Search

Telegram for Android Vulnerability EvilVideo That Lets Hackers Deploy Malware as Video Files Detected: Report

The attackers were reportedly exploiting a zero-day vulnerability in Telegram’s Android app.

Advertisement
Highlights
  • The exploit was found being advertised on the dark web
  • Cybersecurity firm Eset reported the exploit to Telegram last month
  • Telegram has reportedly deployed a patch to fix the vulnerability
Telegram for Android Vulnerability EvilVideo That Lets Hackers Deploy Malware as Video Files Detected: Report

The payload malware for the exploit is said to have been created using Telegram’s API

Photo Credit: Reuters

Telegram for Android reportedly had a zero-day vulnerability which was being targeted by attackers. This vulnerability, dubbed EvilVideo, allowed malicious actors and hackers to send malware disguised as video files, as per the report. It was detected by a cybersecurity research firm last month after a post about the exploit was found on the dark web. The poster was said to be selling the exploit and also showed a screenshot of its workings. Notably, Telegram released an update on July 11 patching the vulnerability after the cybersecurity firm notified it about the exploit.

EvilVideo Exploit Found in Telegram

According to a newsroom post by cybersecurity firm Eset, Telegram for Android had a zero-day vulnerability. A zero-day vulnerability is a security flaw which is unknown to the developer. The term is used since developers have “zero days” to patch the issue. This particular vulnerability was reportedly found by some malicious actors who were trying to sell it on the dark web.

“We found the exploit being advertised for sale on an underground forum. In the post, the seller shows screenshots and a video of testing the exploit in a public Telegram channel. We were able to identify the channel in question, with the exploit still available. That allowed us to get our hands on the payload and test it ourselves,” said ESET researcher Lukáš Štefanko, who discovered the exploit.

telegram evilvideo exploit welivesecurity Telegram vulnerability dark web post

Dark web post about the Telegram vulnerability
Photo Credit: Welivesecurity

 

Dubbed EvilVideo, the exploit allowed hackers to deploy malware payload as Android Package (APK) within the video files, based on the dark web post spotted by Welivesecurity. When played, Telegram reportedly would show a message that says “App was unable to play this video.” However, immediately afterwards, the hidden malware would send request to allow apps from third-party sources so it could be installed, revealed the publication.

Since the default option on Telegram downloads videos by default, the researchers believe the payload could have been easily spread to a large number of users by planting them in large public groups.

However, Eset notified Telegram about the exploit on June 26, and reportedly, Telegram released an update on July 11, patching the vulnerability.

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

 
Show Full Article
Please wait...
Advertisement

Related Stories

Popular Mobile Brands
  1. Can't Use Veo 3? Check These Free AI Video Generator Alternatives
  2. OnePlus Pad Lite With 11-Inch Display, 9,340mAh Battery Launched
  3. Realme 15 Pro 5G to Launch in India With Snapdragon 7 Gen 4 Chipset
  4. Moto G96 5G Launched in India With 50-Megapixel Sony Lytia 700C Camera
  5. Samsung Galaxy Unpacked 2025 Highlights: Galaxy Z Fold 7, Z Flip 7 Unveiled
  6. Gmail Announces Manage Subscriptions View for Decluttering Your Inbox
  1. Dark Dwarfs: New Star-Like Objects May Reveal Nature of Dark Matter
  2. NASA Astronaut Captures Rare Red Sprite Over Storm from Space Station
  3. Progress 92 Spacecraft Docks at ISS with Vital Supplies for Expedition 73
  4. Scientists Trace Universe’s Missing Ordinary Matter Using FRBs and X-rays
  5. Samsung Galaxy Watch Ultra Now Available in a New Colour Variant in India
  6. Lava Blaze AMOLED 2, Blaze Dragon to Launch in India This Month
  7. Samsung Unpacked 2025: Galaxy Watch 8, Watch 8 Classic With One UI 8.0 Watch, Exynos W1000 Chip Launched
  8. Samsung Unpacked 2025: Galaxy Z Flip 7 FE With 3.4-inch Cover Display, Exynos 2400 SoC Launched
  9. Samsung Unpacked 2025: Galaxy Z Flip 7 Launched in India With 4.1-Inch Cover Screen, Exynos 2500 SoC
  10. Samsung Unpacked 2025: Galaxy Z Fold 7 With Snapdragon 8 Elite Chipset, 8-Inch Inner Display Launched in India
Gadgets 360 is available in
Download Our Apps
App Store App Store
Available in Hindi
App Store
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.
Trending Products »
Latest Tech News »