Telegram hacking software has been a topic of interest in recent years, particularly with the rise of Iranian hacking tools. Iranian hackers have been known to use Telegram as a platform to spread malware and conduct cyber attacks.
Iranian hacking tools have been linked to several high-profile cyber attacks, including the 2012 Shamoon virus attack that targeted Saudi Aramco. This attack was attributed to Iranian hackers who used Telegram to spread the malware.
Telegram hacking software is often used to gain unauthorized access to user accounts, allowing hackers to steal sensitive information. Iranian hackers have been particularly skilled at exploiting vulnerabilities in Telegram's security features.
The use of Telegram hacking software has raised concerns about the platform's security and the potential risks to users. As a result, users are advised to exercise caution when using the app and to be aware of the potential risks of hacking.
Related reading: Cyber Security Affiliate Programs
Malware and Hacking Tools
Telegram has been exploited by hackers to spread malware, including a critical security flaw called EvilVideo that allowed attackers to embed malware within videos. This flaw was found in the mobile app for Android and allowed malicious actors to hide malware in harmless-looking videos.
For your interest: Website Malware Scanner Free
Attackers used Telegram's API to make the payload, and by default, media received via Telegram download automatically, making it easy for users to unknowingly download malicious files.
The malware was embedded in a 30-second clip that showed a warning saying the video couldn’t be played and urged users to play it on an external player. When users proceeded, they were asked to okay an installation of an APK file called ‘xHamster Premium Mod’ through Telegram.
A new Python-based hacking tool named Legion has emerged on Telegram, marketed as a way for threat actors to break into various online services for further exploitation.
Legion includes modules to enumerate vulnerable SMTP servers, conduct remote code execution (RCE) attacks, exploit unpatched versions of Apache, and brute-force cPanel and WebHost Manager (WHM) accounts.
The malware bears similarities to another malware family called AndroxGh0st, which was first documented in December 2022.
Legion is designed to exploit web servers running content management systems (CMS), PHP, or PHP-based frameworks like Laravel, and can retrieve credentials for a wide range of web services.
The primary goal of the malware is to enable threat actors to hijack the services and weaponize the infrastructure for follow-on attacks, including mounting mass spam and opportunistic phishing campaigns.
A hacking tool believed to have been in the arsenal of Iranian state hackers has been published online in a Telegram channel.
The tool has been compiled since 2015, meaning Iranian hackers have used it for at least four years for their operations.
For more insights, see: MIME Object Security Services
Iranian Hacking Tool Leaked
A new Iranian hacking tool has been leaked on Telegram, a platform known for its use by threat actors. The tool was compiled in 2015, suggesting Iranian hackers have used it for at least four years.
This tool is believed to have been in the arsenal of Iranian state hackers. The six tools leaked in April all belonged to an Iranian cyber-espionage group known as APT34, Oilrig, or HelixKitten.
The Iranian group is thought to be composed of members of the Iranian Ministry of Intelligence (MOIS).
You might enjoy: How Do Hackers Mine Wordpress for Admin Email Addresses
Featured Images: pexels.com
