Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android
Essential information
- Published
- 23/07/2024 07:49
- Modified
- 23/07/2024 08:14
- Tags
- 2024-07-23 android android/spy.spymax.t exploit malware telegram vulnerability
- Related entities
- 1 observables, 2 techniques (mitre), 1 malware
Description
ESET researchers discovered a vulnerability named EvilVideo that allows attackers to share malicious Android payloads disguised as video files through Telegram for Android. The exploit makes the malicious files appear as multimedia content, tricking users into installing malware. The vulnerability affected Telegram for Android versions up to 10.14.4 but was patched in version 10.14.5 after being reported to Telegram.