Baohuo Android Malware Hijacks Telegram Accounts via Fake Telegram X

A new Android backdoor, Android.Backdoor.Baohuo.1.origin, is being distributed via fake Telegram X apps and malicious ads; it uses Xposed-based runtime hooking and a novel Redis-backed command-and-control channel to take over Telegram accounts, hide unauthorized activity, and exfiltrate clipboard data, SMS, contacts and device details. Doctor Web reports over 58,000 infected devices across multiple countries (notably India, Brazil and Indonesia) and finds trojanized packages on third-party app stores, urging users to install Telegram only from official sources.