Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android
ID: 51cf5a8e-d333-55af-9f89-cebd857cbdaa
STIX ID: report--51cf5a8e-d333-55af-9f89-cebd857cbdaa
Feed Name: WeLiveSecurity (ESET Research)
Threat Score
ESET discovered and analyzed a zero-day vulnerability named "EvilVideo" that was being sold in an underground forum and allowed attackers to send Android APKs via Telegram for Android disguised as video files; a sample tied to Android/Spy.SpyMax.T and C2 infrastructure were identified, and Telegram patched the flaw in version 10.14.5 on July 11, 2024.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.