



{"id":34468,"date":"2022-10-12T19:26:05","date_gmt":"2022-10-12T19:26:05","guid":{"rendered":"https:\/\/media.am\/?p=34468"},"modified":"2022-10-14T19:43:40","modified_gmt":"2022-10-14T19:43:40","slug":"telegram-is-being-targeted-by-hackers","status":"publish","type":"post","link":"https:\/\/media.am\/en\/critique\/2022\/10\/12\/34468\/","title":{"rendered":"Telegram Is Being Targeted By Hackers"},"content":{"rendered":"<p><span data-contrast=\"auto\">Telegram has again appeared in the list of the most downloaded apps in Armenia, the audience continues to grow. Which also makes Telegram channels a more interesting target for hacker attacks.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">It turned out that during September I myself became the target of several similar attacks, which allowed me to study the directions of possible attacks.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">During that time, at least one Armenian Telegram channel became a victim of the attack. Several more were targeted.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">The attackers definitely had a connection with the Russian Federation. However, there is a possibility that the Russian hacking group did not act independently, but at the behest of Azerbaijan.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">How do hackers work?<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">In the first case, I was contacted by a girl who offered to post an ad for a new application on my Telegram channel. Since, according to that customer, the application is not ready yet, she offered to test using a file, which was a .rar archive, very small, about two hundred kilobytes.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Inside was an .exe file that was a virus.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:276}\"><img decoding=\"async\" class=\"alignnone wp-image-34403 size-full\" src=\"http:\/\/media.am\/wp-content\/uploads\/2022\/10\/1-ph.jpg\" alt=\"\" width=\"461\" height=\"489\" srcset=\"https:\/\/media.am\/wp-content\/uploads\/2022\/10\/1-ph.jpg 461w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/1-ph-283x300.jpg 283w\" sizes=\"(max-width: 461px) 100vw, 461px\" \/>\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">The virus was very dangerous because at that time only two of all antivirus programs understood that they were dealing with a malicious program. The rest were assured that everything is fine. Even now, a month later, <\/span><a href=\"https:\/\/www.virustotal.com\/gui\/file\/70f223697f3a1d0ecbf45f4bf6165ac8576691999ccf6644b62615c9407547c8\" target=\"_blank\" rel=\"noopener noreferrer\"><span data-contrast=\"none\">very few antiviruses recognize the program as malicious<\/span><\/a><span data-contrast=\"auto\">. And this is actually a Trojan that steals data, for example, saved passwords.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">In the next version of the attack, I was offered to register on a special website of an advertising ordering organization (which actually exists, the hackers pretended to be them). Through which I would sign a contract and receive money.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">The site was fake, of course, it was created a couple of weeks ago.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-34405 size-full\" src=\"http:\/\/media.am\/wp-content\/uploads\/2022\/10\/2-ph.png\" alt=\"\" width=\"719\" height=\"405\" srcset=\"https:\/\/media.am\/wp-content\/uploads\/2022\/10\/2-ph.png 719w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/2-ph-300x169.png 300w\" sizes=\"(max-width: 719px) 100vw, 719px\" \/><\/p>\n<p><span class=\"TextRun SCXW36677065 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW36677065 BCX0\">And they offered to register through Telegram. In fact, to give my admin authority to someone else.<\/span><\/span><span class=\"EOP SCXW36677065 BCX0\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-34407 size-full\" src=\"http:\/\/media.am\/wp-content\/uploads\/2022\/10\/3-ph.jpg\" alt=\"\" width=\"1143\" height=\"593\" srcset=\"https:\/\/media.am\/wp-content\/uploads\/2022\/10\/3-ph.jpg 1143w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/3-ph-300x156.jpg 300w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/3-ph-1024x531.jpg 1024w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/3-ph-768x398.jpg 768w\" sizes=\"(max-width: 1143px) 100vw, 1143px\" \/><\/p>\n<p><span data-contrast=\"auto\">The next girl offered to give her my Telegram channel statistics by gender. Which actually does not exist in Telegram.\u00a0\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">But I was offered to use a special bot that supposedly would get those statistics. After which they would pay me. The bot, in turn, wanted to become an admin on my page with my permission. After that, it&#8217;s a simple thing, they would remove me and they would remain the admin.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-34409 size-full\" src=\"http:\/\/media.am\/wp-content\/uploads\/2022\/10\/4-ph.png\" alt=\"\" width=\"1080\" height=\"1065\" srcset=\"https:\/\/media.am\/wp-content\/uploads\/2022\/10\/4-ph.png 1080w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/4-ph-300x296.png 300w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/4-ph-1024x1010.png 1024w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/4-ph-768x757.png 768w\" sizes=\"(max-width: 1080px) 100vw, 1080px\" \/><\/p>\n<p><span data-contrast=\"auto\">As you can see, they wanted to access my channel from the territory of Russia, hoping that I would not understand and would allow it.