Forwarded from Crypto Insider
A vulnerability in Telegram Desktop, disclosed by researcher BeakSec, allowed attackers to steal files from a computer, including account access data. The attack was confirmed on Windows.
An attacker could add a victim to a group where prepared files downloaded automatically, then send a link such as βrules.β Opening it in a browser triggered the theft. Without a local passcode, the stolen data could enable account access.
The issue was fixed in Telegram Desktop 7.2.9. Users on older versions should update.
Please open Telegram to view this post
VIEW IN TELEGRAM