A security flaw in Telegram Desktop allowed attackers to embed hidden JavaScript within chat messages. When a user exported their chat history to an HTML file and opened it in a browser, the malicious script executed. This enabled the unauthorized exfiltration of all message data contained within the exported file to an external endpoint.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →