High-Risk Vulnerability in Telegram Messenger Exposes Users to Potential Attacks
Summary:
A significant flaw in Telegram Messenger has been identified by blockchain security firm CertiK, leaving users prone to harmful attacks. Hackers could potentially execute a remote code attack through Telegram's media processing, especially via manipulated media files. Users can mitigate this risk by disabling the auto-download feature in their Telegram Desktop settings. Further details about this discovery are yet to emerge.
A recent report by blockchain security firm CertiK has revealed a high-severity flaw in Telegram Messenger that leaves users susceptible to harmful attacks. The information, shared via social media on April 9th, cautions users on a "high-risk vulnerability in the wild". This flaw potentially enables hackers to implement a remote code execution (RCE) attack through Telegram's media management.
The post mentions that the security team at CertiK unearthed the potential for an RCE attack within Telegram's media processing in the Telegram Desktop application. This issue leaves users vulnerable to harmful attacks via manipulated media files, like videos and photos.
To protect against this vulnerability, the need for users to review their Telegram Desktop settings and turn off the auto-download functionality has been stressed. This can be done by navigating to "Settings" and then selecting "Advanced".
CertiK also advises users to go to the "Automatic Media Download" option and disable auto-download for all file types including photos, videos, and files across all conversation forms such as private chats, group chats, and channels.
Both CertiK and Telegram were contacted by Cointelegraph for a statement about the newly discovered Telegram's vulnerability, but no response has been received at the moment of writing this.
The situation is currently developing, and more details will be furnished as they become available.
Published At
4/9/2024 1:54:10 PM
Disclaimer: Algoine does not endorse any content or product on this page. Readers should conduct their own research before taking any actions related to the asset, company, or any information in this article and assume full responsibility for their decisions. This article should not be considered as investment advice. Our news is prepared with AI support.
Do you suspect this content may be misleading, incomplete, or inappropriate in any way, requiring modification or removal?
We appreciate your report.