Weaponizing Trust: FBI Warns Iran’s MOIS is Using Telegram as a Malware C2 Hub

The FBI issued a FLASH warning that Iran’s MOIS operators have weaponized Telegram as a clandestine command-and-control channel to push malware at Iranian dissidents, journalists, and opposition groups globally, enabling intelligence collection, data exfiltration, and reputational harm; the alert describes social-engineering lures, automated updates via the Telegram API, and data staging for exfiltration, and recommends strict file hygiene, MFA, endpoint protection, and network monitoring.