Telegram has a serious security vulnerability

The reported vulnerability stems from the programmer leaving out spelling errors when "coding" the python zipapp extension. Accordingly, instead of typing "pyzw", the error causes the command to change to ''pywz". This helps hackers execute attack exploit code without any notification from the victim's computer. The team Anti-Phishing Agency said: this vulnerability can affect users of Windows operating system computers.

It is known that although a typing error is small, the impact is large because it allows hackers to carry out attacks to take control of the computer.

Hackers can hide executable files as any type of file which can be images/videos sent to users via messages on Telegram. Some Windows versions of this application allow files to be downloaded automatically. Therefore, users can be attacked at any time.

From the above situation, experts from the Anti-Fraud organization recommend that Telegram users, especially those using the Windows operating system, should proactively turn off the automatic download feature and not download random files from strangers. or on public groups and channels.

In addition, Telegram has just had an update to fix the above error, users need to download it to protect themselves against attacks.

Lesley Montoya

Update 15 April 2024