Crypto Wallet Hacking through Telegram

[virasog]

Luckily, I don't have telegram for now since I am done using it in the past so I just uninstalled it and probably it has already been updated to disable that "auto download" part. Scammers nowadays are really trying their best to get their hands onto your wallet to steal in the process. What app would they be going to manipulate next?

Telegram is not bad in itself, but its only the few people who trying to misuse the application so that they could hack people's money. This does not mean that we stop using the telegram app. Infact, we should be careful in using apps, apply the recommended setting and hopefully we will remain safe.
Usually those who are careless, mostly are the ones who become easy victims of the hackers.

[Fortify]

Recently i was reading an article where Hackers target crypto wallets through Telegram using Echelon malware is explained.
I have followed the instructions and disabled the Automatic download of media option in telegram. But i fear that many people will keep the auto download option enable because of unaware of this threat.
I wonder how this virus will work and how can they reach to our wallets / exchanges?

Anyone with a substantial holding of Bitcoin should definitely keep their main wallet away from any devices that are likely to be attacked - phones are a prime target and pretty insecure in that regard. Phones are constantly being attacked with exploits, through rogue apps, backdoors and unintended glitches. That's besides all the social engineering trickery that can take place, people losing big sums of money after being craftily encouraged to install or download certain things which gives other people access to their keys. It's dangerous to use any software that has an auto download option by default and it might go on to steal all sorts of personal information.

[milewilda]

Recently i was reading an article where Hackers target crypto wallets through Telegram using Echelon malware is explained.
I have followed the instructions and disabled the Automatic download of media option in telegram. But i fear that many people will keep the auto download option enable because of unaware of this threat.
I wonder how this virus will work and how can they reach to our wallets / exchanges?

Anyone with a substantial holding of Bitcoin should definitely keep their main wallet away from any devices that are likely to be attacked - phones are a prime target and pretty insecure in that regard. Phones are constantly being attacked with exploits, through rogue apps, backdoors and unintended glitches. That's besides all the social engineering trickery that can take place, people losing big sums of money after being craftily encouraged to install or download certain things which gives other people access to their keys. It's dangerous to use any software that has an auto download option by default and it might go on to steal all sorts of personal information.

When you do hold significant amount then you wouldnt really be that dumped on using up a device which is mostly been connected to internet.The best thing would be that it should really be
airgapped on the first place or do make use of some hardware wallet.Its not bad on being paranoid when it comes to the safety of your coins and even myself do always think or mind
off in advance when it comes to hacking probabilities which you should really be that careful on downloading apps and if you dont really need at all then its just right that
you wouldnt really download at all or really fan on clicking up some links on random basis.

[KingsDen]

Telegrams hacking malware have been around for some time now but I believe the hacker can not have access to files on your device unless you permit them, thanks for the information to disable that feature on my telegram right aware.
Hackers and scammers are always looking out for access to steal our security details and files.

No one deliberately permits hackers to have access to his/her files, rather hackers find ways to force themselves access to your files. They do this by tricking the users to accept their malicious invites. By a way of allowing an automatic download of files from telegram is already an access granted unknowingly.
The best form of security is prevention. Both my telegram and WhatsApp apps, I have longed disabled automatic downloads for my privacy sake. I choose what I want to see and select which folder to send them after seeing, or better discard them.

[Smartvirus]

More and more of these malwares are sure to be developed and protected into crypto space and the best precaution would be based on constantly taking conscious effort on what goes on, on your devices. Having a fortune right on your device makes it more than just a device but an asset of real value too. Why do people use auto downloads even? What there to miss?

On the malware, I'm thinking it's not automatically initiated as per extracting your pass codes both on custodial and non custodial wallets, including the onces used on various exchanges. We ought to watch it!

[Wiwo]

Telegrams hacking malware have been around for some time now but I believe the hacker can not have access to files on your device unless you permit them, thanks for the information to disable that feature on my telegram right aware.
Hackers and scammers are always looking out for access to steal our security details and files.

No one deliberately permits hackers to have access to his/her files, rather hackers find ways to force themselves access to your files. They do this by tricking the users to accept their malicious invites. By a way of allowing an automatic download of files from telegram is already access granted unknowingly.
The best form of security is prevention. For both my telegram and WhatsApp apps, I have longed disabled automatic downloads for my privacy sake. I choose what I want to see and select which folder to send them after seeing, or better discard them.

Exactly you are your own best security and having all files checked before downloading will help reduce the possibility of being hacked.
What I normally do is carry all my passwords in my head and never save any personal files online or the same password on Google doc.

[AmoreJaz]

More and more of these malwares are sure to be developed and protected into crypto space and the best precaution would be based on constantly taking conscious effort on what goes on, on your devices. Having a fortune right on your device makes it more than just a device but an asset of real value too. Why do people use auto downloads even? What there to miss?

