Telegram for Android hit by a zero-day exploit – Week in security with Tony Anscombe

Video

Attackers abusing the “EvilVideo” vulnerability could share malicious Android payloads via Telegram channels, groups, and chats, all while making them appear as legitimate multimedia files

26 Jul 2024

This week, ESET researchers documented their discovery of a zero-day exploit that appeared for sale on underground forums and targets the Telegram app for Android. The underlying vulnerability, which the researchers named “EvilVideo”, was being used to distribute malicious files posing as videos. ESET reported the flaw to Telegram, who updated the app on July 11th, 2024.

How exactly does the exploit work and could you, too, be at risk for attacks taking advantage of the vulnerability? Find out in the video and make sure to also give the blogpost a read.