2024

Wednesday

April

Security

Despite Telegram’s disbelief in the revelation made by CertiK Alert, the latter is persistent to hold that there is a vulnerability on Telegram’s platform. CertiK recommended that exercising caution was the right thing to do until they completed a full investigation. 
On Wednesday CertiK gave the public warning over a suspected security breakdown in Telegram. Telegram came with a rebuttal, stating that the alleged report was incorrect. 
On Friday, CertiK said in a tweet they stand their ground and the threat is real after additional investigation. This was further followed by Telegram asking CertiK to delete its first warning post questioning the accuracy of the information. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Our investigation confirms the risk is real. Users should be cautious until the issue is completely sorted out. <a href="https://t.co/lXBdEFBruj" target="_blank" data-wpel-link="external">https://t.co/lXBdEFBruj</a>— CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1778747497453912431?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">April 12, 2024</a>
 </blockquote> 
 </div>
</figure> 
The information leak is said to involve Telegram’s automatic media downloading button. It is also a crucial matter that needs to be taken into account as it might end up with abuse and thus it is a fundamental issue. 
Another case reported by CertiK has an RCE (Remote Code Execution) vulnerability classified, which could potentially allow the attacker to gain access and influence user accounts or even use them to run malicious programs. 
The media files, such as images or videos, may be intentionally interfered with by cybercriminals during the exchange process. All file modules would then begin downloading without considering the user seeking permission first. 
It is recommended to disable application downloads and use multi-factor authentication and strong passwords as a protection measure. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/04/13/hong-kong-targets-crypto-scams-bitcloud-tcame-flagged/" data-wpel-link="internal">Hong Kong Targets Crypto Scams: BitCloud, TCAME Flagged</a> 
</blockquote>

Blockchain Security Firm Insists on Telegram Vulnerability

The Crypto Times

Other articles published on Apr 12, 2024

HashKey Readies Infrastructure for Hong Kong’s Bitcoin ETFs – Approval Could Come Next Week

Hong Kong To Approve Spot Bitcoin and Ethereum ETF In Days: Report

Binance effect: TAO jumps 26% before pulling back, but why?

Tapbit Launches Global Partner Program: Unlocking Opportunities for Web3 Enthusiasts & TOKEN2049 ...

Crypto Price Prediction 4/12: Top Altcoins to Focus Ahead of Bitcoin Halving

After 6% Bounce, Is Shiba Inu’s Sell-Off Done? AI Altcoin Attracts Pepe & Dogwifhat Investors

Join our free newsletter for daily crypto updates!