News A sticker sent to Telegram can reveal secret chats

Gap

Advanced
Joined
14.09.20
Messages
139
Reaction score
1,120
Points
93
Exploiting the problem allowed remote attackers to gain access to messages, photos, and videos in users ' secret chats.

Cybersecurity researchers have revealed details about a fixed vulnerability in the Telegram messaging app, the exploitation of which allowed remote attackers to access messages, photos and videos in users ' secret chats.

The problem was discovered by the Italian company Shielder in the versions of the app for iOS, Android and macOS. The vulnerabilities are related to the secret chat function and the processing of animated stickers by the app. Attackers can send modified stickers to unsuspecting users and gain access to messages, photos, and videos in normal and secret chats.

Exploiting the vulnerability is not easy, as it requires linking the problem to at least one additional vulnerability in order to circumvent the security protections in modern devices.

It is worth noting that this is the second problem this month found in the Telegram secret chat feature. Last week, a vulnerability was discovered in the macOS version of the program that violates user privacy. Its operation allowed access to self-destructing audio and video messages long after they disappeared from secret chats.
 
Top Bottom