Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Android malware (.apk) can be spread through a fake video by manipulating the Telegram file extension. I showed how it is done in the video below.

0x6rss's profile picture

0x6rss

17,476 subscribers

180,730 Aufrufe • vor 2 Jahren •via X (Twitter)

Wissenschaft & TechnologieNachrichten & Politik
LIVE

Anya Rossi• Live Now

Private livecam show

10 Kommentare

Profilbild von 0x6rss
0x6rssvor 2 Jahren

Hackers are selling this method underground under the name "Telegram video exploit".

Profilbild von bl4ckh4ck5
bl4ckh4ck5vor 2 Jahren

Makes me curious what Bitdefender mobile would do with that

Profilbild von Daps 🦙🔥
Daps 🦙🔥vor 2 Jahren

Do you have the POC on GitHub ?

Profilbild von CYBERTR0N 🛡️
CYBERTR0N 🛡️vor 2 Jahren

Link bro ?

Profilbild von talalalal
talalalalvor 2 Jahren

Vay anasını sayın seyirciler

Profilbild von Yakuß CemiL ♂
Yakuß CemiL ♂vor 2 Jahren

hll

Profilbild von Vagrant
Vagrantvor 2 Jahren

I thought tg already patched this?

Profilbild von Name
Namevor 2 Jahren

data: be like

Profilbild von Smukx.E
Smukx.Evor 2 Jahren

neat and legit malware ;)

Profilbild von rizal rasmalian
rizal rasmalianvor 2 Jahren

Cool, all infos about the "hole" in a vid,i succeed to reconstruct the"hole" and create my own Telegram-Exploit, also why i can "see" the "hole" because like we talked,it's similar to Whatsapp "hole" i found. So now, we have Telegram Exploit and Whatsapp Exploit, what's next? :D

Ähnliche Videos

Recently, I discovered a campaign spreading via Telegram Mini Apps. In fact, a threat actor attempted to phish me using this tactic.👇 The technique is highly convincing because it involves a trust boundary violation in Telegram’s MiniApp SDK (affecting Android, Desktop, iOS, and Web versions). Telegram allows third-party code to use its trusted native UI through showPopup(), but it does so without clearly indicating the source to the user or providing safeguards against abuse. This constitutes a design weakness, as the triggered pop-up belongs to Telegram and can be used in an arbitrary manner. -The attacker misleads the user by leveraging Telegram’s own native UI component. -The popup is rendered outside the MiniApp iframe, within Telegram’s own UI layer. -The user perceives it as a legitimate warning from Telegram itself. -By placing a single button, the attacker can redirect the user to a phishing page. -Since the phishing page opens inside the Mini App, the phishing URL is not visibly exposed. After conducting detailed research, I simulated this attack and demonstrated it in the video below. Be cautious when opening Mini Apps in bots.
0:33

Recently, I discovered a campaign spreading via Telegram Mini Apps. In fact, a threat actor attempted to phish me using this tactic.👇 The technique is highly convincing because it involves a trust boundary violation in Telegram’s MiniApp SDK (affecting Android, Desktop, iOS, and Web versions). Telegram allows third-party code to use its trusted native UI through showPopup(), but it does so without clearly indicating the source to the user or providing safeguards against abuse. This constitutes a design weakness, as the triggered pop-up belongs to Telegram and can be used in an arbitrary manner. -The attacker misleads the user by leveraging Telegram’s own native UI component. -The popup is rendered outside the MiniApp iframe, within Telegram’s own UI layer. -The user perceives it as a legitimate warning from Telegram itself. -By placing a single button, the attacker can redirect the user to a phishing page. -Since the phishing page opens inside the Mini App, the phishing URL is not visibly exposed. After conducting detailed research, I simulated this attack and demonstrated it in the video below. Be cautious when opening Mini Apps in bots.

0x6rss

49,047 Aufrufe • vor 4 Monaten

Dear threat hunters and malware analysts, Threat.Zone | Holistic Malware Analysis Platform , a Holistic Malware Analysis Platform, allows you to capture the Telegram C2 network requests of the XWORM malware and hunt the logs using Matkap! ➡️
0:55

Dear threat hunters and malware analysts, Threat.Zone | Holistic Malware Analysis Platform , a Holistic Malware Analysis Platform, allows you to capture the Telegram C2 network requests of the XWORM malware and hunt the logs using Matkap! ➡️

0x6rss

22,313 Aufrufe • vor 1 Jahr

Hey threat hunters and malware analysts! The web version of Matkap is now live! You can now hunt malicious Telegram bots via Happy hunting!
0:47

Hey threat hunters and malware analysts! The web version of Matkap is now live! You can now hunt malicious Telegram bots via Happy hunting!