On the malware, I'm thinking it's not automatically initiated as per extracting your pass codes both on custodial and non custodial wallets, including the onces used on various exchanges. We ought to watch it!

this is the importance of reviewing the default settings in our privacy and security or data and storage features of any app that we will download and install. not only in telegram because we will never know where these hackers will come from. most of the time, we don't review those features because we are trusting that app. but even if the app is trustworthy in the market, they are also vulnerable to these malwares and other bugs, where hackers can penetrate their security protocols.

[tabas]

Hacker can hack your wallet by using many of viruses and malwares. They spread there viruses and malwares through using social accounts like Telegram Facebook Wattsap Groups etc. Then they will access wallet easily and stole money.

You just need to be safe and be aware not to click any link that comes of them. If it is an unfamiliar link, you don't have to be curious with it and start clicking, just no.
There goes the hackers that will also come not just from social accounts but as well as our emails. They're almost everywhere and if you neglect the warnings being posted here, you might even be the one that will become a victim. But I wish more people are going to see these warnings so that these scammers/hackers won't have more victims.

[Kelvinid]

Hacker can hack your wallet by using many of viruses and malwares. They spread there viruses and malwares through using social accounts like Telegram Facebook Wattsap Groups etc. Then they will access wallet easily and stole money.

You just need to be safe and be aware not to click any link that comes of them. If it is an unfamiliar link, you don't have to be curious with it and start clicking, just no.
There goes the hackers that will also come not just from social accounts but as well as our emails. They're almost everywhere and if you neglect the warnings being posted here, you might even be the one that will become a victim. But I wish more people are going to see these warnings so that these scammers/hackers won't have more victims.

I hope they will but somehow, these hackers will still get prey as they will find a way to succeed. That is why we should be vigilant in our actions and carefully click links especially when it asks for login credentials as this likely ends hacking to our account. I'm not a victim of this but almost until I realize why I should have to do this as I already login my account earlier and stopped.

There are a lot of hacking mediums/tools that these hackers have made and we don't let them win.

[Kakmakr]

I think the people most vulnerable to this attack are the people who are not running the latest version of their Anti-virus software.. because my Anti-virus will "sand-box" the executable file.. before it is executed and if it detects any funny stuff, it will block it.

The same anti-virus are running on my mobile phone and on my computer, so the actions is the same. I also get a prompt warning me that an executable file wants to be activated, so I must acknowledge if I want it to proceed.

In any way, I disabled the function just to be safe.. so thank you for that tip OP.    (Not that it is a big issue, because I use a hardware wallet and I have to confirm all transactions with a physical button press on the device) 

[LogitechMouse]

Since I started entering the crypto, I've always seen Telegram as a platform full of scammers.
I have a Telegram account as well but currently not using it for some reasons and just created one because of different projects that require you to join in their Telegram channel.

There are times as well that I receive random DM's from strangers saying that you need to download this or join this etc. and I always ignore it. The auto-download feature though is the thing that users of it must deactivate in order for them not to fall into this hacking. Well, I will still not use Telegram or there will be times but not that much so technically I'm safe from it .

[Ararbermas]

Clicking links is the common reason of hacking especially when it comes chatrooms, so be aware and better stay away from thus users in the telegram that keep sending messages with links and etc because you don't know what will gonna happen next. Just never trust anyone especially if its related to crypto because mostly are frauds that keep posting phishing links.

[king4ty]

Hackers and scammer are always looking for new ways everytime to scam people. Telegram malware virus have been in existence for a while now. We all need to be aware of this but the beauty is you can't get scammed unless you give the scammer access. so for this reason know what to click or bot to access, as this is the way they gain access must of the time. Be careful as to what you click and access.

[Natalim]

Hackers and scammer are always looking for new ways everytime to scam people. Telegram malware virus have been in existence for a while now. We all need to be aware of this but the beauty is you can't get scammed unless you give the scammer access. so for this reason know what to click or bot to access, as this is the way they gain access must of the time. Be careful as to what you click and access.

Remember that they can be smart more than us and they are so determined to succeed rather than to fail. And In fact, they do this for their living and that never make them to easily give up, they'd rather find another way to succeed.
- sending emails with link/malware
- try to communicate and make friends with people and take advantage
- some will ask for help

For now, the telegram channel is considered the den of scammers.

[tabas]

Hacker can hack your wallet by using many of viruses and malwares. They spread there viruses and malwares through using social accounts like Telegram Facebook Wattsap Groups etc. Then they will access wallet easily and stole money.

