A New Malware Will Steal From Telegram

Hackers are being more and more sophisticated. Particularly in the crypto field, hackers can imbed their software and steal information. There is a new malware that can steal from your wallet without you even knowing your wallet has been hacked. 

TL;DR

Disabled auto-downloading in Telegram settings to avoid the unaware download of malware and got hacked of your crypto wallet.

Here is a 1 min summary of the article if you want to skip the reading.

Echelon

This Malware steals private information from users and specifically targets crypto wallets and user accounts credentials. The software may contain multiple credential-stealing functions, domain detection, and computer fingerprinting to collect users’ credentials. It can also screenshot users’ credentials and automatically send them back to hackers. You can read the full report on how the code attack users here.

Handle @Smokes Night

Telegram group Smokes Night was reported to propagate the malware Echelon and steal credentials from user accounts and crypto-wallets. There are no other incidents revealed in the current time.

Possible places to exploit

According to the report, here are platforms and crypto wallets that potentially be the target:

Exploited Platforms:
Discord
Edge
FileZilla
NordVPN
OpenVPN
Outlook
Pidgin
ProtonVPN
Psi(Jabber)
Telegram
TotalCommander

Aimed Digital Currency Wallets:
Armory
AtomicWallet
BitcoinCore
ByteCoin
DashCore
Electrum
Exodus
Ethereum
Jaxx
LitecoinCore
Monero
Zcash

Possible upgrade with zero clicking

The current version of software may need to click and install. However, it may evolve into zero-click with auto installation functionality to make a 0 click attack.

What you can do

If you are using Telegram, please turn off the auto-downloading functionality. You can reference how to turn off the auto-downloading here.

For iOS

For Android

For web version

In Conclusion

Do not open any suspicious download zip files. Try to have your virus scan software active during your internet connection. Be sure to turn off your auto-download function on any chat apps.