0x6rss

62,598 Aufrufe • vor 1 Jahr

The exercise I see BUTCHERED most often in the gym is Leg Press Video 1 is how 99% of people do it Video 2 is how it SHOULD be done
0:26

The exercise I see BUTCHERED most often in the gym is Leg Press Video 1 is how 99% of people do it Video 2 is how it SHOULD be done

Dean Turner

581,572 Aufrufe • vor 2 Monaten

The Rabbit R1 uses Android under the hood. Someone shared Rabbit R1's launcher APK with Android Authority, and with a bit of tinkering, they managed to install it on an Android PHONE (Pixel 6A) Entire interface users interact with is powered by a single Android app. Video Credit: Android Authority Source: Android Authority
0:22

The Rabbit R1 uses Android under the hood. Someone shared Rabbit R1's launcher APK with Android Authority, and with a bit of tinkering, they managed to install it on an Android PHONE (Pixel 6A) Entire interface users interact with is powered by a single Android app. Video Credit: Android Authority Source: Android Authority

AshutoshShrivastava

162,305 Aufrufe • vor 2 Jahren

Video: Zamfara Youths being Paid ₦10,000 Each and Given New Android Phones to Promote Governor Dauda Lawal and Spread Propaganda. This shows that Dauda’s administration may be manipulating public opinion by incentivizing youths to disseminate misleading information in the state
0:43

Video: Zamfara Youths being Paid ₦10,000 Each and Given New Android Phones to Promote Governor Dauda Lawal and Spread Propaganda. This shows that Dauda’s administration may be manipulating public opinion by incentivizing youths to disseminate misleading information in the state

SAMBO MAI HULA

101,815 Aufrufe • vor 9 Monaten

hi threat hunters and malware analysts! I want to introduce you to my newly developed tool called "Matkap". with this tool, you can infiltrate telegram bots(malbots) associated with malware, gain access to their messages, and extract all their logs! ➡️
1:27

hi threat hunters and malware analysts! I want to introduce you to my newly developed tool called "Matkap". with this tool, you can infiltrate telegram bots(malbots) associated with malware, gain access to their messages, and extract all their logs! ➡️

0x6rss

191,751 Aufrufe • vor 1 Jahr

Yesterday’s #ZeroDayRAT demo showed a 1‑click Android 15 exploit Real or fake? I don't know. If it is real, cleanup could be a problem.
0:56

Yesterday’s #ZeroDayRAT demo showed a 1‑click Android 15 exploit Real or fake? I don't know. If it is real, cleanup could be a problem.

Mobile Hacker

12,000 Aufrufe • vor 5 Monaten

Here is a little video I made using the new Grok video feature where you can animate more than one image in a video. I also published an article below so you can see how I did it. Very simple! Lots of fun 🙂
0:56

Here is a little video I made using the new Grok video feature where you can animate more than one image in a video. I also published an article below so you can see how I did it. Very simple! Lots of fun 🙂

G. Kim

739,725 Aufrufe • vor 4 Monaten

More Extremely Important Information here ⬇️ - In fact we must not download any apk file from any unknown number whether ,it is a wedding card or anything, such scam also happened during Ram mandir Inauguration time , when scammers sent apk files claimed to be a priority visiting pas . - Such malware will activate mirroring applications where anything going on in your screen will be visible to the scammers devices, that’s how they can take all your personal & financial data . - Tell this information especially to your parents because many Parents are very innocent and they do not know much about such techy things . - Not only apk files but also any unknown links we should not click on , which we get from Unknown numbers. - Point to consider here is , usually the wedding cards Come in Pdf form or document form or photo or a video not through APK . Source of the Video : The Times of India E news paper
1:00

More Extremely Important Information here ⬇️ - In fact we must not download any apk file from any unknown number whether ,it is a wedding card or anything, such scam also happened during Ram mandir Inauguration time , when scammers sent apk files claimed to be a priority visiting pas . - Such malware will activate mirroring applications where anything going on in your screen will be visible to the scammers devices, that’s how they can take all your personal & financial data . - Tell this information especially to your parents because many Parents are very innocent and they do not know much about such techy things . - Not only apk files but also any unknown links we should not click on , which we get from Unknown numbers. - Point to consider here is , usually the wedding cards Come in Pdf form or document form or photo or a video not through APK . Source of the Video : The Times of India E news paper

