Hackers Hijack Telegram Accounts via Default Voicemail Passwords

The Israeli Internet Association warned of a surge in Telegram account takeovers in Israel where attackers—attributed to actors in Bangladesh and Indonesia—exploit default voicemail PINs and voicemail-delivered verification codes to hijack accounts for impersonation, phishing, and scams; the report outlines attack mechanics, observed impacts, and mitigation steps such as disabling voicemail, changing PINs, and enabling Telegram two-step verification.