Security News

Researchers Warn of "Eternity Project" Malware Service Being Sold via Telegram
2022-05-16 19:55

An unidentified threat actor has been linked to an actively in-development malware toolkit called the "Eternity Project" that lets professional and amateur cybercriminals buy stealers, clippers, worms, miners, ransomware, and a distributed denial-of-service bot. What makes this malware-as-a-service stand out is that besides using a Telegram channel to communicate updates about the latest features, it also employs a Telegram Bot that enables the purchasers to build the binary.

Threat Actors Use Telegram to Spread ‘Eternity’ Malware-as-a-Service
2022-05-13 12:06

The new malware service, dubbed the Eternity Project by the threat actors behind it, allows cybercriminals to target potential victims with a customized threat offering based on individual modules they can buy for prices ranging from $90 to $490, researchers from security firm Cyble wrote in a blog post published Thursday. The modules include a stealer, clipper, worm, miner and ransomware, depending on what type of attack a threat actors wants to mount, according to the post.

Ukraine Warns of Cyber attack Aiming to Hack Users' Telegram Messenger Accounts
2022-04-08 22:07

Ukraine's technical security and intelligence service is warning of a new wave of cyber attacks that are aimed at gaining access to users' Telegram accounts. "The criminals sent messages with malicious links to the Telegram website in order to gain unauthorized access to the records, including the possibility to transfer a one-time code from SMS," the State Service of Special Communication and Information Protection of Ukraine said in an alert.

Telegram banned by Brazilian Supreme Court over missed emails
2022-03-18 23:05

Brazilian Supreme Federal Court Justice Alexandre de Moraes banned Telegram on Friday from operating in the country and asked the National Telecommunications Agency to notify internet providers to block the messaging app within five days. Although Telegram complied with some court orders to block accounts used to spread disinformation on its platform, the messaging platform failed to comply with points of the Court's decision, including providing registration information for the blocked accounts to Justice.

Raccoon Stealer Crawls Into Telegram
2022-03-11 15:03

Early on, attackers were seen delivering Raccoon Stealer via an. "Taking into account that Raccoon Stealer is for sale, its distribution techniques are limited only by the imagination of the end buyers," he wrote.

Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism
2022-03-05 22:47

Cyber criminals and hacktivist groups are increasingly using the Telegram messaging app for their activities, as the Russia-Ukraine conflict enters its eighth day. A new analysis by Israeli cybersecurity company Check Point Research has found that "User volume grew a hundred folds daily on Telegram related groups, peaking at 200,000 per group."

Hacktivists, cybercriminals switch to Telegram after Russian invasion
2022-03-03 17:40

Telegram messaging has taken a pivotal role in the ongoing conflict between Russia and Ukraine, as it is being massively used by hacktivists and cybercriminals alike. According to a report from cybersecurity company Check Point, the number of Telegram groups has increased sixfold since February 24 and some of them, dedicated to certain topics, have ballooned in size, in some cases counting more than 250,000 members.

Use of Telegram messaging service spikes after Russian invasion
2022-03-03 17:40

Telegram messaging has taken a pivotal role in the ongoing conflict between Russia and Ukraine, as it is being massively used by hacktivists and cybercriminals alike. According to a report from cybersecurity company Check Point, the number of Telegram groups has increased sixfold since February 24 and some of them, dedicated to certain topics, have ballooned in size, in some cases counting more than 250,000 members.

Iranian Hackers Using New Spying Malware That Abuses Telegram Messenger API
2022-02-28 02:05

An Iranian geopolitical nexus threat actor has been uncovered deploying two new targeted malware that come with "Simple" backdoor functionalities as part of an intrusion against an unnamed Middle East government entity in November 2021. The attacks are said to have been orchestrated via spear-phishing messages to gain initial access, followed by taking advantage of publicly available offensive security tools and remote access software for lateral movement and maintaining access to the environment.

Telegram is a hotspot for the sale of stolen financial accounts
2022-01-18 21:39

Telegram is increasingly abused by cybercriminals to set up underground channels to sell stolen financial details to pseudonymous users. Finally, because Telegram channels are more volatile and short-lived than dark web markets, they could be safer to use for criminals as they are harder to track and correlate online personas with real identities.