\u00a0\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">\u00a0The other girl was trying to deceive in a much more sophisticated way. The first one presented herself on behalf of Tinkoff Bank. Then she sent a very advanced bot that she had built quite well. That she wanted to steal new bank card data.\u00a0\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:276}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-34411 size-full\" src=\"http:\/\/media.am\/wp-content\/uploads\/2022\/10\/6-ph.png\" alt=\"\" width=\"945\" height=\"2048\" srcset=\"https:\/\/media.am\/wp-content\/uploads\/2022\/10\/6-ph.png 945w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/6-ph-138x300.png 138w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/6-ph-473x1024.png 473w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/6-ph-768x1664.png 768w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/6-ph-709x1536.png 709w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><span class=\"TextRun SCXW20580101 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW20580101 BCX0\">Although the bot was incredibly good, so much so that even I almost believed it, it took two minutes to go to Twitter, write to the bank account and get a response that the bot has nothing to do with them:<\/span><\/span><span class=\"EOP SCXW20580101 BCX0\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-34413 size-full\" src=\"http:\/\/media.am\/wp-content\/uploads\/2022\/10\/7-ph.png\" alt=\"\" width=\"945\" height=\"2048\" srcset=\"https:\/\/media.am\/wp-content\/uploads\/2022\/10\/7-ph.png 945w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/7-ph-138x300.png 138w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/7-ph-473x1024.png 473w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/7-ph-768x1664.png 768w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/7-ph-709x1536.png 709w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-34415 size-full\" src=\"http:\/\/media.am\/wp-content\/uploads\/2022\/10\/8-ph.png\" alt=\"\" width=\"945\" height=\"2048\" srcset=\"https:\/\/media.am\/wp-content\/uploads\/2022\/10\/8-ph.png 945w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/8-ph-138x300.png 138w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/8-ph-473x1024.png 473w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/8-ph-768x1664.png 768w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/8-ph-709x1536.png 709w\" sizes=\"(max-width: 945px) 100vw, 945px\" \/><\/p>\n<p><span class=\"TextRun SCXW252974848 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW252974848 BCX0\">And the poor girl demanded that I give in to her, she even got angry.<\/span><\/span><span class=\"EOP SCXW252974848 BCX0\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:276}\"><img decoding=\"async\" class=\"alignnone wp-image-34419 size-full\" src=\"http:\/\/media.am\/wp-content\/uploads\/2022\/10\/13.jpg\" alt=\"\" width=\"589\" height=\"589\" srcset=\"https:\/\/media.am\/wp-content\/uploads\/2022\/10\/13.jpg 589w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/13-300x300.jpg 300w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/13-150x150.jpg 150w, https:\/\/media.am\/wp-content\/uploads\/2022\/10\/13-260x260.jpg 260w\" sizes=\"(max-width: 589px) 100vw, 589px\" \/>\u00a0<\/span><\/p>\n<p><span class=\"TextRun SCXW8113463 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW8113463 BCX0\">In any case, the seriousness of the attacks indicates one thing. you need to be careful. Hackers are constantly inventing new scenarios.<\/span><\/span><span class=\"EOP SCXW8113463 BCX0\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p style=\"text-align: right\"><strong><span class=\"TextRun SCXW172873306 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW172873306 BCX0\">\u00a0<\/span><span class=\"NormalTextRun SCXW172873306 BCX0\">Samvel <\/span><span class=\"NormalTextRun SCXW172873306 BCX0\">Martirosyan<\/span><\/span><span class=\"EOP SCXW172873306 BCX0\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:3,&quot;335551620&quot;:3,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Telegram has again appeared in the list of the most downloaded apps in Armenia, the audience continues to grow. Which also makes Telegram channels a more interesting target for hacker attacks.\u00a0 It turned out that during September I myself became the target of several similar attacks, which allowed me to study the directions of possible<a class=\"moretag\" href=\"https:\/\/media.am\/en\/critique\/2022\/10\/12\/34468\/\"> Read the full article&#8230;<\/a><\/p>\n","protected":false},"author":3,"featured_media":34422,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ngg_post_thumbnail":0,"footnotes":""},"categories":[16,212],"tags":[],"class_list":["post-34468","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-critique","category-featured-post","author_posts-samvel-martirosyan"],"acf":[],"_links":{"self":[{"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/posts\/34468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/comments?post=34468"}],"version-history":[{"count":1,"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/posts\/34468\/revisions"}],"predecessor-version":[{"id":34469,"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/posts\/34468\/revisions\/34469"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/media\/34422"}],"wp:attachment":[{"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/media?parent=34468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/categories?post=34468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/media.am\/en\/wp-json\/wp\/v2\/tags?post=34468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}