Mohini Of Investing

24,382 Aufrufe • vor 1 Jahr

Just walked through Union Station in DC for the first time in years, and I can’t believe it... It’s clean, safe, and beautiful. Exactly how it should be. A place Americans can be proud of. It used to be overrun by homeless people and drug addicts. Now it’s a place I can bring my family. Well done, Trump Administration. Well done.
0:32

Just walked through Union Station in DC for the first time in years, and I can’t believe it... It’s clean, safe, and beautiful. Exactly how it should be. A place Americans can be proud of. It used to be overrun by homeless people and drug addicts. Now it’s a place I can bring my family. Well done, Trump Administration. Well done.

Benny Johnson

928,689 Aufrufe • vor 9 Monaten

Dear Pakistanis, do not skip this video. I already showed how your data leaks & your WhatsApp account gets stolen by a simple link, but many found it confusing because it was all done in a terminal. So I made a new video that shows exactly how you can get hacked. I request all Pakistanis to watch it till the end and share it with your friends and family.
1:26

Dear Pakistanis, do not skip this video. I already showed how your data leaks & your WhatsApp account gets stolen by a simple link, but many found it confusing because it was all done in a terminal. So I made a new video that shows exactly how you can get hacked. I request all Pakistanis to watch it till the end and share it with your friends and family.

Daniel Zahoor

12,510 Aufrufe • vor 9 Tagen

How to create your Based Agent with 0 lines of code Recorded a quick demo video to show how easy it is and walk you through the entire process step-by-step All the links are in the comment below
5:07

How to create your Based Agent with 0 lines of code Recorded a quick demo video to show how easy it is and walk you through the entire process step-by-step All the links are in the comment below

lincoln.base.eth

148,805 Aufrufe • vor 1 Jahr

How to fill SIR form. Clear explanation in the below video. RT to spread the awareness.
4:06

How to fill SIR form. Clear explanation in the below video. RT to spread the awareness.

𝐒𝐚𝐟𝐟𝐫𝐨𝐧 𝐒𝐚𝐠𝐚𝐫 𝐆𝐨𝐮𝐝

12,427 Aufrufe • vor 9 Tagen

Here's the video where Blessingceo showed a fake medical report. A terribly “edited” result. At least, if you want to fake it, let it be professional🤦😀
1:00

Here's the video where Blessingceo showed a fake medical report. A terribly “edited” result. At least, if you want to fake it, let it be professional🤦😀

RAZOR BLADE

73,606 Aufrufe • vor 3 Monaten

HIP MOBILITY - THIS IS A MUST TRY when it comes to sprinting! I love the iso on the hamstring while reaching back into hip extension. drachperformance coached me through this on the latest episode of the PEX Project. Find the full video below!
0:48

HIP MOBILITY - THIS IS A MUST TRY when it comes to sprinting! I love the iso on the hamstring while reaching back into hip extension. drachperformance coached me through this on the latest episode of the PEX Project. Find the full video below!

Vernon Griffith, CSCS*D

38,721 Aufrufe • vor 5 Monaten

Dear threat hunters and malware analysts! new web version of #matkap is back online. You can now easily hunt malicious telegram bots via . And it’s completely free 😃 Merry Christmas and happy hunting!
0:47

Dear threat hunters and malware analysts! new web version of #matkap is back online. You can now easily hunt malicious telegram bots via . And it’s completely free 😃 Merry Christmas and happy hunting!

0x6rss

155,943 Aufrufe • vor 6 Monaten

John McAfee told the world how to crack any phone in 2016: "Any computer, any software, whether is a Android, Apple, or what you have can be done." "We can do this with any machine and it is a half-hour job." "Now I've just told all of America and the whole world how it's done. It's trivial."
2:46

John McAfee told the world how to crack any phone in 2016: "Any computer, any software, whether is a Android, Apple, or what you have can be done." "We can do this with any machine and it is a half-hour job." "Now I've just told all of America and the whole world how it's done. It's trivial."

Defiant Ghost

435,109 Aufrufe • vor 5 Monaten