On the very same day, cybersecurity firm ESET raised alarms about a zero-day vulnerability affecting Telegram's vast user base.ESET's researchers stumbled upon the exploit being peddled in underground forums a month prior.
Dubbed "EvilVideo," the malware targeted Android users by embedding itself within innocuous-looking 30-second video clips. When received via message or channel, the video automatically downloaded to users' devices—a default behavior in Telegram that requires manual adjustment to alter. Clicking on the video prompted a deceptive dialog box, triggering the installation process.
Telegram was swift to respond upon being notified by ESET, releasing a patch by July 11 that mitigated the vulnerability in all Android versions up to 10.14.4, superseded by the secure version 10.14.5
While not the most sophisticated exploit encountered recently, the incident underscores a poignant irony. Telegram has inadvertently become a thriving marketplace for cybercriminal activities, as noted in previous warnings.
It serves as a bustling hub where illicit tools and insights are traded freely, fostering a dark and efficient supply chain of malicious tools and compromised data.
Despite recurring concerns over its security posture and default encryption practices, Telegram's popularity continues unabated.Recent critiques likened Telegram to a digital wild west, likening it to a platform akin to the dark web where organized criminal activities thrive. Despite these criticisms, the platform's user base remains steadfast, propelled by its expansive reach and versatile functionalities.