Topic

Telegram as command-and-control

The use of consumer messaging platforms, especially Telegram bots and channels, as the control and exfiltration channel for malware.

Current clusters

security1 publisher

Group-IB ties the Handala Hack persona to a Telegram-run backdoor that steals saved passwords

Group-IB says the Iran-linked leak-and-brag front Handala Hack runs HEAVYGRAM, a Python implant that takes orders from a Telegram bot, opens the microphone and lifts saved passwords after a loader writes Defender exclusions for it.

Publishers:thehackernews.com

Reality

Evidence66
Adoption58
Hype gap+10
Incentives55
Confidence62