Cybercriminals have devised a new method to steal user accounts on the Telegram messaging app by exploiting the recently introduced «suggested posts» feature. This new tactic, designed by attackers, was highlighted by Dmitry Kiryushkin, head of BI.ZONE Brand Protection.
The scheme involves fraudsters using the suggested posts function to send phishing links specifically to owners of popular or large channels. They entice potential victims by promising substantial financial rewards if they click on the link.
«If a victim clicks on such a link and enters a confirmation code or installs malicious software, the attacker can gain control over their channel,» stated the expert.
Kiryushkin added that once a channel is compromised, the attackers typically demand a ransom to restore access to the owner or, alternatively, use the hijacked channel to spread scams and deceive its subscribers.
The new «suggested posts» feature in Telegram, which allows users to propose content for channels and specify preferred publication dates and times, became available on July 2. Channel administrators can approve these suggestions, and authors may receive the platform`s internal currency or cryptocurrency in return.
