Hackers Weaponizing Telegram Messenger with Dangerous Android Malware to Gain Full System Control

Android.Backdoor.Baohuo.1.origin is a sophisticated Android backdoor distributed via fake websites and third‑party app stores as a trojanized Telegram X; it has infected roughly 58,000 devices (including phones, tablets, TV boxes and Android vehicle systems), primarily targeting Brazil and Indonesia. The backdoor exfiltrates credentials, chat histories, SMS, contacts and clipboard contents; hides unauthorized sessions and manipulates channels to inflate subscribers; and notably uses Redis as a command‑and‑control channel alongside traditional C2 infrastructure.