You just need to be safe and be aware not to click any link that comes of them. If it is an unfamiliar link, you don't have to be curious with it and start clicking, just no.
There goes the hackers that will also come not just from social accounts but as well as our emails. They're almost everywhere and if you neglect the warnings being posted here, you might even be the one that will become a victim. But I wish more people are going to see these warnings so that these scammers/hackers won't have more victims.

I hope they will but somehow, these hackers will still get prey as they will find a way to succeed. That is why we should be vigilant in our actions and carefully click links especially when it asks for login credentials as this likely ends hacking to our account. I'm not a victim of this but almost until I realize why I should have to do this as I already login my account earlier and stopped.

There are a lot of hacking mediums/tools that these hackers have made and we don't let them win.

That's the sad reality. Despite too many articles, threads, and other warnings that can be found on the web. Still, a newbie is a newbie. Without experience and very likely to get scammed. I have not also experienced but I'm a victim of those data miners that have been using websites and will eventually sell it to the market, our emails, and other data. That's why I'm also becoming careful on the websites that I sign up and once you have noticed that you're receiving random and unknown emails from spammer/hackers then you know where it came from or you should remember what's the website you are suspecting aside from telegram.

[Rehan Zakir]

This is the most dangerous technique. There are lot of scammers that are on telegram every time and searching their victims that how to scam with peoples. I saw when we send a message in telegram group about our issue. There are lot  of peoples that pm you and told you we are from support team please tell us your issue we will resolve this. They are scammers please be aware from these persons. They get your information and tells you that send us some coins then your wallet unlocked. So, do not send us anything. They are scammers. Just block these persons. Real support managers will never PM you first.

[jerry0]

I never used telegram.  But is this different from you going to a website and clicking on it or its about the same?  I heard mixed opinions from people on say whether you visit an unsecured website... some people say its possible to get malware/keylogger that way.  Others say it is not possible or very hard because you need to not only download that file... exe file... but you also need to open it.



So for example let say your main laptop, you do all your crypto, banking and everything on it.  But you do your best to not click on dodgy links or visit dodgy websites... if you go on telegram on your laptop and get one of these messages and you download these files, is your computer compromised or not?  So if you just have windows defender and malwarebytes, that wouldn't work?  But if you have paid antivirus like kaspersky or norton, that might protect you better or its the same thing?



Also does that mean if you have online wallets on your computer, then you would get hacked as well?  Example say you have electrum or those other software wallets on your computer.  But you still need to enter your password to enter electrum.  Does that mean if your computer gets hacked, they could record all your keystrokes and everything so the moment you type in your electrum password to get in electrum to access it on your laptop, then they could literally just log in electrum themselves and send the coins easily or not?



Also this talk seems to be about android phone.  But what if its IOS?  If you have mobile wallets, can you get hacked this way as well if you using iphone?



Has any hacking like this occurred where your password manager got compromised as well?  Thus malware and keylogger seem to be the most dangerous thing to be concerned of?  Because if you get keylogger, I heard someone could record every single thing you pressed.  So essentially, they also see your screen as you type everything?

[Ultegra134]

Hats off to you, for informing the community. Although I'm not using Telegram, I used to use Discord regarding some communities about staking and related services. However, I was disappointed to see that in every single group I joined, I received plenty of scam and phising attempts, one of which almost got me screwed over, which would result in quite a few thousands in losses.

As a result, I've resorted to stop using such services such as Telegram, Discord etc. due to the high risk they involve, regarding its users.

[LUCKMCFLY]

Hackers and scammer are always looking for new ways everytime to scam people. Telegram malware virus have been in existence for a while now. We all need to be aware of this but the beauty is you can't get scammed unless you give the scammer access. so for this reason know what to click or bot to access, as this is the way they gain access must of the time. Be careful as to what you click and access.

You are right, in fact there are many ways that they can steal your data just by clicking, because an algorithm is self-managed that searches the entire PC for what has to do with special extensions, such as .dat, and when it finds them, it may search private keys, there is now a lot of AI, which can do that search in a very short time and steal it is very easy, however this is why viruses such as Ransonware have been given, which are very common, especially in the time of 2019 and 2020, in the local Spanish section there is a very interesting thread that talks about it.

[boyptc]

Hats off to you, for informing the community. Although I'm not using Telegram, I used to use Discord regarding some communities about staking and related services. However, I was disappointed to see that in every single group I joined, I received plenty of scam and phising attempts, one of which almost got me screwed over, which would result in quite a few thousands in losses.

As a result, I've resorted to stop using such services such as Telegram, Discord etc. due to the high risk they involve, regarding its users.

They are everywhere.

That's why I'm not using any of them but only for certain updates with things that I've been following. But when it comes to communicating with any of those platforms.

It's always the same people that have the same tricks of telling this and that and will lead you to their scam person and links. Although I'm aware of their scam, it's annoying that they randomly come.