2024

Wednesday

April

Security

Despite Telegram’s disbelief in the revelation made by CertiK Alert, the latter is persistent to hold that there is a vulnerability on Telegram’s platform. CertiK recommended that exercising caution was the right thing to do until they completed a full investigation. 
On Wednesday CertiK gave the public warning over a suspected security breakdown in Telegram. Telegram came with a rebuttal, stating that the alleged report was incorrect. 
On Friday, CertiK said in a tweet they stand their ground and the threat is real after additional investigation. This was further followed by Telegram asking CertiK to delete its first warning post questioning the accuracy of the information. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Our investigation confirms the risk is real. Users should be cautious until the issue is completely sorted out. <a href="https://t.co/lXBdEFBruj" target="_blank" data-wpel-link="external">https://t.co/lXBdEFBruj</a>— CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1778747497453912431?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">April 12, 2024</a>
 </blockquote> 
 </div>
</figure> 
The information leak is said to involve Telegram’s automatic media downloading button. It is also a crucial matter that needs to be taken into account as it might end up with abuse and thus it is a fundamental issue. 
Another case reported by CertiK has an RCE (Remote Code Execution) vulnerability classified, which could potentially allow the attacker to gain access and influence user accounts or even use them to run malicious programs. 
The media files, such as images or videos, may be intentionally interfered with by cybercriminals during the exchange process. All file modules would then begin downloading without considering the user seeking permission first. 
It is recommended to disable application downloads and use multi-factor authentication and strong passwords as a protection measure. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/04/13/hong-kong-targets-crypto-scams-bitcloud-tcame-flagged/" data-wpel-link="internal">Hong Kong Targets Crypto Scams: BitCloud, TCAME Flagged</a> 
</blockquote>

Blockchain Security Firm Insists on Telegram Vulnerability

The Crypto Times

Other articles published on Apr 12, 2024

Bitcoin ETFs in Hong Kong Could Trigger $25B Demand Surge – Matrixport Predicts

Hong Kong To Approve Spot Bitcoin and Ethereum ETF In Days: Report

NEAR Protocol (NEAR) and Shiba Inu (SHIB) Investors Shift Focus to Furrever Token (FURR) for Expl...

Bitcoin Halving in 7 Days: What Can Traders Expect?

Can Hong Kong’s Bitcoin ETF $25B Demand Propel Bitcoin Price Past $80K Pre-Halving?

Omni Network lands on Binance Launchpool as Algotech picks presale momentum

Join our free newsletter for daily crypto updates!