. Through which sensitive user data can be lost naturally. For this reason, ESET researchers advised users to immediately update the app and take several important steps.
What exactly is the error and how is it harming Telegram users?
Cyber security researchers have said in a report that hackers are using a flaw called “Evil Video” to send users a malicious 30-second file. These files are shared in Telegram channels, groups or private chats. If a user has automatic download turned on, this file is downloaded as soon as the chat is opened.
If the user tries to play the video after the file is downloaded, Telegram informs that the video cannot be played here and that another app must be used to play it. The malicious app will then be installed if the user consents to play the video from another app. And once this malicious app is installed, the user can be harmed in various ways.
Who will be careful?
Currently this bug is only affecting Android versions of Telegram prior to version 10.14.5. So if you haven't updated to the latest version of Telegram, you can also fall victim to this threat.
How to stay safe?
- Update your Telegram app immediately to avoid this danger.
- Also turn off automatic download option to be safe.
- Avoid installing any kind of apps from unknown sources to avoid such dangers.
- Be careful before downloading or opening any suspicious videos or files.
Incidentally, ESET researchers alerted Telegram to this issue last month, and the company has since fixed the flaw in the app's latest update.
